403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.18.00.txt
 ## swap threshold exceeded
## server overview
2025-11-22.18.00 load[0] mem[59/65] mysql[4/9] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1339          87         108         936         741
Swap:          1999        1412         587
 18:00:01 up  6:57,  0 users,  load average: 0.16, 0.20, 0.22
## system overview
top - 18:00:01 up  6:57,  0 users,  load average: 0.16, 0.20, 0.22
Tasks: 222 total,   8 running, 212 sleeping,   0 stopped,   2 zombie
%Cpu(s): 70.6 us, 20.6 sy,  2.9 ni,  0.0 id,  2.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    84164 free,  1364144 used,   971992 buff/cache
KiB Swap:  2047996 total,   602108 free,  1445888 used.   767240 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1477108 282724   4176 S 125.0 11.7   5:30.28 /usr/sbin+
  3885 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.05 /opt/cpan+
  3886 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44508   3444   1576 S   0.0  0.1   0:34.31 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.37 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:25.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.02 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.98 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.21 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.45 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.90 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.28 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 nobody    20   0  277584  20240   4220 S   0.0  0.8   0:00.34 /usr/sbin+
   360 root      20   0   40240   5012   4708 S   0.0  0.2   0:15.45 /usr/lib/+
   384 root      20   0   45352    440    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    552    424 S   0.0  0.0   0:02.57 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    480    368 S   0.0  0.0   0:00.57 /usr/sbin+
   501 root      20   0   24704   1256    888 S   0.0  0.1   0:05.65 /usr/lib/+
   502 dbus      20   0   58720   1520    792 S   0.0  0.1   0:12.86 /usr/bin/+
   504 rpc       20   0   69256    112      4 S   0.0  0.0   0:00.03 /sbin/rpc+
   514 root      20   0  224148   5576    932 S   0.0  0.2   0:00.30 queueproc+
   515 polkitd   20   0  610540   3116    600 S   0.0  0.1   0:03.29 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   52852    468    360 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0  928956   1476    756 S   0.0  0.1   0:18.21 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208    104     84 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:00.69 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4112   1084 S   0.0  0.2   0:00.47 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.34 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     84     84 S   0.0  0.0   0:00.54 /usr/bin/+
   912 root      20   0 1277312  11080    140 S   0.0  0.5   0:24.64 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    920    332 S   0.0  0.0   0:02.19 /usr/bin/+
   915 root      20   0   51508    592    428 S   0.0  0.0   0:00.38 /usr/sbin+
   916 telegraf  20   0 5654304  38468   5808 S   0.0  1.6   0:13.46 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14464   2756 S   0.0  0.6   0:05.92 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:03.94 /usr/sbin+
   928 root      20   0 1276100   9428    104 S   0.0  0.4   0:25.38 /usr/bin/+
   930 root      20   0  445028   3312   3200 S   0.0  0.1   0:00.93 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:00.54 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   934 root      20   0  439788  11432  11224 S   0.0  0.5   0:00.70 php-fpm: +
   938 root      20   0  388892    704    492 S   0.0  0.0   0:00.63 php-fpm: +
   939 root      20   0 1763124 240544    596 S   0.0  9.9   0:13.69 /usr/loca+
   940 root      20   0  298320   6704   4608 S   0.0  0.3   0:07.39 /usr/sbin+
   949 named     20   0 1055800  38156   2284 S   0.0  1.6   0:11.34 /usr/sbin+
   958 root      20   0  400740   3020    720 S   0.0  0.1   0:03.04 php-fpm: +
   962 root      20   0  261032   7400   2388 S   0.0  0.3   0:03.65 cpsrvd (S+
   969 cpanelc+  20   0   10540   3664   2372 R   0.0  0.2   0:20.11 /usr/loca+
   979 root      20   0  396248    624    452 S   0.0  0.0   0:00.64 php-fpm: +
   985 root      20   0  389508    844    632 S   0.0  0.0   0:00.70 php-fpm: +
  1053 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1083 dovenull  20   0   46996   2860   2136 S   0.0  0.1   0:00.77 dovecot/p+
  1084 dovenull  20   0   47816   3696   2232 S   0.0  0.2   0:00.24 dovecot/i+
  1085 dovecot   20   0   10320    344    228 S   0.0  0.0   0:00.20 dovecot/a+
  1086 root      20   0   10452    544    368 S   0.0  0.0   0:00.48 dovecot/l+
  1087 dovenull  20   0   47172   3508   2592 S   0.0  0.1   0:00.89 dovecot/p+
  1088 dovenull  20   0   47980   3856   2268 S   0.0  0.2   0:00.25 dovecot/i+
  1093 root      20   0   24528   2572    592 S   0.0  0.1   0:00.17 dovecot/c+
  1101 dovecot   20   0   13568    628    412 S   0.0  0.0   0:00.06 dovecot/s+
  1142 root      20   0  247932 116988   1164 S   0.0  4.8   0:05.82 /usr/loca+
  1161 dovecot   20   0   41320   1780   1104 S   0.0  0.1   0:01.29 dovecot/a+
  1175 systuser  20   0  157708   3052   1004 S   0.0  0.1   0:00.12 SonarPush+
  1177 wp-tool+  20   0  387528   4816   1548 S   0.0  0.2   0:00.26 /usr/bin/+
  1178 wp-tool+  20   0  412368  28456   1720 S   0.0  1.2   0:07.93 /usr/bin/+
  1260 root      20   0  262224  24616   6760 S   0.0  1.0   0:01.83 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.38 dnsadmin +
  1264 root      20   0  209512  12412   2484 S   0.0  0.5   0:03.18 tailwatchd
  1790 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1800 root      20   0  299272    872    496 S   0.0  0.0   0:00.65 php-fpm: +
  1834 root      38  18  130416   1512    776 S   0.0  0.1   0:00.06 cpanellog+
  2048 root      20   0  267052   9072    744 S   0.0  0.4   0:01.80 /usr/sbin+
  2050 root      20   0   12832    428    320 S   0.0  0.0   0:02.65 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:02.34 /usr/loca+
  2052 root      20   0   12864    428    308 S   0.0  0.0   0:02.48 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  2138 root      20   0  184900  14332   1228 S   0.0  0.6   0:25.61 lfd - sle+
  2265 nobody    20   0  277584  19976   3944 S   0.0  0.8   0:00.14 /usr/sbin+
  2929 nobody    20   0  277520  19708   3788 S   0.0  0.8   0:00.09 /usr/sbin+
  2936 nobody    20   0  277520  19596   3708 S   0.0  0.8   0:00.06 /usr/sbin+
  2950 nobody    20   0  277528  19112   3252 S   0.0  0.8   0:00.17 /usr/sbin+
  2951 nobody    20   0  277908  19804   3732 S   0.0  0.8   0:00.11 /usr/sbin+
  2952 nobody    20   0  277520  19860   3984 S   0.0  0.8   0:00.10 /usr/sbin+
  3117 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  3158 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  3426 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  3433 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  3577 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
  3590 nigeria   20   0  400460   5240   2176 S   0.0  0.2   0:00.00 php-fpm: +
  3601 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  3779 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3780 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3781 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3782 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3784 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3785 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3787 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3789 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3791 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3792 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3793 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3794 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3795 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3796 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3797 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3798 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3799 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3801 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3802 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3805 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3806 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3814 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  3815 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  3818 root      20   0  188216  11104   5152 S   0.0  0.5   0:00.01 /usr/loca+
  3820 root      20   0 1277356  12020    596 S   0.0  0.5   0:00.05 /usr/bin/+
  3822 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  3823 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  3824 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  3825 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3828 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3829 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3830 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3831 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  3832 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  3833 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3836 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
  3837 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3839 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3840 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3841 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  3843 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3844 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3845 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  3846 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  3853 root      20   0  114252   2244   1264 S   0.0  0.1   0:00.00 bash /usr+
  3854 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  3856 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
  3857 root      20   0 1341596  10528    600 S   0.0  0.4   0:00.05 /usr/bin/+
  3858 root      20   0 1275548  10552    596 S   0.0  0.4   0:00.05 /usr/bin/+
  3863 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  3875 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  3877 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  3892 root      20   0  160224   2384   1636 S   0.0  0.1   0:00.01 top -n 2 +
  3893 locatio+  20   0   20164    264      0 R   0.0  0.0   0:00.00 jailshell+
  3910 locatio+  20   0       0      0      0 Z   0.0  0.0   0:00.00 [bash] <d+
  3931 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
  3967 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  3988 root      35  15  127648   2232   1788 R   0.0  0.1   0:00.00 /usr/loca+
  3996 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
  4011 root      20   0  114252   1148      0 R   0.0  0.0   0:00.00 bash /usr+
  5633 root      20   0  262296 128932   2980 S   0.0  5.3   0:03.07 spamd chi+
  5634 root      20   0  247932 116244    456 S   0.0  4.8   0:00.01 spamd chi+
 42540 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.40 [kworker]
 56607 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 70013 worencom  20   0   38472   3544   2608 S   0.0  0.1   0:00.00 dovecot/i+
 74780 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 76935 nobody    20   0  277780  21600   5144 S   0.0  0.9   0:03.86 /usr/sbin+
 76936 nobody    20   0  277916  21648   5084 S   0.0  0.9   0:03.47 /usr/sbin+
 79015 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 82017 nobody    20   0  277860  21548   5044 S   0.0  0.9   0:02.93 /usr/sbin+
 85293 nobody    20   0  277592  21144   4868 S   0.0  0.9   0:02.75 /usr/sbin+
 89343 nobody    20   0  277608  21192   4948 S   0.0  0.9   0:02.10 /usr/sbin+
 89519 nobody    20   0  277908  21324   4972 S   0.0  0.9   0:02.43 /usr/sbin+
 91147 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95786 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 95788 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 96493 nobody    20   0  277584  20868   4840 S   0.0  0.9   0:01.22 /usr/sbin+
 98274 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98411 nobody    20   0  277584  20528   4500 S   0.0  0.8   0:00.92 /usr/sbin+
 99893 nobody    20   0  277580  20392   4312 S   0.0  0.8   0:00.79 /usr/sbin+
101142 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101603 nobody    20   0  277520  20280   4304 S   0.0  0.8   0:00.58 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    11:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    11:02   0:25  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    11:02   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    11:02   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   11:02   0:01  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   11:02   0:01  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root      42540  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:1]
root      56607  0.0  0.0      0     0 ?        S    16:49   0:00  \_ [kworker/u200:2]
root      74780  0.0  0.0      0     0 ?        S    17:14   0:00  \_ [kworker/0:2]
root      79015  0.0  0.0      0     0 ?        S    17:20   0:00  \_ [kworker/1:5]
root      91147  0.0  0.0      0     0 ?        S    17:38   0:00  \_ [kworker/1:1]
root      95786  0.0  0.0      0     0 ?        S    17:45   0:00  \_ [kworker/0:3]
root      95788  0.0  0.0      0     0 ?        S    17:45   0:00  \_ [kworker/0:4]
root      98274  0.0  0.0      0     0 ?        S    17:49   0:00  \_ [kworker/1:3]
root     101142  0.0  0.0      0     0 ?        S    17:53   0:00  \_ [kworker/0:0]
root       1053  0.0  0.0      0     0 ?        S    17:56   0:00  \_ [kworker/0:1]
root       1790  0.0  0.0      0     0 ?        S    17:57   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44508  3444 ?        Ss   11:02   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40240  5012 ?        Ss   11:02   0:15 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   440 ?        Ss   11:02   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   552 ?        S<sl 11:02   0:02 /sbin/auditd
root        499  0.0  0.0  21540   480 ?        Ss   11:02   0:00 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1256 ?        Ss   11:02   0:05 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1520 ?        Ss   11:02   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256   112 ?        Ss   11:02   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5576 ?        Ss   11:02   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.1 610540  3116 ?        Ssl  11:02   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   11:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   468 ?        Ss   11:02   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 928956  1476 ?        Ssl  11:02   0:18 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  11:02   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   11:02   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208   104 ?        Ss   11:02   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   11:02   0:00 /usr/sbin/crond -n
root       3779  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3823  0.0  0.0 113284  1212 ?        Ss   18:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root       3858  5.0  0.4 1275548 10552 ?       Rl   18:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root       3780  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3814  0.0  0.0 113284  1208 ?        Ss   18:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root       3820  6.0  0.4 1277356 12020 ?       Sl   18:00   0:00  |       \_ /usr/bin/update_imunify
root       3781  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3822  0.0  0.0 113284  1208 ?        Ss   18:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root       3857  5.0  0.4 1341596 10764 ?       Sl   18:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root       3782  0.0  0.0 183044  2140 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3832  0.0  0.0 113284  1212 ?        Ss   18:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root       3856  0.0  0.0 113288  1432 ?        SN   18:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root       3988  0.0  0.0 127648  2232 ?        RN   18:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root       3784  0.0  0.0 183044  2140 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3831  0.0  0.0 113284  1212 ?        Ss   18:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root       3853  0.0  0.0 114252  2416 ?        R    18:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root       4012  0.0  0.0      0     0 ?        Z    18:00   0:00  |           \_ [whoami] <defunct>
root       3785  0.0  0.0 183044  2140 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3841  0.0  0.0 113284  1212 ?        Ss   18:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       3854  0.0  0.0 108052   356 ?        S    18:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       3863  0.0  0.0 113288  1516 ?        S    18:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       4013  0.0  0.0 153840  2096 ?        R    18:00   0:00  |               \_ ps auxf
root       3787  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3843  0.0  0.0  20164   804 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       3789  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3839  0.0  0.0  20164   804 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       3791  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3840  0.0  0.0  20164   804 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       3792  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3828  0.0  0.0  20164   804 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       3794  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3829  0.0  0.0  20164   804 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       3795  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3825  0.0  0.0  20164   808 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       3796  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3844  0.0  0.0  20164   808 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       3797  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3830  0.0  0.0  20164   808 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       3798  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3833  0.0  0.0  20164   804 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       3799  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3837  0.0  0.0  20164   808 ?        Ss   18:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root       3801  0.0  0.0 183044  2140 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3815  0.0  0.0 113284  1212 ?        Ss   18:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       3818  1.0  0.4 188216 11104 ?        S    18:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       3892  1.0  0.0 160224  2384 ?        S    18:00   0:00  |           \_ top -n 2 -b -c
root       3802  0.0  0.0 183044  2144 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3845  0.0  0.0  20164   964 ?        Ss   18:00   0:00  |   \_ jailshell (pactpay) [3877] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    3877  0.0  0.0  20164   256 ?        S    18:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    3886  2.0  0.7 480124 17672 ?        S    18:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       3805  0.0  0.0 183044  2140 ?        S    18:00   0:00  \_ /usr/sbin/CROND -n
root       3824  0.0  0.0  20164   968 ?        Ss   18:00   0:00      \_ jailshell (nigeria) [3875] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3875  0.0  0.0  20164   264 ?        S    18:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3885  7.0  0.6 404052 16140 ?        S    18:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296   136 tty1     Ss+  11:02   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  11:02   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4112 ?        Ss   11:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    84 ?        Ssl  11:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.4 1277312 11080 ?       Ssl  11:02   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   920 ?        Ssl  11:02   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   592 ?        Ss   11:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  46996  2860 ?        S    11:03   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47816  3696 ?        S    11:03   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   344 ?        S    11:03   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   544 ?        S    11:03   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47172  3508 ?        S    11:03   0:00  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  47980  3856 ?        S    11:03   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2572 ?        S    11:03   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   628 ?        S    11:03   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1780 ?        S    11:03   0:01  \_ dovecot/auth
worencom  70013  0.0  0.1  38472  3544 ?        S    17:07   0:00  \_ dovecot/imap
telegraf    916  0.0  1.5 5654304 38468 ?       SLsl 11:02   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 14464 ?        Ssl  11:02   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   11:02   0:03 /usr/sbin/sshd -D
root       3117  0.0  0.1 111304  4272 ?        Ss   17:59   0:00  \_ sshd: [accepted]
root       3158  0.0  0.1 111304  4272 ?        Ss   17:59   0:00  \_ sshd: [accepted]
root       3426  0.0  0.1 111304  4264 ?        Ss   17:59   0:00  \_ sshd: [accepted]
root       3433  0.0  0.1 111304  4272 ?        Ss   17:59   0:00  \_ sshd: [accepted]
root        928  0.1  0.3 1276100 9428 ?        Ssl  11:02   0:25 /usr/bin/cspdaemon
root        930  0.0  0.1 445028  3312 ?        Ss   11:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   3577  0.0  0.0 445028   324 ?        S    17:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   11:02   0:00 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.4 439788 11432 ?        Ss   11:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   704 ?        Ss   11:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  9.9 1763124 240544 ?      Ssl  11:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 298320  6704 ?        Ssl  11:02   0:07 /usr/sbin/rsyslogd -n
named       949  0.0  1.5 1055800 38156 ?       Ssl  11:02   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3020 ?        Ss   11:03   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    3590  0.0  0.2 400460  5240 ?        S    17:59   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 261032  7400 ?        Ss   11:03   0:03 cpsrvd (SSL) - waiting for connections                   
root       3601  0.0  0.0      0     0 ?        Z    17:59   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10540  3664 ?        Ss   11:03   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   624 ?        Ss   11:03   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   844 ?        Ss   11:03   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  4.8 247932 116988 ?       Ss   11:03   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  5.3 262296 128932 ?       S    11:06   0:03  \_ spamd child
root       5634  0.0  4.8 247932 116244 ?       S    11:06   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3052 ?        S    11:03   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  4816 ?        Ss   11:03   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412368 28456 ?        Ss   11:03   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  1.0 262224 24616 ?        Ss   11:03   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.0 167452  1404 ?        Ss   11:03   0:00 dnsadmin - dormant mode
root       1264  0.0  0.5 209512 12412 ?        Ss   11:03   0:03 tailwatchd
root       1800  0.0  0.0 299272   872 ?        Ss   11:03   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1512 ?        SN   11:03   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 11.6 1477108 282724 ?      Sl   11:03   5:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9072 ?        Ss   11:03   0:01 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12832   428 ?        S    11:03   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    11:03   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12864   428 ?        S    11:03   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    11:03   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76935  0.1  0.8 277780 21600 ?        S    17:17   0:03  \_ /usr/sbin/httpd -k start
nobody    76936  0.1  0.8 277916 21648 ?        S    17:17   0:03  \_ /usr/sbin/httpd -k start
nobody    82017  0.1  0.8 277860 21548 ?        S    17:24   0:02  \_ /usr/sbin/httpd -k start
nobody    85293  0.1  0.8 277592 21144 ?        S    17:29   0:02  \_ /usr/sbin/httpd -k start
cloudw     3931  1.0  0.6 353712 16232 ?        S    18:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    89343  0.1  0.8 277608 21192 ?        S    17:35   0:02  \_ /usr/sbin/httpd -k start
nobody    89519  0.1  0.8 277908 21324 ?        S    17:35   0:02  \_ /usr/sbin/httpd -k start
nobody    96493  0.1  0.8 277584 20868 ?        S    17:46   0:01  \_ /usr/sbin/httpd -k start
nobody    98411  0.1  0.8 277584 20528 ?        S    17:49   0:00  \_ /usr/sbin/httpd -k start
nobody    99893  0.1  0.8 277580 20392 ?        S    17:51   0:00  \_ /usr/sbin/httpd -k start
nobody   101603  0.1  0.8 277520 20280 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
nobody      358  0.1  0.8 277584 20240 ?        S    17:55   0:00  \_ /usr/sbin/httpd -k start
nobody     2265  0.1  0.8 277584 19976 ?        S    17:57   0:00  \_ /usr/sbin/httpd -k start
nobody     2929  0.1  0.8 277520 19708 ?        S    17:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2936  0.0  0.8 277520 19596 ?        S    17:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2950  0.2  0.7 277528 19112 ?        S    17:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2951  0.1  0.8 277908 19804 ?        S    17:58   0:00  \_ /usr/sbin/httpd -k start
nobody     2952  0.1  0.8 277520 19860 ?        S    17:58   0:00  \_ /usr/sbin/httpd -k start
root       2138  0.1  0.5 184900 14332 ?        Ss   11:03   0:25 lfd - sleeping
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   12:00   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    12:00   0:00  \_ [kworker]
## mysql stats
Uptime: 25016  Threads: 3  Questions: 2065584  Slow queries: 0  Opens: 5666  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.570
*************************** 1. row ***************************
     Id: 32438
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 32439
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 32449
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.151 TIME_WAIT
      1 213.180.203.191 TIME_WAIT
      1 35.211.166.124 TIME_WAIT
      1 54.39.89.105 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.210.140.137 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.103 TIME_WAIT
      2 20.64.105.168 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 18:00:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 56 minutes 51 seconds
   Server load: 0.16 0.20 0.22
   Total accesses: 117655 - Total Traffic: 2.9 GB - Total Duration: 57595809
   CPU Usage: u16.12 s7.73 cu1463.5 cs1155.44 - 10.6% CPU load
   4.7 requests/sec - 120.4 kB/second - 25.6 kB/request - 489.531 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_K.RK_KR..KKW_...K_KK_...K......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                      Request
   0-0  101603 0/97/6159  _ 2.35  0     343 2958326 0.0   2.50  149.37 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=2046031755 HTTP/1.1
   1-0  82017  3/506/5948 K 12.35 3     394 2928775 94.3  13.15 147.11 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=190785745 HTTP/1.1
   2-0  -      0/0/6048   . 0.00  60    0   3304703 0.0   0.00  146.02 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  358    0/62/5813  R 1.54  30    283 2813632 0.0   1.44  140.94 180.247.5.110  http/1.1
   4-0  2929   4/16/5725  K 0.36  2     355 2838286 123.6 0.40  148.33 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=2423130252 HTTP/1.1
   5-0  99893  0/124/5856 _ 3.53  1     296 2963282 0.0   3.45  166.76 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2878908159 HTTP/1.1
   6-0  2265   1/25/5546  K 0.57  3     352 2726340 33.9  0.62  148.26 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=2918550562 HTTP/1.1
   7-0  2936   0/10/5578  R 0.18  31    266 2817271 0.0   0.24  139.29 103.152.239.35 http/1.1
   8-0  -      0/0/5646   . 0.00  61    0   2684859 0.0   0.00  138.34 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-0  -      0/0/5243   . 0.00  64    0   2580062 0.0   0.00  132.57 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 89343  2/361/4841 K 8.78  1     344 2390672 65.5  9.08  117.75 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3284326847 HTTP/1.1
   11-0 89519  3/393/5457 K 10.44 4     358 2608244 95.2  10.68 135.19 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=1068054306 HTTP/1.1
   12-0 96493  0/209/5695 W 5.09  0     0   2736494 0.0   5.50  141.19 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 98411  0/153/4510 _ 4.12  0     0   2213389 0.0   4.05  109.24 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   14-0 -      0/0/4616   . 0.00  63    0   2226558 0.0   0.00  113.73 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -      0/0/3640   . 0.00  57    0   1785479 0.0   0.00  94.95  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -      0/0/3879   . 0.00  62    0   1843272 0.0   0.00  95.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 76935  1/674/4020 K 16.28 2     354 1971821 36.0  19.56 101.08 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=2122156722 HTTP/1.1
   18-0 76936  0/602/3116 _ 14.52 1     261 1539145 0.0   15.33 78.86  192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2884562127 HTTP/1.1
   19-0 2950   1/25/3685  K 0.73  1     274 1787596 35.2  0.77  92.70  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=2417476284 HTTP/1.1
   20-0 2951   2/19/1299  K 0.42  0     368 602277  64.6  0.49  32.78  192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=3714163874 HTTP/1.1
   21-0 2952   0/18/2619  _ 0.45  0     0   1342892 0.0   0.47  65.14  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   22-0 -      0/0/1744   . 0.00  1789  0   869081  0.0   0.00  50.93  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -      0/0/679    . 0.00  1701  0   383949  0.0   0.00  17.13  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -      0/0/770    . 0.00  1576  0   355056  0.0   0.00  18.12  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 85293  1/636/1721 K 12.03 0     463 667076  34.5  13.64 38.80  192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=623411759 HTTP/1.1
   26-0 -      0/0/1186   . 0.00  1819  0   593758  0.0   0.00  29.40  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -      0/0/784    . 0.00  954   0   386125  0.0   0.00  27.82  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -      0/0/1308   . 0.00  565   0   604392  0.0   0.00  30.14  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -      0/0/356    . 0.00  1485  0   167513  0.0   0.00  7.92   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -      0/0/853    . 0.00  1825  0   461868  0.0   0.00  20.56  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -      0/0/369    . 0.00  10776 0   154277  0.0   0.00  6.89   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/470    . 0.00  9534  0   210299  0.0   0.00  9.42   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -      0/0/4      . 0.00  10885 0   15      0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -      0/0/540    . 0.00  9587  0   165040  0.0   0.00  7.79   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -      0/0/464    . 0.00  10869 0   245442  0.0   0.00  10.79  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/5      . 0.00  10888 0   702     0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -      0/0/4      . 0.00  10895 0   2625    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -      0/0/610    . 0.00  9460  0   258099  0.0   0.00  11.85  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -      0/0/24     . 0.00  10847 0   9567    0.0   0.00  0.44   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -      0/0/168    . 0.00  10879 0   87577   0.0   0.00  3.50   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -      0/0/28     . 0.00  10878 0   13961   0.0   0.00  0.67   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/5      . 0.00  10896 0   1132    0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -      0/0/3      . 0.00  10894 0   10      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -      0/0/224    . 0.00  10886 0   116229  0.0   0.00  5.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/105    . 0.00  10881 0   24649   0.0   0.00  1.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -      0/0/4      . 0.00  10875 0   798     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -      0/0/18     . 0.00  10851 0   8852    0.0   0.00  0.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -      0/0/188    . 0.00  10218 0   96649   0.0   0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -      0/0/82     . 0.00  10617 0   47670   0.0   0.00  2.57   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1001
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...35)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 87166
   total entries replaced since starting: 0
   total entries expired since starting: 86149
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 166 miss
   total removes since starting: 16 hit, 162 miss
Youez - 2016 - github.com/yon3zu
LinuXploit