403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.12.30.txt
 ## swap threshold exceeded
## server overview
2025-11-08.12.30 load[0] mem[67/66] mysql[1/11] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1522          76          51         764         620
Swap:          1999        1403         596
 12:30:02 up  2:43,  0 users,  load average: 0.83, 0.86, 0.94
## system overview
top - 12:30:02 up  2:43,  0 users,  load average: 0.83, 0.86, 0.94
Tasks: 215 total,   9 running, 205 sleeping,   0 stopped,   1 zombie
%Cpu(s): 67.6 us, 29.4 sy,  0.0 ni,  2.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    62740 free,  1555736 used,   801824 buff/cache
KiB Swap:  2047996 total,   610812 free,  1437184 used.   638760 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
100549 healtho+  20   0  461848  71004   4224 R  47.1  2.9   0:03.83 php-fpm: +
  1773 mysql     20   0 1458588 253548   3644 S  35.3 10.5   4:04.40 /usr/sbin+
100613 healtho+  20   0  457244  67628   4212 R  11.8  2.8   0:02.38 php-fpm: +
100824 root      20   0  188860  12948   5544 R  11.8  0.5   0:00.05 /usr/loca+
100847 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.03 /opt/cpan+
   512 dbus      20   0   58768   1472    708 S   5.9  0.1   0:05.31 /usr/bin/+
100880 cloudsms  20   0  400652  15148   9844 S   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3504   1548 S   0.0  0.1   0:15.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.20 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:12.61 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.74 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 R   0.0  0.0   0:13.82 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.51 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.21 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.70 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   4576   4260 S   0.0  0.2   0:06.14 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    504    376 S   0.0  0.0   0:01.04 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7576   1348 S   0.0  0.3   0:00.27 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.02 /sbin/rpc+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.21 /usr/sbin+
   539 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.37 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    968    512 S   0.0  0.0   0:01.40 /usr/lib/+
   547 nscd      20   0  928956   1508    812 S   0.0  0.1   0:05.22 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.28 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   4004    984 S   0.0  0.2   0:00.18 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 171844   1120 S   0.0  7.1   0:13.66 /usr/loca+
   975 root      20   0  249168   7240   3776 S   0.0  0.3   0:03.03 /usr/sbin+
   976 named     20   0 1186804  34424   1836 S   0.0  1.4   0:05.68 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:03.08 php-fpm: +
   982 systuser  20   0  114016  12944   2592 S   0.0  0.5   0:02.38 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.91 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.20 /usr/bin/+
   986 cpanelc+  20   0   10340   3500   2436 S   0.0  0.1   0:08.03 /usr/loca+
   987 root      20   0  386112    772    560 S   0.0  0.0   0:00.29 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    816    608 S   0.0  0.0   0:00.30 php-fpm: +
   990 root      20   0  153404    380    296 S   0.0  0.0   0:00.21 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.38 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.28 php-fpm: +
  1006 telegraf  20   0 5654048  36360   5768 S   0.0  1.5   0:05.68 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.15 /usr/sbin+
  1012 root      20   0  261164  28024   5568 S   0.0  1.2   0:01.59 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.44 /usr/sbin+
  1129 dovenull  20   0   46984   2712   1932 S   0.0  0.1   0:00.16 dovecot/p+
  1130 dovenull  20   0   47744   3484   2196 S   0.0  0.1   0:00.13 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.03 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.12 dovecot/l+
  1133 dovenull  20   0   47188   2644   1708 S   0.0  0.1   0:00.21 dovecot/p+
  1134 dovenull  20   0   47500   3388   2204 S   0.0  0.1   0:00.11 dovecot/i+
  1142 root      20   0   24528   2604    552 S   0.0  0.1   0:00.08 dovecot/c+
  1144 dovecot   20   0   13568    664    436 S   0.0  0.0   0:00.02 dovecot/s+
  1204 systuser  20   0  157704   2896    864 S   0.0  0.1   0:00.07 SonarPush+
  1217 wp-tool+  20   0  410452  35768   1748 S   0.0  1.5   0:08.26 /usr/bin/+
  1218 wp-tool+  20   0  387528  13172   1548 S   0.0  0.5   0:00.16 /usr/bin/+
  1221 dovecot   20   0   41168   1524   1068 S   0.0  0.1   0:00.23 dovecot/a+
  1264 root      20   0  209324  20428   2916 S   0.0  0.8   0:01.30 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.18 dnsadmin +
  1268 root      20   0  262224  24620   6760 S   0.0  1.0   0:00.61 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.25 php-fpm: +
  1717 root      38  18  130416   1448    720 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.75 /usr/sbin+
  1952 root      20   0   12836    436    324 S   0.0  0.0   0:01.15 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.96 /usr/loca+
  1954 root      20   0   12872    404    280 S   0.0  0.0   0:01.05 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  182248  11364   1212 S   0.0  0.5   0:09.88 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.16 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.41 /usr/loca+
 47195 root      20   0  259304 126036   2972 S   0.0  5.2   0:01.51 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 71949 cloudw    20   0  471856   9448   5048 S   0.0  0.4   0:02.23 php-fpm: +
 76930 worencom  20   0   38484   3536   2520 S   0.0  0.1   0:00.00 dovecot/i+
 79320 nobody    20   0  277896  19568   4248 S   0.0  0.8   0:01.65 /usr/sbin+
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.06 /usr/bin/+
 84123 root      20   0 1277056  11692    596 S   0.0  0.5   0:00.07 /usr/bin/+
 86312 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 88645 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 89839 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 90208 nobody    20   0  277536  19312   4040 S   0.0  0.8   0:00.80 /usr/sbin+
 90209 nobody    20   0  277880  19496   4240 S   0.0  0.8   0:01.08 /usr/sbin+
 90900 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 91938 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 93235 nobody    20   0  277884  19184   3936 S   0.0  0.8   0:00.87 /usr/sbin+
 93404 nobody    20   0  277868  19320   4060 S   0.0  0.8   0:00.49 /usr/sbin+
 93465 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 95419 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96025 cloudw    20   0  471840   9500   5084 S   0.0  0.4   0:00.57 php-fpm: +
 96058 nobody    20   0  277576  18948   3744 S   0.0  0.8   0:00.39 /usr/sbin+
 96839 nobody    20   0  277896  19516   3936 S   0.0  0.8   0:00.41 /usr/sbin+
 96842 nobody    20   0  277584  19644   4120 S   0.0  0.8   0:00.42 /usr/sbin+
 97272 nobody    20   0  277544  18952   3864 S   0.0  0.8   0:00.44 /usr/sbin+
 97279 nobody    20   0  277572  18816   3708 S   0.0  0.8   0:00.10 /usr/sbin+
 97285 nobody    20   0  277876  18848   3700 S   0.0  0.8   0:00.51 /usr/sbin+
 97286 nobody    20   0  277548  18832   3768 S   0.0  0.8   0:00.08 /usr/sbin+
 97312 nobody    20   0  277496  18908   3892 S   0.0  0.8   0:00.28 /usr/sbin+
 99297 nobody    20   0  277508  18860   3848 S   0.0  0.8   0:00.14 /usr/sbin+
 99333 nobody    20   0  277552  18640   3644 S   0.0  0.8   0:00.24 /usr/sbin+
 99433 nobody    20   0  277812  18708   3704 S   0.0  0.8   0:00.13 /usr/sbin+
 99641 nobody    20   0  277884  19360   3940 S   0.0  0.8   0:00.12 /usr/sbin+
 99694 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99761 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 99773 nobody    20   0  277560  18684   3676 S   0.0  0.8   0:00.07 /usr/sbin+
 99784 nobody    20   0  277468  18608   3672 S   0.0  0.8   0:00.04 /usr/sbin+
 99794 nobody    20   0  277556  18612   3584 S   0.0  0.8   0:00.12 /usr/sbin+
 99795 nobody    20   0  277696  18792   3692 S   0.0  0.8   0:00.13 /usr/sbin+
100237 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100603 healtho+  20   0  457376  67632   4212 S   0.0  2.8   0:02.70 php-fpm: +
100687 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
100694 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
100703 cloudw    20   0  523824  62060   6740 S   0.0  2.6   0:00.51 php-fpm: +
100710 cloudw    20   0  428632  38428   4448 S   0.0  1.6   0:00.45 php-fpm: +
100748 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100750 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100751 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100752 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100753 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100754 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100755 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100756 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100758 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100759 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100761 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100762 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100764 root      20   0  183040   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100765 root      20   0  183040   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100766 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100768 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100775 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
100776 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
100777 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
100788 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
100792 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
100793 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100796 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100797 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100798 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100799 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100800 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100802 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
100803 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100805 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
100807 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
100808 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100809 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
100810 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100812 root      20   0  188228  11104   5148 S   0.0  0.5   0:00.02 /usr/loca+
100817 cloudw    20   0  470992   6700   3340 R   0.0  0.3   0:00.00 php-fpm: +
100819 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
100830 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
100837 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
100842 pactpay   20   0  476724  17112  11408 S   0.0  0.7   0:00.01 /opt/cpan+
100859 root      20   0  160224   2360   1632 S   0.0  0.1   0:00.00 top -n 2 +
100871 oysipao+  20   0  437704   5144   3104 R   0.0  0.2   0:00.00 php-fpm: +
100875 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
100876 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
100878 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
100904 root      20   0  113284    212      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      86312  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/1:4]
root      88645  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/0:4]
root      89839  0.0  0.0      0     0 ?        S    12:10   0:00  \_ [kworker/1:2]
root      90900  0.0  0.0      0     0 ?        S    12:12   0:00  \_ [kworker/u200:1]
root      91938  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/0:0]
root      93465  0.0  0.0      0     0 ?        S    12:17   0:00  \_ [kworker/0:1]
root      95419  0.0  0.0      0     0 ?        S    12:20   0:00  \_ [kworker/1:0]
root      99694  0.0  0.0      0     0 ?        S    12:28   0:00  \_ [kworker/1:1]
root      99761  0.0  0.0      0     0 ?        S    12:28   0:00  \_ [kworker/0:2]
root     100237  0.0  0.0      0     0 ?        S    12:29   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44424  3504 ?        Ss   09:46   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39496  4576 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   504 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.3 224280  7576 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   356 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   968 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1504 ?        Ssl  09:46   0:05 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root     100748  0.0  0.0 183044  2140 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100805  0.0  0.0 113284  1208 ?        Ss   12:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root     100819  0.0  0.0 113284  1468 ?        S    12:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root     100750  0.0  0.0 183044  2140 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100775  0.0  0.0 113284  1212 ?        Ss   12:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     100776  0.0  0.0 108052   360 ?        S    12:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     100777  0.0  0.0 113288  1516 ?        S    12:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     100906  0.0  0.0 153840  2088 ?        R    12:30   0:00  |               \_ ps auxf
root     100751  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100798  0.0  0.0  20164   808 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root     100752  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100810  0.0  0.0  20164   804 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root     100753  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100800  0.0  0.0  20164   808 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root     100754  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100793  0.0  0.0  20164   808 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root     100755  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100797  0.0  0.0  20164   804 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root     100756  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100803  0.0  0.0  20164   808 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root     100758  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100808  0.0  0.0  20164   804 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root     100759  0.0  0.0 183040  2144 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100788  0.0  0.0  20164   984 ?        Ss   12:30   0:00  |   \_ jailshell (cloudsms) [100876] l -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms 100876  0.0  0.0  20164   260 ?        S    12:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms 100878  0.0  0.0 113284  1212 ?        S    12:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms 100880  0.0  0.6 400652 15148 ?        S    12:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root     100761  0.0  0.0 183040  2140 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100796  0.0  0.0  20164   804 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root     100762  0.0  0.0 183040  2140 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100799  0.0  0.0  20164   804 ?        Ss   12:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root     100764  0.0  0.0 183040  2136 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100807  0.0  0.0 113284  1212 ?        Ss   12:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root     100824  0.0  0.5 188860 12948 ?        R    12:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root     100765  0.0  0.0 183040  2132 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100802  0.0  0.0 113284  1212 ?        Ss   12:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root     100812  2.0  0.4 188228 11104 ?        S    12:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root     100859  0.0  0.0 160224  2360 ?        S    12:30   0:00  |           \_ top -n 2 -b -c
root     100766  0.0  0.0 183040  2140 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100792  0.0  0.0  20164   964 ?        Ss   12:30   0:00  |   \_ jailshell (pactpay) [100830] ll -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100830  0.0  0.0  20164   260 ?        S    12:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100842  0.0  0.7 476724 17112 ?        S    12:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root     100768  0.0  0.0 183040  2136 ?        S    12:30   0:00  \_ /usr/sbin/CROND -n
root     100809  0.0  0.0  20164   968 ?        Ss   12:30   0:00      \_ jailshell (nigeria) [100837] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100837  0.0  0.0  20164   264 ?        S    12:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100847  0.0  0.6 400652 15936 ?        S    12:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  4004 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  7.0 1763032 170468 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.2 249168  7240 ?        Ssl  09:46   0:03 /usr/sbin/rsyslogd -n
named       976  0.0  1.4 1186804 34400 ?       Ssl  09:46   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9448 ?        S    11:41   0:02  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    96025  0.1  0.3 471840  9500 ?        S    12:21   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+ 100549 14.7  2.9 461848 71004 ?        R    12:29   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+ 100603 15.0  2.7 457376 67632 ?        S    12:29   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+ 100613 14.0  2.7 457244 67628 ?        R    12:29   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria  100694  0.0  0.2 397064  5612 ?        S    12:29   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw   100703 12.7  2.5 523824 62060 ?        S    12:29   0:00  \_ php-fpm: pool cloudware_ng
cloudw   100710 11.2  1.5 428632 38428 ?        S    12:29   0:00  \_ php-fpm: pool cloudware_ng
cloudw   100817  0.0  0.2 470992  6700 ?        Rl   12:30   0:00  \_ php-fpm: pool edoocds_cloudware_ng
systuser    982  0.0  0.5 114016 12916 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3496 ?        Ss   09:46   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   772 ?        Rs   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   816 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   380 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
oysipao+ 100871  0.0  0.2 437704  5144 ?        R    12:30   0:00  \_ php-fpm: pool oysipa_oyostate_gov_ng
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.5 5654048 36360 ?       SLsl 09:46   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2712 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47744  3484 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2644 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3388 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2604 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   664 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1524 ?        S    09:46   0:00  \_ dovecot/auth
worencom  76930  0.0  0.1  38484  3536 ?        S    11:49   0:00  \_ dovecot/imap
root       1012  0.0  1.1 261164 28024 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root     100687  0.0  0.0      0     0 ?        Z    12:29   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
systuser   1204  0.0  0.1 157704  2896 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35768 ?        Ss   09:46   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13172 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209324 20428 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  1.0 262224 24620 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1448 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4 10.4 1458588 253548 ?      Sl   09:46   4:04 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12836   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12872   404 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    79320  0.0  0.8 277896 19568 ?        S    11:53   0:01  \_ /usr/sbin/httpd -k start
nobody    90208  0.0  0.7 277536 19312 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90209  0.0  0.8 277880 19496 ?        S    12:10   0:01  \_ /usr/sbin/httpd -k start
nobody    93235  0.1  0.7 277884 19184 ?        S    12:16   0:00  \_ /usr/sbin/httpd -k start
nobody    93404  0.0  0.7 277868 19320 ?        S    12:17   0:00  \_ /usr/sbin/httpd -k start
nobody    96058  0.0  0.7 277576 18948 ?        S    12:21   0:00  \_ /usr/sbin/httpd -k start
nobody    96839  0.0  0.8 277896 19516 ?        S    12:22   0:00  \_ /usr/sbin/httpd -k start
nobody    96842  0.0  0.8 277584 19644 ?        S    12:22   0:00  \_ /usr/sbin/httpd -k start
nobody    97272  0.1  0.7 277544 18952 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
nobody    97279  0.0  0.7 277572 18816 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
nobody    97285  0.1  0.7 277876 18848 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
nobody    97286  0.0  0.7 277548 18832 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
nobody    97312  0.0  0.7 277496 18908 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
nobody    99297  0.0  0.7 277508 18860 ?        S    12:27   0:00  \_ /usr/sbin/httpd -k start
nobody    99333  0.1  0.7 277552 18640 ?        S    12:27   0:00  \_ /usr/sbin/httpd -k start
nobody    99433  0.0  0.7 277812 18708 ?        S    12:27   0:00  \_ /usr/sbin/httpd -k start
nobody    99641  0.0  0.7 277884 19360 ?        S    12:28   0:00  \_ /usr/sbin/httpd -k start
nobody    99773  0.0  0.7 277560 18684 ?        S    12:28   0:00  \_ /usr/sbin/httpd -k start
nobody    99784  0.0  0.7 277468 18608 ?        S    12:28   0:00  \_ /usr/sbin/httpd -k start
nobody    99794  0.1  0.7 277556 18612 ?        S    12:28   0:00  \_ /usr/sbin/httpd -k start
nobody    99795  0.1  0.7 277696 18792 ?        S    12:28   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 182248 11364 ?        Ss   09:46   0:09 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.2 259304 126036 ?       S    11:00   0:01  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11692 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 31508  Threads: 5  Questions: 1805197  Slow queries: 0  Opens: 3851  Flush tables: 1  Open tables: 1990  Queries per second avg: 57.293
*************************** 1. row ***************************
     Id: 26330
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 26332
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 26333
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 4. row ***************************
     Id: 26336
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 26338
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 157.55.39.194 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.157.148.38 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.174 TIME_WAIT
      2 191.235.99.87 TIME_WAIT
      3 117.53.47.192 TIME_WAIT
      3 206.189.129.63 TIME_WAIT
      4 82.223.25.102 TIME_WAIT
     37 103.253.27.139 TIME_WAIT
     37 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 12:30:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 45 minutes 1 second
   Server load: 0.83 0.86 0.94
   Total accesses: 50831 - Total Traffic: 788.7 MB - Total Duration: 52414781
   CPU Usage: u6.38 s2.86 cu455.9 cs305.45 - 2.45% CPU load
   1.61 requests/sec - 25.6 kB/second - 15.9 kB/request - 1031.16 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

WK_K..._K__K..W.K._K._K_WWWKW...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  99297 0/43/2756   W 0.30 0    0   2846799 0.0   0.52  44.02 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630353030322p2231223
   1-0  99333 51/68/2747  K 1.57 0    91  2406199 339.1 0.59  48.36 217.182.194.26  http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   2-0  93404 0/114/2399  _ 1.96 1    83  3201486 0.0   1.88  42.36 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   3-0  79320 1/396/2491  K 6.96 1    354 4100605 31.3  13.76 43.32 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1476678163 HTTP/1.1
   4-0  -     0/0/2595    . 0.00 30   0   2351906 0.0   0.00  43.87 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  -     0/0/2531    . 0.00 47   0   2697990 0.0   0.00  34.43 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  -     0/0/2631    . 0.00 93   0   1930279 0.0   0.00  37.85 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  97272 0/90/2228   _ 1.96 1    25  2335949 0.0   1.89  31.26 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   8-0  99433 1/26/2483   K 0.47 0    244 2362763 32.6  0.55  33.38 117.53.47.192   http/1.1 oysipa.oyostate.gov.ng:443 GET /.ios/oysipaoygov.php?loknya=/home/oysipaoygov/public_html/
   9-0  97279 0/36/2704   _ 0.23 1    23  2635436 0.0   2.39  40.15 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   10-0 99641 0/33/1880   _ 0.67 0    0   2483858 0.0   0.49  31.29 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   11-0 96058 1/88/2418   K 1.70 3    353 1614087 29.9  1.52  36.76 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=772955819 HTTP/1.1
   12-0 -     0/0/2114    . 0.00 52   0   1491253 0.0   0.00  32.35 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/1836    . 0.00 73   0   1581402 0.0   0.00  32.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 99773 0/14/2031   W 0.25 0    0   1406992 0.0   0.28  34.72 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 -     0/0/1704    . 0.00 46   0   828699  0.0   0.00  25.13 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 93235 3/199/1630  K 3.17 1    259 2520273 91.6  3.72  27.53 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1863430176 HTTP/1.1
   17-0 -     0/0/1316    . 0.00 44   0   1124959 0.0   0.00  16.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 96839 0/119/1803  _ 1.61 1    356 2658746 0.0   2.33  24.10 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   19-0 99784 1/11/1608   K 0.08 4    347 1368822 30.5  0.15  21.48 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1145658771 HTTP/1.1
   20-0 -     0/0/952     . 0.00 38   0   511438  0.0   0.00  15.97 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 96842 0/115/531   _ 1.90 0    0   1245917 0.0   4.64  9.67  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   22-0 97285 98/139/1924 K 3.28 1    28  823681  653.5 1.41  26.01 217.182.194.26  http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   23-0 97286 0/21/866    _ 0.26 1    381 1021126 0.0   0.34  10.96 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   24-0 90208 0/185/262   W 3.18 0    0   1206922 0.0   4.39  5.64  103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   25-0 90209 0/385/404   W 2.90 0    0   664765  0.0   7.39  7.57  103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   26-0 99794 0/27/173    W 0.38 31   0   129903  0.0   0.46  3.14  173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630343937312p2231223
   27-0 99795 2/31/314    K 0.42 0    438 1523896 61.5  0.58  5.43  66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2057007674 HTTP/1.1
   28-0 97312 4/90/99     W 0.73 0    0   161498  125.1 2.69  2.74  66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3138822520 HTTP/1.1
   29-0 -     0/0/340     . 0.00 70   0   168303  0.0   0.00  8.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/70      . 0.00 112  0   31830   0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/32      . 0.00 72   0   15979   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/19      . 0.00 319  0   7018    0.0   0.00  0.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/34      . 0.00 282  0   30745   0.0   0.00  0.56  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/17      . 0.00 279  0   4967    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/28      . 0.00 281  0   14042   0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78      . 0.00 5362 0   121446  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4       . 0.00 5623 0   2767    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193     . 0.00 5164 0   241489  0.0   0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3       . 0.00 5632 0   50      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5       . 0.00 5622 0   2478    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21      . 0.00 5569 0   11757   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8       . 0.00 5612 0   3645    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00 5629 0   709     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3       . 0.00 5634 0   703     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2       . 0.00 5640 0   2       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9       . 0.00 5600 0   2869    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172     . 0.00 5187 0   242408  0.0   0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8       . 0.00 5611 0   2838    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10      . 0.00 5614 0   5104    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160     . 0.00 5272 0   174079  0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00 5615 0   2028    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175     . 0.00 5404 0   89852   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 414
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 24 seconds, (range: 1...97)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 13193
   total entries replaced since starting: 0
   total entries expired since starting: 12766
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 45 miss
   total removes since starting: 13 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit