403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.02.24.txt
 ## swap threshold exceeded
## server overview
2025-11-07.02.24 load[0] mem[66/67] mysql[1/11] httpd[27]
              total        used        free      shared  buff/cache   available
Mem:           2363        1485          99          83         778         624
Swap:          1999        1396         603
 02:24:02 up  7:34,  0 users,  load average: 0.80, 2.39, 1.95
## system overview
top - 02:24:02 up  7:34,  0 users,  load average: 0.80, 2.39, 1.95
Tasks: 224 total,   8 running, 215 sleeping,   0 stopped,   1 zombie
%Cpu(s): 55.9 us, 44.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    75808 free,  1546948 used,   797544 buff/cache
KiB Swap:  2047996 total,   617980 free,  1430016 used.   613764 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 82468 healtho+  20   0  470512  84204   4340 R  31.2  3.5   0:03.81 php-fpm: +
  1759 mysql     20   0 1458584 253600   3380 S  18.8 10.5   9:56.15 /usr/sbin+
     1 root      20   0   44396   3476   1528 S   6.2  0.1   0:38.42 /usr/lib/+
    14 root      20   0       0      0      0 S   6.2  0.0   0:03.03 [ksoftirq+
   355 root      20   0   40244   6936   6636 S   6.2  0.3   0:15.08 /usr/lib/+
 82455 nobody    20   0  277508  34756   3624 S   6.2  1.4   0:00.02 /usr/sbin+
 82696 nigeria   20   0  400652  15936  10216 S   6.2  0.7   0:00.01 /opt/cpan+
 82701 pactpay   20   0  476460  15972  10408 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:02.53 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:33.48 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.73 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:01.93 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.18 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.40 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    524    396 S   0.0  0.0   0:02.55 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 S   0.0  0.1   0:13.98 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.03 /sbin/rpc+
   515 root      20   0   52852    396    288 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4556   1188 S   0.0  0.2   0:00.35 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:03.57 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:06.15 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.63 /usr/sbin+
   526 root      20   0  152780    180    136 S   0.0  0.0   0:00.02 /usr/sbin+
   532 nscd      20   0  861368   1288    688 S   0.0  0.1   0:06.06 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.76 /usr/sbin+
   569 root      20   0   24208     36     12 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3956    916 S   0.0  0.2   0:00.38 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.32 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13308   2476 S   0.0  0.5   0:06.23 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.59 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:03.83 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  36476   5780 S   0.0  1.5   0:14.87 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.35 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.58 pure-ftpd+
   963 named     20   0  858120  44420   2312 S   0.0  1.8   0:15.37 /usr/sbin+
   965 root      20   0  397344  14944   9688 S   0.0  0.6   0:06.66 php-fpm: +
   970 root      20   0  436392  24180  16680 S   0.0  1.0   0:00.84 php-fpm: +
   983 root      20   0  298320   7424   6244 S   0.0  0.3   0:07.75 /usr/sbin+
   992 root      20   0  392856  11980   6388 S   0.0  0.5   0:00.72 php-fpm: +
   994 root      20   0  261552   7560   1736 S   0.0  0.3   0:07.95 cpsrvd (S+
   995 cpanelc+  20   0   10528   3452   2292 R   0.0  0.1   0:21.45 /usr/loca+
   999 root      20   0  386112  10616   5992 S   0.0  0.4   0:00.75 php-fpm: +
  1000 root      20   0 1763064 150132    664 S   0.0  6.2   0:14.03 /usr/loca+
  1009 root      20   0  385496  11004   5940 S   0.0  0.5   0:01.00 php-fpm: +
  1075 dovenull  20   0   47064   2748   1920 S   0.0  0.1   0:00.54 dovecot/p+
  1076 dovenull  20   0   47472   3224   2036 S   0.0  0.1   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.05 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.33 dovecot/l+
  1079 dovenull  20   0   47048   2688   1928 S   0.0  0.1   0:00.41 dovecot/p+
  1080 dovenull  20   0   47812   3224   1888 S   0.0  0.1   0:00.37 dovecot/i+
  1087 root      20   0   24528   2120    372 S   0.0  0.1   0:00.17 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.06 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.14 SonarPush+
  1150 wp-tool+  20   0  387556  13248   1608 S   0.0  0.5   0:00.28 /usr/bin/+
  1151 wp-tool+  20   0  410480  35688   1740 S   0.0  1.5   0:22.44 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.50 dovecot/a+
  1182 root      20   0  248280 116580    800 S   0.0  4.8   0:06.05 /usr/loca+
  1235 root      20   0  167452   4200   2828 S   0.0  0.2   0:00.51 dnsadmin +
  1238 root      20   0  183900   6092   2864 S   0.0  0.3   0:01.34 cpdavd - +
  1239 root      20   0  209916  11268   2056 S   0.0  0.5   0:02.24 tailwatchd
  1684 root      38  18  130416   1400    716 S   0.0  0.1   0:00.07 cpanellog+
  1953 root      20   0  266984  30708   5532 S   0.0  1.3   0:01.63 /usr/sbin+
  2038 root      20   0  299272    560    392 S   0.0  0.0   0:00.76 php-fpm: +
  5242 root      20   0  262460 129040   3324 S   0.0  5.3   0:03.03 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.49 [kworker]
 28586 root      20   0  181668  29700   2220 S   0.0  1.2   0:08.11 lfd - sle+
 45429 root      20   0   12772   1388   1180 S   0.0  0.1   0:00.49 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.42 /usr/loca+
 45431 root      20   0   12792   1400   1180 S   0.0  0.1   0:00.45 /usr/loca+
 45432 root      20   0   53252  11836   2456 S   0.0  0.5   0:00.05 /usr/loca+
 50184 root      20   0  183048   2112   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1144    964 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 59715 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 63724 root      20   0       0      0      0 D   0.0  0.0   0:00.06 [kworker/+
 67806 nobody    20   0  277876  36500   5008 S   0.0  1.5   0:01.92 /usr/sbin+
 72908 root      20   0 1341636  10584    600 S   0.0  0.4   0:00.06 /usr/bin/+
 72948 root      20   0 1277312  11648    596 S   0.0  0.5   0:00.06 /usr/bin/+
 73173 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 73550 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 75099 nobody    20   0  277892  36424   4932 S   0.0  1.5   0:00.90 /usr/sbin+
 75443 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77702 nobody    20   0  277748  35840   4492 S   0.0  1.5   0:00.57 /usr/sbin+
 78754 nobody    20   0  277904  35560   4228 S   0.0  1.5   0:00.23 /usr/sbin+
 78901 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 79131 nobody    20   0  277888  35948   4620 S   0.0  1.5   0:00.40 /usr/sbin+
 79132 nobody    20   0  277892  35788   4456 S   0.0  1.5   0:00.47 /usr/sbin+
 79379 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 79568 nobody    20   0  277888  35800   4480 S   0.0  1.5   0:00.23 /usr/sbin+
 80117 nobody    20   0  277888  35556   4228 S   0.0  1.5   0:00.26 /usr/sbin+
 80280 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80744 nobody    20   0  277744  35548   4200 S   0.0  1.5   0:00.30 /usr/sbin+
 81093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81483 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81805 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81987 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 82104 root      20   0   41052   2800   2132 S   0.0  0.1   0:00.00 dovecot/a+
 82170 nobody    20   0  277660  35060   3836 S   0.0  1.4   0:00.08 /usr/sbin+
 82205 nobody    20   0  277504  34796   3688 S   0.0  1.4   0:00.02 /usr/sbin+
 82206 nobody    20   0  277048  32292   1712 S   0.0  1.3   0:00.00 /usr/sbin+
 82207 nobody    20   0  277048  32540   1960 S   0.0  1.3   0:00.00 /usr/sbin+
 82250 nobody    20   0  277048  32292   1712 S   0.0  1.3   0:00.00 /usr/sbin+
 82251 nobody    20   0  277604  34644   3528 S   0.0  1.4   0:00.01 /usr/sbin+
 82252 nobody    20   0  277048  32540   1960 S   0.0  1.3   0:00.00 /usr/sbin+
 82253 nobody    20   0  277752  35220   3876 S   0.0  1.5   0:00.06 /usr/sbin+
 82282 nobody    20   0  277364  34720   3756 S   0.0  1.4   0:00.01 /usr/sbin+
 82283 nobody    20   0  277048  32292   1708 S   0.0  1.3   0:00.00 /usr/sbin+
 82285 nobody    20   0  277604  34612   3504 S   0.0  1.4   0:00.01 /usr/sbin+
 82286 nobody    20   0  277748  34932   3680 S   0.0  1.4   0:00.04 /usr/sbin+
 82288 nobody    20   0  277880  35168   3824 S   0.0  1.5   0:00.10 /usr/sbin+
 82289 nobody    20   0  277744  35024   3660 S   0.0  1.4   0:00.02 /usr/sbin+
 82342 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 82343 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 82432 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 82433 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 82436 nobody    20   0  277772  34916   3556 S   0.0  1.4   0:00.03 /usr/sbin+
 82439 nobody    20   0  277376  34596   3604 S   0.0  1.4   0:00.02 /usr/sbin+
 82440 nobody    20   0  277508  34564   3548 S   0.0  1.4   0:00.01 /usr/sbin+
 82452 nobody    20   0  277496  35012   3904 S   0.0  1.4   0:00.02 /usr/sbin+
 82453 nobody    20   0  277708  34752   3616 S   0.0  1.4   0:00.02 /usr/sbin+
 82454 nobody    20   0  277880  35004   3696 S   0.0  1.4   0:00.04 /usr/sbin+
 82484 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 82491 healtho+  20   0  459288  72128   4252 S   0.0  3.0   0:03.33 php-fpm: +
 82492 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 82493 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 82515 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 82521 healtho+  20   0  459288  72096   4212 S   0.0  3.0   0:02.79 php-fpm: +
 82615 nigeria   20   0  397984  12600   5092 S   0.0  0.5   0:00.02 php-fpm: +
 82616 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 82621 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 82623 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 82624 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 82627 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82628 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82629 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82630 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82631 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82632 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82633 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82634 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82635 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82636 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82638 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 82639 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82640 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 82641 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 82642 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 82666 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82673 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 82675 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82676 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82677 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 82678 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82679 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82680 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 82681 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 82682 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82683 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82684 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 82686 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 82694 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 82698 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 82699 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 82703 saboakin  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 82705 saboakin  20   0  400652  15408  10000 R   0.0  0.6   0:00.00 /opt/cpan+
 82708 cloudsms  20   0  293156  11644   8088 R   0.0  0.5   0:00.00 /opt/cpan+
 82709 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 92578 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:33  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      92578  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kworker/u200:1]
root      59715  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:1]
root      63724  0.0  0.0      0     0 ?        R    01:36   0:00  \_ [kworker/1:4]
root      73173  0.0  0.0      0     0 ?        S    02:01   0:00  \_ [kworker/0:0]
root      73550  0.0  0.0      0     0 ?        S    02:02   0:00  \_ [kworker/0:2]
root      75443  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:5]
root      78901  0.0  0.0      0     0 ?        R    02:15   0:00  \_ [kworker/u200:2]
root      79379  0.0  0.0      0     0 ?        D    02:16   0:00  \_ [kworker/1:0]
root      80280  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:2]
root      81093  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root      81483  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/0:3]
root      81805  0.0  0.0      0     0 ?        S    02:22   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44396  3476 ?        Ss   Nov06   0:38 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  6936 ?        Ss   Nov06   0:15 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   524 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Ss   Nov06   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   396 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4556 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:06 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   180 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 861368  1288 ?        Ssl  Nov06   0:06 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1144 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      82624  0.0  0.0 183048  2144 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82640  0.0  0.0 113284  1212 ?        Ss   02:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      82641  0.0  0.0 108052   356 ?        S    02:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      82642  0.0  0.0 113288  1516 ?        S    02:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      82710  0.0  0.0 153840  2092 ?        R    02:24   0:00  |               \_ ps auxf
root      82627  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82678  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      82628  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82683  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      82629  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82682  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      82630  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82666  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      82631  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82676  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      82632  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82679  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      82634  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82675  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      82635  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82684  0.0  0.0  20164   804 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      82636  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82686  0.0  0.0  20164   964 ?        Ss   02:24   0:00  |   \_ jailshell (pactpay) [82698] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   82698  0.0  0.0  20164   260 ?        S    02:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   82701  0.0  0.6 476460 16060 ?        R    02:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      82638  0.0  0.0 183048  2144 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82677  0.0  0.0  20164   968 ?        Ss   02:24   0:00  |   \_ jailshell (nigeria) [82694] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   82694  0.0  0.0  20164   264 ?        S    02:24   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   82696  0.0  0.6 400652 15936 ?        S    02:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      82639  0.0  0.0 183048  2148 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root      82681  0.0  0.0  20164   960 ?        Ss   02:24   0:00      \_ jailshell (saboakin) [82703] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  82703  0.0  0.0      0     0 ?        D    02:24   0:00          \_ [jailshell]
root        569  0.0  0.0  24208    36 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3956 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2748 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  3224 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.1  47048  2688 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47812  3224 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2120 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
root      81987  0.0  0.1  60820  4508 ?        S    02:22   0:00  \_ dovecot/lmtp
root      82104  0.0  0.1  41052  2800 ?        S    02:22   0:00  \_ dovecot/auth -w
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13308 ?        Ssl  Nov06   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:03 /usr/sbin/sshd -D
root      82342  0.0  0.1 111304  4264 ?        Ss   02:23   0:00  \_ sshd: [accepted]
sshd      82343  0.0  0.1 115644  2628 ?        S    02:23   0:00  |   \_ sshd: [net]
root      82432  0.0  0.1 111304  4272 ?        Ss   02:23   0:00  \_ sshd: [accepted]
sshd      82433  0.0  0.1 115644  2632 ?        S    02:23   0:00  |   \_ sshd: [net]
root      82484  0.0  0.1 111304  4264 ?        Ss   02:23   0:00  \_ sshd: [accepted]
root      82492  0.0  0.1 111304  4272 ?        Ss   02:23   0:00  \_ sshd: [accepted]
sshd      82493  0.0  0.1 115644  2632 ?        S    02:23   0:00  |   \_ sshd: [net]
root      82515  0.0  0.1 111304  4268 ?        Ss   02:23   0:00  \_ sshd: [accepted]
root      82616  0.0  0.1 111304  4440 ?        Ss   02:23   0:00  \_ sshd: [accepted]
sshd      82621  0.0  0.1 115644  2628 ?        S    02:23   0:00      \_ sshd: [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.5 5654048 36476 ?       SLsl Nov06   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.8 858120 44420 ?        Ssl  Nov06   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.6 397344 14944 ?        Ss   Nov06   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  82468 14.7  3.4 470512 84204 ?        R    02:23   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  82491 14.4  2.9 459288 72128 ?        S    02:23   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  82521 14.6  2.9 459288 72096 ?        S    02:23   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   82615  0.5  0.5 397984 12600 ?        S    02:23   0:00  \_ php-fpm: pool nigeriadecide_org
root        970  0.0  0.9 436392 24180 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.3 298320  7424 ?        Ssl  Nov06   0:07 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 11980 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7560 ?        Ss   Nov06   0:07 cpsrvd (SSL) - waiting for connections                   
root      82623  0.0  0.0      0     0 ?        Z    02:24   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10528  3452 ?        Rs   Nov06   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10616 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  6.2 1763064 150132 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 11004 ?        Ss   Nov06   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13248 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35688 ?        Ss   Nov06   0:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116580 ?       Ss   Nov06   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.3 262460 129040 ?       S    Nov06   0:03  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4200 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  0.2 183900  6092 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209916 11268 ?        Ss   Nov06   0:02 tailwatchd
root       1684  0.0  0.0 130416  1400 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.1 10.4 1458584 253600 ?      Sl   Nov06   9:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30708 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12772  1388 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12792  1400 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11836 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    67806  0.0  1.5 277876 36500 ?        S    01:47   0:01  \_ /usr/sbin/httpd -k start
nobody    75099  0.0  1.5 277892 36424 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    77702  0.0  1.4 277748 35840 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    78754  0.0  1.4 277904 35560 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    79131  0.0  1.4 277888 35948 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    79132  0.0  1.4 277892 35788 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    79568  0.0  1.4 277888 35800 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    80117  0.0  1.4 277888 35556 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody    80744  0.1  1.4 277744 35548 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody    82170  0.1  1.4 277660 35060 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody    82205  0.0  1.4 277504 34796 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody    82206  0.0  1.3 277048 32292 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody    82207  0.0  1.3 277048 32540 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody    82250  0.0  1.3 277048 32292 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82251  0.0  1.4 277604 34644 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82252  0.0  1.3 277048 32540 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82253  0.0  1.4 277752 35220 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82282  0.0  1.4 277364 34720 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82283  0.0  1.3 277048 32292 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82285  0.0  1.4 277604 34612 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82286  0.0  1.4 277748 34932 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82288  0.1  1.4 277880 35168 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82289  0.0  1.4 277744 35024 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82436  0.0  1.4 277772 34916 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82439  0.0  1.4 277376 34596 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82440  0.0  1.4 277508 34564 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82452  0.0  1.4 277496 35012 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82453  0.0  1.4 277708 34752 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82454  0.1  1.4 277880 35004 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    82455  0.0  1.4 277508 34756 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   560 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181668 29700 ?        Ss   00:00   0:08 lfd - sleeping
root      72908  0.0  0.4 1341636 10584 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      72948  0.0  0.4 1277312 11648 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 27267  Threads: 4  Questions: 4595528  Slow queries: 0  Opens: 7618  Flush tables: 1  Open tables: 2000  Queries per second avg: 168.538
*************************** 1. row ***************************
     Id: 67370
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 67372
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 67373
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 67378
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.233.23 TIME_WAIT
      1 15.235.96.164 TIME_WAIT
      1 15.235.96.50 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.36 TIME_WAIT
      1 216.73.216.88 TIME_WAIT
      1 47.128.111.122 TIME_WAIT
      1 47.128.116.35 TIME_WAIT
      1 47.128.121.128 TIME_WAIT
      1 47.128.121.192 TIME_WAIT
      1 47.128.121.64 TIME_WAIT
      1 47.128.121.71 TIME_WAIT
      1 47.128.123.76 TIME_WAIT
      1 47.128.20.39 TIME_WAIT
      1 47.128.20.76 TIME_WAIT
      1 47.128.96.174 TIME_WAIT
      1 47.128.96.201 TIME_WAIT
      1 82.153.221.199 TIME_WAIT
      1 85.254.175.224 TIME_WAIT
      1 87.250.224.21 TIME_WAIT
      1 92.50.32.193 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 192.210.150.227 TIME_WAIT
     73 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 02:24:02 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 34 minutes 19 seconds
   Server load: 0.80 2.39 1.95
   Total accesses: 85417 - Total Traffic: 1.0 GB - Total Duration: 41396583
   CPU Usage: u4.86 s2.54 cu441.3 cs244.26 - 2.54% CPU load
   3.13 requests/sec - 38.5 kB/second - 12.3 kB/request - 484.641 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KW_RRR_RRRWRRCRRRRRRRRRK_KRK_C..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol             VHost                                          Request
   0-1  75099 2/331/6345 K 1.78 1     1   2831355 39.5 2.91  75.41 47.128.110.70  http/1.1 nigeriadecide.org:443          GET /images/candidates/muhammadu%20buhari.jpg HTTP/1.1
   1-1  80744 0/79/6339  W 1.30 0     0   2858052 0.0  1.13  71.34 ::1            http/1.1 chs1.nescrow.com.ng:80         GET //whm-server-status HTTP/1.0
   2-1  82170 0/29/6493  _ 0.15 0     336 2873590 0.0  0.29  80.83 157.230.45.41  http/1.1 health.oyostate.gov.ng:443     POST //xmlrpc.php HTTP/1.1
   3-1  82205 0/12/5631  R 0.02 27    1   2560696 0.0  0.07  62.64 47.128.96.201  http/1.1
   4-1  82206 0/0/5788   R 0.00 62    0   2681759 0.0  0.00  63.55 47.128.110.78  http/1.1
   5-1  80117 0/96/5493  R 0.60 86    334 2456027 0.0  0.74  66.23 47.128.18.247  http/1.1
   6-1  67806 0/591/5383 _ 8.94 0     1   2483031 0.0  6.94  62.78 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80         GET / HTTP/1.1
   7-1  82207 0/0/5309   R 0.00 62    0   2351204 0.0  0.00  64.59 47.128.110.78  http/1.1
   8-1  82250 0/0/4802   R 0.00 61    0   2313022 0.0  0.00  58.35 47.128.122.13  http/1.1
   9-1  77702 0/181/4898 R 1.54 74    10  2293477 0.0  1.86  59.42 47.128.97.212  http/1.1
   10-1 82436 0/8/4151   W 0.09 0     0   2119178 0.0  0.19  54.31 157.230.45.41  http/1.1 health.oyostate.gov.ng:443     POST //xmlrpc.php HTTP/1.1
   11-1 78754 0/94/3603  R 0.33 75    287 1891114 0.0  0.49  51.55 47.128.97.212  http/1.1
   12-1 82251 0/3/3642   R 0.00 51    395 1658958 0.0  0.04  53.15 47.128.121.71  http/1.1
   13-1 82439 1/9/2028   C 0.03 1     23  1182828 1.7  0.05  28.18 142.93.129.190 http/1.1 developers.cloudsms.com.ng:443 GET /.env HTTP/1.1
   14-1 79568 0/95/2055  R 0.37 43    340 1174234 0.0  0.55  21.50 47.128.121.128 http/1.1
   15-1 82252 0/0/2030   R 0.00 61    0   1337525 0.0  0.00  19.94 47.128.122.13  http/1.1
   16-1 82253 0/16/3101  R 0.23 3     21  1588882 0.0  0.17  33.80 47.128.110.70  http/1.1
   17-1 79131 0/175/1359 R 0.70 49    284 961427  0.0  0.95  13.55 47.128.121.71  http/1.1
   18-1 79132 0/160/1091 R 1.15 61    336 794925  0.0  9.18  19.04 47.128.122.13  http/1.1
   19-1 82282 0/9/165    R 0.02 34    4   161557  0.0  0.06  1.22  47.128.111.122 http/1.1
   20-1 82283 0/0/620    R 0.00 60    0   371560  0.0  0.00  5.59  47.128.44.69   http/1.1
   21-1 82440 0/4/806    R 0.00 14    340 456957  0.0  0.06  11.37 47.128.121.64  http/1.1
   22-1 82285 0/3/1047   R 0.03 48    286 500825  0.0  0.05  13.41 47.128.20.76   http/1.1
   23-1 82286 1/16/274   K 0.12 1     1   147098  2.9  0.10  3.13  47.128.110.70  http/1.1 nigeriadecide.org:443          GET /images/APC.jpg HTTP/1.1
   24-1 82452 0/10/188   _ 0.05 0     0   90451   0.0  0.06  1.84  ::1            http/1.1 chs1.nescrow.com.ng:80         GET //whm-server-status HTTP/1.0
   25-1 82288 2/22/353   K 0.39 1     314 126455  69.0 0.36  3.85  66.249.70.32   http/1.1 support.cloudware.ng:443       GET /?c=1990043391 HTTP/1.1
   26-1 82289 0/7/289    R 0.04 32    284 131427  0.0  0.09  3.17  47.128.20.39   http/1.1
   27-1 82453 1/8/498    K 0.07 1     407 230097  24.3 0.06  3.91  167.160.59.220 http/1.1 health.oyostate.gov.ng:443     GET /portfolio/mrs-makinde-leads-fight-against-malaria-in-oyo-s
   28-1 82454 0/10/189   _ 0.10 0     331 96062   0.0  0.14  2.09  66.249.70.39   http/1.1 support.cloudware.ng:443       GET /?c=1031892328 HTTP/1.1
   29-1 82455 1/8/164    C 0.04 0     62  85332   1.7  0.04  1.42  142.93.129.190 http/1.1 developers.cloudsms.com.ng:443 GET /.git/config HTTP/1.1
   30-0 -     0/0/3      . 0.00 14944 0   56      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00 13776 0   132085  0.0  0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00 14930 0   1509    0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 14951 0   1381    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00 14933 0   53900   0.0  0.00  1.65  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 14942 0   1494    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00 14289 0   68720   0.0  0.00  1.46  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00 14955 0   157495  0.0  0.00  3.36  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 14952 4   712     0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00 14945 0   1369    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00 14468 0   43685   0.0  0.00  1.00  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00 14954 0   0       0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 14924 0   735     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 14941 0   54      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00 13956 0   124261  0.0  0.00  2.80  ::1            http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 865
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...26)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 12455
   total entries replaced since starting: 0
   total entries expired since starting: 11583
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 22 miss
   total removes since starting: 7 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit