403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.02.30.txt
 ## swap threshold exceeded
## server overview
2025-11-21.02.30 load[0] mem[59/67] mysql[5/10] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1255         116          97         991         825
Swap:          1999        1430         569
 02:30:01 up  7:40,  0 users,  load average: 0.41, 10.76, 12.33
## system overview
top - 02:30:01 up  7:40,  0 users,  load average: 0.70, 10.65, 12.28
Tasks: 216 total,   4 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.6 us, 21.9 sy,  0.0 ni, 12.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   119424 free,  1285268 used,  1015608 buff/cache
KiB Swap:  2047996 total,   583096 free,  1464900 used.   845948 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 270812   3572 S 106.7 11.2   5:29.13 /usr/sbin+
 26146 nigeria   20   0  404052  16140  10380 S  13.3  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44396   3512   1640 S   6.7  0.1   0:38.37 /usr/lib/+
   486 dbus      20   0   58728   1520    792 S   6.7  0.1   0:14.64 /usr/bin/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.59 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.34 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:27.25 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.31 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:04.69 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.01 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.82 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.97 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.94 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.73 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   3444   3136 S   0.0  0.1   0:14.47 /usr/lib/+
   386 root      20   0   45360    404    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    588    460 S   0.0  0.0   0:02.35 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    528    444 S   0.0  0.0   0:00.60 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   6880   1800 S   0.0  0.3   0:00.35 queueproc+
   496 rpc       20   0   69256    268    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    564    452 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:06.42 /usr/lib/+
   522 nscd      20   0 1344744   2288    924 S   0.0  0.1   0:22.27 /usr/sbin+
   523 polkitd   20   0  610540   1112    712 S   0.0  0.0   0:03.75 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.77 /usr/sbin+
   575 root      20   0   24208    228    208 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4000   1056 S   0.0  0.2   0:00.73 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13248   2504 S   0.0  0.5   0:06.62 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.27 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.59 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.18 sw-engine+
   916 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  10936    276 S   0.0  0.5   0:35.78 /usr/bin/+
   923 root      20   0  396248    684    512 S   0.0  0.0   0:00.69 php-fpm: +
   927 root      20   0  439788   2180   1232 S   0.0  0.1   0:00.78 php-fpm: +
   929 named     20   0 1054792  42620   2044 S   0.0  1.8   0:13.76 /usr/sbin+
   930 root      20   0 1763340 158596   1188 S   0.0  6.6   0:14.08 /usr/loca+
   937 root      20   0  261160   7608   2100 S   0.0  0.3   0:44.06 cpsrvd (S+
   944 systuser  20   0  113932   1228      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51656   1292    952 S   0.0  0.1   0:00.38 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.60 /usr/bin/+
   952 cpanelc+  20   0   10592   3596   2376 R   0.0  0.1   0:23.68 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  298320   4324   3156 S   0.0  0.2   0:07.21 /usr/sbin+
   966 root      20   0  389508    800    588 S   0.0  0.0   0:00.75 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.29 php-fpm: +
   976 telegraf  20   0 5654304  36040   5816 S   0.0  1.5   0:14.95 /usr/loca+
   985 root      20   0  388892    736    528 S   0.0  0.0   0:00.69 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.17 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:02.38 /usr/bin/+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.11 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:06.07 /usr/loca+
  1156 systuser  20   0  157708   3020   1044 S   0.0  0.1   0:00.13 SonarPush+
  1161 wp-tool+  20   0  387556  13440   1788 S   0.0  0.6   0:00.28 /usr/bin/+
  1162 wp-tool+  20   0  412396  32900   2092 S   0.0  1.4   0:08.80 /usr/bin/+
  1235 root      20   0  183900   6436   3204 S   0.0  0.3   0:02.68 cpdavd - +
  1239 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.49 dnsadmin +
  1241 root      20   0  209680  12596   2560 S   0.0  0.5   0:03.38 tailwatchd
  1655 root      20   0  299272   1012    616 S   0.0  0.0   0:00.74 php-fpm: +
  1658 root      38  18  130416   1544    808 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  30828   5508 S   0.0  1.3   0:02.87 /usr/sbin+
  2729 dovenull  20   0   46912   4512   3476 S   0.0  0.2   0:00.06 dovecot/p+
  2730 dovenull  20   0   47148   4664   3532 S   0.0  0.2   0:00.03 dovecot/i+
  2731 root      20   0   10452   1520   1148 S   0.0  0.1   0:00.04 dovecot/l+
  2732 dovenull  20   0   46912   4552   3512 S   0.0  0.2   0:00.08 dovecot/p+
  2733 dovenull  20   0   47056   4524   3496 S   0.0  0.2   0:00.02 dovecot/i+
  2734 root      20   0   24564  12416   1416 S   0.0  0.5   0:00.04 dovecot/c+
  2735 dovecot   20   0   13568   1532   1264 S   0.0  0.1   0:00.00 dovecot/s+
  2736 dovecot   20   0   41188   2840   2004 S   0.0  0.1   0:00.12 dovecot/a+
  2737 root      20   0   12816   1388   1180 S   0.0  0.1   0:00.40 /usr/loca+
  2738 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.34 /usr/loca+
  2739 root      20   0   12848   1400   1180 S   0.0  0.1   0:00.36 /usr/loca+
  2740 root      20   0   53252  11860   2476 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263284 130116   3116 S   0.0  5.4   0:05.15 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
  9655 nobody    20   0  277944  35624   4188 S   0.0  1.5   0:00.46 /usr/sbin+
  9768 nobody    20   0  277884  35872   4332 S   0.0  1.5   0:00.68 /usr/sbin+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.50 [kworker]
 11223 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 12133 nobody    20   0  277568  35732   4408 S   0.0  1.5   0:00.58 /usr/sbin+
 17505 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18082 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20181 nobody    20   0  277604  35552   4268 S   0.0  1.5   0:00.51 /usr/sbin+
 22313 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22423 nobody    20   0  277616  35488   4200 S   0.0  1.5   0:00.39 /usr/sbin+
 22439 nobody    20   0  277984  35556   4060 S   0.0  1.5   0:00.46 /usr/sbin+
 23287 nobody    20   0  277592  35332   4056 S   0.0  1.5   0:00.31 /usr/sbin+
 23385 nobody    20   0  277628  35540   4232 S   0.0  1.5   0:00.28 /usr/sbin+
 23386 nobody    20   0  277616  35252   3956 S   0.0  1.5   0:00.31 /usr/sbin+
 23642 nobody    20   0  277616  35404   4116 S   0.0  1.5   0:00.30 /usr/sbin+
 24525 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24771 nobody    20   0  277616  35160   3864 S   0.0  1.5   0:00.13 /usr/sbin+
 24782 nobody    20   0  277940  35276   3856 S   0.0  1.5   0:00.18 /usr/sbin+
 24783 nobody    20   0  277616  35152   3868 S   0.0  1.5   0:00.16 /usr/sbin+
 25383 nobody    20   0  277948  34920   3492 S   0.0  1.4   0:00.10 /usr/sbin+
 25483 nobody    20   0  277940  35108   3696 S   0.0  1.5   0:00.05 /usr/sbin+
 25696 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 25719 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 25730 mailnull  20   0   91200   5692   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 25825 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 25904 mailnull  20   0   91012   5752   2500 S   0.0  0.2   0:00.00 /usr/sbin+
 25939 mailnull  20   0   91200   5692   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 25952 mailnull  20   0   91012   5748   2500 S   0.0  0.2   0:00.00 /usr/sbin+
 25953 mailnull  20   0   91200   5692   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 26010 mailnull  20   0   91012   5748   2500 S   0.0  0.2   0:00.00 /usr/sbin+
 26030 mailnull  20   0   91200   5440   2224 S   0.0  0.2   0:00.00 /usr/sbin+
 26032 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 26034 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 26035 nigeria   20   0  400460   4564   2176 S   0.0  0.2   0:00.00 php-fpm: +
 26038 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 26057 mailnull  20   0   91200   4920   1752 S   0.0  0.2   0:00.00 /usr/sbin+
 26067 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26068 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26069 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26070 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26071 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26072 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26074 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26075 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26076 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26077 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26078 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26079 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26080 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26081 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26082 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 26084 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26091 cloudw    20   0  353712  16232  10604 S   0.0  0.7   0:00.01 /opt/cpan+
 26093 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 26094 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26096 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26097 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26099 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 26100 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 26101 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 26102 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26103 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26104 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26105 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 26106 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26107 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26110 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26114 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26115 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 26118 root      20   0  188208  11088   5148 S   0.0  0.5   0:00.01 /usr/loca+
 26119 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 26126 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 26129 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26134 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 26138 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26165 root      20   0  160224   2344   1632 S   0.0  0.1   0:00.00 top -n 2 +
 26208 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 26229 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 26234 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 26236 cloudsms  20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
 33816 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 34774 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40404 root      20   0  182176  30200   2292 S   0.0  1.2   0:08.26 lfd - sle+
 63318 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:01.00 [kworker/+
 76566 nobody    20   0  277592  35776   4456 S   0.0  1.5   0:00.92 /usr/sbin+
 84240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84944 root      20   0  183048   2108   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1180   1000 S   0.0  0.0   0:00.00 /bin/sh -+
 85029 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 5h +
 89738 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 91564 nobody    20   0  277908  36008   4584 S   0.0  1.5   0:00.81 /usr/sbin+
 96689 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:27  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:01  \_ [kworker/u200:2]
root      96689  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:0]
root      11223  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:2]
root      33816  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/1:1]
root      34774  0.0  0.0      0     0 ?        S    02:05   0:00  \_ [kworker/0:4]
root      63318  0.0  0.0      0     0 ?        S    02:16   0:00  \_ [kworker/1:0]
root      84240  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/0:1]
root      89738  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/u200:0]
root      17505  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/0:2]
root      18082  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/1:3]
root      22313  0.0  0.0      0     0 ?        D    02:25   0:00  \_ [kworker/1:4]
root      24525  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44396  3512 ?        Ss   Nov20   0:38 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  3444 ?        Ss   Nov20   0:14 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   404 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   588 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   528 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224288  6880 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Rs   Nov20   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   268 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   564 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:06 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2288 ?        Ssl  Nov20   0:22 /usr/sbin/nscd
polkitd     523  0.0  0.0 610540  1112 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2108 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      26067  0.0  0.0 183044  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26101  0.0  0.0 113284  1208 ?        Ss   02:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      26119  0.0  0.0 108052   356 ?        S    02:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      26126  0.0  0.0 113288  1520 ?        S    02:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      26237  0.0  0.0 153840  2088 ?        R    02:30   0:00  |               \_ ps auxf
root      26068  0.0  0.0 183044  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26115  0.0  0.0  20164   988 ?        Ss   02:30   0:00  |   \_ jailshell (cloudsms) [26234] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  26234  0.0  0.0  20164   264 ?        S    02:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  26236  0.0  0.0 113284  1212 ?        S    02:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  26238  0.0  0.0 113284   376 ?        R    02:30   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      26069  0.0  0.0 183044  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26096  0.0  0.0  20164   808 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      26070  0.0  0.0 183044  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26114  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      26071  0.0  0.0 183044  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26094  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      26072  0.0  0.0 183044  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26110  0.0  0.0  20164   808 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      26074  0.0  0.0 183044  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26102  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      26075  0.0  0.0 183044  2144 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26103  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      26076  0.0  0.0 183044  2144 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26106  0.0  0.0  20164   808 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      26077  0.0  0.0 183044  2140 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26107  0.0  0.0  20164   808 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      26078  0.0  0.0 183044  2140 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26104  0.0  0.0  20164   808 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      26080  0.0  0.0 183044  2140 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26097  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      26081  0.0  0.0 183044  2140 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26105  0.0  0.0 113284  1212 ?        Ss   02:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      26118  0.0  0.4 188208 11088 ?        S    02:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      26165  0.0  0.0 160224  2344 ?        S    02:30   0:00  |           \_ top -n 2 -b -c
root      26082  0.0  0.0 183044  2136 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26099  0.0  0.0  20164   964 ?        Ss   02:30   0:00  |   \_ jailshell (pactpay) [26129] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26129  0.0  0.0  20164   260 ?        S    02:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26134  0.0  0.7 480124 17676 ?        S    02:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      26084  0.0  0.0 183044  2144 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      26093  0.0  0.0  20164   964 ?        Ss   02:30   0:00      \_ jailshell (nigeria) [26138] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26138  0.0  0.0  20164   260 ?        S    02:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26146  0.0  0.6 404052 16140 ?        R    02:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   228 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4000 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  25730  0.0  0.2  91200  5692 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  25904  0.0  0.2  91012  5752 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  25939  0.0  0.2  91200  5692 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  25952  0.0  0.2  91012  5748 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  25953  0.0  0.2  91200  5692 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  26010  0.0  0.2  91012  5748 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  26030  0.0  0.2  91200  5440 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  26057  0.0  0.2  91200  4920 ?        S    02:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13248 ?        Ssl  Nov20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      26032  0.3  0.2 162436  5828 ?        Ss   02:29   0:00  \_ sshd: root [priv]
sshd      26034  0.0  0.1 115644  2628 ?        S    02:29   0:00      \_ sshd: root [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  25719  0.0  0.0 445028   552 ?        S    02:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 10936 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   684 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.0 439788  2180 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 42620 ?       Ssl  Nov20   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 158596 ?      Ssl  Nov20   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.1  0.3 261160  7608 ?        Ss   Nov20   0:44 cpsrvd (SSL) - waiting for connections                   
root      26038  0.0  0.0      0     0 ?        Z    02:29   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  1228 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1292 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  4512 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4664 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1520 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  4552 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47056  4524 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.5  24564 12416 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1532 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41188  2840 ?        S    01:25   0:00  \_ dovecot/auth
root      25696  0.0  0.1  41052  2728 ?        S    02:29   0:00  \_ dovecot/auth -w
root      25825  0.0  0.1  60820  4512 ?        S    02:29   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3596 ?        Rs   Nov20   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.1 298320  4324 ?        Ssl  Nov20   0:07 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   800 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   26035  0.0  0.1 400460  4564 ?        S    02:29   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.4 5654304 36040 ?       SLsl Nov20   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   736 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263284 130116 ?       S    Nov20   0:05  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3020 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13440 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32900 ?        Ss   Nov20   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.2 183900  6436 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.1 167452  4168 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12596 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1012 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1544 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 30828 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12816  1388 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1364 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12848  1400 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11860 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76566  0.1  1.4 277592 35776 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody    91564  0.1  1.4 277908 36008 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     9655  0.1  1.4 277944 35624 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     9768  0.1  1.4 277884 35872 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody    12133  0.1  1.4 277568 35732 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    20181  0.1  1.4 277604 35552 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody    22423  0.1  1.4 277616 35488 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    22439  0.1  1.4 277984 35556 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    23287  0.1  1.4 277592 35332 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    23385  0.1  1.4 277628 35540 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    23386  0.1  1.4 277616 35252 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    23642  0.1  1.4 277616 35404 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    24771  0.1  1.4 277616 35160 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody    24782  0.1  1.4 277940 35276 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody    24783  0.1  1.4 277616 35152 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody    25383  0.1  1.4 277948 34920 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    25483  0.1  1.4 277940 35108 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.1 1462240 270812 ?      Sl   Nov20   5:29 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 182176 30200 ?        Ss   00:00   0:08 lfd - sleeping
## mysql stats
Uptime: 27538  Threads: 3  Questions: 2038640  Slow queries: 0  Opens: 7363  Flush tables: 1  Open tables: 2000  Queries per second avg: 74.030
*************************** 1. row ***************************
     Id: 33696
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 33700
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 33707
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.143 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 142.44.220.114 TIME_WAIT
      1 170.106.187.106 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 02:30:01 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 39 minutes 44 seconds
   Server load: 0.70 10.65 12.28
   Total accesses: 141999 - Total Traffic: 3.6 GB - Total Duration: 77516394
   CPU Usage: u5.07 s4.43 cu1878.44 cs1505.65 - 12.3% CPU load
   5.15 requests/sec - 135.4 kB/second - 26.3 kB/request - 545.894 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KW_KWWK_K__K...K_KK._...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-1  12133 2/118/7002 K 2.25 0     399 3804229 66.5  2.47  184.86 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3240112715 HTTP/1.1
   1-1  25383 0/18/6768  W 0.46 0     0   3570309 0.0   0.43  173.40 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-1  24771 0/23/6381  _ 0.56 0     302 3457543 0.0   0.78  163.08 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1796948488 HTTP/1.1
   3-1  91564 4/142/6780 K 3.16 1     295 3809371 126.4 3.43  178.75 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1895820393 HTTP/1.1
   4-1  23642 4/49/6829  W 1.16 0     0   3593107 125.2 1.27  171.32 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3469755263 HTTP/1.1
   5-1  25483 0/9/6500   W 0.17 0     0   3736843 0.0   0.54  170.98 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=55985 H
   6-1  9655  8/83/6773  K 2.16 4     292 3730931 252.5 1.93  191.89 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=2936335296 HTTP/1.1
   7-1  23287 0/53/6494  _ 1.33 0     0   3604785 0.0   1.98  174.16 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   8-1  9768  3/116/6631 K 2.79 1     350 3603637 93.9  3.57  166.43 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1357145818 HTTP/1.1
   9-1  22423 0/65/6409  _ 1.61 1     374 3325579 0.0   2.10  156.56 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /vendor/gedmo/doctrine-extensions/lib/Gedmo/Translatable/En
   10-1 24782 0/32/6492  _ 0.74 0     0   3344354 0.0   0.80  159.01 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   11-1 24783 1/24/6107  K 0.66 3     262 3280808 33.2  0.71  155.94 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3824180599 HTTP/1.1
   12-1 -     0/0/6141   . 0.00 72    0   3318205 0.0   0.00  158.60 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-1 -     0/0/6352   . 0.00 5     0   3301355 0.0   0.00  156.88 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-1 -     0/0/6015   . 0.00 81    0   3134310 0.0   0.00  146.16 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-1 20181 1/84/5601  K 1.99 3     260 3165705 34.0  2.54  145.05 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2749335177 HTTP/1.1
   16-1 22439 0/78/5044  _ 2.13 1     291 2710663 0.0   2.24  136.82 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3483469811 HTTP/1.1
   17-1 23385 1/51/4159  K 1.07 2     301 2441865 34.2  1.70  103.26 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1255137332 HTTP/1.1
   18-1 23386 3/52/4344  K 1.24 0     410 2479521 101.5 3.16  108.90 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=2465895615 HTTP/1.1
   19-1 -     0/0/3925   . 0.00 52    0   2221110 0.0   0.00  103.43 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-1 76566 0/149/3706 _ 3.85 0     259 2180799 0.0   4.16  102.43 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=1089307486 HTTP/1.1
   21-1 -     0/0/2962   . 0.00 1138  0   1575835 0.0   0.00  74.66  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-1 -     0/0/3375   . 0.00 435   0   1856998 0.0   0.00  83.46  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-1 -     0/0/3154   . 0.00 801   0   1740049 0.0   0.00  80.91  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-1 -     0/0/1928   . 0.00 1556  0   963238  0.0   0.00  46.70  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-1 -     0/0/1261   . 0.00 586   0   817594  0.0   0.00  34.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-1 -     0/0/715    . 0.00 1600  0   428654  0.0   0.00  18.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-1 -     0/0/506    . 0.00 1312  0   297127  0.0   0.00  11.85  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-1 -     0/0/543    . 0.00 1512  0   356892  0.0   0.00  15.93  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-1 -     0/0/434    . 0.00 1602  0   260477  0.0   0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-1 -     0/0/332    . 0.00 1589  0   200777  0.0   0.00  7.47   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-1 -     0/0/274    . 0.00 1611  0   193753  0.0   0.00  6.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00 8423  0   371705  0.0   0.00  14.42  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00 7962  0   111013  0.0   0.00  5.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00 10151 0   15090   0.0   0.00  0.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 10158 0   640     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00 10030 0   36928   0.0   0.00  1.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00 9987  0   25914   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00 10080 0   27597   0.0   0.00  1.54   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00 10111 0   13821   0.0   0.00  1.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00 9261  0   139506  0.0   0.00  7.31   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00 10167 0   8       0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00 10166 0   4242    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00 9892  0   42251   0.0   0.00  2.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00 10155 0   2792    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00 9893  0   25889   0.0   0.00  1.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00 8845  0   190150  0.0   0.00  10.76  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00 10171 0   2404    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1128
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...50)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 12845
   total entries replaced since starting: 0
   total entries expired since starting: 11712
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 16 miss
   total removes since starting: 6 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit