403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2026-01-05.06.00.txt
 ## swap threshold exceeded
## server overview
2026-01-05.06.00 load[0] mem[50/37] mysql[3/26] httpd[4]
              total        used        free      shared  buff/cache   available
Mem:           2363        1052         161          72        1149        1052
Swap:          4047        1651        2396
 06:00:02 up 42 days,  8:48,  0 users,  load average: 0.05, 0.05, 0.13
## system overview
top - 06:00:02 up 42 days,  8:48,  0 users,  load average: 0.05, 0.05, 0.13
Tasks: 225 total,   8 running, 216 sleeping,   0 stopped,   1 zombie
%Cpu(s): 72.7 us, 24.2 sy,  3.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   160992 free,  1068388 used,  1190920 buff/cache
KiB Swap:  4145144 total,  2453524 free,  1691620 used.  1087740 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 19908 mysql     20   0 1481756 263072   4368 S 125.0 10.9  53:37.97 /usr/sbin+
 12161 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.07 /opt/cpan+
 12359 cloudw    20   0  286060  15408   9968 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0  192272   3540   1552 S   0.0  0.1 101:45.29 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:05.26 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:53.65 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:44.55 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0  61:04.30 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:10.37 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:10.35 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:57.79 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:14.90 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.33 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.30 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  65:09.69 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.13 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:03.33 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   8:32.87 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:09.27 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   3:55.95 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   5244   4984 S   0.0  0.2  30:54.55 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    460    328 S   0.0  0.0   4:29.92 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:33.46 /usr/sbin+
   489 root      20   0   24896   1164    792 S   0.0  0.0  16:06.50 /usr/lib/+
   494 polkitd   20   0  610664   1116    648 S   0.0  0.0   8:59.32 /usr/lib/+
   496 root      20   0   52852    308    216 S   0.0  0.0   0:00.57 /usr/sbin+
   503 dbus      20   0   58748   1380    604 S   0.0  0.1  35:22.79 /usr/bin/+
   511 rpc       20   0   69256     76     16 S   0.0  0.0   0:03.80 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208      4      0 S   0.0  0.0   0:00.10 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   2:12.69 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:37.73 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:15.61 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   738 nobody    20   0  277648  20008   4732 S   0.0  0.8   0:00.74 /usr/sbin+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:02.07 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:02.03 /usr/loca+
   931 systuser  20   0  112524     56      0 S   0.0  0.0   0:01.98 /usr/loca+
   932 systuser  20   0  111608     60      0 S   0.0  0.0   0:01.90 /usr/loca+
   935 root      20   0  572372    824    292 S   0.0  0.0   5:41.47 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   6:40.95 /usr/sbin+
   939 root      20   0 1350728   9632      8 S   0.0  0.4   2:44.61 /usr/bin/+
   952 root      20   0  261164   6288   1760 S   0.0  0.3  12:50.22 cpsrvd (S+
   953 root      20   0  331088   5904   5104 S   0.0  0.2  16:38.81 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:29.93 /usr/bin/+
   974 root      20   0 1277312   2480      8 S   0.0  0.1   0:39.14 /usr/bin/+
   980 systuser  20   0  114272  10396   2884 S   0.0  0.4  18:39.56 /usr/loca+
  1144 systuser  20   0  157704   2880    888 S   0.0  0.1   0:19.48 SonarPush+
  1188 named     20   0 1185868  31080   1988 S   0.0  1.3  16:32.46 /usr/sbin+
  1239 root      20   0  167452   1200    652 S   0.0  0.0   1:01.93 dnsadmin +
  1243 root      20   0  209644  21784   4096 S   0.0  0.9   7:51.03 tailwatchd
  1244 root      20   0  262228  24616   6760 S   0.0  1.0   7:44.56 cpdavd - +
  1364 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4105 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
  5515 nobody    20   0  277636  19520   4492 S   0.0  0.8   0:00.36 /usr/sbin+
  5722 nobody    20   0  278004  19344   4264 S   0.0  0.8   0:00.34 /usr/sbin+
  5734 nobody    20   0  278004  19420   4316 S   0.0  0.8   0:00.40 /usr/sbin+
  5738 nobody    20   0  278068  19716   4508 S   0.0  0.8   0:00.42 /usr/sbin+
  5741 nobody    20   0  277676  19720   4476 S   0.0  0.8   0:00.35 /usr/sbin+
  5742 nobody    20   0  278000  19356   4444 S   0.0  0.8   0:00.37 /usr/sbin+
  6410 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6867 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
  7878 nobody    20   0  277620  18500   4100 S   0.0  0.8   0:00.25 /usr/sbin+
  7984 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  8770 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10776 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11111 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11138 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11279 root      20   0   41052   2776   2116 S   0.0  0.1   0:00.00 dovecot/a+
 11579 root      20   0   60820   4504   3520 S   0.0  0.2   0:00.00 dovecot/l+
 11803 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 11851 nigeria   20   0  400460   5312   2396 S   0.0  0.2   0:00.00 php-fpm: +
 11896 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11913 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 11925 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 12109 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 12115 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12116 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12117 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12118 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12120 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12123 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12125 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12126 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12127 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12128 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12129 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12130 root      20   0  183080   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12132 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12133 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12134 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12136 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12137 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12139 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12141 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12144 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12145 root      20   0  183076   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12153 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 12160 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 12164 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 12166 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 12167 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12168 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 12169 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 12170 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 12172 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 12173 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12175 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12177 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12178 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12179 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12180 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12181 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12183 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12187 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12188 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12189 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12191 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 12192 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12195 root      20   0  113284   1472   1256 S   0.0  0.1   0:00.01 bash /usr+
 12196 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 12197 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 12198 root      20   0  188200  11068   5148 S   0.0  0.5   0:00.02 /usr/loca+
 12200 root      20   0 1276060  10708    600 S   0.0  0.4   0:00.05 /usr/bin/+
 12202 root      20   0 1276844  11376    600 S   0.0  0.5   0:00.05 /usr/bin/+
 12206 root      20   0 1275548  10304    600 R   0.0  0.4   0:00.05 /usr/bin/+
 12212 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.01 /bin/bash+
 12213 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12219 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 12230 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12234 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 12249 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 12251 root      20   0  160224   2388   1632 S   0.0  0.1   0:00.00 top -n 2 +
 12252 locatio+  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 12259 nescrow+  20   0  400460   4552   1884 S   0.0  0.2   0:00.00 php-fpm: +
 12349 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 12357 root      35  15  113284   1360   1176 S   0.0  0.1   0:00.00 /bin/bash+
 12360 root      20   0  113284    600    380 S   0.0  0.0   0:00.00 bash /usr+
 12361 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
 12362 root      35  15  113284    184      0 R   0.0  0.0   0:00.00 /bin/bash+
 12363 root      35  15  113284    184      0 R   0.0  0.0   0:00.00 /bin/bash+
 12364 root      35  15  113284    184      0 R   0.0  0.0   0:00.00 /bin/bash+
 12995 root      20   0 1483120  79456    568 S   0.0  3.3   1:26.16 /usr/loca+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     40      4 S   0.0  0.0   1:33.10 [kworker]
 16217 root      20   0   51508    452    292 S   0.0  0.0   0:00.50 /usr/sbin+
 16224 dovenull  20   0   47188   2348   1636 S   0.0  0.1   0:00.92 dovecot/p+
 16225 dovenull  20   0   47724   2648   1712 S   0.0  0.1   0:00.41 dovecot/i+
 16226 dovecot   20   0   10320    296    184 S   0.0  0.0   0:00.17 dovecot/a+
 16227 root      20   0   10452    524    344 S   0.0  0.0   0:00.48 dovecot/l+
 16228 dovenull  20   0   47252   2300   1596 S   0.0  0.1   0:00.65 dovecot/p+
 16229 dovenull  20   0   47696   2572   1628 S   0.0  0.1   0:00.46 dovecot/i+
 16230 root      20   0   24528   1828    256 S   0.0  0.1   0:00.18 dovecot/c+
 16231 dovecot   20   0   13568    596    408 S   0.0  0.0   0:00.08 dovecot/s+
 16234 dovecot   20   0   41188   1472   1012 S   0.0  0.1   0:01.01 dovecot/a+
 16262 mailnull  20   0   89116   3792    872 S   0.0  0.2   0:00.79 /usr/sbin+
 16283 root      20   0  153404    220    136 S   0.0  0.0   0:01.48 pure-ftpd+
 16284 root      20   0  152780     80     40 S   0.0  0.0   0:00.02 /usr/sbin+
 16342 root      20   0  267196   4956    548 S   0.0  0.2   0:02.82 /usr/sbin+
 16343 root      20   0   12852    320    212 S   0.0  0.0   0:01.40 /usr/loca+
 16344 root      20   0   12732    284    208 S   0.0  0.0   0:01.10 /usr/loca+
 16345 root      20   0   12904    336    216 S   0.0  0.0   0:01.31 /usr/loca+
 16346 root      20   0   53268      8      8 S   0.0  0.0   0:00.04 /usr/loca+
 40200 worencom  20   0   38488   1520    968 S   0.0  0.1   0:00.09 dovecot/i+
 63107 root      20   0  182860  10708   1100 S   0.0  0.4   0:30.83 lfd - sle+
 66862 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 72712 root      20   0  445028    596    480 S   0.0  0.0   2:53.35 sw-engine+
 72887 wp-tool+  20   0  412396   3508   1408 S   0.0  0.1  14:21.88 /usr/bin/+
 72891 wp-tool+  20   0  387556   3296   1420 S   0.0  0.1   0:23.42 /usr/bin/+
 79200 root      20   0       0      0      0 D   0.0  0.0   0:00.35 [kworker/+
 81125 root      20   0  400740   2728    608 S   0.0  0.1   5:00.60 php-fpm: +
 81130 root      20   0  388892    304    216 S   0.0  0.0   0:49.95 php-fpm: +
 81135 root      20   0  396248    368    284 S   0.0  0.0   0:50.81 php-fpm: +
 81140 root      20   0  389508    368    276 S   0.0  0.0   0:51.80 php-fpm: +
 81145 root      20   0  439788    404    312 S   0.0  0.0   0:51.69 php-fpm: +
 85179 root      20   0  248728 122364   5060 S   0.0  5.1   0:03.21 /usr/loca+
 85330 telegraf  20   0 5654308  28092   6088 S   0.0  1.2  26:01.86 /usr/loca+
 89314 root      20   0  250012 120352   1908 S   0.0  5.0   0:00.34 spamd chi+
 89315 root      20   0  248728 118720   1452 S   0.0  4.9   0:00.00 spamd chi+
 91745 root      20   0  224392   4724   1100 S   0.0  0.2   0:20.09 queueproc+
 92390 cpanelc+  20   0   10868   3564   2248 S   0.0  0.1  17:51.41 /usr/loca+
 92394 root      38  18  130416   1376    692 S   0.0  0.1   0:04.26 cpanellog+
 92408 nscd      20   0 1377676   2600    696 S   0.0  0.1   5:34.49 /usr/sbin+
 92476 root      20   0  299272    508    324 S   0.0  0.0   0:56.18 php-fpm: +
 97935 nobody    20   0  277648  20568   4976 S   0.0  0.8   0:01.01 /usr/sbin+
 98896 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101953 nobody    20   0  277656  19892   4744 S   0.0  0.8   0:00.80 /usr/sbin+
101984 nobody    20   0  277648  20324   4828 S   0.0  0.8   0:00.72 /usr/sbin+
101999 root      20   0       0      0      0 D   0.0  0.0   0:00.08 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:05 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S     2025   5:53  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:44  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S     2025  61:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   1:57  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:14  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  65:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:03  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   8:32  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<    2025   7:09  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S     2025   3:55  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:37  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:15  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root      66862  0.0  0.0      0     0 ?        S    04:11   0:00  \_ [kworker/u200:1]
root      79200  0.0  0.0      0     0 ?        S    04:36   0:00  \_ [kworker/0:2]
root      98896  0.0  0.0      0     0 ?        S    05:21   0:00  \_ [kworker/1:4]
root     101999  0.0  0.0      0     0 ?        D    05:29   0:00  \_ [kworker/u200:2]
root       1364  0.0  0.0      0     0 ?        S    05:33   0:00  \_ [kworker/1:5]
root       4105  0.0  0.0      0     0 ?        S    05:40   0:00  \_ [kworker/0:0]
root       6410  0.0  0.0      0     0 ?        S    05:46   0:00  \_ [kworker/0:1]
root       6867  0.0  0.0      0     0 ?        D    05:47   0:00  \_ [kworker/1:2]
root       7984  0.0  0.0      0     0 ?        R    05:50   0:00  \_ [kworker/0:3]
root       8770  0.0  0.0      0     0 ?        S    05:52   0:00  \_ [kworker/1:0]
root      10776  0.0  0.0      0     0 ?        S    05:57   0:00  \_ [kworker/0:4]
root      11111  0.0  0.0      0     0 ?        S    05:58   0:00  \_ [kworker/u200:0]
root      11138  0.0  0.0      0     0 ?        S    05:58   0:00  \_ [kworker/1:1]
root          1  0.1  0.1 192272  3540 ?        Ss    2025 101:45 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  5244 ?        Ss    2025  30:54 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   460 ?        S<sl  2025   4:29 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss    2025   1:33 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1164 ?        Ss    2025  16:06 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1116 ?        Ssl   2025   8:59 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   308 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1380 ?        Rs    2025  35:22 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    76 ?        Ss    2025   0:03 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208     4 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss    2025   2:12 /usr/sbin/crond -n
root      12115  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12191  0.0  0.0 113284  1212 ?        Ss   06:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      12206  5.0  0.4 1275548 10304 ?       Sl   06:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      12116  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12170  0.0  0.0 113284  1212 ?        Ss   06:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      12202  6.0  0.4 1276844 11376 ?       Sl   06:00   0:00  |       \_ /usr/bin/update_imunify
root      12117  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12168  0.0  0.0 113284  1212 ?        Ss   06:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      12200  5.0  0.4 1276060 10708 ?       Sl   06:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      12118  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12166  0.0  0.0 113284  1212 ?        Ss   06:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      12197  0.0  0.0 113288  1428 ?        SN   06:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      12357  0.0  0.0 113284  1360 ?        SN   06:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      12362  0.0  0.0 113284   380 ?        RN   06:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      12363  0.0  0.0 113284   384 ?        RN   06:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      12364  0.0  0.0 113284   380 ?        RN   06:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      12120  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12164  0.0  0.0 113284  1212 ?        Ss   06:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      12195  1.0  0.0 114252  2396 ?        S    06:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      12371  0.0  0.0 114252  1140 ?        R    06:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      12123  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12169  0.0  0.0 113284  1208 ?        Ss   06:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      12196  0.0  0.0 108052   356 ?        S    06:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      12212  1.0  0.0 113288  1520 ?        S    06:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      12368  0.0  0.0 153840  2092 ?        R    06:00   0:00  |               \_ ps auxf
root      12125  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12183  0.0  0.0  20164   808 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      12126  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12188  0.0  0.0  20164   804 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      12127  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12173  0.0  0.0  20164   804 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      12128  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12179  0.0  0.0  20164   808 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      12129  0.0  0.0 183080  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12177  0.0  0.0  20164   808 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      12130  0.0  0.0 183080  2148 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12167  0.0  0.0  20164   988 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      12132  0.0  0.0 183076  2148 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12175  0.0  0.0  20164   804 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      12133  0.0  0.0 183076  2148 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12178  0.0  0.0  20164   808 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      12134  0.0  0.0 183076  2148 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12187  0.0  0.0  20164   808 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      12136  0.0  0.0 183076  2148 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12189  0.0  0.0  20164   808 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      12137  0.0  0.0 183076  2148 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12180  0.0  0.0  20164   808 ?        Ss   06:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      12139  0.0  0.0 183076  2148 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12172  0.0  0.0 113284  1212 ?        Ss   06:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      12198  2.0  0.4 188200 11068 ?        S    06:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      12251  0.0  0.0 160224  2388 ?        S    06:00   0:00  |           \_ top -n 2 -b -c
root      12141  0.0  0.0 183076  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12181  0.0  0.0  20164   964 ?        Ss   06:00   0:00  |   \_ jailshell (pactpay) [12213] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12213  0.0  0.0  20164   260 ?        S    06:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12219  2.0  0.7 480124 17676 ?        S    06:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      12144  0.0  0.0 183076  2144 ?        S    06:00   0:00  \_ /usr/sbin/CROND -n
root      12153  0.0  0.0  20164   968 ?        Ss   06:00   0:00      \_ jailshell (nigeria) [12160] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12160  0.0  0.0  20164   264 ?        S    06:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12161  8.0  0.6 404052 16144 ?        S    06:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    52 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    56 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    60 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   824 ?        Ssl   2025   5:41 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss    2025   6:40 /usr/sbin/sshd -D
root      11803  0.0  0.1 111304  4264 ?        Ss   05:59   0:00  \_ sshd: [accepted]
root      11913  0.0  0.1 111304  4260 ?        Ss   05:59   0:00  \_ sshd: [accepted]
sshd      11925  0.0  0.1 115644  2628 ?        S    05:59   0:00  |   \_ sshd: [net]
root      12230  0.0  0.1 111304  4268 ?        Ss   06:00   0:00  \_ sshd: [accepted]
sshd      12249  0.0  0.1 115644  2624 ?        S    06:00   0:00      \_ sshd: [net]
root        939  0.0  0.3 1350728 9632 ?        Ssl   2025   2:44 /usr/bin/cspdaemon
root        952  0.0  0.2 261164  6288 ?        Ss    2025  12:50 cpsrvd (SSL) - waiting for connections                   
root      11896  0.0  0.0      0     0 ?        Z    05:59   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  5904 ?        Ssl   2025  16:38 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl   2025   1:29 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.1 1277312 2480 ?        Ssl   2025   0:39 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 10396 ?        Ssl   2025  18:39 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2880 ?        S     2025   0:19 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1200 ?        Ss    2025   1:01 dnsadmin - dormant mode
root       1243  0.0  0.9 209644 21784 ?        Ss    2025   7:51 tailwatchd
root       1244  0.0  1.0 262228 24616 ?        Ss    2025   7:44 cpdavd - accepting connections on: 2091, 2077, 2078
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    40 ?        S     2025   1:33  \_ [kworker]
telegraf  85330  0.0  1.1 5654308 28092 ?       SLsl  2025  26:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028   596 ?        Ss    2025   2:53 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  12109  0.0  0.0 445028   328 ?        S    06:00   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  12234  0.0  0.0 445028   328 ?        S    06:00   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3508 ?        Ss    2025  14:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3296 ?        Ss    2025   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.2 1185868 31080 ?       Ssl   2025  16:32 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.1 400740  2728 ?        Ss    2025   5:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   11851  0.0  0.2 400460  5312 ?        S    05:59   0:00  \_ php-fpm: pool nigeriadecide_org
nescrow+  12259  0.0  0.1 400460  4552 ?        S    06:00   0:00  \_ php-fpm: pool nescrow_com_ng
root      81130  0.0  0.0 388892   304 ?        Ss    2025   0:49 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.0 396248   368 ?        Ss    2025   0:50 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      81140  0.0  0.0 389508   368 ?        Ss    2025   0:51 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  0.0 439788   404 ?        Ss    2025   0:51 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.1 224392  4724 ?        Ss    2025   0:20 queueprocd - waiting up to 60s to process a task
cpanelc+  92390  0.0  0.1  10868  3564 ?        Ss    2025  17:51 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416  1376 ?        SN    2025   0:04 cpanellogd - sleeping for logs
nscd      92408  0.0  0.1 1377676 2600 ?        Ssl   2025   5:34 /usr/sbin/nscd
root      92476  0.0  0.0 299272   508 ?        Ss    2025   0:56 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      12995  0.0  3.2 1483120 79456 ?       Ssl  Jan02   1:26 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.6 10.8 1481756 263072 ?      Sl   Jan02  53:38 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      16217  0.0  0.0  51508   452 ?        Ss   Jan04   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull  16224  0.0  0.0  47188  2348 ?        S    Jan04   0:00  \_ dovecot/pop3-login
dovenull  16225  0.0  0.1  47724  2648 ?        S    Jan04   0:00  \_ dovecot/imap-login
dovecot   16226  0.0  0.0  10320   296 ?        S    Jan04   0:00  \_ dovecot/anvil
root      16227  0.0  0.0  10452   524 ?        S    Jan04   0:00  \_ dovecot/log
dovenull  16228  0.0  0.0  47252  2300 ?        S    Jan04   0:00  \_ dovecot/pop3-login
dovenull  16229  0.0  0.1  47696  2572 ?        S    Jan04   0:00  \_ dovecot/imap-login
root      16230  0.0  0.0  24528  1828 ?        S    Jan04   0:00  \_ dovecot/config
dovecot   16231  0.0  0.0  13568   596 ?        S    Jan04   0:00  \_ dovecot/stats
dovecot   16234  0.0  0.0  41188  1472 ?        S    Jan04   0:01  \_ dovecot/auth
worencom  40200  0.0  0.0  38488  1520 ?        S    03:09   0:00  \_ dovecot/imap
root      11279  0.0  0.1  41052  2776 ?        S    05:58   0:00  \_ dovecot/auth -w
root      11579  0.0  0.1  60820  4504 ?        S    05:59   0:00  \_ dovecot/lmtp
mailnull  16262  0.0  0.1  89116  3792 ?        Ss   Jan04   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      16283  0.0  0.0 153404   220 ?        Ss   Jan04   0:01 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780    80 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      16342  0.0  0.2 267196  4956 ?        Ss   Jan04   0:02 /usr/sbin/httpd -k start
root      16343  0.0  0.0  12852   320 ?        S    Jan04   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      16344  0.0  0.0  12732   284 ?        S    Jan04   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      16345  0.0  0.0  12904   336 ?        S    Jan04   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      16346  0.0  0.0  53268     8 ?        S    Jan04   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    97935  0.0  0.8 277648 20568 ?        S    05:18   0:01  \_ /usr/sbin/httpd -k start
nobody   101953  0.0  0.8 277656 19892 ?        S    05:29   0:00  \_ /usr/sbin/httpd -k start
nobody   101984  0.0  0.8 277648 20324 ?        S    05:29   0:00  \_ /usr/sbin/httpd -k start
nobody      738  0.0  0.8 277648 20008 ?        S    05:31   0:00  \_ /usr/sbin/httpd -k start
nobody     5515  0.0  0.8 277636 19520 ?        S    05:43   0:00  \_ /usr/sbin/httpd -k start
nobody     5722  0.0  0.7 278004 19344 ?        S    05:44   0:00  \_ /usr/sbin/httpd -k start
nobody     5734  0.0  0.8 278004 19420 ?        S    05:44   0:00  \_ /usr/sbin/httpd -k start
nobody     5738  0.0  0.8 278068 19716 ?        S    05:44   0:00  \_ /usr/sbin/httpd -k start
nobody     5741  0.0  0.8 277676 19720 ?        S    05:44   0:00  \_ /usr/sbin/httpd -k start
nobody     5742  0.0  0.7 278000 19356 ?        S    05:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    12359  0.0  0.6 353712 15956 ?        R    06:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     7878  0.0  0.7 277620 18500 ?        S    05:50   0:00  \_ /usr/sbin/httpd -k start
root      63107  0.1  0.4 182860 10708 ?        Ss   00:00   0:30 lfd - sleeping
root      85179  0.0  5.0 248728 122364 ?       Ss   04:47   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      89314  0.0  4.9 250012 120352 ?       S    04:57   0:00  \_ spamd child
root      89315  0.0  4.9 248728 118720 ?       S    04:57   0:00  \_ spamd child
## mysql stats
Uptime: 200645  Threads: 3  Questions: 18489889  Slow queries: 0  Opens: 48525  Flush tables: 1  Open tables: 2000  Queries per second avg: 92.152
*************************** 1. row ***************************
     Id: 267931
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 267933
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 267944
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.131 TIME_WAIT
      1 104.210.140.136 TIME_WAIT
      1 114.119.150.155 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 173.252.87.62 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.10 TIME_WAIT
      1 37.59.204.128 TIME_WAIT
      1 49.145.167.129 TIME_WAIT
      1 92.222.108.121 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.155.170 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 05-Jan-2026 06:00:02 WAT
   Restart Time: Sunday, 04-Jan-2026 22:02:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 58 minutes 2 seconds
   Server load: 0.05 0.05 0.13
   Total accesses: 54214 - Total Traffic: 601.7 MB - Total Duration: 18700735
   CPU Usage: u4.34 s4.23 cu314.26 cs204.11 - 1.84% CPU load
   1.89 requests/sec - 21.5 kB/second - 11.4 kB/request - 344.943 ms/request
   3 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

___.___.K.._K...W........._.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  7878   0/73/5003   _ 1.11 1    27  1440943 0.0   14.01 58.62 116.203.134.67  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue4.php HTTP/1.1
   1-0  738    0/266/4470  _ 3.20 0    4   1572224 0.0   2.62  63.39 3.211.105.134   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/blog/2019elections/blog/i
   2-0  97935  0/331/4906  _ 3.29 2    27  1261961 0.0   6.47  39.69 116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue1.php HTTP/1.1
   3-0  -      0/0/3363    . 0.00 478  0   919004  0.0   0.00  32.57 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   4-0  5515   0/138/4091  _ 1.29 0    0   1290474 0.0   2.24  29.22 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   5-0  5722   0/150/4535  _ 0.82 0    120 1407163 0.0   1.38  39.23 114.119.150.155 http/1.1 nescrow.com.ng:443              GET /login.php HTTP/1.1
   6-0  5734   0/150/3249  _ 1.50 0    0   1342375 0.0   1.26  29.78 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   7-0  -      0/0/3492    . 0.00 679  0   1058101 0.0   0.00  34.42 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  5738   29/148/3382 K 2.20 1    28  1131012 226.8 1.19  36.12 51.75.118.97    http/1.1 cloudsms.com.ng:443             GET /help_center.php/recharge/SendToAll/recharge/recharge/recha
   9-0  -      0/0/2512    . 0.00 922  0   848692  0.0   0.00  37.52 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-0 -      0/0/2405    . 0.00 925  0   829738  0.0   0.00  25.38 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 5741   0/129/3554  _ 1.05 2    26  871054  0.0   1.26  32.08 116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue2.php HTTP/1.1
   12-0 5742   34/133/2965 K 1.74 0    282 714506  20.7  0.96  21.50 216.73.216.10   http/1.1 allianceintegratedmining.cloudw GET /1525748896.shtml HTTP/1.1
   13-0 -      0/0/1528    . 0.00 921  0   502405  0.0   0.00  12.48 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 -      0/0/654     . 0.00 1818 0   278878  0.0   0.00  4.65  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -      0/0/269     . 0.00 1823 0   341729  0.0   0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 101953 0/347/934   W 3.31 0    0   436383  0.0   14.59 20.57 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   17-0 -      0/0/226     . 0.00 923  0   181069  0.0   0.00  2.72  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -      0/0/32      . 0.00 1817 0   171432  0.0   0.00  0.66  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -      0/0/204     . 0.00 1840 0   210685  0.0   0.00  1.74  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -      0/0/37      . 0.00 1839 0   126300  0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -      0/0/26      . 0.00 1739 0   113330  0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -      0/0/158     . 0.00 1821 0   171043  0.0   0.00  1.54  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -      0/0/10      . 0.00 1838 0   136258  0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -      0/0/7       . 0.00 1837 0   59370   0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -      0/0/12      . 0.00 1833 0   62689   0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 101984 0/269/471   _ 2.66 1    27  261482  0.0   5.09  22.02 128.140.8.200   http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   27-0 -      0/0/12      . 0.00 1825 0   53387   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -      0/0/249     . 0.00 1826 0   188416  0.0   0.00  25.03 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -      0/0/707     . 0.00 1819 0   392653  0.0   0.00  5.64  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -      0/0/8       . 0.00 1824 0   14312   0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -      0/0/46      . 0.00 1835 0   51494   0.0   0.00  0.27  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -      0/0/10      . 0.00 1836 0   36267   0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -      0/0/274     . 0.00 920  0   90880   0.0   0.00  2.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -      0/0/124     . 0.00 918  0   57660   0.0   0.00  0.80  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -      0/0/12      . 0.00 1831 0   9375    0.0   0.00  0.29  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -      0/0/250     . 0.00 1777 0   63977   0.0   0.00  17.01 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -      0/0/11      . 0.00 1816 0   1559    0.0   0.00  0.27  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -      0/0/4       . 0.00 1827 0   230     0.0   0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -      0/0/6       . 0.00 1828 0   140     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -      0/0/6       . 0.00 1829 0   65      0.0   0.00  0.09  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 297
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 27 seconds, (range: 2...107)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 31618
   total entries replaced since starting: 0
   total entries expired since starting: 31305
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 547 miss
   total removes since starting: 16 hit, 11 miss
Youez - 2016 - github.com/yon3zu
LinuXploit