403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.12.00.txt
 ## swap threshold exceeded
## server overview
2025-11-20.12.00 load[0] mem[66/55] mysql[5/9] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1511          92          37         759         653
Swap:          1999        1504         495
 12:00:01 up  2:19,  0 users,  load average: 2.16, 0.90, 0.71
## system overview
top - 12:00:02 up  2:19,  0 users,  load average: 2.16, 0.90, 0.71
Tasks: 228 total,   7 running, 220 sleeping,   0 stopped,   1 zombie
%Cpu(s): 69.7 us, 24.2 sy,  3.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    95676 free,  1545228 used,   779396 buff/cache
KiB Swap:  2047996 total,   507132 free,  1540864 used.   671428 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 224872   3408 S 106.2  9.3   1:56.69 /usr/sbin+
  9136 nobody    20   0  277760  18472   4000 S   6.2  0.8   0:00.34 /usr/sbin+
 11336 root      20   0 1276956  15596    600 S   6.2  0.6   0:00.06 /usr/bin/+
 11442 root      20   0 1277356  11788    600 S   6.2  0.5   0:00.06 /usr/bin/+
 11475 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.03 /opt/cpan+
 11494 locatio+  20   0  404248  17416  11016 S   6.2  0.7   0:00.02 /opt/cpan+
 11509 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44268   3320   1476 S   0.0  0.1   0:12.76 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.41 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.34 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.38 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.61 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.96 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.50 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.70 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.51 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   5836   5624 S   0.0  0.2   0:05.10 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    304    176 S   0.0  0.0   0:00.84 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1176    836 S   0.0  0.0   0:02.03 /usr/lib/+
   471 root      20   0   52852    320    224 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58736   1412    680 S   0.0  0.1   0:04.60 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1124    776 S   0.0  0.0   0:01.26 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.18 /usr/sbin+
   492 root      20   0  152780    240    196 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5452   1040 S   0.0  0.2   0:00.25 queueproc+
   507 nscd      20   0  928956   1344    672 S   0.0  0.1   0:06.93 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    180    156 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.25 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89120   1412    492 S   0.0  0.1   0:00.21 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.50 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.17 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:00.81 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15452   2744 S   0.0  0.6   0:02.29 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.12 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.35 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.16 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8488    128 S   0.0  0.4   0:28.09 /usr/bin/+
   945 root      20   0   51508    612    432 S   0.0  0.0   0:00.14 /usr/sbin+
   946 telegraf  20   0 5654304  36428   5632 S   0.0  1.5   0:05.03 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.18 /usr/bin/+
   948 root      20   0 1763312 498888    288 S   0.0 20.6   0:14.87 /usr/loca+
   949 root      20   0  389508    584    492 S   0.0  0.0   0:00.31 php-fpm: +
   950 root      20   0  261160   6320   1752 S   0.0  0.3   0:01.85 cpsrvd (S+
   953 root      20   0  388892    348    264 S   0.0  0.0   0:00.26 php-fpm: +
   958 root      20   0  240976   5348   4696 S   0.0  0.2   0:02.51 /usr/sbin+
   986 root      20   0  396248    564    472 S   0.0  0.0   0:00.27 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.37 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.24 php-fpm: +
   996 named     20   0  924724  33172   1720 S   0.0  1.4   0:05.88 /usr/sbin+
  1013 cpanelc+  20   0   10228   3300   2412 S   0.0  0.1   0:06.69 /usr/loca+
  1093 dovenull  20   0   47044   2716   1988 S   0.0  0.1   0:00.15 dovecot/p+
  1094 dovenull  20   0   47888   2952   1744 S   0.0  0.1   0:00.14 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.03 dovecot/a+
  1096 root      20   0   10452    492    312 S   0.0  0.0   0:00.10 dovecot/l+
  1097 dovenull  20   0   46916   2284   1696 S   0.0  0.1   0:00.13 dovecot/p+
  1098 dovenull  20   0   47868   2804   1744 S   0.0  0.1   0:00.12 dovecot/i+
  1104 root      20   0   24396   2292    544 S   0.0  0.1   0:00.07 dovecot/c+
  1110 dovecot   20   0   13568    644    444 S   0.0  0.0   0:00.02 dovecot/s+
  1145 systuser  20   0  157704   3072   1096 S   0.0  0.1   0:00.06 SonarPush+
  1170 dovecot   20   0   41192   1532   1036 S   0.0  0.1   0:00.33 dovecot/a+
  1175 wp-tool+  20   0  412368  26820   1440 S   0.0  1.1   0:02.85 /usr/bin/+
  1176 wp-tool+  20   0  387528   8392   1500 S   0.0  0.3   0:00.17 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.16 dnsadmin +
  1235 root      20   0  262228  19280   1356 S   0.0  0.8   0:00.61 cpdavd - +
  1237 root      20   0  209308  19252   1888 S   0.0  0.8   0:01.33 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.22 php-fpm: +
  1701 root      38  18  130416   1392    724 S   0.0  0.1   0:00.02 cpanellog+
  1718 nobody    20   0  277696  19248   4584 S   0.0  0.8   0:01.10 /usr/sbin+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:00.77 /usr/sbin+
  1962 root      20   0   12820    400    296 S   0.0  0.0   0:00.99 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:00.85 /usr/loca+
  1964 root      20   0   12840    416    296 S   0.0  0.0   0:00.93 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182264   9320   1168 S   0.0  0.4   0:07.86 lfd - sle+
  3549 nobody    20   0  277896  19264   4356 S   0.0  0.8   0:00.72 /usr/sbin+
  4434 nobody    20   0  277760  18956   4304 S   0.0  0.8   0:00.84 /usr/sbin+
  4647 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
  5104 nobody    20   0  277900  18856   4292 R   0.0  0.8   0:00.57 /usr/sbin+
  5350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5366 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6982 nobody    20   0  277588  18576   4208 S   0.0  0.8   0:00.43 /usr/sbin+
  7084 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9488 nobody    20   0  277908  18632   4048 S   0.0  0.8   0:00.20 /usr/sbin+
  9810 nobody    20   0  277760  18208   3672 S   0.0  0.8   0:00.17 /usr/sbin+
  9833 nobody    20   0  277892  18304   3908 S   0.0  0.8   0:00.15 /usr/sbin+
 10010 nobody    20   0  277476  18140   3928 S   0.0  0.7   0:00.10 /usr/sbin+
 10025 nobody    20   0  277760  18680   4104 S   0.0  0.8   0:00.08 /usr/sbin+
 10026 nobody    20   0  277760  18212   3796 R   0.0  0.8   0:00.12 /usr/sbin+
 10333 nobody    20   0  277760  18204   3788 S   0.0  0.8   0:00.08 /usr/sbin+
 10349 nobody    20   0  277472  17760   3576 S   0.0  0.7   0:00.07 /usr/sbin+
 10369 nobody    20   0  277892  18124   3736 S   0.0  0.7   0:00.10 /usr/sbin+
 10643 root      20   0  111304   4256   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 11022 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 11061 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 11066 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11073 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 11084 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 11288 root      20   0  157100   4972   3680 S   0.0  0.2   0:00.00 sshd: unk+
 11289 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 11296 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11297 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11298 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11299 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11303 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11304 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11305 root      20   0  183052   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11307 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11308 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11309 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11311 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11312 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11313 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11315 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11316 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11317 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11319 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11320 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11323 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11324 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11331 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 11333 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 11334 root      20   0 1415968  15436    600 S   0.0  0.6   0:00.06 /usr/bin/+
 11400 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 11401 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11403 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11405 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11406 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 11407 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 11410 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11411 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 11413 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11414 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 11415 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 11416 root      20   0  188220  11100   5148 S   0.0  0.5   0:00.01 /usr/loca+
 11422 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11424 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11426 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 11429 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 11431 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11432 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11433 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 11434 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 11437 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 11444 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 11461 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11463 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11465 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 11472 locatio+  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11476 cloudw    20   0  353712  16240  10612 S   0.0  0.7   0:00.01 /opt/cpan+
 11477 cloudw    20   0  353712  16240  10612 S   0.0  0.7   0:00.01 /opt/cpan+
 11483 locatio+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 11489 root      20   0  160224   2396   1636 S   0.0  0.1   0:00.01 top -n 2 +
 11536 root      20   0  160220   2324   1592 R   0.0  0.1   0:00.00 top -bcn1
 11538 root      35  15  113284   1360   1176 S   0.0  0.1   0:00.00 /bin/bash+
 11539 root      35  15   13116    828    668 R   0.0  0.0   0:00.00 lsmod
 11540 root      35  15  112812    988    852 S   0.0  0.0   0:00.00 grep -E -+
 11541 root      35  15  113644    980    824 S   0.0  0.0   0:00.00 awk {prin+
 11547 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 11549 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 11551 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 11552 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.13 [kworker]
 41201 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 56404 root      20   0  248036 117532   1084 S   0.0  4.9   0:03.26 /usr/loca+
 64340 root      20   0  249300 118752   1080 S   0.0  4.9   0:00.31 spamd chi+
 64341 root      20   0  248036 116828    416 S   0.0  4.8   0:00.00 spamd chi+
 67652 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 83918 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92025 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95180 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 95863 nobody    20   0  277700  19856   4900 S   0.0  0.8   0:01.76 /usr/sbin+
 97838 nobody    20   0  277760  19956   4744 S   0.0  0.8   0:01.97 /usr/sbin+
 98596 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
100685 worencom  20   0   38480   3060   2040 S   0.0  0.1   0:00.00 dovecot/i+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:40   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:40   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      41201  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root      67652  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/1:1]
root      83918  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/0:0]
root      92025  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:2]
root      95180  0.0  0.0      0     0 ?        S    11:38   0:00  \_ [kworker/1:4]
root      98596  0.0  0.0      0     0 ?        S    11:42   0:00  \_ [kworker/0:4]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root       4647  0.0  0.0      0     0 ?        S    11:52   0:00  \_ [kworker/1:3]
root       5350  0.0  0.0      0     0 ?        S    11:53   0:00  \_ [kworker/1:5]
root       5366  0.0  0.0      0     0 ?        S    11:53   0:00  \_ [kworker/0:1]
root       7084  0.0  0.0      0     0 ?        S    11:55   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44268  3320 ?        Ss   09:40   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5836 ?        Ss   09:40   0:05 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   304 ?        S<sl 09:40   0:00 /sbin/auditd
root        470  0.0  0.0  24712  1176 ?        Rs   09:40   0:02 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   320 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58736  1412 ?        Ss   09:40   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1124 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   240 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5452 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1344 ?        Ssl  09:40   0:06 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   180 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      11296  0.0  0.0 183048  2212 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11297  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11414  0.0  0.0 113284  1208 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      11442  0.0  0.4 1277356 11788 ?       Sl   12:00   0:00  |       \_ /usr/bin/update_imunify
root      11298  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11331  0.0  0.0 113284  1208 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      11336  0.0  0.6 1276956 15596 ?       Sl   12:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      11299  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11411  0.0  0.0 113284  1212 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      11429  0.0  0.0 113288  1428 ?        SN   12:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      11538  0.0  0.0 113284  1360 ?        SN   12:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      11539  0.0  0.0  13116   828 ?        RN   12:00   0:00  |               \_ lsmod
root      11540  0.0  0.0 112812   988 ?        SN   12:00   0:00  |               \_ grep -E -v ^Module
root      11541  0.0  0.0 113644   980 ?        SN   12:00   0:00  |               \_ awk {printf "%s ", $1}
root      11303  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11426  0.0  0.0 113284  1212 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      11437  0.0  0.0 108052   356 ?        S    12:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      11444  0.0  0.0 113288  1520 ?        S    12:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      11553  0.0  0.0 153840  2100 ?        R    12:00   0:00  |               \_ ps auxf
root      11304  0.0  0.0 183052  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11400  0.0  0.0  20164   984 ?        Ss   12:00   0:00  |   \_ jailshell (cloudsms) [11547] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  11547  0.0  0.0  20164   256 ?        S    12:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  11549  0.0  0.0 113284  1212 ?        S    12:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  11552  0.0  0.6 404184 15748 ?        S    12:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      11305  0.0  0.0 183052  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11433  0.0  0.0  20164   984 ?        Ss   12:00   0:00  |   \_ jailshell (cloudsms) [11551] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  11551  0.0  0.0  20164   260 ?        S    12:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  11554  0.0  0.0  20164   260 ?        R    12:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      11307  0.0  0.0 183048  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11410  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      11308  0.0  0.0 183048  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11432  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      11309  0.0  0.0 183048  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11405  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      11311  0.0  0.0 183048  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11422  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      11312  0.0  0.0 183048  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11403  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      11313  0.0  0.0 183048  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11424  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      11315  0.0  0.0 183048  2156 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11431  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      11316  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11413  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      11317  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11401  0.0  0.0  20164   804 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      11319  0.0  0.0 183048  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11406  0.0  0.0 113284  1208 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      11416  0.0  0.4 188220 11100 ?        S    12:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      11489  0.0  0.0 160224  2396 ?        S    12:00   0:00  |           \_ top -n 2 -b -c
root      11320  0.0  0.0 183048  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11434  0.0  0.0  20164   964 ?        Ss   12:00   0:00  |   \_ jailshell (pactpay) [11463] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11463  0.0  0.0  20164   260 ?        S    12:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11465  0.0  0.7 480124 17688 ?        S    12:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      11323  0.0  0.0 183048  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11407  0.0  0.0  20164   964 ?        Ss   12:00   0:00  |   \_ jailshell (nigeria) [11461] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11461  0.0  0.0  20164   260 ?        S    12:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11475  0.0  0.6 404052 16140 ?        S    12:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      11324  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      11415  0.0  0.0  20164   968 ?        Ss   12:00   0:00      \_ jailshell (locationforms) [11472]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  11472  0.0  0.0  20164   260 ?        S    12:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  11483  0.0  0.0 113284  1212 ?        S    12:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  11494  0.0  0.7 406296 18192 ?        S    12:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.0  89120  1412 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15452 ?        Ssl  09:40   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.2  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  11073  0.0  0.0 445028   324 ?        S    11:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root      10643  0.0  0.1 111304  4256 ?        Ss   11:59   0:00  \_ sshd: [accepted]
root      11061  0.0  0.1 111304  4444 ?        Ss   11:59   0:00  \_ sshd: [accepted]
sshd      11084  0.0  0.1 115644  2628 ?        S    11:59   0:00  |   \_ sshd: [net]
root      11288  0.0  0.2 157100  4972 ?        Ss   12:00   0:00  \_ sshd: unknown [priv]
sshd      11289  0.0  0.1 115644  2632 ?        S    12:00   0:00      \_ sshd: unknown [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.3  0.3 1349832 8488 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47044  2716 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  47888  2952 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   492 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.0  46916  2284 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47868  2804 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24396  2292 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   644 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1532 ?        S    09:40   0:00  \_ dovecot/auth
worencom 100685  0.0  0.1  38480  3060 ?        S    11:44   0:00  \_ dovecot/imap
telegraf    946  0.0  1.5 5654304 36428 ?       SLsl 09:40   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 20.6 1763312 498888 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   584 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6320 ?        Ss   09:40   0:01 cpsrvd (SSL) - waiting for connections                   
root      11066  0.0  0.0      0     0 ?        Z    11:59   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   348 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 240976  5348 ?        Ssl  09:40   0:02 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   564 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   11022  0.0  0.2 400460  5572 ?        S    11:59   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.3 924724 33172 ?        Ssl  09:40   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10228  3300 ?        Rs   09:40   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3072 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 26820 ?        Ss   09:40   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8392 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.7 262228 19280 ?        Ss   09:40   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.7 209308 19252 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1392 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.3 1463376 225096 ?      Sl   09:40   1:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12820   400 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12844   416 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    95863  0.1  0.8 277700 19856 ?        S    11:39   0:01  \_ /usr/sbin/httpd -k start
nobody    97838  0.1  0.8 277760 19956 ?        S    11:41   0:01  \_ /usr/sbin/httpd -k start
nobody     1718  0.1  0.7 277696 19248 ?        S    11:48   0:01  \_ /usr/sbin/httpd -k start
nobody     3549  0.1  0.7 277896 19264 ?        S    11:50   0:00  \_ /usr/sbin/httpd -k start
nobody     4434  0.1  0.7 277760 18956 ?        S    11:51   0:00  \_ /usr/sbin/httpd -k start
nobody     5104  0.1  0.7 277900 18856 ?        S    11:52   0:00  \_ /usr/sbin/httpd -k start
nobody     6982  0.1  0.7 277588 18576 ?        S    11:55   0:00  \_ /usr/sbin/httpd -k start
nobody     9136  0.2  0.7 277760 18472 ?        S    11:57   0:00  \_ /usr/sbin/httpd -k start
nobody     9488  0.1  0.7 277908 18632 ?        S    11:57   0:00  \_ /usr/sbin/httpd -k start
nobody     9810  0.1  0.7 277760 18208 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody     9833  0.1  0.7 277892 18304 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    11509  0.0  0.6 353712 15976 ?        S    12:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    10010  0.1  0.7 277476 18140 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10025  0.0  0.7 277760 18680 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10026  0.1  0.7 277760 18212 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10333  0.1  0.7 277760 18204 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10349  0.1  0.7 277472 17760 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10369  0.1  0.7 277892 18124 ?        S    11:59   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.3 182264  9320 ?        Ss   09:40   0:07 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117532 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.9 249300 118752 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116828 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 30086  Threads: 4  Questions: 605752  Slow queries: 0  Opens: 4257  Flush tables: 1  Open tables: 2000  Queries per second avg: 20.134
*************************** 1. row ***************************
     Id: 10078
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 10079
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 10086
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 10091
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 5. row ***************************
     Id: 10092
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
## network stats
      1 104.131.19.237 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 148.113.128.179 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 31.134.5.15 TIME_WAIT
      1 47.79.1.97 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 178.20.212.142 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 12:00:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 21 minutes 21 seconds
   Server load: 2.16 0.90 0.71
   Total accesses: 42786 - Total Traffic: 1.1 GB - Total Duration: 64169811
   CPU Usage: u6.6 s2.99 cu553.7 cs434.84 - 3.32% CPU load
   1.42 requests/sec - 37.3 kB/second - 26.2 kB/request - 1499.79 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

KWKK.KKKKKK_._KKW.KK............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client     Protocol         VHost                         Request
   0-0  9488  1/35/2204  K 1.33 0     349 1098277  35.9  0.86  67.27 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1157922955 HTTP/1.1
   1-0  3549  0/125/2045 W 3.14 0     0   44406650 0.0   3.70  55.12 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  10333 1/17/2066  K 0.33 0     401 1064988  34.4  0.38  54.72 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=4126075786 HTTP/1.1
   3-0  10349 7/15/2517  K 0.27 1     270 1111304  223.8 0.31  59.41 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3544363767 HTTP/1.1
   4-0  -     0/0/2091   . 0.00 55    0   1084333  0.0   0.00  52.79 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  95863 7/322/1880 K 8.01 2     341 907284   212.1 8.70  49.84 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1640423079 HTTP/1.1
   6-0  4434  3/136/1942 K 3.91 1     400 994708   95.3  3.86  49.52 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=2214340458 HTTP/1.1
   7-0  9136  1/54/2042  K 1.51 0     99  965122   5.3   1.51  57.27 128.140.8.200  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   8-0  9810  1/27/1817  K 0.71 2     388 940004   35.5  0.76  61.40 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=2333075413 HTTP/1.1
   9-0  6982  3/78/2203  K 1.73 0     322 986158   92.8  3.25  51.76 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1572028792 HTTP/1.1
   10-0 9833  2/26/1854  K 0.59 0     425 977781   65.1  0.66  48.02 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=2096670558 HTTP/1.1
   11-0 97838 0/349/2031 _ 8.49 0     0   929382   0.0   9.83  45.92 104.131.19.237 http/1.1 theforge.com.ng:443    POST /dms/services/ServerUI HTTP/1.1
   12-0 -     0/0/1788   . 0.00 58    0   927011   0.0   0.00  44.03 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 1718  0/188/1531 _ 5.23 0     216 805849   0.0   5.10  38.46 116.203.134.67 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue4.php HTTP/1.1
   14-0 5104  1/104/1364 K 2.47 0     534 703150   36.2  2.73  35.90 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=3852892646 HTTP/1.1
   15-0 10010 2/19/1368  K 0.37 3     403 637352   67.3  0.42  30.47 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1334331644 HTTP/1.1
   16-0 10025 0/21/1215  W 0.55 0     0   563326   0.0   0.38  30.12 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3494802793 HTTP/1.1
   17-0 -     0/0/1139   . 0.00 56    0   591275   0.0   0.00  29.42 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 10369 3/17/1559  K 0.41 3     398 708005   98.9  0.46  29.37 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1575862902 HTTP/1.1
   19-0 10026 2/25/1323  K 0.49 0     502 576182   67.2  0.57  36.69 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1537895564 HTTP/1.1
   20-0 -     0/0/1178   . 0.00 941   0   567414   0.0   0.00  30.61 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/1011   . 0.00 252   0   405490   0.0   0.00  20.81 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/1016   . 0.00 1050  0   425033   0.0   0.00  25.78 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/447    . 0.00 800   0   208661   0.0   0.00  10.72 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/731    . 0.00 59    0   365298   0.0   0.00  18.00 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/543    . 0.00 1436  0   276383   0.0   0.00  13.91 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/14     . 0.00 1978  0   7758     0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/475    . 0.00 1820  0   233214   0.0   0.00  13.25 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/231    . 0.00 1222  0   127638   0.0   0.00  5.41  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/483    . 0.00 1342  0   242729   0.0   0.00  13.15 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/150    . 0.00 1961  0   68176    0.0   0.00  2.88  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/49     . 0.00 1976  0   18776    0.0   0.00  0.89  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/23     . 0.00 1979  0   15181    0.0   0.00  0.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 2341  0   879      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/19     . 0.00 29797 0   9074     0.0   0.00  0.45  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/4      . 0.00 29847 0   2048     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/2      . 0.00 29864 0   738      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/8      . 0.00 29854 0   3463     0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 29848 0   1877     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 29859 0   599      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 29853 0   3057     0.0   0.00  0.15  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00 29849 0   840      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00 28955 0   110452   0.0   0.00  5.70  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00 29852 0   4927     0.0   0.00  0.24  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00 29330 0   84969    0.0   0.00  4.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00 29819 0   6975     0.0   0.00  0.32  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 907
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...54)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 27385
   total entries replaced since starting: 0
   total entries expired since starting: 26465
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 16 hit, 41 miss
   total removes since starting: 13 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit