403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-21.01.30 load[0] mem[62/64] mysql[3/10] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1371         163          92         828         723
Swap:          1999        1366         633
 01:30:02 up  6:40,  0 users,  load average: 0.50, 0.25, 0.18
## system overview
top - 01:30:02 up  6:40,  0 users,  load average: 0.50, 0.25, 0.18
Tasks: 209 total,   2 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 64.5 us, 19.4 sy,  0.0 ni, 16.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   176624 free,  1395468 used,   848208 buff/cache
KiB Swap:  2047996 total,   648700 free,  1399296 used.   749992 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462004 273912   3396 S 100.0 11.3   4:46.72 /usr/sbin+
  6414 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.05 /opt/cpan+
  6454 root      20   0  160224   2352   1636 S   6.2  0.1   0:00.01 top -n 2 +
     1 root      20   0   44396   3516   1640 S   0.0  0.1   0:33.77 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.38 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.80 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.33 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.80 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.72 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   6204   5892 S   0.0  0.3   0:12.11 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    584    456 S   0.0  0.0   0:01.93 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.52 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.01 /usr/sbin+
   485 root      20   0  224288   8740   2116 S   0.0  0.4   0:00.32 queueproc+
   486 dbus      20   0   58728   1520    792 S   0.0  0.1   0:12.70 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    484    372 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1300    940 S   0.0  0.1   0:05.59 /usr/lib/+
   522 nscd      20   0 1344744   2300    928 S   0.0  0.1   0:19.33 /usr/sbin+
   523 polkitd   20   0  610540   3220    712 S   0.0  0.1   0:03.26 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.67 /usr/sbin+
   575 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4148   1060 S   0.0  0.2   0:00.62 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   698 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
   706 root      20   0  178148  26280   2792 S   0.0  1.1   0:00.13 /usr/loca+
   748 root      20   0  158868  15288   2692 S   0.0  0.6   0:00.07 /usr/loca+
   751 root      20   0  195360  34676   3144 S   0.0  1.4   0:00.20 /usr/loca+
   781 root      20   0   76784  17000   3036 S   0.0  0.7   0:00.18 /usr/loca+
   912 systuser  20   0  114016  13096   2428 S   0.0  0.5   0:05.80 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:02.68 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.50 pure-ftpd+
   915 root      20   0  445028   3400   3284 S   0.0  0.1   0:01.03 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  11168    276 S   0.0  0.5   0:35.78 /usr/bin/+
   923 root      20   0  396248    684    512 S   0.0  0.0   0:00.62 php-fpm: +
   927 root      20   0  439788  12244  11296 S   0.0  0.5   0:00.69 php-fpm: +
   929 named     20   0 1054792  41972   2264 S   0.0  1.7   0:11.67 /usr/sbin+
   930 root      20   0 1763340 187392   1116 S   0.0  7.7   0:13.83 /usr/loca+
   937 root      20   0  261028   6988   2000 S   0.0  0.3   0:03.40 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51656   1312    972 S   0.0  0.1   0:00.33 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.52 /usr/bin/+
   952 cpanelc+  20   0   10592   3604   2384 S   0.0  0.1   0:19.66 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  281936   6500   5444 S   0.0  0.3   0:06.10 /usr/sbin+
   966 root      20   0  389508    900    684 S   0.0  0.0   0:00.67 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:02.89 php-fpm: +
   976 telegraf  20   0 5654304  36292   5724 S   0.0  1.5   0:13.03 /usr/loca+
   985 root      20   0  388892    812    604 S   0.0  0.0   0:00.61 php-fpm: +
   986 root      20   0 1341892   9740    280 S   0.0  0.4   0:23.14 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:02.08 /usr/bin/+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.11 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.66 /usr/loca+
  1156 systuser  20   0  157708   3028   1044 S   0.0  0.1   0:00.11 SonarPush+
  1161 wp-tool+  20   0  387556  13448   1788 S   0.0  0.6   0:00.26 /usr/bin/+
  1162 wp-tool+  20   0  412396  32924   2116 S   0.0  1.4   0:07.69 /usr/bin/+
  1235 root      20   0  262224  24688   6768 S   0.0  1.0   0:02.48 cpdavd - +
  1239 root      20   0  167452   4192   2828 S   0.0  0.2   0:00.45 dnsadmin +
  1241 root      20   0  209680  12608   2520 S   0.0  0.5   0:03.01 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.65 php-fpm: +
  1658 root      38  18  130416   1544    804 S   0.0  0.1   0:00.05 cpanellog+
  1688 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1937 root      20   0  267084  31888   6568 S   0.0  1.3   0:02.50 /usr/sbin+
  2728 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  2729 dovenull  20   0   46772   3580   2736 S   0.0  0.1   0:00.00 dovecot/p+
  2730 dovenull  20   0   47020   4748   3628 S   0.0  0.2   0:00.00 dovecot/i+
  2731 root      20   0   10452   1528   1156 S   0.0  0.1   0:00.00 dovecot/l+
  2732 dovenull  20   0   46772   3580   2736 S   0.0  0.1   0:00.00 dovecot/p+
  2733 dovenull  20   0   46924   4640   3612 S   0.0  0.2   0:00.00 dovecot/i+
  2734 root      20   0   24528  12364   1492 S   0.0  0.5   0:00.01 dovecot/c+
  2735 dovecot   20   0   13568   1568   1300 S   0.0  0.1   0:00.00 dovecot/s+
  2736 dovecot   20   0   41056   2908   2184 S   0.0  0.1   0:00.01 dovecot/a+
  2737 root      20   0   12784   1304   1124 S   0.0  0.1   0:00.03 /usr/loca+
  2738 root      20   0   12732   1308   1128 S   0.0  0.1   0:00.02 /usr/loca+
  2739 root      20   0   12816   1312   1128 S   0.0  0.1   0:00.02 /usr/loca+
  2740 root      20   0   53252  11916   2532 S   0.0  0.5   0:00.04 /usr/loca+
  2743 nobody    20   0  277616  35352   4012 S   0.0  1.5   0:00.50 /usr/sbin+
  2745 nobody    20   0  277936  35496   3944 S   0.0  1.5   0:00.42 /usr/sbin+
  2810 nobody    20   0  277616  35324   4036 S   0.0  1.5   0:00.39 /usr/sbin+
  2834 nobody    20   0  277616  35496   4204 S   0.0  1.5   0:00.46 /usr/sbin+
  2973 nobody    20   0  277540  35144   3932 S   0.0  1.5   0:00.43 /usr/sbin+
  2997 nobody    20   0  277532  35240   4032 S   0.0  1.5   0:00.44 /usr/sbin+
  3010 worencom  20   0   38472   3828   2992 S   0.0  0.2   0:00.00 dovecot/i+
  3045 nobody    20   0  277532  35264   4056 S   0.0  1.5   0:00.38 /usr/sbin+
  3063 nobody    20   0  277940  35412   3984 S   0.0  1.5   0:00.48 /usr/sbin+
  3345 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3574 nobody    20   0  277948  35476   4048 S   0.0  1.5   0:00.30 /usr/sbin+
  3588 nobody    20   0  277932  35336   3920 S   0.0  1.5   0:00.38 /usr/sbin+
  3789 nobody    20   0  277748  35564   4140 S   0.0  1.5   0:00.32 /usr/sbin+
  4113 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4282 nobody    20   0  277616  35168   3884 S   0.0  1.5   0:00.29 /usr/sbin+
  4312 nobody    20   0  277948  35396   3964 S   0.0  1.5   0:00.20 /usr/sbin+
  4313 nobody    20   0  277616  35132   3844 S   0.0  1.5   0:00.23 /usr/sbin+
  4314 nobody    20   0  277616  35136   3840 S   0.0  1.5   0:00.31 /usr/sbin+
  4315 nobody    20   0  277616  35064   3784 S   0.0  1.4   0:00.35 /usr/sbin+
  4669 root      20   0   41052   2816   2144 S   0.0  0.1   0:00.00 dovecot/a+
  4780 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5133 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  5196 nobody    20   0  277940  35280   3824 S   0.0  1.5   0:00.14 /usr/sbin+
  6035 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
  6282 nigeria   20   0  400460   4820   2416 S   0.0  0.2   0:00.00 php-fpm: +
  6283 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  6306 root      20   0  162436   5832   4344 S   0.0  0.2   0:00.01 sshd: roo+
  6307 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
  6333 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6334 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6335 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6336 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6337 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6338 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6340 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6341 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6342 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6343 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6344 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6346 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6347 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6348 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6350 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6359 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6360 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  6361 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6363 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6365 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  6366 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  6367 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6368 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6371 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6372 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6373 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6374 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6375 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6377 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  6378 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6382 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  6385 root      20   0  188208  11088   5148 S   0.0  0.5   0:00.01 /usr/loca+
  6391 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  6401 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  6408 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.01 /opt/cpan+
  6410 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6494 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  6916 root      20   0  262480 129816   3516 S   0.0  5.4   0:02.66 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.00 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.44 [kworker]
 40404 root      20   0  181560  29596   2296 S   0.0  1.2   0:04.96 lfd - sle+
 52112 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 60882 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
 62339 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71035 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 84944 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85029 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 5h +
 92897 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 96689 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101328 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      52112  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      60882  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:0]
root      62339  0.0  0.0      0     0 ?        S    00:29   0:00  \_ [kworker/0:3]
root      71035  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/1:2]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:2]
root      92897  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/1:4]
root      96689  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:0]
root     101328  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/0:2]
root       1688  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/1:1]
root       2728  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:0]
root       3345  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/0:1]
root       4113  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:4]
root       4780  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44396  3516 ?        Ss   Nov20   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  6204 ?        Ss   Nov20   0:12 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   584 ?        S<sl Nov20   0:01 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.3 224288  8740 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Ss   Nov20   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   484 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1300 ?        Ss   Nov20   0:05 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2300 ?        Ssl  Nov20   0:19 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root        698  0.0  0.0 183044  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root        706  0.0  1.0 178148 26280 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root        748  0.0  0.6 158868 15288 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root        751  0.0  1.4 195360 34676 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root        781  0.0  0.7  76784 17000 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root       6333  0.0  0.0 183044  2152 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6377  0.0  0.0 113284  1208 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       6382  0.0  0.0 108052   360 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       6391  0.0  0.0 113288  1516 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       6501  0.0  0.0 153840  2092 ?        R    01:30   0:00  |               \_ ps auxf
root       6334  0.0  0.0 183044  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6367  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       6335  0.0  0.0 183044  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6378  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       6336  0.0  0.0 183044  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6359  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       6337  0.0  0.0 183044  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6375  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       6338  0.0  0.0 183044  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6371  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       6340  0.0  0.0 183044  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6368  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       6341  0.0  0.0 183044  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6363  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       6342  0.0  0.0 183044  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6372  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       6343  0.0  0.0 183044  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6373  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       6344  0.0  0.0 183044  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6374  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       6346  0.0  0.0 183044  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6361  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       6347  0.0  0.0 183044  2144 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6365  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       6385  1.0  0.4 188208 11088 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       6454  0.0  0.0 160224  2352 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root       6348  0.0  0.0 183044  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6366  0.0  0.0  20164   968 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [6401] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6401  0.0  0.0  20164   256 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6408  0.0  0.7 480124 17672 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       6350  0.0  0.0 183044  2140 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root       6360  0.0  0.0  20164   968 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [6410] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6410  0.0  0.0  20164   260 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6414  0.0  0.6 404052 16136 ?        S    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   244 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4148 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13096 ?        Ssl  Nov20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:02 /usr/sbin/sshd -D
root       6306  0.5  0.2 162436  5832 ?        Ss   01:29   0:00  \_ sshd: root [priv]
sshd       6307  0.0  0.1 115644  2628 ?        S    01:29   0:00      \_ sshd: root [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.1 445028  3400 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   6035  0.0  0.0 445028   324 ?        S    01:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 11168 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   684 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.5 439788 12244 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 41972 ?       Ssl  Nov20   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  7.7 1763340 187392 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261028  6988 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root       6283  0.0  0.0      0     0 ?        Z    01:29   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1312 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46772  3580 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47020  4748 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1528 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46772  3580 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  46924  4640 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.5  24528 12364 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1568 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41056  2908 ?        S    01:25   0:00  \_ dovecot/auth
worencom   3010  0.0  0.1  38472  3828 ?        S    01:25   0:00  \_ dovecot/imap
root       4669  0.0  0.1  41052  2816 ?        S    01:27   0:00  \_ dovecot/auth -w
root       5133  0.0  0.1  60820  4512 ?        S    01:28   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3604 ?        Ss   Nov20   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 281936  6500 ?        Ssl  Nov20   0:06 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   900 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    6282  0.0  0.1 400460  4820 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.4 5654304 36292 ?       SLsl Nov20   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   812 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.4 1341892 9740 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 262480 129816 ?       S    Nov20   0:02  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3028 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13448 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32924 ?        Ss   Nov20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  1.0 262224 24688 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.1 167452  4192 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12608 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1544 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.3 267084 31888 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12784  1304 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1308 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12816  1312 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11916 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2743  0.1  1.4 277616 35352 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2745  0.1  1.4 277936 35496 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2810  0.1  1.4 277616 35324 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2834  0.1  1.4 277616 35496 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2973  0.1  1.4 277540 35144 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2997  0.1  1.4 277532 35240 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     3045  0.1  1.4 277532 35264 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     3063  0.1  1.4 277940 35412 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody     3574  0.1  1.4 277948 35476 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody     3588  0.1  1.4 277932 35336 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody     3789  0.1  1.4 277748 35564 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody     4282  0.1  1.4 277616 35168 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody     4312  0.1  1.4 277948 35396 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody     4313  0.1  1.4 277616 35132 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody     4314  0.1  1.4 277616 35136 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody     4315  0.2  1.4 277616 35064 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody     5196  0.1  1.4 277940 35280 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.3 1462004 273912 ?      Sl   Nov20   4:46 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181560 29596 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 23939  Threads: 3  Questions: 1795073  Slow queries: 0  Opens: 6285  Flush tables: 1  Open tables: 2000  Queries per second avg: 74.985
*************************** 1. row ***************************
     Id: 29632
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 2. row ***************************
     Id: 29633
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 29639
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 143.202.81.245 TIME_WAIT
      1 15.235.96.156 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.23.137.202 TIME_WAIT
      1 3.221.156.96 TIME_WAIT
      1 3.232.39.98 TIME_WAIT
      1 34.204.150.196 TIME_WAIT
      1 34.226.89.140 TIME_WAIT
      1 34.233.114.237 TIME_WAIT
      1 44.223.115.10 TIME_WAIT
      1 54.85.109.140 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 01:30:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 6 hours 39 minutes 44 seconds
   Server load: 0.50 0.25 0.18
   Total accesses: 125625 - Total Traffic: 3.1 GB - Total Duration: 67313715
   CPU Usage: u4.71 s3.8 cu1651.23 cs1331.19 - 12.5% CPU load
   5.24 requests/sec - 136.9 kB/second - 26.1 kB/request - 535.831 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KK_K__K_..W_K...W__._KK.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID     Acc    M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-1  2973 5/75/6220 K 1.68 2    354 3336469 154.7 5.26  164.68 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1003263136 HTTP/1.1
   1-1  2743 5/91/5942 K 2.02 3    402 3078308 158.2 2.18  149.89 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=2839674465 HTTP/1.1
   2-1  3574 0/63/5627 _ 1.43 0    0   2980646 0.0   1.35  142.72 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-1  2997 1/77/5992 K 1.80 0    369 3327962 33.9  1.97  157.95 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1658354690 HTTP/1.1
   4-1  5196 0/24/6094 _ 0.49 2    342 3123871 0.0   0.81  151.91 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=1878833081 HTTP/1.1
   5-1  2810 0/74/5703 _ 1.56 0    0   3219057 0.0   1.67  148.46 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   6-1  3588 8/65/5958 K 1.58 1    283 3224201 249.0 1.70  169.51 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=3172218191 HTTP/1.1
   7-1  2834 0/88/5758 _ 1.85 1    263 3126657 0.0   1.96  153.56 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=2899611230 HTTP/1.1
   8-1  -    0/0/5932  . 0.00 158  0   3154879 0.0   0.00  147.13 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-1  -    0/0/5568  . 0.00 157  0   2860962 0.0   0.00  137.31 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-1 3789 8/58/5722 W 1.29 0    0   2886693 247.1 2.04  134.55 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=577159927 HTTP/1.1
   11-1 4282 0/49/5357 _ 1.15 0    342 2805166 0.0   1.28  135.51 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3207715108 HTTP/1.1
   12-1 2745 3/75/5580 K 1.69 1    346 2927574 97.2  2.08  142.18 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=2671627968 HTTP/1.1
   13-1 -    0/0/5594  . 0.00 151  0   2846512 0.0   0.00  135.81 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-1 -    0/0/5280  . 0.00 118  0   2746900 0.0   0.00  128.81 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-1 -    0/0/4852  . 0.00 155  0   2687774 0.0   0.00  124.95 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-1 4312 0/38/4451 W 0.71 0    0   2371718 0.0   0.93  120.49 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   17-1 4313 0/39/3647 _ 0.94 2    2   2002279 0.0   1.03  89.32  23.21.175.228 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/2019elections/blog/2019el
   18-1 3045 0/72/4063 _ 1.70 2    342 2222827 0.0   1.61  100.18 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=2411890441 HTTP/1.1
   19-1 -    0/0/3457  . 0.00 105  0   1932764 0.0   0.00  91.15  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-1 4314 0/67/3368 _ 1.22 0    345 1950098 0.0   1.42  93.72  192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=4020546164 HTTP/1.1
   21-1 4315 5/56/2653 K 1.54 0    344 1456307 156.0 1.67  68.05  192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=2125231014 HTTP/1.1
   22-1 3063 1/78/2926 K 2.01 2    355 1509553 34.5  2.17  70.63  192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1254638040 HTTP/1.1
   23-1 -    0/0/2572  . 0.00 148  0   1383921 0.0   0.00  64.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-1 -    0/0/1564  . 0.00 251  0   825440  0.0   0.00  39.52  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -    0/0/1018  . 0.00 4822 0   628117  0.0   0.00  27.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -    0/0/703   . 0.00 4189 0   428614  0.0   0.00  18.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -    0/0/420   . 0.00 4728 0   254505  0.0   0.00  9.65   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -    0/0/523   . 0.00 4820 0   349352  0.0   0.00  15.17  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -    0/0/430   . 0.00 4821 0   260468  0.0   0.00  11.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -    0/0/318   . 0.00 4433 0   200447  0.0   0.00  7.21   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -    0/0/271   . 0.00 4824 0   193700  0.0   0.00  6.36   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -    0/0/593   . 0.00 4823 0   371705  0.0   0.00  14.42  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -    0/0/301   . 0.00 4363 0   111013  0.0   0.00  5.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -    0/0/28    . 0.00 6552 0   15090   0.0   0.00  0.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -    0/0/7     . 0.00 6559 0   640     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -    0/0/74    . 0.00 6431 0   36928   0.0   0.00  1.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -    0/0/61    . 0.00 6388 0   25914   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -    0/0/65    . 0.00 6481 0   27597   0.0   0.00  1.54   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -    0/0/28    . 0.00 6512 0   13821   0.0   0.00  1.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -    0/0/265   . 0.00 5661 0   139506  0.0   0.00  7.31   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -    0/0/4     . 0.00 6568 0   8       0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -    0/0/12    . 0.00 6567 0   4242    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -    0/0/89    . 0.00 6293 0   42251   0.0   0.00  2.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -    0/0/10    . 0.00 6556 0   2792    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -    0/0/55    . 0.00 6294 0   25889   0.0   0.00  1.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -    0/0/463   . 0.00 5246 0   190150  0.0   0.00  10.76  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -    0/0/7     . 0.00 6572 0   2404    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1080
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 11...35)
   index usage: 19%, cache usage: 25%
   total entries stored since starting: 1080
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit