403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2026-01-05.23.00.txt
 ## swap threshold exceeded
## server overview
2026-01-05.23.00 load[1] mem[64/34] mysql[4/26] httpd[4]
              total        used        free      shared  buff/cache   available
Mem:           2363        1397         116         153         849         627
Swap:          4047        1500        2547
 23:00:02 up 43 days,  1:48,  0 users,  load average: 1.42, 1.05, 0.94
## system overview
top - 23:00:02 up 43 days,  1:48,  0 users,  load average: 1.42, 1.05, 0.94
Tasks: 222 total,   8 running, 213 sleeping,   0 stopped,   1 zombie
%Cpu(s): 89.2 us, 10.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   125080 free,  1425076 used,   870144 buff/cache
KiB Swap:  4145144 total,  2608148 free,  1536996 used.   648272 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 52014 cloudw    20   0  573680 108020   6628 R  83.3  4.5   0:04.57 php-fpm: +
 51905 cloudw    20   0  570168 106080   6672 R  44.4  4.4   0:07.95 php-fpm: +
 19908 mysql     20   0 1481756 325000   3452 S  38.9 13.4  71:08.15 /usr/sbin+
 52484 root      20   0  160220   2064   1580 R   5.6  0.1   0:00.01 top -bcn1
     1 root      20   0  192272   3552   1548 S   0.0  0.1 103:36.65 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:05.58 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:55.75 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:45.10 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0  61:53.82 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:10.54 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:10.52 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:58.32 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:19.63 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.35 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.31 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  65:22.51 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.27 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:04.34 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   8:35.35 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:11.77 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   3:59.61 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   3552   3296 S   0.0  0.1  31:27.75 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    440    308 S   0.0  0.0   4:34.23 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:35.09 /usr/sbin+
   489 root      20   0   24896   1180    792 S   0.0  0.0  16:23.47 /usr/lib/+
   494 polkitd   20   0  610664   1004    508 S   0.0  0.0   9:08.62 /usr/lib/+
   496 root      20   0   52852    316    220 S   0.0  0.0   0:00.57 /usr/sbin+
   503 dbus      20   0   58748   1384    604 S   0.0  0.1  35:59.27 /usr/bin/+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:03.87 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.10 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   2:15.35 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:39.77 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:15.76 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:02.10 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:02.07 /usr/loca+
   931 systuser  20   0  112524     56      0 S   0.0  0.0   0:02.01 /usr/loca+
   932 systuser  20   0  111608     60      0 S   0.0  0.0   0:01.93 /usr/loca+
   935 root      20   0  572372    816    284 S   0.0  0.0   5:47.77 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   6:47.33 /usr/sbin+
   939 root      20   0 1350728   9732      8 S   0.0  0.4   2:48.60 /usr/bin/+
   952 root      20   0  261164  26444   3996 S   0.0  1.1  13:07.24 cpsrvd (S+
   953 root      20   0  331088   5024   3704 S   0.0  0.2  16:58.13 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:31.48 /usr/bin/+
   974 root      20   0 1277312   2476      8 S   0.0  0.1   0:39.46 /usr/bin/+
   980 systuser  20   0  114272  10984   2720 S   0.0  0.5  18:56.98 /usr/loca+
  1144 systuser  20   0  157704   2932    940 S   0.0  0.1   0:19.80 SonarPush+
  1188 named     20   0 1185868  38924   1840 S   0.0  1.6  17:13.48 /usr/sbin+
  1239 root      20   0  167452   1196    648 S   0.0  0.0   1:02.89 dnsadmin +
  1243 root      20   0  209980  21208   3032 S   0.0  0.9   7:58.10 tailwatchd
  1244 root      20   0  262228  22984   5120 S   0.0  0.9   7:56.66 cpdavd - +
  6966 nobody    20   0  278308  22300   5056 S   0.0  0.9   0:03.96 /usr/sbin+
  9046 worencom  20   0   38500   2764   1784 S   0.0  0.1   0:00.03 dovecot/i+
 12995 root      20   0 1483120  73516    448 S   0.0  3.0   1:27.63 /usr/loca+
 14245 nobody    20   0  277924  21460   5092 S   0.0  0.9   0:03.69 /usr/sbin+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:34.51 [kworker]
 16217 root      20   0   51508    616    436 S   0.0  0.0   0:01.44 /usr/sbin+
 16224 dovenull  20   0   47348   2808   1720 S   0.0  0.1   0:02.57 dovecot/p+
 16225 dovenull  20   0   48608   3452   1532 S   0.0  0.1   0:01.16 dovecot/i+
 16226 dovecot   20   0   10320    324    204 S   0.0  0.0   0:00.47 dovecot/a+
 16227 root      20   0   10452    592    396 S   0.0  0.0   0:01.46 dovecot/l+
 16228 dovenull  20   0   47384   3260   2152 S   0.0  0.1   0:01.87 dovecot/p+
 16229 dovenull  20   0   48844   3812   1704 S   0.0  0.2   0:01.51 dovecot/i+
 16230 root      20   0   24528   2424    468 S   0.0  0.1   0:00.62 dovecot/c+
 16231 dovecot   20   0   13568    512    288 S   0.0  0.0   0:00.28 dovecot/s+
 16234 dovecot   20   0   41188   1516   1012 S   0.0  0.1   0:02.92 dovecot/a+
 16262 mailnull  20   0   89116   3736    788 S   0.0  0.2   0:02.10 /usr/sbin+
 16283 root      20   0  153404    220    136 S   0.0  0.0   0:03.16 pure-ftpd+
 16284 root      20   0  152780     80     40 S   0.0  0.0   0:00.09 /usr/sbin+
 16342 root      20   0  267196   4956    548 S   0.0  0.2   0:06.32 /usr/sbin+
 16343 root      20   0   12880    384    212 S   0.0  0.0   0:05.56 /usr/loca+
 16344 root      20   0   12732    284    208 S   0.0  0.0   0:04.36 /usr/loca+
 16345 root      20   0   12944    404    216 S   0.0  0.0   0:05.28 /usr/loca+
 16346 root      20   0   53268      8      8 S   0.0  0.0   0:00.04 /usr/loca+
 18384 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 18862 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 19683 nobody    20   0  277780  21260   5048 S   0.0  0.9   0:02.99 /usr/sbin+
 27072 nobody    20   0  277860  21168   5100 S   0.0  0.9   0:02.06 /usr/sbin+
 33016 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 36453 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 39969 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 40386 nobody    20   0  277688  20216   4716 S   0.0  0.8   0:01.33 /usr/sbin+
 43019 nobody    20   0  277660  19928   4724 S   0.0  0.8   0:00.86 /usr/sbin+
 43878 nobody    20   0  277684  19708   4648 S   0.0  0.8   0:00.80 /usr/sbin+
 45225 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46787 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46890 nobody    20   0  277652  19424   4552 S   0.0  0.8   0:00.40 /usr/sbin+
 46906 nobody    20   0  277668  19312   4500 S   0.0  0.8   0:00.54 /usr/sbin+
 46907 nobody    20   0  277896  19836   4464 S   0.0  0.8   0:00.45 /usr/sbin+
 47593 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 49929 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50173 nobody    20   0  277548  18588   4088 S   0.0  0.8   0:00.22 /usr/sbin+
 51463 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51813 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51829 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52003 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 52006 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 52077 nigeria   20   0  405284  11800   3920 S   0.0  0.5   0:00.19 php-fpm: +
 52082 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 52268 cloudw    20   0  524540  59668   6660 S   0.0  2.5   0:00.53 php-fpm: +
 52277 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52278 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52279 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52280 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52282 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52284 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52285 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52287 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52288 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52290 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52291 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52292 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52293 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52294 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52295 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52296 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52297 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52299 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52300 root      20   0  183076   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52303 root      20   0  183076   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 52304 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52313 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52318 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52320 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52321 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52323 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 52324 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 52325 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52326 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52327 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52328 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52329 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 52330 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52333 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52334 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52335 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 52336 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 52337 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52338 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 52339 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52341 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52342 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52344 root      20   0 1276844  11368    596 S   0.0  0.5   0:00.06 /usr/bin/+
 52347 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.01 bash /usr+
 52349 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 52353 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.02 /bin/bash+
 52354 root      20   0  188232  11112   5152 S   0.0  0.5   0:00.03 /usr/loca+
 52355 root      20   0 1275548  10064    596 S   0.0  0.4   0:00.06 /usr/bin/+
 52358 root      20   0 1349792  10472    600 S   0.0  0.4   0:00.05 /usr/bin/+
 52363 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 52371 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52373 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52380 nigeria   20   0  404052  16136  10384 S   0.0  0.7   0:00.04 /opt/cpan+
 52381 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 52390 locatio+  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 52401 locatio+  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 52410 locatio+  20   0  406668  19828  11212 R   0.0  0.8   0:00.03 /opt/cpan+
 52443 root      20   0  160224   2348   1636 S   0.0  0.1   0:00.01 top -n 2 +
 52445 root      35  15  113284   1384   1200 S   0.0  0.1   0:00.00 /bin/bash+
 52463 root      35  15  113284    532    344 S   0.0  0.0   0:00.00 /bin/bash+
 52469 root      35  15  108076    360    284 R   0.0  0.0   0:00.00 cat /usr/+
 52470 root      35  15  108064    684    584 S   0.0  0.0   0:00.00 head -n 1
 52471 root      35  15  113644    980    824 S   0.0  0.0   0:00.00 awk {prin+
 52482 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 52491 root      20   0  113284    612    396 S   0.0  0.0   0:00.00 bash /usr+
 52492 root      20   0  113284    216      0 R   0.0  0.0   0:00.00 bash /usr+
 63107 root      20   0  187484  16760   1100 S   0.0  0.7   1:56.35 lfd - sle+
 72712 root      20   0  445028    596    480 S   0.0  0.0   2:57.91 sw-engine+
 72887 wp-tool+  20   0  412396   3500   1392 S   0.0  0.1  14:44.56 /usr/bin/+
 72891 wp-tool+  20   0  387556   3288   1412 S   0.0  0.1   0:23.96 /usr/bin/+
 81125 root      20   0  400740   2724    616 S   0.0  0.1   5:14.88 php-fpm: +
 81130 root      20   0  388892    400    308 S   0.0  0.0   0:51.81 php-fpm: +
 81135 root      20   0  396248    400    308 S   0.0  0.0   0:52.64 php-fpm: +
 81140 root      20   0  389508    472    376 S   0.0  0.0   0:53.68 php-fpm: +
 81145 root      20   0  439788    508    408 S   0.0  0.0   0:53.53 php-fpm: +
 83328 root      20   0  262704 128912   2380 S   0.0  5.3   0:01.80 spamd chi+
 85179 root      20   0  248728 120324   3016 S   0.0  5.0   0:11.38 /usr/loca+
 85330 telegraf  20   0 5654308  28692   5768 S   0.0  1.2  26:37.32 /usr/loca+
 89315 root      20   0  248728 118384   1116 S   0.0  4.9   0:00.05 spamd chi+
 91745 root      20   0  224392   4860   1008 S   0.0  0.2   0:20.80 queueproc+
 92390 cpanelc+  20   0   10868   4040   2324 R   0.0  0.2  18:39.20 /usr/loca+
 92394 root      38  18  130416   1384    692 S   0.0  0.1   0:04.45 cpanellog+
 92408 nscd      20   0 1377676   2600    692 S   0.0  0.1   5:49.09 /usr/sbin+
 92476 root      20   0  299272    488    324 S   0.0  0.0   0:58.21 php-fpm: +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:05 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S     2025   5:55  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:45  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R     2025  61:53  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   1:58  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:19  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  65:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:04  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   8:35  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<    2025   7:11  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S     2025   3:59  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:39  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:15  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root      18384  0.0  0.0      0     0 ?        S    21:38   0:00  \_ [kworker/1:2]
root      18862  0.0  0.0      0     0 ?        S    21:39   0:00  \_ [kworker/u200:0]
root      33016  0.0  0.0      0     0 ?        S    22:12   0:00  \_ [kworker/0:0]
root      36453  0.0  0.0      0     0 ?        S    22:21   0:00  \_ [kworker/0:4]
root      39969  0.0  0.0      0     0 ?        S    22:30   0:00  \_ [kworker/u200:2]
root      45225  0.0  0.0      0     0 ?        S    22:42   0:00  \_ [kworker/1:3]
root      46787  0.0  0.0      0     0 ?        S    22:46   0:00  \_ [kworker/1:4]
root      47593  0.0  0.0      0     0 ?        S    22:48   0:00  \_ [kworker/0:3]
root      49929  0.0  0.0      0     0 ?        S    22:54   0:00  \_ [kworker/0:1]
root      51463  0.0  0.0      0     0 ?        S    22:58   0:00  \_ [kworker/1:0]
root      51813  0.0  0.0      0     0 ?        S    22:59   0:00  \_ [kworker/u200:1]
root      51829  0.0  0.0      0     0 ?        S    22:59   0:00  \_ [kworker/0:2]
root          1  0.1  0.1 192272  3552 ?        Ss    2025 103:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  3552 ?        Ss    2025  31:27 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   440 ?        S<sl  2025   4:34 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss    2025   1:35 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1180 ?        Ss    2025  16:23 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1004 ?        Ssl   2025   9:08 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   316 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1384 ?        Ss    2025  35:59 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    60 ?        Ss    2025   0:03 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss    2025   2:15 /usr/sbin/crond -n
root      52277  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52342  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      52355  6.0  0.4 1275548 10064 ?       Sl   23:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      52278  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52325  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      52344  6.0  0.4 1276844 11368 ?       Sl   23:00   0:00  |       \_ /usr/bin/update_imunify
root      52279  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52339  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      52358  5.0  0.4 1349792 10472 ?       Sl   23:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      52280  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52336  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      52353  2.0  0.0 113288  1432 ?        SN   23:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      52445  0.0  0.0 113284  1384 ?        SN   23:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/sonarpush-watchdog.sh
root      52282  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52329  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      52347  1.0  0.0 113284  1468 ?        S    23:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      52284  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52334  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      52349  0.0  0.0 108052   356 ?        S    23:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      52363  0.0  0.0 113288  1516 ?        S    23:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      52493  0.0  0.0 153840  2092 ?        R    23:00   0:00  |               \_ ps auxf
root      52285  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52321  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      52287  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52313  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      52288  0.0  0.0 183080  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52337  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      52290  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52326  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      52291  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52333  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      52292  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52327  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      52293  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52330  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      52294  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52318  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      52295  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52328  0.0  0.0  20164   808 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      52296  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52320  0.0  0.0  20164   804 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      52297  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52338  0.0  0.0  20164   984 ?        Ss   23:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      52482  0.0  0.2  38648  6508 ?        R    23:00   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      52299  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52341  0.0  0.0 113284  1212 ?        Ss   23:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      52354  3.0  0.4 188232 11112 ?        S    23:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      52443  0.0  0.0 160224  2348 ?        S    23:00   0:00  |           \_ top -n 2 -b -c
root      52300  0.0  0.0 183076  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52324  0.0  0.0  20164   968 ?        Ss   23:00   0:00  |   \_ jailshell (pactpay) [52371] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52371  0.0  0.0  20164   260 ?        S    23:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52381  0.0  0.7 480124 17676 ?        S    23:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      52303  0.0  0.0 183076  2144 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52335  0.0  0.0  20164   968 ?        Ss   23:00   0:00  |   \_ jailshell (nigeria) [52373] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52373  0.0  0.0  20164   260 ?        S    23:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52380  0.0  0.6 404052 16136 ?        S    23:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      52304  0.0  0.0 183076  2140 ?        S    23:00   0:00  \_ /usr/sbin/CROND -n
root      52323  0.0  0.0  20164   960 ?        Ss   23:00   0:00      \_ jailshell (locationforms) [52390]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  52390  0.0  0.0  20164   256 ?        S    23:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  52401  0.0  0.0 113284  1212 ?        S    23:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  52410  0.0  0.8 406668 20352 ?        S    23:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    52 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    56 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    60 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   816 ?        Ssl   2025   5:47 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss    2025   6:47 /usr/sbin/sshd -D
root        939  0.0  0.4 1350728 9732 ?        Ssl   2025   2:48 /usr/bin/cspdaemon
root        952  0.0  1.0 261164 26444 ?        Ss    2025  13:07 cpsrvd (SSL) - waiting for connections                   
root      52082  0.0  0.0      0     0 ?        Z    22:59   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  5024 ?        Ssl   2025  16:58 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl   2025   1:31 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.1 1277312 2476 ?        Ssl   2025   0:39 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 10984 ?        Ssl   2025  18:56 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2932 ?        S     2025   0:19 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1196 ?        Ss    2025   1:02 dnsadmin - dormant mode
root       1243  0.0  0.8 209980 21208 ?        Ss    2025   7:58 tailwatchd
root       1244  0.0  0.9 262228 22984 ?        Ss    2025   7:56 cpdavd - accepting connections on: 2091, 2077, 2078
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S     2025   1:34  \_ [kworker]
telegraf  85330  0.0  1.1 5654308 28692 ?       SLsl  2025  26:37 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028   596 ?        Ss    2025   2:57 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  52003  0.0  0.0 445028   328 ?        S    22:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  52006  0.0  0.0 445028   324 ?        S    22:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3500 ?        Ss    2025  14:44 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3288 ?        Ss    2025   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.6 1185868 38924 ?       Ssl   2025  17:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.1 400740  2724 ?        Ss    2025   5:14 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    51905 15.3  4.3 570168 106080 ?       R    22:59   0:07  \_ php-fpm: pool cloudware_ng
cloudw    52014 17.5  4.4 573680 108020 ?       R    22:59   0:04  \_ php-fpm: pool cloudware_ng
nigeria   52077  2.1  0.4 405284 11800 ?        S    22:59   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    52268 26.5  2.4 524540 59668 ?        S    23:00   0:00  \_ php-fpm: pool cloudware_ng
root      81130  0.0  0.0 388892   400 ?        Ss    2025   0:51 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.0 396248   400 ?        Ss    2025   0:52 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      81140  0.0  0.0 389508   472 ?        Ss    2025   0:53 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  0.0 439788   508 ?        Ss    2025   0:53 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.2 224392  4860 ?        Ss    2025   0:20 queueprocd - waiting up to 60s to process a task
cpanelc+  92390  0.0  0.1  10868  4040 ?        Ss    2025  18:39 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416  1384 ?        SN    2025   0:04 cpanellogd - sleeping for logs
nscd      92408  0.0  0.1 1377676 2600 ?        Ssl   2025   5:49 /usr/sbin/nscd
root      92476  0.0  0.0 299272   488 ?        Ss    2025   0:58 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      12995  0.0  3.0 1483120 73516 ?       Ssl  Jan02   1:27 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.6 13.4 1481756 325000 ?      Sl   Jan02  71:08 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      16217  0.0  0.0  51508   616 ?        Ss   Jan04   0:01 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull  16224  0.0  0.1  47348  2808 ?        S    Jan04   0:02  \_ dovecot/pop3-login
dovenull  16225  0.0  0.1  48608  3452 ?        S    Jan04   0:01  \_ dovecot/imap-login
dovecot   16226  0.0  0.0  10320   324 ?        S    Jan04   0:00  \_ dovecot/anvil
root      16227  0.0  0.0  10452   592 ?        S    Jan04   0:01  \_ dovecot/log
dovenull  16228  0.0  0.1  47384  3260 ?        S    Jan04   0:01  \_ dovecot/pop3-login
dovenull  16229  0.0  0.1  48844  3812 ?        S    Jan04   0:01  \_ dovecot/imap-login
root      16230  0.0  0.1  24528  2424 ?        S    Jan04   0:00  \_ dovecot/config
dovecot   16231  0.0  0.0  13568   512 ?        S    Jan04   0:00  \_ dovecot/stats
dovecot   16234  0.0  0.0  41188  1516 ?        S    Jan04   0:02  \_ dovecot/auth
worencom   9046  0.0  0.1  38500  2764 ?        S    21:15   0:00  \_ dovecot/imap
mailnull  16262  0.0  0.1  89116  3736 ?        Ss   Jan04   0:02 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      16283  0.0  0.0 153404   220 ?        Ss   Jan04   0:03 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780    80 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      16342  0.0  0.2 267196  4956 ?        Ss   Jan04   0:06 /usr/sbin/httpd -k start
root      16343  0.0  0.0  12880   384 ?        S    Jan04   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      16344  0.0  0.0  12732   284 ?        S    Jan04   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      16345  0.0  0.0  12944   404 ?        S    Jan04   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      16346  0.0  0.0  53268     8 ?        S    Jan04   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     6966  0.0  0.9 278308 22300 ?        S    21:10   0:03  \_ /usr/sbin/httpd -k start
nobody    14245  0.0  0.8 277924 21460 ?        S    21:28   0:03  \_ /usr/sbin/httpd -k start
nobody    19683  0.0  0.8 277780 21260 ?        S    21:40   0:02  \_ /usr/sbin/httpd -k start
nobody    27072  0.0  0.8 277860 21168 ?        S    21:58   0:02  \_ /usr/sbin/httpd -k start
nobody    40386  0.0  0.8 277688 20216 ?        S    22:30   0:01  \_ /usr/sbin/httpd -k start
nobody    43019  0.0  0.8 277660 19928 ?        S    22:37   0:00  \_ /usr/sbin/httpd -k start
nobody    43878  0.0  0.8 277684 19708 ?        S    22:39   0:00  \_ /usr/sbin/httpd -k start
nobody    46890  0.0  0.8 277652 19424 ?        S    22:46   0:00  \_ /usr/sbin/httpd -k start
nobody    46906  0.0  0.7 277668 19312 ?        S    22:46   0:00  \_ /usr/sbin/httpd -k start
nobody    46907  0.0  0.8 277896 19836 ?        S    22:46   0:00  \_ /usr/sbin/httpd -k start
nobody    50173  0.0  0.7 277548 18588 ?        S    22:54   0:00  \_ /usr/sbin/httpd -k start
root      63107  0.1  0.6 187484 16760 ?        Ss   00:00   1:56 lfd - sleeping
root      85179  0.0  4.9 248728 120324 ?       Ss   04:47   0:11 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      89315  0.0  4.8 248728 118384 ?       S    04:57   0:00  \_ spamd child
root      83328  0.0  5.3 262704 128912 ?       S    20:11   0:01  \_ spamd child
## mysql stats
Uptime: 261845  Threads: 6  Questions: 24294198  Slow queries: 0  Opens: 62973  Flush tables: 1  Open tables: 2000  Queries per second avg: 92.780
*************************** 1. row ***************************
     Id: 350187
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 350188
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 350190
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 350198
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Query
   Time: 0
  State: statistics
   Info: select id from pl61_user_user where uniqid is NULL or uniqid = ""
*************************** 5. row ***************************
     Id: 350200
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 350202
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 198.244.242.109 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.82.11.143 TIME_WAIT
      1 47.82.11.14 TIME_WAIT
      1 51.161.65.125 TIME_WAIT
      1 54.39.203.98 TIME_WAIT
      1 57.141.0.68 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     13 216.73.216.2 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 05-Jan-2026 23:00:03 WAT
   Restart Time: Sunday, 04-Jan-2026 22:02:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 day 58 minutes 2 seconds
   Server load: 1.42 1.05 0.94
   Total accesses: 210034 - Total Traffic: 1.9 GB - Total Duration: 59102510
   CPU Usage: u14.53 s9.09 cu1233.66 cs705.22 - 2.18% CPU load
   2.34 requests/sec - 22.5 kB/second - 9.6 kB/request - 281.395 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

_W_W._K__..W__..................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU   SS   Req    Dur   Conn Child  Slot      Client     Protocol         VHost                                      Request
   0-0  50173 0/106/16318  _ 0.24 0     0    4401030 0.0  0.24  163.71 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   1-0  43878 0/369/15200  W 1.14 0     0    4420969 0.0  1.20  139.54 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  43019 0/328/15736  _ 2.12 0     1040 4309366 0.0  1.66  146.13 216.73.216.2   http/1.1 cloudware.ng:80        GET /shop/products/672199850396.html HTTP/1.1
   3-0  46890 1/129/13859  W 0.90 0     0    3450460 0.8  0.81  119.45 216.73.216.2   http/1.1 cloudware.ng:80        GET /shop/products/67021536062.html HTTP/1.1
   4-0  -     0/0/13954    . 0.00 294   0    3962422 0.0  0.00  135.85 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  27072 0/641/14332  _ 4.98 1     108  3759580 0.0  4.86  118.45 116.203.134.67 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue4.php HTTP/1.1
   6-0  40386 1/544/11546  K 3.03 1     505  3917514 0.8  2.54  120.92 216.73.216.2   http/1.1 cloudware.ng:80        GET /shop/products/672199850396.html HTTP/1.1
   7-0  19683 0/1094/11881 _ 7.23 2     42   3299634 0.0  6.79  107.70 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue1.php HTTP/1.1
   8-0  14245 0/1575/12833 _ 8.34 0     0    3667391 0.0  7.44  119.76 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   9-0  -     0/0/10250    . 0.00 790   0    2842284 0.0  0.00  98.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 -     0/0/10129    . 0.00 718   0    3002678 0.0  0.00  94.75  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 6966  0/1555/11939 W 8.50 1     0    3203949 0.0  12.99 108.83 216.73.216.2   http/1.1 cloudware.ng:80        GET /shop/products/67011289983.html HTTP/1.1
   12-0 46906 0/222/8453   _ 1.11 0     17   2135691 0.0  0.92  67.95  3.210.29.96    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/blog/images/2019elections
   13-0 46907 0/180/6042   _ 0.68 1     96   1739049 0.0  0.74  55.26  128.140.8.200  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   14-0 -     0/0/4885     . 0.00 791   0    1153092 0.0  0.00  48.76  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/6599     . 0.00 1626  0    2041047 0.0  0.00  59.63  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/5184     . 0.00 4640  0    1805930 0.0  0.00  62.33  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/2273     . 0.00 11254 0    756303  0.0  0.00  16.44  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/1460     . 0.00 9218  0    564466  0.0  0.00  10.42  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/1481     . 0.00 7219  0    397787  0.0  0.00  11.20  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/1571     . 0.00 7356  0    368218  0.0  0.00  12.44  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/1790     . 0.00 9662  0    779306  0.0  0.00  14.28  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/358      . 0.00 11248 0    177662  0.0  0.00  2.61   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/400      . 0.00 10715 0    152824  0.0  0.00  3.71   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1678     . 0.00 11255 0    463592  0.0  0.00  19.85  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1331     . 0.00 10295 0    276360  0.0  0.00  7.61   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1934     . 0.00 11256 0    512679  0.0  0.00  30.14  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/501      . 0.00 11249 0    91775   0.0  0.00  1.85   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/366      . 0.00 11263 0    191423  0.0  0.00  25.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/1033     . 0.00 11247 0    429332  0.0  0.00  7.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/109      . 0.00 11246 0    31330   0.0  0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/140      . 0.00 51476 0    118125  0.0  0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/260      . 0.00 51431 0    38702   0.0  0.00  1.28   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/487      . 0.00 51484 0    106926  0.0  0.00  2.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/299      . 0.00 51471 0    74787   0.0  0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/215      . 0.00 51483 0    10240   0.0  0.00  0.40   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/410      . 0.00 51456 0    72790   0.0  0.00  17.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/212      . 0.00 51468 0    2587    0.0  0.00  0.38   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/140      . 0.00 51457 0    5668    0.0  0.00  1.29   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/214      . 0.00 51492 0    1085    0.0  0.00  0.26   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/120      . 0.00 51412 0    67829   0.0  0.00  1.77   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/276      . 0.00 50672 0    43451   0.0  0.00  1.74   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/81       . 0.00 51482 0    462     0.0  0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/115      . 0.00 51480 0    111     0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/106      . 0.00 51490 0    149     0.0  0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/41       . 0.00 51491 0    1662    0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/9        . 0.00 51500 0    1609    0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/91       . 0.00 51470 0    1367    0.0  0.00  0.75   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/14       . 0.00 51489 0    1507    0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/88       . 0.00 51469 0    872     0.0  0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/590      . 0.00 47374 0    131183  0.0  0.00  4.25   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/91       . 0.00 51474 0    1162    0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/525      . 0.00 48140 0    113277  0.0  0.00  7.25   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/5        . 0.00 51499 0    415     0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/80       . 0.00 51466 0    1377    0.0  0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 352
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 24 seconds, (range: 1...79)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 112940
   total entries replaced since starting: 0
   total entries expired since starting: 112497
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 42 hit, 2085 miss
   total removes since starting: 91 hit, 422 miss
Youez - 2016 - github.com/yon3zu
LinuXploit