403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.02.15.txt
 ## swap threshold exceeded
## server overview
2025-11-07.02.15 load[1] mem[67/67] mysql[8/11] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1530          84          85         748         577
Swap:          1999        1388         611
 02:15:02 up  7:25,  0 users,  load average: 1.32, 0.70, 0.69
## system overview
top - 02:15:02 up  7:25,  0 users,  load average: 1.32, 0.70, 0.69
Tasks: 210 total,   8 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 91.2 us,  8.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    90992 free,  1562548 used,   766760 buff/cache
KiB Swap:  2047996 total,   626172 free,  1421824 used.   595948 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1759 mysql     20   0 1458584 252984   3012 S  52.9 10.5   9:34.32 /usr/sbin+
 78650 healtho+  20   0  462324  75284   4344 R  23.5  3.1   0:06.30 php-fpm: +
 78653 healtho+  20   0  463100  76000   4372 R  23.5  3.1   0:06.36 php-fpm: +
 78752 healtho+  20   0  461848  74484   4212 R  23.5  3.1   0:01.73 php-fpm: +
 78753 healtho+  20   0  459800  71808   4216 R  23.5  3.0   0:01.69 php-fpm: +
 78654 healtho+  20   0  459744  73364   4304 R  11.8  3.0   0:06.15 php-fpm: +
 57590 nobody    20   0  277580  36256   4996 S   5.9  1.5   0:02.61 /usr/sbin+
 78857 nigeria   20   0  400652  15936  10216 S   5.9  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44396   3652   1704 S   0.0  0.2   0:37.73 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.44 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:32.96 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.93 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.59 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:01.92 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.16 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.37 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   5504   5204 S   0.0  0.2   0:14.75 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    500    372 S   0.0  0.0   0:02.48 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 S   0.0  0.1   0:13.71 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.03 /sbin/rpc+
   515 root      20   0   52852    396    288 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4556   1188 S   0.0  0.2   0:00.35 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:03.51 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:06.03 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.61 /usr/sbin+
   526 root      20   0  152780    180    136 S   0.0  0.0   0:00.02 /usr/sbin+
   532 nscd      20   0  861368   1268    668 S   0.0  0.1   0:05.91 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.75 /usr/sbin+
   569 root      20   0   24208     36     12 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3976    936 S   0.0  0.2   0:00.36 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.31 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13232   2404 S   0.0  0.5   0:06.11 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.58 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:03.73 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  36008   5840 S   0.0  1.5   0:14.58 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.31 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.57 pure-ftpd+
   963 named     20   0  858120  44368   2352 S   0.0  1.8   0:15.03 /usr/sbin+
   965 root      20   0  397344  14940   9684 S   0.0  0.6   0:06.37 php-fpm: +
   970 root      20   0  436392  24180  16680 S   0.0  1.0   0:00.82 php-fpm: +
   983 root      20   0  298320   6108   4944 S   0.0  0.3   0:07.58 /usr/sbin+
   992 root      20   0  392856  11980   6388 S   0.0  0.5   0:00.72 php-fpm: +
   994 root      20   0  261552   7544   1720 S   0.0  0.3   0:07.89 cpsrvd (S+
   995 cpanelc+  20   0   10528   3452   2292 S   0.0  0.1   0:21.03 /usr/loca+
   999 root      20   0  386112  10660   6036 S   0.0  0.4   0:00.74 php-fpm: +
  1000 root      20   0 1763064 156956   1012 S   0.0  6.5   0:14.03 /usr/loca+
  1009 root      20   0  385496  11004   5940 S   0.0  0.5   0:00.99 php-fpm: +
  1075 dovenull  20   0   47064   2772   1944 S   0.0  0.1   0:00.53 dovecot/p+
  1076 dovenull  20   0   47472   3244   2056 S   0.0  0.1   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.05 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.32 dovecot/l+
  1079 dovenull  20   0   47048   2688   1928 S   0.0  0.1   0:00.40 dovecot/p+
  1080 dovenull  20   0   47672   3236   1900 S   0.0  0.1   0:00.36 dovecot/i+
  1087 root      20   0   24528   2120    372 S   0.0  0.1   0:00.17 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.06 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.13 SonarPush+
  1150 wp-tool+  20   0  387556  13484   1844 S   0.0  0.6   0:00.27 /usr/bin/+
  1151 wp-tool+  20   0  410480  35968   2020 S   0.0  1.5   0:22.00 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.49 dovecot/a+
  1182 root      20   0  248280 116580    800 S   0.0  4.8   0:05.98 /usr/loca+
  1235 root      20   0  167452   4200   2828 S   0.0  0.2   0:00.51 dnsadmin +
  1238 root      20   0  183900   6444   3216 S   0.0  0.3   0:01.34 cpdavd - +
  1239 root      20   0  209916  11584   2344 S   0.0  0.5   0:02.20 tailwatchd
  1684 root      38  18  130416   1400    716 S   0.0  0.1   0:00.07 cpanellog+
  1953 root      20   0  266984  30708   5532 S   0.0  1.3   0:01.57 /usr/sbin+
  2038 root      20   0  299272    560    392 S   0.0  0.0   0:00.75 php-fpm: +
  5242 root      20   0  262460 129228   3512 S   0.0  5.3   0:02.98 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.48 [kworker]
 28586 root      20   0  181564  29628   2220 S   0.0  1.2   0:07.54 lfd - sle+
 45429 root      20   0   12768   1388   1180 S   0.0  0.1   0:00.42 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.35 /usr/loca+
 45431 root      20   0   12792   1400   1180 S   0.0  0.1   0:00.39 /usr/loca+
 45432 root      20   0   53252  11840   2460 S   0.0  0.5   0:00.05 /usr/loca+
 50184 root      20   0  183048   2112   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1144    964 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 50313 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 57596 nobody    20   0  277880  36484   4904 S   0.0  1.5   0:02.83 /usr/sbin+
 59715 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 63724 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 64719 nobody    20   0  277892  36124   4752 S   0.0  1.5   0:01.79 /usr/sbin+
 66144 nobody    20   0  277540  35896   4724 S   0.0  1.5   0:01.76 /usr/sbin+
 67806 nobody    20   0  277876  36260   4768 S   0.0  1.5   0:01.50 /usr/sbin+
 69673 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 70376 nobody    20   0  277896  35992   4520 S   0.0  1.5   0:00.95 /usr/sbin+
 71497 nobody    20   0  277568  35716   4516 S   0.0  1.5   0:00.94 /usr/sbin+
 72908 root      20   0 1341636  10584    600 S   0.0  0.4   0:00.06 /usr/bin/+
 72948 root      20   0 1277312  11744    596 S   0.0  0.5   0:00.06 /usr/bin/+
 73173 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 73550 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 74322 nobody    20   0  277884  35768   4416 S   0.0  1.5   0:00.52 /usr/sbin+
 75099 nobody    20   0  277892  35796   4328 S   0.0  1.5   0:00.45 /usr/sbin+
 75439 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 75443 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75494 nobody    20   0  277804  35540   4144 S   0.0  1.5   0:00.34 /usr/sbin+
 75809 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 77702 nobody    20   0  277748  35116   3772 S   0.0  1.5   0:00.17 /usr/sbin+
 78435 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78436 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78506 nobody    20   0  277556  34836   3660 S   0.0  1.4   0:00.04 /usr/sbin+
 78526 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 78554 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 78580 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 78708 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 78745 nigeria   20   0  401880  14432   3900 S   0.0  0.6   0:00.19 php-fpm: +
 78754 nobody    20   0  277504  34296   3232 S   0.0  1.4   0:00.00 /usr/sbin+
 78757 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.02 sshd: roo+
 78758 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: roo+
 78759 nobody    20   0  277496  33660   2812 S   0.0  1.4   0:00.00 /usr/sbin+
 78760 nobody    20   0  277496  34352   3240 S   0.0  1.4   0:00.00 /usr/sbin+
 78763 nigeria   20   0  397064   8212   2436 S   0.0  0.3   0:00.00 php-fpm: +
 78764 root      20   0  111304   4444   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 78765 sshd      20   0  115644   2620   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 78782 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78784 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78786 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78787 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78788 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78790 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78791 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78792 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78794 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78796 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78797 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 78799 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78803 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 78807 root      20   0  188200  11080   5152 S   0.0  0.5   0:00.01 /usr/loca+
 78811 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 78813 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78814 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78815 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 78816 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 78818 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78819 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78822 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 78823 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 78824 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78825 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 78831 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 78833 root      20   0  113284   1472   1256 S   0.0  0.1   0:00.00 bash /usr+
 78842 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 78843 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 78847 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 78859 pactpay   20   0  476724  17488  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 78863 root      20   0  160224   2380   1636 S   0.0  0.1   0:00.00 top -n 2 +
 78884 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 78901 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78914 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 78915 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 78918 cloudsms  20   0  400652  15144   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 78944 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 78951 root      20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
 78952 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
 92578 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:32  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      92578  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kworker/u200:1]
root      50313  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:0]
root      59715  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:1]
root      63724  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:4]
root      69673  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:2]
root      73173  0.0  0.0      0     0 ?        S    02:01   0:00  \_ [kworker/0:0]
root      73550  0.0  0.0      0     0 ?        S    02:02   0:00  \_ [kworker/0:2]
root      75439  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:1]
root      75443  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:5]
root      75809  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/0:3]
root      78435  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/0:4]
root      78436  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/0:5]
root      78901  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44396  3652 ?        Ss   Nov06   0:37 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  5504 ?        Ss   Nov06   0:14 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   500 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Ss   Nov06   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   396 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4556 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:06 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   180 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 861368  1268 ?        Ssl  Nov06   0:05 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1144 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      78782  0.0  0.0 183048  2144 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78825  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      78833  0.0  0.0 114252  2416 ?        S    02:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      78784  0.0  0.0 183048  2144 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78811  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      78831  0.0  0.0 108052   356 ?        S    02:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      78842  0.0  0.0 113288  1520 ?        S    02:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      78954  0.0  0.0 153840  2096 ?        R    02:15   0:00  |               \_ ps auxf
root      78786  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78813  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      78787  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78818  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      78788  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78824  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      78790  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78823  0.0  0.0  20164   984 ?        Ss   02:15   0:00  |   \_ jailshell (cloudsms) [78914] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  78914  0.0  0.0  20164   260 ?        S    02:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  78915  0.0  0.0 113284  1208 ?        S    02:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  78918  0.0  0.6 400652 15144 ?        S    02:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      78791  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78819  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      78792  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78814  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      78794  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78816  0.0  0.0  20164   988 ?        Ss   02:15   0:00  |   \_ jailshell (cloudsms) [78951] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  78951  0.0  0.0  20164   264 ?        S    02:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  78953  0.0  0.0 113284  1208 ?        S    02:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      78796  0.0  0.0 183048  2144 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78803  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      78807  1.0  0.4 188200 11080 ?        S    02:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      78863  0.0  0.0 160224  2380 ?        S    02:15   0:00  |           \_ top -n 2 -b -c
root      78797  0.0  0.0 183048  2152 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78822  0.0  0.0  20164   968 ?        Ss   02:15   0:00  |   \_ jailshell (pactpay) [78847] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   78847  0.0  0.0  20164   260 ?        S    02:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   78859  1.0  0.7 476724 17488 ?        S    02:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      78799  0.0  0.0 183048  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      78815  0.0  0.0  20164   968 ?        Ss   02:15   0:00      \_ jailshell (nigeria) [78843] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   78843  0.0  0.0  20164   260 ?        S    02:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   78857  5.0  0.6 400652 15936 ?        S    02:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    36 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3976 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2772 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  3244 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.1  47048  2688 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47672  3236 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2120 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
root      78708  0.0  0.1  41052  2724 ?        S    02:14   0:00  \_ dovecot/auth -w
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13232 ?        Ssl  Nov06   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:03 /usr/sbin/sshd -D
root      78526  0.0  0.1 111304  4264 ?        Ss   02:14   0:00  \_ sshd: [accepted]
root      78554  0.0  0.1 111304  4272 ?        Ss   02:14   0:00  \_ sshd: [accepted]
root      78580  0.0  0.1 111304  4276 ?        Ss   02:14   0:00  \_ sshd: [accepted]
