403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.01.24.txt
 ## swap threshold exceeded
## server overview
2025-11-21.01.24 load[0] mem[60/65] mysql[1/10] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1325         164          92         873         768
Swap:          1999        1392         607
 01:24:01 up  6:34,  0 users,  load average: 0.28, 0.15, 0.16
## system overview
top - 01:24:01 up  6:34,  0 users,  load average: 0.28, 0.15, 0.16
Tasks: 214 total,   6 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.6 us, 48.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   129308 free,  1382392 used,   908600 buff/cache
KiB Swap:  2047996 total,   622076 free,  1425920 used.   761648 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462004 274112   3604 S  60.0 11.3   4:42.15 /usr/sbin+
  1676 cloudsms  20   0  404052  15612  10164 S  13.3  0.6   0:00.02 /opt/cpan+
  1681 nigeria   20   0  404052  16140  10384 S  13.3  0.7   0:00.02 /opt/cpan+
  1683 pactpay   20   0  479860  16172  10572 S   6.7  0.7   0:00.01 /opt/cpan+
  1685 saboakin  20   0  404052  15608  10156 S   6.7  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44396   3508   1632 S   0.0  0.1   0:33.33 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.36 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.17 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.43 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.11 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.12 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.77 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.70 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.16 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   5112   4796 S   0.0  0.2   0:11.89 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    584    456 S   0.0  0.0   0:01.89 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.52 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.01 /usr/sbin+
   485 root      20   0  224148   6780   1196 S   0.0  0.3   0:00.30 queueproc+
   486 dbus      20   0   58728   1520    792 R   0.0  0.1   0:12.51 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    484    372 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1300    940 D   0.0  0.1   0:05.50 /usr/lib/+
   522 nscd      20   0 1344744   2300    928 S   0.0  0.1   0:19.03 /usr/sbin+
   523 polkitd   20   0  610540   3220    712 S   0.0  0.1   0:03.21 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.66 /usr/sbin+
   575 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4148   1060 S   0.0  0.2   0:00.62 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.58 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   698 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
   706 root      20   0  178148  26300   2812 S   0.0  1.1   0:00.13 /usr/loca+
   748 root      20   0  158852  15308   2712 S   0.0  0.6   0:00.07 /usr/loca+
   751 root      20   0  195360  34700   3168 S   0.0  1.4   0:00.19 /usr/loca+
   781 root      20   0   76784  16964   3040 S   0.0  0.7   0:00.11 /usr/loca+
   823 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
   824 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
   912 systuser  20   0  114016  13280   2612 S   0.0  0.5   0:05.71 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:02.62 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.49 pure-ftpd+
   915 root      20   0  445028   3400   3284 S   0.0  0.1   0:01.01 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  11168    276 S   0.0  0.5   0:35.77 /usr/bin/+
   923 root      20   0  396248    684    512 S   0.0  0.0   0:00.60 php-fpm: +
   927 root      20   0  439788  12244  11296 S   0.0  0.5   0:00.68 php-fpm: +
   929 named     20   0 1054792  41356   2156 S   0.0  1.7   0:11.49 /usr/sbin+
   930 root      20   0 1763340 200124   1060 S   0.0  8.3   0:13.79 /usr/loca+
   937 root      20   0  261028   7024   2036 S   0.0  0.3   0:03.36 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51508    724    560 S   0.0  0.0   0:00.32 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.51 /usr/bin/+
   952 cpanelc+  20   0   10592   3604   2384 R   0.0  0.1   0:19.36 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  281936   5516   4472 S   0.0  0.2   0:05.99 /usr/sbin+
   966 root      20   0  389508    900    684 S   0.0  0.0   0:00.66 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:02.85 php-fpm: +
   976 telegraf  20   0 5654304  36120   6012 S   0.0  1.5   0:12.82 /usr/loca+
   985 root      20   0  388892    812    604 S   0.0  0.0   0:00.60 php-fpm: +
   986 root      20   0 1341892   9740    280 S   0.0  0.4   0:23.14 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:02.05 /usr/bin/+
  1051 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
  1078 dovenull  20   0   47276   2972   1984 S   0.0  0.1   0:00.54 dovecot/p+
  1079 dovenull  20   0   47668   3264   1928 S   0.0  0.1   0:00.27 dovecot/i+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.10 dovecot/a+
  1081 root      20   0   10452    612    440 S   0.0  0.0   0:00.32 dovecot/l+
  1082 dovenull  20   0   47140   2740   1868 S   0.0  0.1   0:00.41 dovecot/p+
  1083 dovenull  20   0   48016   3624   1948 S   0.0  0.1   0:00.34 dovecot/i+
  1086 root      20   0   24528   2572    552 S   0.0  0.1   0:00.17 dovecot/c+
  1092 dovecot   20   0   13568    808    572 S   0.0  0.0   0:00.05 dovecot/s+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.62 /usr/loca+
  1156 systuser  20   0  157708   3028   1044 S   0.0  0.1   0:00.11 SonarPush+
  1161 wp-tool+  20   0  387556  13448   1788 S   0.0  0.6   0:00.26 /usr/bin/+
  1162 wp-tool+  20   0  412396  32924   2116 S   0.0  1.4   0:07.58 /usr/bin/+
  1171 dovecot   20   0   41192   1692   1156 S   0.0  0.1   0:00.70 dovecot/a+
  1235 root      20   0  183900   6104   2872 S   0.0  0.3   0:02.39 cpdavd - +
  1239 root      20   0  228228  18884   5984 S   0.0  0.8   0:00.44 dnsadmin +
  1241 root      20   0  209680  12616   2528 S   0.0  0.5   0:02.99 tailwatchd
  1299 nobody    20   0  277576  18296   3220 S   0.0  0.8   0:00.05 /usr/sbin+
  1398 mailnull  20   0   91200   5696   2456 S   0.0  0.2   0:00.00 /usr/sbin+
  1458 nigeria   20   0  400460   4820   2388 S   0.0  0.2   0:00.00 php-fpm: +
  1521 wp-tool+  20   0  445028    320    188 S   0.0  0.0   0:00.00 sw-engine+
  1575 root      20   0  162436   5832   4344 S   0.0  0.2   0:00.02 sshd: roo+
  1577 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
  1585 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  1606 mailnull  20   0   91200   4928   1748 S   0.0  0.2   0:00.00 /usr/sbin+
  1611 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1612 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1613 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1614 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1615 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1616 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1617 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1618 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1619 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1620 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1621 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1622 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1623 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1625 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1626 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1627 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  1628 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  1629 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  1651 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  1652 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1653 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  1654 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.64 php-fpm: +
  1656 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1657 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1658 root      38  18  130416   1552    812 S   0.0  0.1   0:00.05 cpanellog+
  1659 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1660 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  1661 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  1662 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1663 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1664 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1665 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  1666 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1668 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1674 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1675 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  1680 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  1682 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1684 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  1687 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
  1688 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1937 root      20   0  267084   8268    852 S   0.0  0.3   0:02.30 /usr/sbin+
  1938 root      20   0   12832    524    420 S   0.0  0.0   0:02.64 /usr/loca+
  1939 root      20   0   12732    484    408 S   0.0  0.0   0:02.34 /usr/loca+
  1940 root      20   0   12860    524    412 S   0.0  0.0   0:02.50 /usr/loca+
  1945 root      20   0   53268    372    372 S   0.0  0.0   0:00.04 /usr/loca+
  6916 root      20   0  261512 128132   3060 S   0.0  5.3   0:02.30 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.00 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.42 [kworker]
 40404 root      20   0  181460  29556   2296 S   0.0  1.2   0:04.59 lfd - sle+
 52112 root      20   0       0      0      0 D   0.0  0.0   0:00.14 [kworker/+
 60882 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
 62339 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71035 root      20   0       0      0      0 R   0.0  0.0   0:00.16 [kworker/+
 72726 worencom  20   0   38444   3260   2288 S   0.0  0.1   0:00.00 dovecot/i+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 84944 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85029 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 5h +
 91770 nobody    20   0  277496  19900   4752 S   0.0  0.8   0:01.52 /usr/sbin+
 92036 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92897 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 93649 nobody    20   0  277588  20176   4784 S   0.0  0.8   0:01.18 /usr/sbin+
 95944 nobody    20   0  277576  19904   4520 S   0.0  0.8   0:00.81 /usr/sbin+
 95946 nobody    20   0  277500  19728   4416 S   0.0  0.8   0:00.93 /usr/sbin+
 96086 nobody    20   0  277644  19892   4476 S   0.0  0.8   0:00.96 /usr/sbin+
 96193 nobody    20   0  277588  19624   4380 S   0.0  0.8   0:00.55 /usr/sbin+
 96689 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96963 nobody    20   0  277576  19600   4312 S   0.0  0.8   0:00.57 /usr/sbin+
 98793 nobody    20   0  277904  19396   4080 S   0.0  0.8   0:00.31 /usr/sbin+
 98798 nobody    20   0  277576  19416   4252 S   0.0  0.8   0:00.53 /usr/sbin+
 99770 nobody    20   0  277900  19500   4168 S   0.0  0.8   0:00.49 /usr/sbin+
100049 nobody    20   0  277488  19588   4384 S   0.0  0.8   0:00.42 /usr/sbin+
100061 nobody    20   0  277576  19328   4116 S   0.0  0.8   0:00.27 /usr/sbin+
100062 nobody    20   0  277900  19372   4100 S   0.0  0.8   0:00.50 /usr/sbin+
101328 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101739 nobody    20   0  277588  19168   4052 S   0.0  0.8   0:00.20 /usr/sbin+
101753 nobody    20   0  277900  19280   4016 S   0.0  0.8   0:00.16 /usr/sbin+
101755 nobody    20   0  277576  18940   3872 S   0.0  0.8   0:00.21 /usr/sbin+
102159 nobody    20   0  277484  18612   3600 S   0.0  0.8   0:00.25 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      52112  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      60882  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:0]
root      62339  0.0  0.0      0     0 ?        S    00:29   0:00  \_ [kworker/0:3]
root      71035  0.0  0.0      0     0 ?        R    00:41   0:00  \_ [kworker/1:2]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:2]
root      92036  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/0:1]
root      92897  0.0  0.0      0     0 ?        D    01:10   0:00  \_ [kworker/1:4]
root      96689  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:0]
root     101328  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/0:2]
root       1688  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44396  3508 ?        Rs   Nov20   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  5112 ?        Ss   Nov20   0:11 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   584 ?        S<sl Nov20   0:01 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224148  6780 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Rs   Nov20   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   484 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1300 ?        Ss   Nov20   0:05 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2300 ?        Ssl  Nov20   0:19 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root        698  0.0  0.0 183044  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root        706  0.2  1.0 178148 26300 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root        748  0.1  0.6 158852 15308 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root        751  0.3  1.4 195360 34700 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root        781  0.1  0.7  76784 16964 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root       1611  0.0  0.0 183044  2152 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1627  0.0  0.0 113284  1212 ?        Ss   01:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       1628  0.0  0.0 108052   360 ?        S    01:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       1629  0.0  0.0 113288  1520 ?        S    01:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       1689  0.0  0.0 153672  1780 ?        R    01:24   0:00  |               \_ ps auxf
root       1612  0.0  0.0 183044  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1666  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       1613  0.0  0.0 183044  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1668  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       1614  0.0  0.0 183044  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1664  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       1615  0.0  0.0 183044  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1657  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       1616  0.0  0.0 183044  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1663  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       1617  0.0  0.0 183044  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1665  0.0  0.0  20164   964 ?        Ss   01:24   0:00  |   \_ jailshell (cloudsms) [1674] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   1674  0.0  0.0      0     0 ?        R    01:24   0:00  |       \_ [jailshell]
root       1618  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1659  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       1619  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1662  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       1620  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1652  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       1621  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1656  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       1622  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1654  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       1623  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1661  0.0  0.0  20164   964 ?        Ss   01:24   0:00  |   \_ jailshell (pactpay) [1682] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1682  0.0  0.0  20164   260 ?        S    01:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1683  0.0  0.6 479860 16172 ?        Sl   01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       1625  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1653  0.0  0.0  20164   964 ?        Ss   01:24   0:00  |   \_ jailshell (nigeria) [1680] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1680  0.0  0.0  20164   256 ?        S    01:24   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1681  0.0  0.6 404052 16140 ?        R    01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       1626  0.0  0.0 183044  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root       1660  0.0  0.0  20164   968 ?        Ss   01:24   0:00      \_ jailshell (saboakin) [1684] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   1684  0.0  0.0      0     0 ?        D    01:24   0:00          \_ [jailshell]
root        575  0.0  0.0  24208   244 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4148 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   1398  0.0  0.2  91200  5696 ?        S    01:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   1606  0.0  0.2  91200  4928 ?        S    01:24   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13280 ?        Ssl  Nov20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:02 /usr/sbin/sshd -D
root        823  0.0  0.1 111304  4272 ?        Ss   01:23   0:00  \_ sshd: [accepted]
sshd        824  0.0  0.1 115644  2624 ?        S    01:23   0:00  |   \_ sshd: [net]
root       1575  0.6  0.2 162436  5832 ?        Ss   01:23   0:00  \_ sshd: root [priv]
sshd       1577  0.0  0.1 115644  2628 ?        S    01:23   0:00      \_ sshd: root [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.1 445028  3400 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   1521  0.0  0.0 445028   320 ?        S    01:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 11168 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   684 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.5 439788 12244 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 41356 ?       Ssl  Nov20   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  8.2 1763340 200124 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261028  7024 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root       1585  0.0  0.0      0     0 ?        Z    01:23   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51508   724 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1078  0.0  0.1  47276  2972 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1079  0.0  0.1  47668  3264 ?        S    Nov20   0:00  \_ dovecot/imap-login
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
root       1081  0.0  0.0  10452   612 ?        S    Nov20   0:00  \_ dovecot/log
dovenull   1082  0.0  0.1  47140  2740 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1083  0.0  0.1  48016  3624 ?        S    Nov20   0:00  \_ dovecot/imap-login
root       1086  0.0  0.1  24528  2572 ?        S    Nov20   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   808 ?        S    Nov20   0:00  \_ dovecot/stats
dovecot    1171  0.0  0.0  41192  1692 ?        S    Nov20   0:00  \_ dovecot/auth
worencom  72726  0.0  0.1  38444  3260 ?        S    00:43   0:00  \_ dovecot/imap
root       1051  0.0  0.1  60820  4508 ?        S    01:23   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3604 ?        Ss   Nov20   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 281936  5516 ?        Ssl  Nov20   0:05 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   900 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    1458  0.0  0.1 400460  4820 ?        S    01:23   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.4 5654304 36120 ?       SLsl Nov20   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   812 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.4 1341892 9740 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.2 261512 128132 ?       S    Nov20   0:02  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3028 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13448 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32924 ?        Ss   Nov20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.2 183900  6104 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.7 228228 18884 ?        Ss   Nov20   0:00 dnsadmin - server mode
root       1241  0.0  0.5 209680 12616 ?        Ss   Nov20   0:02 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1552 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  0.3 267084  8268 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       1938  0.0  0.0  12832   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1939  0.0  0.0  12732   484 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1940  0.0  0.0  12860   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1945  0.0  0.0  53268   372 ?        S    Nov20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    91770  0.1  0.8 277496 19900 ?        S    01:08   0:01  \_ /usr/sbin/httpd -k start
nobody    93649  0.1  0.8 277588 20176 ?        S    01:11   0:01  \_ /usr/sbin/httpd -k start
nobody    95944  0.1  0.8 277576 19904 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    95946  0.1  0.8 277500 19728 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    96086  0.1  0.8 277644 19892 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    96193  0.0  0.8 277588 19624 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    96963  0.1  0.8 277576 19600 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98793  0.0  0.8 277904 19396 ?        S    01:17   0:00  \_ /usr/sbin/httpd -k start
nobody    98798  0.1  0.8 277576 19416 ?        S    01:17   0:00  \_ /usr/sbin/httpd -k start
nobody    99770  0.1  0.8 277900 19500 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody   100049  0.1  0.8 277488 19588 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody   100061  0.0  0.7 277576 19328 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody   100062  0.1  0.8 277900 19372 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody   101739  0.1  0.7 277588 19168 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody   101753  0.1  0.7 277900 19280 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody   101755  0.1  0.7 277576 18940 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody   102159  0.2  0.7 277484 18612 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody     1299  0.1  0.7 277576 18296 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.3 1462004 274112 ?      Sl   Nov20   4:42 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181460 29556 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 23578  Threads: 3  Questions: 1767419  Slow queries: 0  Opens: 6218  Flush tables: 1  Open tables: 2000  Queries per second avg: 74.960
*************************** 1. row ***************************
     Id: 29213
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 29214
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 29216
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.181 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.40.31.46 TIME_WAIT
      1 35.198.153.33 TIME_WAIT
      1 52.187.246.141 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 34.133.72.112 TIME_WAIT
      2 45.227.162.235 TIME_WAIT
      2 91.199.212.132 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 01:24:01 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 33 minutes 44 seconds
   Server load: 0.28 0.15 0.16
   Total accesses: 123763 - Total Traffic: 3.1 GB - Total Duration: 66446823
   CPU Usage: u7.34 s4.87 cu1620.73 cs1308.74 - 12.5% CPU load
   5.24 requests/sec - 136.9 kB/second - 26.1 kB/request - 536.888 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

__KK...K__.__RKWKK.K_W._........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  1299   0/10/6118   _ 0.25 0    421 3291119 0.0   0.50  159.07 192.178.4.102 http/1.1 team.cloudware.ng:80   GET /vendor/symfony/dependency-injection/Tests/Fixtures/graphvi
   1-0  96963  0/107/5830  _ 2.38 2    2   3019976 0.0   5.92  147.13 52.71.46.142  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/2019elections/images/2019el
   2-0  96086  14/165/5529 K 4.08 1    308 2934303 434.0 4.54  140.54 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=3294343410 HTTP/1.1
   3-0  101739 4/36/5885   K 0.80 1    298 3278080 126.5 1.23  155.42 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=1232404176 HTTP/1.1
   4-0  -      0/0/6030    . 0.00 99   0   3095549 0.0   0.00  150.33 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  -      0/0/5629    . 0.00 13   0   3185870 0.0   0.00  146.80 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  -      0/0/5876    . 0.00 111  0   3187974 0.0   0.00  167.69 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  99770  4/84/5646   K 2.09 0    402 3072493 133.7 2.24  150.91 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=1432867402 HTTP/1.1
   8-0  101753 0/31/5871   _ 0.59 2    4   3126318 0.0   0.64  145.52 54.225.98.148 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/images/images/poll
   9-0  98793  0/58/5512   _ 1.25 1    261 2838790 0.0   1.32  136.09 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=2424248362 HTTP/1.1
   10-0 -      0/0/5636    . 0.00 88   0   2849656 0.0   0.00  132.07 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 93649  0/209/5260  _ 5.28 1    392 2759371 0.0   5.55  133.27 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=333185870 HTTP/1.1
   12-0 100049 0/74/5480   _ 1.77 0    0   2880373 0.0   2.01  139.55 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 98798  0/90/5557   R 2.20 2    350 2832301 0.0   2.40  135.06 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=1008276205 HTTP/1.1
   14-0 91770  1/261/5246  K 6.74 2    300 2733475 36.0  7.60  128.12 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1365248843 HTTP/1.1
   15-0 100061 0/52/4786   W 1.09 0    0   2658358 0.0   1.44  123.46 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   16-0 96193  4/100/4376  K 2.26 2    275 2336406 126.9 2.80  118.65 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2976110950 HTTP/1.1
   17-0 100062 2/88/3588   K 2.12 0    262 1974858 64.3  2.31  87.96  192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=1958592262 HTTP/1.1
   18-0 -      0/0/3991    . 0.00 54   0   2193722 0.0   0.00  98.57  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 101755 3/36/3395   K 0.85 1    268 1899853 96.4  0.97  89.50  192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=281579046 HTTP/1.1
   20-0 95944  0/145/3276  _ 3.59 1    409 1912064 0.0   10.61 91.55  192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=3461075713 HTTP/1.1
   21-0 102159 1/39/2563   W 1.11 0    0   1407696 36.0  1.14  65.67  192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=704234168 HTTP/1.1
   22-0 -      0/0/2848    . 0.00 133  0   1465946 0.0   0.00  68.46  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 95946  0/163/2528  _ 4.05 2    1   1361659 0.0   4.17  63.13  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   24-0 -      0/0/1562    . 0.00 108  0   825437  0.0   0.00  39.52  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -      0/0/1018    . 0.00 4462 0   628117  0.0   0.00  27.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -      0/0/703     . 0.00 3828 0   428614  0.0   0.00  18.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -      0/0/420     . 0.00 4368 0   254505  0.0   0.00  9.65   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -      0/0/523     . 0.00 4460 0   349352  0.0   0.00  15.17  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -      0/0/430     . 0.00 4461 0   260468  0.0   0.00  11.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -      0/0/318     . 0.00 4072 0   200447  0.0   0.00  7.21   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -      0/0/271     . 0.00 4464 0   193700  0.0   0.00  6.36   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/593     . 0.00 4463 0   371705  0.0   0.00  14.42  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -      0/0/301     . 0.00 4002 0   111013  0.0   0.00  5.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -      0/0/28      . 0.00 6192 0   15090   0.0   0.00  0.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -      0/0/7       . 0.00 6199 0   640     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/74      . 0.00 6070 0   36928   0.0   0.00  1.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -      0/0/61      . 0.00 6027 0   25914   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -      0/0/65      . 0.00 6120 0   27597   0.0   0.00  1.54   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -      0/0/28      . 0.00 6152 0   13821   0.0   0.00  1.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -      0/0/265     . 0.00 5301 0   139506  0.0   0.00  7.31   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -      0/0/4       . 0.00 6208 0   8       0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/12      . 0.00 6207 0   4242    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -      0/0/89      . 0.00 5932 0   42251   0.0   0.00  2.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -      0/0/10      . 0.00 6196 0   2792    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/55      . 0.00 5933 0   25889   0.0   0.00  1.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -      0/0/463     . 0.00 4885 0   190150  0.0   0.00  10.76  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -      0/0/7       . 0.00 6212 0   2404    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1053
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...22)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 82343
   total entries replaced since starting: 0
   total entries expired since starting: 81265
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 181 miss
   total removes since starting: 25 hit, 19 miss
Youez - 2016 - github.com/yon3zu
LinuXploit