403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.03.30.txt
 ## swap threshold exceeded
## server overview
2025-11-20.03.30 load[0] mem[67/67] mysql[2/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1441          75          60         846         676
Swap:          1999        1440         559
 03:30:02 up  2:35,  0 users,  load average: 0.86, 0.76, 0.79
## system overview
top - 03:30:02 up  2:35,  0 users,  load average: 0.86, 0.76, 0.79
Tasks: 227 total,   5 running, 220 sleeping,   0 stopped,   2 zombie
%Cpu(s): 61.8 us, 35.3 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    75016 free,  1467048 used,   878236 buff/cache
KiB Swap:  2047996 total,   572668 free,  1475328 used.   702296 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 20419 healtho+  20   0  466476  73776   4316 R  50.0  3.0   0:05.39 php-fpm: +
  1752 mysql     20   0 1467384 304028   2640 S  25.0 12.6   3:26.61 /usr/sbin+
   477 dbus      20   0   58724   1456    712 S   6.2  0.1   0:05.19 /usr/bin/+
  9116 nobody    20   0  277760  20180   4568 S   6.2  0.8   0:01.54 /usr/sbin+
 20749 pactpay   20   0  480124  17688  11892 S   6.2  0.7   0:00.02 /opt/cpan+
 20763 nigeria   20   0  404052  16136  10380 S   6.2  0.7   0:00.02 /opt/cpan+
 20771 root      20   0  160220   2324   1592 R   6.2  0.1   0:00.01 top -bcn1
 20791 cloudsms  20   0  404052  15348  10008 S   6.2  0.6   0:00.01 /opt/cpan+
 20798 cloudsms  20   0  404184  15752  10180 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44256   3320   1492 S   0.0  0.1   0:12.90 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.04 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.31 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:11.34 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.31 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.15 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.13 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:01.39 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.72 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.81 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   6392   6068 S   0.0  0.3   0:05.06 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    428    296 S   0.0  0.0   0:00.81 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240   1008    584 S   0.0  0.0   0:01.35 /usr/lib/+
   486 rpc       20   0   69256    132     28 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24688   1168    812 S   0.0  0.0   0:02.27 /usr/lib/+
   499 root      20   0   52852    288    192 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    124     80 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  994492   1380    672 S   0.0  0.1   0:07.10 /usr/sbin+
   506 root      20   0  224144   6532    960 S   0.0  0.3   0:00.16 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.20 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.26 /usr/sbin+
   558 root      20   0   24208     72     48 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3880    804 S   0.0  0.2   0:00.27 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:03.91 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.19 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.14 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.20 /usr/bin/+
   927 telegraf  20   0 5654048  39952   5564 S   0.0  1.7   0:05.31 /usr/loca+
   928 systuser  20   0  114016  14764   2436 S   0.0  0.6   0:02.28 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.53 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.26 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  240976   7008   5320 S   0.0  0.3   0:02.53 /usr/sbin+
   935 root      20   0  439788  11440  11228 S   0.0  0.5   0:00.39 php-fpm: +
   936 named     20   0  989260  34436   2008 S   0.0  1.4   0:07.15 /usr/sbin+
   938 root      20   0  261028   6636   1808 S   0.0  0.3   0:01.42 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:02.36 php-fpm: +
   947 root      20   0 1763312 175512   1100 S   0.0  7.3   0:18.27 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:01.10 /usr/sbin+
   972 root      20   0  389508    664    456 S   0.0  0.0   0:00.33 php-fpm: +
   979 cpanelc+  20   0   10612   3528   2312 S   0.0  0.1   0:07.78 /usr/loca+
   982 root      20   0  396248    604    424 S   0.0  0.0   0:00.30 php-fpm: +
   984 root      20   0  388892    656    444 S   0.0  0.0   0:00.30 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.43 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    860    284 S   0.0  0.0   0:00.90 /usr/bin/+
  1116 dovenull  20   0   46912   2296   1664 S   0.0  0.1   0:00.12 dovecot/p+
  1117 dovenull  20   0   47592   3096   1872 S   0.0  0.1   0:00.14 dovecot/i+
  1118 dovecot   20   0   10320    456    336 S   0.0  0.0   0:00.03 dovecot/a+
  1119 root      20   0   10452    580    404 S   0.0  0.0   0:00.10 dovecot/l+
  1120 dovenull  20   0   46912   2024   1352 S   0.0  0.1   0:00.17 dovecot/p+
  1121 dovenull  20   0   47336   3096   2000 S   0.0  0.1   0:00.09 dovecot/i+
  1128 root      20   0   24564   2436    472 S   0.0  0.1   0:00.08 dovecot/c+
  1133 systuser  20   0  157708   3036    984 S   0.0  0.1   0:00.05 SonarPush+
  1137 dovecot   20   0   13568    532    308 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119600   2708 S   0.0  4.9   0:03.92 /usr/loca+
  1190 dovecot   20   0   41276   1436    812 S   0.0  0.1   0:00.27 dovecot/a+
  1258 wp-tool+  20   0  412368  32284   1492 S   0.0  1.3   0:03.10 /usr/bin/+
  1259 wp-tool+  20   0  387528  13028   1400 S   0.0  0.5   0:00.17 /usr/bin/+
  1294 root      20   0  167452   3092   1720 S   0.0  0.1   0:00.22 dnsadmin +
  1298 root      20   0  262224  21308   3392 S   0.0  0.9   0:00.92 cpdavd - +
  1300 root      20   0  209644  11284   1312 S   0.0  0.5   0:02.18 tailwatchd
  1692 root      20   0  299272    832    452 S   0.0  0.0   0:00.25 php-fpm: +
  1709 root      38  18  130416   1368    640 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8028    744 S   0.0  0.3   0:00.91 /usr/sbin+
  1945 root      20   0   12808    428    292 S   0.0  0.0   0:01.28 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:01.11 /usr/loca+
  1947 root      20   0   12836    356    232 S   0.0  0.0   0:01.18 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182364  11176   1188 S   0.0  0.5   0:08.87 lfd - sle+
  2654 nobody    20   0  277764  20448   4660 S   0.0  0.8   0:02.12 /usr/sbin+
  3155 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  3925 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
  5518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    500      8 S   0.0  0.0   0:00.16 [kworker]
  7285 root      20   0  265396 128532   1668 S   0.0  5.3   0:01.39 spamd chi+
  7286 root      20   0  248320 117480    624 S   0.0  4.9   0:00.00 spamd chi+
  7824 nobody    20   0  277584  19748   4512 S   0.0  0.8   0:01.55 /usr/sbin+
  8745 root      30  10  132964   3936    400 S   0.0  0.2   0:00.00 ConfigSer+
  8757 root      30  10  108056    288    216 S   0.0  0.0   0:00.00 sleep 152+
  8819 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 10116 nobody    20   0  277696  20164   4592 S   0.0  0.8   0:01.48 /usr/sbin+
 11241 nobody    20   0  277508  19660   4360 S   0.0  0.8   0:01.21 /usr/sbin+
 11958 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12969 nobody    20   0  277892  19700   4140 S   0.0  0.8   0:00.71 /usr/sbin+
 12978 nobody    20   0  277500  19264   4244 S   0.0  0.8   0:00.68 /usr/sbin+
 12980 nobody    20   0  277508  19300   4336 S   0.0  0.8   0:00.84 /usr/sbin+
 12994 nobody    20   0  277696  19716   4308 S   0.0  0.8   0:00.99 /usr/sbin+
 12995 nobody    20   0  277764  19620   4288 S   0.0  0.8   0:00.83 /usr/sbin+
 13483 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 13832 nobody    20   0  277764  20168   4392 S   0.0  0.8   0:00.85 /usr/sbin+
 14154 nobody    20   0  277508  19332   4288 S   0.0  0.8   0:00.76 /usr/sbin+
 15344 nobody    20   0  277892  19476   4096 S   0.0  0.8   0:00.58 /usr/sbin+
 16230 nobody    20   0  277764  19496   4192 S   0.0  0.8   0:00.69 /usr/sbin+
 17304 nobody    20   0  277900  19516   4172 S   0.0  0.8   0:00.37 /usr/sbin+
 17597 nobody    20   0  277760  19152   3976 S   0.0  0.8   0:00.40 /usr/sbin+
 18115 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 18225 nobody    20   0  277892  19076   3944 S   0.0  0.8   0:00.31 /usr/sbin+
 19121 mailnull  20   0   89496   4912   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 19197 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19218 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19532 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 19794 nobody    20   0  277760  18768   3716 S   0.0  0.8   0:00.12 /usr/sbin+
 20041 nobody    20   0  277900  19044   3856 S   0.0  0.8   0:00.07 /usr/sbin+
 20145 mailnull  20   0   89496   4912   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 20181 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 20441 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 20481 mailnull  20   0   89496   5680   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 20555 nigeria   20   0  400460   5432   2408 S   0.0  0.2   0:00.00 php-fpm: +
 20611 nobody    20   0  277280  16452   2080 S   0.0  0.7   0:00.00 /usr/sbin+
 20614 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 20615 cloudw    20   0  526716  63464   6744 S   0.0  2.6   0:00.53 php-fpm: +
 20621 root      20   0  157100   4992   3712 R   0.0  0.2   0:00.00 sshd: unk+
 20622 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 20630 root      20   0  183052   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20632 root      20   0  183052   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20633 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20634 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20635 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20636 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20637 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20638 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20641 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20642 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20643 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20644 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20645 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20646 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20647 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20649 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20652 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 20656 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 20657 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 20658 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20659 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20660 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20661 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 20662 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 20663 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 20696 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20697 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 20698 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20700 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20701 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20705 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 20706 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 20707 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20708 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 20711 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20722 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 20727 root      20   0  188220  11104   5148 S   0.0  0.5   0:00.01 /usr/loca+
 20734 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 20739 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 20759 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 20777 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 20778 root      20   0  160220   2060   1580 S   0.0  0.1   0:00.00 top -n 2 +
 20783 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 20788 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 20789 cloudw    20   0  110292   5352   3808 R   0.0  0.2   0:00.00 /opt/cpan+
 20794 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 20796 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 20800 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 20802 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [lwauth] +
 20806 root      20   0  113284    612    396 S   0.0  0.0   0:00.00 bash /usr+
 20807 root      20   0  113284    216      0 R   0.0  0.0   0:00.00 bash /usr+
 90007 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 98479 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [kworker/+
100208 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101933 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        R    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:03  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      90007  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:5]
root      98479  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root     100208  0.0  0.0      0     0 ?        D    03:02   0:00  \_ [kworker/0:3]
root     101933  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/1:3]
root       3155  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/1:5]
root       3925  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/u200:1]
root       5518  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/0:0]
root       8819  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/1:2]
root      11958  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/0:1]
root      13483  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/1:1]
root      18115  0.0  0.0      0     0 ?        D    03:26   0:00  \_ [kworker/u200:2]
root      19197  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/1:0]
root      19218  0.0  0.0      0     0 ?        D    03:28   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44256  3320 ?        Ss   00:54   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  6392 ?        Ss   00:54   0:05 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   428 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240  1008 ?        Rsl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1456 ?        Ss   00:54   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   132 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24688  1168 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   288 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   124 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 994492  1380 ?        Ssl  00:54   0:07 /usr/sbin/nscd
root        506  0.0  0.2 224144  6532 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Rs   00:54   0:00 /usr/sbin/crond -n
root      20630  0.0  0.0 183052  2156 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20657  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      20662  0.0  0.0 113284  1476 ?        S    03:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      20632  0.0  0.0 183052  2156 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20656  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      20661  0.0  0.0 108052   356 ?        S    03:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      20663  0.0  0.0 113288  1520 ?        S    03:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      20808  0.0  0.0 153840  2092 ?        R    03:30   0:00  |               \_ ps auxf
root      20633  0.0  0.0 183048  2164 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20707  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      20634  0.0  0.0 183048  2164 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20711  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      20635  0.0  0.0      0     0 ?        Z    03:30   0:00  \_ [crond] <defunct>
root      20636  0.0  0.0 183048  2164 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20660  0.0  0.0  20164   808 ?        Rs   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      20637  0.0  0.0 183048  2164 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20701  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      20638  0.0  0.0 183048  2164 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20659  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      20641  0.0  0.0 183048  2160 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20652  0.0  0.0  20164   988 ?        Ss   03:30   0:00  |   \_ jailshell (cloudsms) [20777] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  20777  0.0  0.0  20164   260 ?        S    03:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  20783  0.0  0.0 113284  1212 ?        S    03:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  20791  0.0  0.6 404052 15348 ?        S    03:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      20642  0.0  0.0 183048  2160 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20700  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      20643  0.0  0.0 183048  2160 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20658  0.0  0.0  20164   992 ?        Ss   03:30   0:00  |   \_ jailshell (cloudsms) [20813] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      20644  0.0  0.0 183048  2156 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20696  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      20645  0.0  0.0 183048  2156 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20698  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      20646  0.0  0.0 183048  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20708  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      20727  0.0  0.4 188220 11104 ?        S    03:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      20778  0.0  0.0 160224  2380 ?        S    03:30   0:00  |           \_ top -n 2 -b -c
root      20647  0.0  0.0 183048  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20706  0.0  0.0  20164   960 ?        Ss   03:30   0:00  |   \_ jailshell (pactpay) [20734] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   20734  0.0  0.0  20164   256 ?        S    03:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   20749  0.0  0.7 480124 17688 ?        S    03:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      20649  0.0  0.0 183048  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      20697  0.0  0.0  20164   968 ?        Ss   03:30   0:00      \_ jailshell (nigeria) [20759] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20759  0.0  0.0  20164   264 ?        S    03:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20763  0.0  0.6 404052 16136 ?        R    03:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208    72 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3880 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  19121  0.0  0.2  89496  4912 ?        S    03:27   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  20145  0.0  0.2  89496  4912 ?        S    03:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  20481  0.0  0.2  89496  5680 ?        S    03:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  2296 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  3096 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   456 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   580 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  2024 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  3096 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.1  24564  2436 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   532 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1436 ?        S    00:54   0:00  \_ dovecot/auth
root      19532  0.0  0.1  60820  4512 ?        S    03:28   0:00  \_ dovecot/lmtp
root      20181  0.0  0.1  41052  2724 ?        S    03:29   0:00  \_ dovecot/auth -w
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 39952 ?       SLsl 00:54   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14632 ?        Ssl  00:54   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.3  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.2  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 240976  7012 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11440 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.4 989260 34436 ?        Ssl  00:54   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  6636 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root      20614  0.0  0.0      0     0 ?        Z    03:29   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  20419 23.4  2.9 463916 71404 ?        S    03:29   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   20555  0.0  0.2 400460  5432 ?        S    03:29   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    20615 26.5  2.6 526716 63464 ?        S    03:29   0:00  \_ php-fpm: pool cloudware_ng
root        947  0.1  7.2 1763312 175212 ?      Ssl  00:54   0:18 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root      20621  0.0  0.2 157100  5076 ?        Ss   03:30   0:00  \_ sshd: unknown [priv]
sshd      20622  0.0  0.1 115644  2632 ?        S    03:30   0:00  |   \_ sshd: unknown [net]
root      20722  0.0  0.2 157100  5076 ?        Ss   03:30   0:00  \_ sshd: unknown [priv]
sshd      20739  0.0  0.1 115644  2628 ?        S    03:30   0:00  |   \_ sshd: unknown [net]
root      20788  0.0  0.1 111304  4268 ?        Ss   03:30   0:00  \_ sshd: [accepted]
sshd      20800  0.0  0.1 115644  2624 ?        S    03:30   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   664 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10612  3528 ?        Ss   00:54   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   604 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   656 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  20441  0.0  0.0 445028   324 ?        S    03:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   860 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  3036 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119600 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 128532 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117480 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32284 ?        Ss   00:54   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13028 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  3092 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.8 262224 21308 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.4 209644 11284 ?        Ss   00:54   0:02 tailwatchd
root       1692  0.0  0.0 299272   832 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1368 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.2 12.5 1467384 304028 ?      Sl   00:54   3:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8028 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12808   428 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12836   356 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2654  0.1  0.8 277764 20448 ?        S    03:07   0:02  \_ /usr/sbin/httpd -k start
nobody     7824  0.1  0.8 277584 19748 ?        S    03:13   0:01  \_ /usr/sbin/httpd -k start
nobody     9116  0.1  0.8 277760 20180 ?        S    03:15   0:01  \_ /usr/sbin/httpd -k start
nobody    10116  0.1  0.8 277696 20164 ?        S    03:16   0:01  \_ /usr/sbin/httpd -k start
nobody    11241  0.1  0.8 277508 19660 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    12969  0.1  0.8 277892 19700 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12978  0.1  0.7 277500 19264 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12980  0.1  0.7 277508 19300 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12994  0.1  0.8 277696 19716 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12995  0.1  0.8 277764 19620 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    13832  0.1  0.8 277764 20168 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    14154  0.1  0.7 277508 19332 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    15344  0.1  0.8 277892 19476 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    16230  0.2  0.8 277764 19496 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    17304  0.1  0.8 277900 19516 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    17597  0.1  0.7 277760 19152 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    18225  0.1  0.7 277892 19076 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    19794  0.1  0.7 277760 18768 ?        S    03:28   0:00  \_ /usr/sbin/httpd -k start
cloudw    20789  0.0  0.6 288176 15952 ?        Sl   03:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    20041  0.1  0.7 277900 19044 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody    20611  0.0  0.6 277280 16452 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 182364 11176 ?        Ss   00:54   0:08 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   500 ?        S    01:00   0:00  \_ [kworker]
root       8745  0.0  0.1 132964  3936 ?        SN   03:15   0:00 ConfigServer Version Check
root       8757  0.0  0.0 108056   288 ?        SN   03:15   0:00  \_ sleep 15284
## mysql stats
Uptime: 9345  Threads: 3  Questions: 1548046  Slow queries: 0  Opens: 5590  Flush tables: 1  Open tables: 2000  Queries per second avg: 165.655
*************************** 1. row ***************************
     Id: 23800
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 23805
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 23809
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 23810
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.27.227 TIME_WAIT
      1 172.213.21.126 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 191.239.245.20 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.2 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 74.7.228.55 TIME_WAIT
      1 74.7.229.52 TIME_WAIT
      1 94.102.49.46 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
      2 183.7.149.20 TIME_WAIT
     15 138.197.74.214 TIME_WAIT
     39 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 03:30:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 35 minutes 39 seconds
   Server load: 0.86 0.76 0.79
   Total accesses: 57633 - Total Traffic: 1.2 GB - Total Duration: 35473190
   CPU Usage: u11.65 s5.35 cu617.52 cs463.09 - 11.8% CPU load
   6.17 requests/sec - 137.5 kB/second - 22.3 kB/request - 615.501 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

K_W_C_WK._K_K_W_K._....._.K.K...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  11241 2/205/2740 K 5.14 1    319 1472582 64.4  5.11  53.51 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=3764392705 HTTP/1.1
   1-0  20611 0/3/2350   _ 0.00 1    669 2408694 0.0   0.09  51.68 94.102.49.46    http/1.1 cloudware.ng:80            GET /public-relations/ HTTP/1.0
   2-0  15344 0/103/2563 W 2.31 0    0   1471571 0.0   2.82  59.46 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-0  2654  0/395/2880 _ 8.65 0    340 1580913 0.0   9.21  63.28 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=1502132516 HTTP/1.1
   4-0  14154 1/132/2496 C 3.24 0    708 1601482 6.1   3.06  50.11 157.15.40.56    http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   5-0  17304 0/91/2531  _ 2.15 0    0   1712041 0.0   1.48  69.55 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   6-0  13832 0/225/2562 W 3.95 0    0   1392877 0.0   3.30  54.50 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=2261402781 HTTP/1.1
   7-0  17597 6/70/2288  K 1.65 0    348 1479450 184.5 1.73  48.47 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=758293597 HTTP/1.1
   8-0  -     0/0/2284   . 0.00 14   0   1583697 0.0   0.00  51.65 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  16230 0/203/2481 _ 2.71 0    0   1570651 0.0   2.80  63.86 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-0 18225 1/55/2133  K 1.32 3    0   1256485 0.6   1.42  47.78 150.223.193.167 http/1.1 nigeriadecide.org:80       GET /wp-login.php HTTP/1.1
   11-0 7824  0/277/2364 _ 6.24 0    5   1575020 0.0   7.08  54.00 34.192.125.239  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/assets/css/2019electio
   12-0 9116  1/265/2304 K 6.29 0    430 1350983 34.2  6.64  54.66 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=510294310 HTTP/1.1
   13-0 12969 0/126/1887 _ 2.83 1    359 1027303 0.0   3.20  38.96 114.125.252.6   http/1.1
   14-0 19794 3/20/1622  W 0.48 0    0   927466  95.5  0.55  32.94 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=2110050359 HTTP/1.1
   15-0 12978 0/135/1803 _ 2.55 0    295 1105848 0.0   2.70  36.92 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=3773406200 HTTP/1.1
   16-0 20041 1/16/1228  K 0.25 0    1   716903  4.4   0.27  27.24 150.223.193.167 http/1.1 nigeriadecide.org:443      GET /wp-login.php HTTP/1.1
   17-0 -     0/0/1623   . 0.00 575  0   885899  0.0   0.00  33.65 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 12980 0/158/1617 _ 3.59 1    0   855309  0.0   3.57  32.73 138.197.74.214  http/1.1 locationforms.net:443      GET /main.js HTTP/1.1
   19-0 -     0/0/1318   . 0.00 574  0   739946  0.0   0.00  25.34 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/881    . 0.00 557  0   488664  0.0   0.00  19.39 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1080   . 0.00 578  0   625690  0.0   0.00  22.69 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1335   . 0.00 560  0   739386  0.0   0.00  29.31 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/1279   . 0.00 316  0   775216  0.0   0.00  30.65 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 12994 0/177/1313 _ 4.26 0    295 666843  0.0   4.96  27.94 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=1217313492 HTTP/1.1
   25-0 -     0/0/1013   . 0.00 107  0   607914  0.0   0.00  19.40 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 10116 3/254/1398 K 7.49 1    354 882404  92.8  6.92  30.77 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=3693488774 HTTP/1.1
   27-0 -     0/0/159    . 0.00 576  0   115717  0.0   0.00  2.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 12995 2/152/890  K 3.36 1    340 503959  63.8  3.64  17.47 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=205156983 HTTP/1.1
   29-0 -     0/0/941    . 0.00 570  0   595075  0.0   0.00  15.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/526    . 0.00 558  0   329914  0.0   0.00  10.70 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/515    . 0.00 561  0   553534  0.0   0.00  11.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/1143   . 0.00 580  0   680068  0.0   0.00  21.12 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/845    . 0.00 2479 0   471702  0.0   0.00  18.85 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/260    . 0.00 2480 0   148688  0.0   0.00  4.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/157    . 0.00 6246 0   115547  0.0   0.00  4.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/466    . 0.00 6153 0   274598  0.0   0.00  9.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/22     . 0.00 6245 0   10578   0.0   0.00  0.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/23     . 0.00 6179 0   11684   0.0   0.00  0.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00 6180 0   15119   0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/4      . 0.00 6470 0   1340    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/115    . 0.00 5963 0   65290   0.0   0.00  3.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 6478 0   7       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/7      . 0.00 6454 0   2574    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00 6468 0   1141    0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 6477 0   60      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/4      . 0.00 6469 0   244     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/147    . 0.00 5923 0   75011   0.0   0.00  3.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/3      . 0.00 6471 0   77      0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 918
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...54)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 30166
   total entries replaced since starting: 0
   total entries expired since starting: 29227
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 113 miss
   total removes since starting: 21 hit, 5 miss
Youez - 2016 - github.com/yon3zu
LinuXploit