root      78757  0.5  0.2 162436  5832 ?        Ss   02:14   0:00  \_ sshd: root [priv]
sshd      78758  0.0  0.1 115644  2624 ?        S    02:14   0:00  |   \_ sshd: root [net]
root      78764  0.0  0.1 111304  4444 ?        Ss   02:14   0:00  \_ sshd: [accepted]
sshd      78765  0.0  0.1 115644  2620 ?        S    02:14   0:00      \_ sshd: [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 36008 ?       SLsl Nov06   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.8 858120 44368 ?        Ssl  Nov06   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.6 397344 14940 ?        Ss   Nov06   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  78650 21.7  3.1 462324 75284 ?        R    02:14   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  78653 23.5  3.1 463100 76000 ?        R    02:14   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  78654 22.7  3.0 459744 73364 ?        R    02:14   0:06  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   78745  3.1  0.5 401880 14432 ?        S    02:14   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  78752 34.8  2.8 457240 69940 ?        R    02:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  78753 33.8  2.9 459800 71808 ?        R    02:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   78763  0.0  0.3 397064  8212 ?        S    02:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        970  0.0  0.9 436392 24180 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.2 298320  6108 ?        Ssl  Nov06   0:07 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 11980 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7544 ?        Ss   Nov06   0:07 cpsrvd (SSL) - waiting for connections                   
root      78884  0.0  0.0      0     0 ?        Z    02:15   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10528  3452 ?        Rs   Nov06   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10660 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  6.4 1763064 156956 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 11004 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13484 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35968 ?        Ss   Nov06   0:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116580 ?       Ss   Nov06   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.3 262460 129228 ?       S    Nov06   0:02  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4200 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  0.2 183900  6444 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209916 11584 ?        Ss   Nov06   0:02 tailwatchd
root       1684  0.0  0.0 130416  1400 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.1 10.4 1458584 252984 ?      Sl   Nov06   9:34 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30708 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12768  1388 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12792  1400 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11840 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    57590  0.0  1.4 277580 36256 ?        S    01:19   0:02  \_ /usr/sbin/httpd -k start
nobody    57596  0.0  1.5 277880 36484 ?        S    01:19   0:02  \_ /usr/sbin/httpd -k start
nobody    64719  0.0  1.4 277892 36124 ?        S    01:39   0:01  \_ /usr/sbin/httpd -k start
nobody    66144  0.0  1.4 277540 35896 ?        S    01:43   0:01  \_ /usr/sbin/httpd -k start
nobody    67806  0.0  1.4 277876 36260 ?        S    01:47   0:01  \_ /usr/sbin/httpd -k start
nobody    70376  0.0  1.4 277896 35992 ?        S    01:54   0:00  \_ /usr/sbin/httpd -k start
nobody    71497  0.0  1.4 277568 35716 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    74322  0.0  1.4 277884 35768 ?        S    02:04   0:00  \_ /usr/sbin/httpd -k start
nobody    75099  0.0  1.4 277892 35796 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    75494  0.0  1.4 277804 35540 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    77702  0.0  1.4 277748 35116 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    78506  0.0  1.4 277556 34836 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    78754  0.0  1.4 277504 34296 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    78759  0.0  1.3 277496 33660 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    78760  0.0  1.4 277496 34352 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   560 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181564 29628 ?        Ss   00:00   0:07 lfd - sleeping
root      72908  0.0  0.4 1341636 10584 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      72948  0.0  0.4 1277312 11744 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 26727  Threads: 8  Questions: 4412510  Slow queries: 0  Opens: 7475  Flush tables: 1  Open tables: 2000  Queries per second avg: 165.095
*************************** 1. row ***************************
     Id: 64567
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 64568
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 64569
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 64572
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 5. row ***************************
     Id: 64573
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `25` WHERE `phone`='2348058748863' LIMIT 1
*************************** 6. row ***************************
     Id: 64582
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 64583
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 64586
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 142.44.220.121 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 18.235.110.182 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.157.185.164 TIME_WAIT
      1 54.39.6.33 TIME_WAIT
      1 54.39.89.171 TIME_WAIT
      1 66.249.70.32 TIME_WAIT
      1 84.37.38.217 TIME_WAIT
      1 88.216.102.150 TIME_WAIT
      1 91.208.184.168 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.210.150.228 TIME_WAIT
     78 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 02:15:02 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 25 minutes 20 seconds
   Server load: 1.32 0.70 0.69
   Total accesses: 82358 - Total Traffic: 995.4 MB - Total Duration: 37926296
   CPU Usage: u11.26 s4.21 cu423.72 cs236.59 - 2.53% CPU load
   3.08 requests/sec - 38.1 kB/second - 12.4 kB/request - 460.505 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

WWCWWW__WWKWWK_.K...............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req    Dur   Conn Child  Slot     Client     Protocol           VHost                        Request
   0-1  75099 0/127/6141 W 1.17  0     0    2608848 0.0  1.87  74.36 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-1  74322 0/152/6207 W 1.39  0     0    2730794 0.0  1.95  69.89 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   2-1  64719 1/640/6353 C 4.03  0     2093 2725196 5.7  6.00  79.88 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-1  70376 0/283/5528 W 2.75  0     0    2453311 0.0  3.19  61.94 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   4-1  66144 0/622/5647 W 6.08  0     0    2499284 0.0  5.37  62.93 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   5-1  78506 0/12/5332  W 0.08  1     0    2274965 0.0  0.50  64.92 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   6-1  67806 0/428/5220 _ 8.06  0     1137 2311022 0.0  5.62  61.46 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   7-1  75494 0/112/5227 _ 0.62  0     1671 2232808 0.0  1.22  64.16 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   8-1  71497 0/275/4663 W 2.39  1     0    2118211 0.0  3.78  57.60 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   9-1  77702 0/49/4766  W 0.49  0     0    2151295 0.0  0.70  58.26 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   10-1 57590 1/817/3954 K 6.65  0     524  1906984 36.2 12.51 52.95 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=4131919619 HTTP/1.1
   11-1 78754 0/2/3511   W 0.00  1     0    1781479 0.0  0.01  51.08 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   12-1 78759 0/1/3563   W 0.00  1     0    1564166 0.0  0.00  52.56 173.244.42.154 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   13-1 78760 1/2/1876   K 0.00  1     502  1032187 35.5 0.04  27.23 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3384579135 HTTP/1.1
   14-1 78969 0/0/1927   _ 0.00  0     4    1022665 0.0  0.00  20.79 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/1902   . 0.00  1529  0    1161707 0.0  0.00  19.31 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 57596 3/933/2943 K 14.24 2     415  1380235 98.8 12.22 33.03 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=3052448386 HTTP/1.1
   17-1 -     0/0/1184   . 0.00  2206  0    761744  0.0  0.00  12.61 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 -     0/0/931    . 0.00  2675  0    625850  0.0  0.00  9.86  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/48     . 0.00  9193  0    31753   0.0  0.00  0.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/542    . 0.00  9202  0    256184  0.0  0.00  5.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/717    . 0.00  9200  0    355802  0.0  0.00  10.38 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1023   . 0.00  6829  0    475279  0.0  0.00  13.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/258    . 0.00  8841  0    140369  0.0  0.00  3.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/174    . 0.00  9195  0    87052   0.0  0.00  1.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/331    . 0.00  8616  0    117833  0.0  0.00  3.49  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/282    . 0.00  13239 0    128233  0.0  0.00  3.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/490    . 0.00  12331 0    227604  0.0  0.00  3.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179    . 0.00  13227 0    92180   0.0  0.00  1.94  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/156    . 0.00  13725 0    83779   0.0  0.00  1.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00  14404 0    56      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00  13237 0    132085  0.0  0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00  14390 0    1509    0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00  14411 0    1381    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00  14393 0    53900   0.0  0.00  1.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00  14402 0    1494    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00  13749 0    68720   0.0  0.00  1.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00  14415 0    157495  0.0  0.00  3.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00  14412 4    712     0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00  14405 0    1369    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00  13929 0    43685   0.0  0.00  1.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00  14414 0    0       0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00  14384 0    735     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00  14401 0    54      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00  13417 0    124261  0.0  0.00  2.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 527
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 0...91)
   index usage: 9%, cache usage: 12%
   total entries stored since starting: 10014
   total entries replaced since starting: 0
   total entries expired since starting: 9480
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 22 miss
   total removes since starting: 7 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit