403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.01.24.txt
 ## swap threshold exceeded
## server overview
2025-11-07.01.24 load[0] mem[67/64] mysql[5/11] httpd[6]
              total        used        free      shared  buff/cache   available
Mem:           2363        1506         148          80         708         602
Swap:          1999        1347         652
 01:24:02 up  6:34,  0 users,  load average: 0.53, 0.92, 1.42
## system overview
top - 01:24:02 up  6:34,  0 users,  load average: 0.53, 0.92, 1.42
Tasks: 203 total,   4 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.5 us, 12.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   154304 free,  1540944 used,   725052 buff/cache
KiB Swap:  2047996 total,   668668 free,  1379328 used.   618412 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1759 mysql     20   0 1458584 251468   3380 S  62.5 10.4   8:24.64 /usr/sbin+
 59156 healtho+  20   0  461848  74480   4216 R  50.0  3.1   0:03.77 php-fpm: +
 59113 healtho+  20   0  459424  72104   4212 S  37.5  3.0   0:05.48 php-fpm: +
 59336 nigeria   20   0  400652  15936  10216 S  12.5  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44396   3480   1532 S   0.0  0.1   0:33.82 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:29.14 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.59 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.71 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:01.81 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.00 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.20 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   4780   4480 S   0.0  0.2   0:13.26 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    500    372 S   0.0  0.0   0:02.24 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 S   0.0  0.1   0:12.14 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.02 /sbin/rpc+
   515 root      20   0   52852    476    368 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4556   1188 S   0.0  0.2   0:00.32 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:03.12 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:05.36 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.55 /usr/sbin+
   526 root      20   0  152780    172    128 S   0.0  0.0   0:00.01 /usr/sbin+
   532 nscd      20   0  861368   1288    688 S   0.0  0.1   0:05.10 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.66 /usr/sbin+
   569 root      20   0   24208     52     28 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3884    848 S   0.0  0.2   0:00.34 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.27 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.28 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13440   2620 S   0.0  0.6   0:05.44 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.51 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:03.35 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  35624   5924 S   0.0  1.5   0:12.94 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.06 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.51 pure-ftpd+
   963 named     20   0  858120  42732   2412 S   0.0  1.8   0:13.20 /usr/sbin+
   965 root      20   0  397344  14944   9688 S   0.0  0.6   0:05.60 php-fpm: +
   970 root      20   0  436392  24140  16640 S   0.0  1.0   0:00.75 php-fpm: +
   983 root      20   0  290128   5352   4260 S   0.0  0.2   0:06.78 /usr/sbin+
   992 root      20   0  392856  12076   6484 S   0.0  0.5   0:00.64 php-fpm: +
   994 root      20   0  261552   7576   1756 S   0.0  0.3   0:07.58 cpsrvd (S+
   995 cpanelc+  20   0   10528   3460   2300 S   0.0  0.1   0:18.66 /usr/loca+
   999 root      20   0  386112  10616   5992 S   0.0  0.4   0:00.67 php-fpm: +
  1000 root      20   0 1763064 194300    468 S   0.0  8.0   0:14.01 /usr/loca+
  1009 root      20   0  385496  10900   5840 S   0.0  0.5   0:00.92 php-fpm: +
  1075 dovenull  20   0   47064   2772   1944 S   0.0  0.1   0:00.46 dovecot/p+
  1076 dovenull  20   0   47472   2728   1548 S   0.0  0.1   0:00.25 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.04 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.29 dovecot/l+
  1079 dovenull  20   0   47048   2196   1436 S   0.0  0.1   0:00.36 dovecot/p+
  1080 dovenull  20   0   47672   3248   1912 S   0.0  0.1   0:00.34 dovecot/i+
  1087 root      20   0   24528   2120    372 S   0.0  0.1   0:00.15 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.05 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.12 SonarPush+
  1150 wp-tool+  20   0  387556  13260   1620 S   0.0  0.5   0:00.26 /usr/bin/+
  1151 wp-tool+  20   0  410480  35692   1740 S   0.0  1.5   0:19.50 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.42 dovecot/a+
  1182 root      20   0  248280 116580    800 S   0.0  4.8   0:05.62 /usr/loca+
  1235 root      20   0  228228  18888   5984 S   0.0  0.8   0:00.45 dnsadmin +
  1238 root      20   0  262224  23220   5296 S   0.0  1.0   0:01.23 cpdavd - +
  1239 root      20   0  209916  13048   2216 S   0.0  0.5   0:01.97 tailwatchd
  1684 root      38  18  130416   1416    716 S   0.0  0.1   0:00.05 cpanellog+
  1953 root      20   0  266984  30800   5624 S   0.0  1.3   0:01.44 /usr/sbin+
  2038 root      20   0  299272    496    328 S   0.0  0.0   0:00.65 php-fpm: +
  5242 root      20   0  262088 127808   2640 S   0.0  5.3   0:02.48 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.42 [kworker]
 28586 root      20   0  181260  29300   2220 S   0.0  1.2   0:04.69 lfd - sle+
 34611 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 45429 root      20   0   12824   1380   1180 S   0.0  0.1   0:00.19 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.16 /usr/loca+
 45431 root      20   0   12856   1392   1180 S   0.0  0.1   0:00.17 /usr/loca+
 45432 root      20   0   53252  11840   2460 S   0.0  0.5   0:00.05 /usr/loca+
 46027 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 46045 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 49707 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 50184 root      20   0  183048   2112   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1144    964 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 50313 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50725 root      20   0 1276100  10520    600 S   0.0  0.4   0:00.06 /usr/bin/+
 50761 root      20   0 1277312  11732    600 S   0.0  0.5   0:00.06 /usr/bin/+
 52680 nobody    20   0  277896  36288   4800 S   0.0  1.5   0:01.06 /usr/sbin+
 52997 nobody    20   0  277888  35984   4620 S   0.0  1.5   0:00.88 /usr/sbin+
 53056 nobody    20   0  277888  36088   4764 S   0.0  1.5   0:00.79 /usr/sbin+
 54339 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 54550 nobody    20   0  277888  36020   4548 S   0.0  1.5   0:00.60 /usr/sbin+
 55327 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 55544 nobody    20   0  277876  35572   4260 S   0.0  1.5   0:00.51 /usr/sbin+
 55615 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 56395 nobody    20   0  277524  35192   4036 S   0.0  1.5   0:00.36 /usr/sbin+
 57588 nobody    20   0  277568  35192   3992 S   0.0  1.5   0:00.25 /usr/sbin+
 57589 nobody    20   0  277896  35344   3880 S   0.0  1.5   0:00.20 /usr/sbin+
 57590 nobody    20   0  277504  35324   4184 S   0.0  1.5   0:00.26 /usr/sbin+
 57593 nobody    20   0  277560  35368   4176 S   0.0  1.5   0:00.26 /usr/sbin+
 57596 nobody    20   0  277880  35520   4168 S   0.0  1.5   0:00.23 /usr/sbin+
 58952 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 58961 root      20   0  178152  26296   2812 S   0.0  1.1   0:00.12 /usr/loca+
 59007 root      20   0  158856  15304   2712 S   0.0  0.6   0:00.06 /usr/loca+
 59016 root      20   0  195364  34720   3172 S   0.0  1.4   0:00.19 /usr/loca+
 59029 root      20   0   76784  16968   3044 S   0.0  0.7   0:00.11 /usr/loca+
 59141 mailnull  20   0   89500   4264   1148 S   0.0  0.2   0:00.00 /usr/sbin+
 59180 nigeria   20   0  397064   8212   2436 S   0.0  0.3   0:00.00 php-fpm: +
 59237 mailnull  20   0   89500   5848   2568 S   0.0  0.2   0:00.00 /usr/sbin+
 59245 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 59248 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 59249 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 59252 root      20   0  162436   5828   4340 S   0.0  0.2   0:00.01 sshd: roo+
 59253 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 59254 healtho+  20   0  428568  41156   4188 S   0.0  1.7   0:00.30 php-fpm: +
 59257 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 59258 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 59264 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 59267 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 59275 cloudw    20   0  520692  61356   6564 S   0.0  2.5   0:00.45 php-fpm: +
 59277 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 59278 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59279 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59281 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59282 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59283 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59286 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59287 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59289 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59290 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59292 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59294 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 59297 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 59298 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 59301 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 59302 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 59304 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 59310 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 59311 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59312 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 59315 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59316 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 59318 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 59325 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 59327 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 59331 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 59350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59371 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 59374 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 59375 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 59377 cloudsms  20   0  396400  11048   7732 R   0.0  0.5   0:00.00 /opt/cpan+
 59378 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 59379 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 59380 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 92578 root      20   0       0      0      0 S   0.0  0.0   0:00.31 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      92578  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kworker/u200:1]
root      34611  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/0:0]
root      46027  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:2]
root      46045  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:4]
root      49707  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/0:3]
root      50313  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:0]
root      54339  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/1:1]
root      55327  0.0  0.0      0     0 ?        S    01:13   0:00  \_ [kworker/0:4]
root      55615  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:3]
root      59350  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44396  3480 ?        Ss   Nov06   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  40244  4780 ?        Ss   Nov06   0:13 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   500 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Ss   Nov06   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   476 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4556 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:05 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   172 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 861368  1288 ?        Ssl  Nov06   0:05 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1144 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      58952  0.0  0.0 183048  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      58961  0.1  1.0 178152 26296 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      59007  0.0  0.6 158856 15304 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      59016  0.3  1.4 195364 34720 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      59029  0.1  0.7  76784 16968 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      59278  0.0  0.0 183048  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59294  0.0  0.0 113284  1212 ?        Ss   01:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      59297  0.0  0.0 108052   360 ?        S    01:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      59298  0.0  0.0 113288  1516 ?        S    01:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      59381  0.0  0.0 153840  2092 ?        R    01:24   0:00  |               \_ ps auxf
root      59279  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59318  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      59281  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59315  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      59282  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59302  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      59283  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59311  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      59286  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59301  0.0  0.0  20164   988 ?        Ss   01:24   0:00  |   \_ jailshell (cloudsms) [59374] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  59374  0.0  0.0      0     0 ?        D    01:24   0:00  |       \_ [jailshell]
root      59287  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59312  0.0  0.0  20164   988 ?        Ss   01:24   0:00  |   \_ jailshell (cloudsms) [59378] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  59378  0.0  0.0  20164   264 ?        S    01:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  59379  0.0  0.0 113284  1212 ?        S    01:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  59380  0.0  0.6 400652 15676 ?        S    01:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      59289  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59316  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      59290  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59304  0.0  0.0  20164   968 ?        Ss   01:24   0:00  |   \_ jailshell (pactpay) [59325] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   59325  0.0  0.0  20164   264 ?        S    01:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   59331  0.0  0.7 476724 17480 ?        S    01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      59292  0.0  0.0 183048  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      59310  0.0  0.0  20164   964 ?        Ss   01:24   0:00      \_ jailshell (nigeria) [59327] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   59327  0.0  0.0  20164   260 ?        S    01:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   59336  0.0  0.6 400652 15936 ?        S    01:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    52 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3884 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  59141  0.0  0.1  89500  4264 ?        S    01:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  59237  0.0  0.2  89500  5848 ?        S    01:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2772 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  2728 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47048  2196 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47672  3248 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2120 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13440 ?        Ssl  Nov06   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:03 /usr/sbin/sshd -D
root      59245  0.0  0.1 111304  4268 ?        Ss   01:23   0:00  \_ sshd: [accepted]
root      59248  0.0  0.2 157100  5068 ?        Ss   01:23   0:00  \_ sshd: unknown [priv]
sshd      59249  0.0  0.1 115644  2628 ?        S    01:23   0:00  |   \_ sshd: unknown [net]
root      59252  0.3  0.2 162436  5828 ?        Ss   01:23   0:00  \_ sshd: root [priv]
sshd      59253  0.0  0.1 115644  2628 ?        S    01:23   0:00  |   \_ sshd: root [net]
root      59257  0.0  0.2 157100  5072 ?        Ss   01:23   0:00  \_ sshd: unknown [priv]
sshd      59258  0.0  0.1 115644  2628 ?        S    01:23   0:00  |   \_ sshd: unknown [net]
root      59264  0.0  0.2 157100  5076 ?        Ss   01:23   0:00  \_ sshd: unknown [priv]
sshd      59267  0.0  0.1 115644  2628 ?        S    01:23   0:00      \_ sshd: unknown [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 35624 ?       SLsl Nov06   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.7 858120 42732 ?        Ssl  Nov06   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.6 397344 14944 ?        Ss   Nov06   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  59113 14.0  2.9 459424 72104 ?        S    01:23   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  59156 14.5  2.9 459288 72112 ?        S    01:23   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   59180  0.0  0.3 397064  8212 ?        S    01:23   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  59254 10.0  1.7 428568 41156 ?        S    01:23   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    59275 22.5  2.5 520692 61356 ?        S    01:23   0:00  \_ php-fpm: pool cloudware_ng
root        970  0.0  0.9 436392 24140 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.2 290128  5352 ?        Ssl  Nov06   0:06 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 12076 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7576 ?        Ss   Nov06   0:07 cpsrvd (SSL) - waiting for connections                   
root      59277  0.0  0.0      0     0 ?        Z    01:24   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10528  3460 ?        Ss   Nov06   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10616 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  8.0 1763064 194300 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 10900 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13260 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35692 ?        Ss   Nov06   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116580 ?       Ss   Nov06   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.2 262088 127808 ?       S    Nov06   0:02  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.7 228228 18888 ?        Ss   Nov06   0:00 dnsadmin - server mode
root       1238  0.0  0.9 262224 23220 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.5 209916 13048 ?        Ss   Nov06   0:01 tailwatchd
root       1684  0.0  0.0 130416  1416 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.1 10.3 1458584 251468 ?      Sl   Nov06   8:24 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30800 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12824  1380 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12856  1392 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11840 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    52680  0.0  1.4 277896 36288 ?        S    01:05   0:01  \_ /usr/sbin/httpd -k start
nobody    52997  0.0  1.4 277888 35984 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    53056  0.0  1.4 277888 36088 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    54550  0.0  1.4 277888 36020 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    55544  0.0  1.4 277876 35572 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    56395  0.0  1.4 277524 35192 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    57588  0.0  1.4 277568 35192 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    57589  0.0  1.4 277896 35344 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    57590  0.0  1.4 277504 35324 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    57593  0.0  1.4 277560 35368 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    57596  0.0  1.4 277880 35520 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   496 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181260 29300 ?        Ss   00:00   0:04 lfd - sleeping
root      50725  0.0  0.4 1276100 10520 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      50761  0.0  0.4 1277312 11732 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 23667  Threads: 4  Questions: 3885353  Slow queries: 0  Opens: 6709  Flush tables: 1  Open tables: 2000  Queries per second avg: 164.167
*************************** 1. row ***************************
     Id: 56659
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 56660
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 56667
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 4. row ***************************
     Id: 56669
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.132 TIME_WAIT
      1 104.210.140.138 TIME_WAIT
      1 114.119.140.48 TIME_WAIT
      1 114.119.142.8 TIME_WAIT
      1 148.113.128.78 TIME_WAIT
      1 154.17.146.31 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 199.192.27.11 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.27.51.141 TIME_WAIT
      1 54.39.203.104 TIME_WAIT
      1 54.39.210.211 TIME_WAIT
      1 95.108.213.149 TIME_WAIT
      1 95.108.213.192 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     80 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 01:24:02 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 6 hours 34 minutes 20 seconds
   Server load: 0.53 0.92 1.42
   Total accesses: 72421 - Total Traffic: 873.3 MB - Total Duration: 33607249
   CPU Usage: u4.59 s2.25 cu363.84 cs203.16 - 2.43% CPU load
   3.06 requests/sec - 37.8 kB/second - 12.3 kB/request - 464.054 ms/request
   6 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

C.K_C._K_._K...._.W.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-1  54550 1/200/5477 C 1.39 0     776 2361626 5.7  2.86  67.30 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-1  -     0/0/5504   . 0.00 265   0   2443985 0.0  0.00  60.91 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-1  57588 1/65/5480  K 0.67 1     555 2340032 8.2  8.63  71.51 174.138.18.135 http/1.1 cloudware.ng:443           GET /wp-login.php HTTP/1.1
   3-1  56395 0/120/4844 _ 0.98 0     270 2125411 0.0  1.22  52.38 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=2410158968 HTTP/1.1
   4-1  55544 1/156/4804 C 1.43 0     704 2160891 5.7  1.65  54.93 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   5-1  -     0/0/4647   . 0.00 254   0   1964738 0.0  0.00  56.66 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-1  52680 0/410/4509 _ 3.34 1     1   1989853 0.0  3.43  52.37 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   7-1  57589 1/75/4513  K 0.32 2     303 1927443 35.6 0.77  56.14 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=1623078929 HTTP/1.1
   8-1  52997 0/368/3947 _ 1.73 1     1   1821933 0.0  4.88  49.27 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   9-1  -     0/0/4224   . 0.00 269   0   1888032 0.0  0.00  51.47 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-1 57590 0/78/3215  _ 0.77 0     0   1566606 0.0  0.87  41.32 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-1 57593 1/75/3227  K 0.75 1     356 1652211 33.6 1.37  47.78 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=228031
   12-1 -     0/0/3312   . 0.00 258   0   1458424 0.0  0.00  49.77 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 -     0/0/1501   . 0.00 267   0   844775  0.0  0.00  19.87 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1 -     0/0/1924   . 0.00 268   0   1022072 0.0  0.00  20.78 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/1719   . 0.00 238   0   1090554 0.0  0.00  17.46 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 57596 0/70/2080  _ 0.60 1     325 1025613 0.0  0.78  21.59 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-1 -     0/0/1181   . 0.00 533   0   761124  0.0  0.00  12.60 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 53056 0/287/830  W 2.24 0     0   578381  0.0  2.22  8.58  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-0 -     0/0/48     . 0.00 6133  0   31753   0.0  0.00  0.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/542    . 0.00 6142  0   256184  0.0  0.00  5.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/717    . 0.00 6140  0   355802  0.0  0.00  10.38 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1023   . 0.00 3768  0   475279  0.0  0.00  13.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/258    . 0.00 5781  0   140369  0.0  0.00  3.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/174    . 0.00 6135  0   87052   0.0  0.00  1.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/331    . 0.00 5556  0   117833  0.0  0.00  3.49  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/282    . 0.00 10178 0   128233  0.0  0.00  3.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/490    . 0.00 9271  0   227604  0.0  0.00  3.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179    . 0.00 10166 0   92180   0.0  0.00  1.94  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/156    . 0.00 10665 0   83779   0.0  0.00  1.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00 11344 0   56      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00 10176 0   132085  0.0  0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00 11330 0   1509    0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 11351 0   1381    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00 11333 0   53900   0.0  0.00  1.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 11342 0   1494    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00 10689 0   68720   0.0  0.00  1.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00 11355 0   157495  0.0  0.00  3.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 11352 4   712     0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00 11345 0   1369    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00 10868 0   43685   0.0  0.00  1.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00 11354 0   0       0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 11324 0   735     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 11341 0   54      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00 10357 0   124261  0.0  0.00  2.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 501
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...57)
   index usage: 8%, cache usage: 12%
   total entries stored since starting: 5052
   total entries replaced since starting: 0
   total entries expired since starting: 4547
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 6 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit