403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.13.00.txt
 ## swap threshold exceeded
## server overview
2025-11-08.13.00 load[0] mem[62/68] mysql[4/11] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1402          82          49         878         731
Swap:          1999        1448         551
 13:00:01 up  3:13,  0 users,  load average: 0.94, 0.91, 0.90
## system overview
top - 13:00:02 up  3:13,  0 users,  load average: 0.94, 0.91, 0.90
Tasks: 229 total,   9 running, 219 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 18.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    80472 free,  1440532 used,   899296 buff/cache
KiB Swap:  2047996 total,   564988 free,  1483008 used.   744900 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 251824   3764 S  87.5 10.4   4:47.33 /usr/sbin+
 15928 healtho+  20   0  461852  71792   4212 R  31.2  3.0   0:01.33 php-fpm: +
 15896 healtho+  20   0  457244  67628   4212 R  18.8  2.8   0:02.06 php-fpm: +
 14766 nobody    20   0  277556  18892   3776 S   6.2  0.8   0:00.14 /usr/sbin+
 16250 nigeria   20   0  400652  15936  10220 S   6.2  0.7   0:00.07 /opt/cpan+
     1 root      20   0   44424   3492   1536 S   0.0  0.1   0:18.01 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.34 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:15.16 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.03 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.53 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.65 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.32 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.80 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   7892   7580 S   0.0  0.3   0:06.84 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    504    376 S   0.0  0.0   0:01.14 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7576   1348 S   0.0  0.3   0:00.28 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.02 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:06.24 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.26 /usr/sbin+
   539 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.79 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    928    472 S   0.0  0.0   0:01.63 /usr/lib/+
   547 nscd      20   0  928956   1508    812 S   0.0  0.1   0:06.28 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.33 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3956    940 S   0.0  0.2   0:00.20 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.49 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 131808    548 S   0.0  5.4   0:13.69 /usr/loca+
   975 root      20   0  249168  10168   6672 S   0.0  0.4   0:03.43 /usr/sbin+
   976 named     20   0 1186804  35352   1816 S   0.0  1.5   0:06.58 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:03.65 php-fpm: +
   982 systuser  20   0  114016  13056   2640 S   0.0  0.5   0:02.77 /usr/loca+
   983 root      20   0  572372    920    352 S   0.0  0.0   0:01.07 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.24 /usr/bin/+
   986 cpanelc+  20   0   10460   3676   2464 S   0.0  0.2   0:09.47 /usr/loca+
   987 root      20   0  386112    840    628 S   0.0  0.0   0:00.34 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    868    652 S   0.0  0.0   0:00.35 php-fpm: +
   990 root      20   0  153404    380    296 S   0.0  0.0   0:00.26 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.42 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.31 php-fpm: +
  1006 telegraf  20   0 5654048  36148   5808 S   0.0  1.5   0:06.64 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.16 /usr/sbin+
  1012 root      20   0  261164  27568   5036 S   0.0  1.1   0:01.87 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.57 /usr/sbin+
  1129 dovenull  20   0   46984   2924   2144 S   0.0  0.1   0:00.19 dovecot/p+
  1130 dovenull  20   0   47852   3756   2324 S   0.0  0.2   0:00.15 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.04 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.15 dovecot/l+
  1133 dovenull  20   0   47188   2892   1956 S   0.0  0.1   0:00.25 dovecot/p+
  1134 dovenull  20   0   47644   3628   2320 S   0.0  0.1   0:00.13 dovecot/i+
  1142 root      20   0   24528   2604    552 S   0.0  0.1   0:00.10 dovecot/c+
  1144 dovecot   20   0   13568    660    436 S   0.0  0.0   0:00.03 dovecot/s+
  1204 systuser  20   0  157704   2888    864 S   0.0  0.1   0:00.07 SonarPush+
  1217 wp-tool+  20   0  410452  35768   1748 S   0.0  1.5   0:09.73 /usr/bin/+
  1218 wp-tool+  20   0  387528  13172   1548 S   0.0  0.5   0:00.17 /usr/bin/+
  1221 dovecot   20   0   41168   1524   1068 S   0.0  0.1   0:00.28 dovecot/a+
  1264 root      20   0  209536  20564   2896 S   0.0  0.8   0:01.58 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.20 dnsadmin +
  1268 root      20   0  183900   6100   2872 S   0.0  0.3   0:00.62 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.30 php-fpm: +
  1717 root      38  18  130416   1448    720 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.87 /usr/sbin+
  1952 root      20   0   12828    436    324 S   0.0  0.0   0:01.39 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:01.16 /usr/loca+
  1954 root      20   0   12860    404    280 S   0.0  0.0   0:01.26 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  182492  10252   1212 S   0.0  0.4   0:11.69 lfd - sle+
  2619 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  4798 nobody    20   0  277592  20036   4440 S   0.0  0.8   0:01.14 /usr/sbin+
  5052 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  5840 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8030 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  8276 nobody    20   0  277524  19232   4112 S   0.0  0.8   0:00.57 /usr/sbin+
  8470 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  8899 cloudw    20   0  471840   9592   5088 S   0.0  0.4   0:00.57 php-fpm: +
  9351 nobody    20   0  277840  19436   4112 S   0.0  0.8   0:00.33 /usr/sbin+
  9780 nobody    20   0  277888  19584   4220 S   0.0  0.8   0:00.72 /usr/sbin+
 10510 nobody    20   0  277556  19180   4044 S   0.0  0.8   0:00.44 /usr/sbin+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.19 [kworker]
 10808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 10875 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 11439 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 11876 nobody    20   0  277564  19052   3908 S   0.0  0.8   0:00.39 /usr/sbin+
 11969 nobody    20   0  277536  19224   4148 S   0.0  0.8   0:00.44 /usr/sbin+
 12476 nobody    20   0  277880  19164   3924 S   0.0  0.8   0:00.62 /usr/sbin+
 12637 nobody    20   0  277872  18988   3724 S   0.0  0.8   0:00.27 /usr/sbin+
 12681 nobody    20   0  277536  19108   4016 S   0.0  0.8   0:00.29 /usr/sbin+
 12802 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 13895 cloudw    20   0  471784   9148   4744 S   0.0  0.4   0:00.18 php-fpm: +
 14018 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.18 php-fpm: +
 14110 nobody    20   0  277376  18284   3520 S   0.0  0.8   0:00.01 /usr/sbin+
 14116 nobody    20   0  277572  18888   3804 S   0.0  0.8   0:00.30 /usr/sbin+
 14146 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.18 php-fpm: +
 14214 nobody    20   0  277504  19160   4172 S   0.0  0.8   0:00.10 /usr/sbin+
 14767 nobody    20   0  277556  18748   3744 S   0.0  0.8   0:00.13 /usr/sbin+
 15245 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 15902 healtho+  20   0  457244  67632   4212 S   0.0  2.8   0:02.02 php-fpm: +
 15943 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 16153 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 16154 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 16155 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 16156 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 16158 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 16160 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 16161 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16162 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16163 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16164 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16165 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16167 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16168 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16169 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16170 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16172 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16174 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16175 root      20   0  183040   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 16176 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 16179 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 16190 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 16191 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 16194 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 16195 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 16196 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 16199 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 16200 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
 16204 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 16205 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 16206 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 16208 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 16209 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 16210 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 16211 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16212 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 16213 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16214 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16216 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16219 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16220 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16222 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16223 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 16224 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 16228 root      20   0 1277356  11536    596 S   0.0  0.5   0:00.06 /usr/bin/+
 16229 root      20   0 1342492  14532    600 S   0.0  0.6   0:00.05 /usr/bin/+
 16233 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 16234 root      20   0 1276956  14488    596 S   0.0  0.6   0:00.06 /usr/bin/+
 16235 root      20   0  188220  11100   5148 S   0.0  0.5   0:00.02 /usr/loca+
 16245 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 16252 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 16264 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 16275 root      20   0  160224   2372   1632 S   0.0  0.1   0:00.00 top -n 2 +
 16284 nobody    20   0  277232  17424   2932 S   0.0  0.7   0:00.00 /usr/sbin+
 16297 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
 16306 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16369 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 16373 root      35  15  113284   1356   1176 S   0.0  0.1   0:00.00 /bin/bash+
 16377 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 16378 cloudsms  20   0  293844  12976   8696 R   0.0  0.5   0:00.00 /opt/cpan+
 16380 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 16381 cloudsms  20   0  276940   6728   4660 R   0.0  0.3   0:00.00 /opt/cpan+
 16383 root      35  15  113284    180      0 R   0.0  0.0   0:00.00 /bin/bash+
 16384 root      35  15  113284    180      0 R   0.0  0.0   0:00.00 /bin/bash+
 16385 root      35  15  113284    180      0 R   0.0  0.0   0:00.00 /bin/bash+
 16386 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.62 /usr/loca+
 47195 root      20   0  259304 125788   2608 S   0.0  5.2   0:01.98 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 71949 cloudw    20   0  471856   9448   5048 S   0.0  0.4   0:03.53 php-fpm: +
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.09 /usr/bin/+
 84123 root      20   0 1277056  11692    596 S   0.0  0.5   0:00.07 /usr/bin/+
 90209 nobody    20   0  277880  20872   4748 S   0.0  0.9   0:03.65 /usr/sbin+
 90900 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 93404 nobody    20   0  277868  20636   4544 S   0.0  0.9   0:02.14 /usr/sbin+
 99433 nobody    20   0  277580  20100   4604 S   0.0  0.8   0:02.39 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:15  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      90900  0.0  0.0      0     0 ?        S    12:12   0:00  \_ [kworker/u200:1]
root       2619  0.0  0.0      0     0 ?        S    12:36   0:00  \_ [kworker/1:0]
root       5052  0.0  0.0      0     0 ?        S    12:40   0:00  \_ [kworker/0:0]
root       5840  0.0  0.0      0     0 ?        S    12:42   0:00  \_ [kworker/1:1]
root       8030  0.0  0.0      0     0 ?        S    12:46   0:00  \_ [kworker/0:1]
root       8470  0.0  0.0      0     0 ?        S    12:47   0:00  \_ [kworker/1:5]
root      10808  0.0  0.0      0     0 ?        S    12:51   0:00  \_ [kworker/u200:2]
root      10875  0.0  0.0      0     0 ?        S    12:51   0:00  \_ [kworker/0:2]
root      11439  0.0  0.0      0     0 ?        S    12:52   0:00  \_ [kworker/0:4]
root      12802  0.0  0.0      0     0 ?        S    12:54   0:00  \_ [kworker/1:2]
root      16306  0.0  0.0      0     0 ?        S    13:00   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44424  3492 ?        Ss   09:46   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39496  7892 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   504 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.3 224280  7576 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   356 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   928 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1508 ?        Ssl  09:46   0:06 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      16153  0.0  0.0 183044  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16205  0.0  0.0 113284  1208 ?        Ss   13:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      16234  6.0  0.5 1276956 14488 ?       Sl   13:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      16154  0.0  0.0 183044  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16212  0.0  0.0 113284  1208 ?        Ss   13:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      16228  6.0  0.4 1277356 11536 ?       Sl   13:00   0:00  |       \_ /usr/bin/update_imunify
root      16155  0.0  0.0 183044  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16208  0.0  0.0 113284  1208 ?        Ss   13:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      16229  5.0  0.6 1342492 14532 ?       Sl   13:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      16156  0.0  0.0 183044  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16194  0.0  0.0 113284  1212 ?        Ss   13:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      16199  0.0  0.0 113288  1428 ?        SN   13:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      16373  0.0  0.0 113284  1356 ?        SN   13:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      16383  0.0  0.0    276     4 ?        RN   13:00   0:00  |               \_ [lsmod]
root      16384  0.0  0.0 112812   984 ?        SN   13:00   0:00  |               \_ grep -E -v ^Module
root      16385  0.0  0.0 113644   976 ?        SN   13:00   0:00  |               \_ awk {printf "%s ", $1}
root      16158  0.0  0.0 183044  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16195  0.0  0.0 113284  1212 ?        Ss   13:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      16200  0.0  0.0 113284  1476 ?        S    13:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      16388  0.0  0.0 113284   220 ?        R    13:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      16160  0.0  0.0 183044  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16196  0.0  0.0 113284  1212 ?        Ss   13:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      16224  0.0  0.0 108052   360 ?        S    13:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      16233  0.0  0.0 113288  1520 ?        S    13:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      16387  0.0  0.0 153840  2092 ?        R    13:00   0:00  |               \_ ps auxf
root      16161  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16211  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      16162  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16191  0.0  0.0  20164   980 ?        Ss   13:00   0:00  |   \_ jailshell (cloudsms) [16377] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  16377  0.0  0.0  20164   256 ?        S    13:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  16380  0.0  0.0 113284  1212 ?        R    13:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  16381  0.0  0.0      0     0 ?        Z    13:00   0:00  |               \_ [php-cgi] <defunct>
root      16163  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16213  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      16164  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16223  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      16165  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16210  0.0  0.0  20164   804 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      16167  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16220  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      16168  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16216  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      16169  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16204  0.0  0.0  20164   804 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      16170  0.0  0.0 183040  2144 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16219  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      16172  0.0  0.0 183040  2140 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16214  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      16174  0.0  0.0 183040  2140 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16222  0.0  0.0  20164   808 ?        Ss   13:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      16175  0.0  0.0 183040  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16206  0.0  0.0 113284  1212 ?        Ss   13:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      16235  2.0  0.4 188220 11100 ?        S    13:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      16275  0.0  0.0 160224  2372 ?        S    13:00   0:00  |           \_ top -n 2 -b -c
root      16176  0.0  0.0 183040  2140 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16209  0.0  0.0  20164   968 ?        Ss   13:00   0:00  |   \_ jailshell (pactpay) [16252] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   16252  0.0  0.0  20164   260 ?        S    13:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   16264  2.0  0.7 476724 17484 ?        S    13:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      16179  0.0  0.0 183040  2136 ?        S    13:00   0:00  \_ /usr/sbin/CROND -n
root      16190  0.0  0.0  20164   964 ?        Ss   13:00   0:00      \_ jailshell (nigeria) [16245] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   16245  0.0  0.0  20164   260 ?        S    13:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   16250  8.0  0.6 400652 15936 ?        S    13:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3956 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  5.4 1763032 131808 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.4 249168 10168 ?        Ssl  09:46   0:03 /usr/sbin/rsyslogd -n
named       976  0.0  1.4 1186804 35352 ?       Ssl  09:46   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9448 ?        S    11:41   0:03  \_ php-fpm: pool edoocds_cloudware_ng
cloudw     8899  0.0  0.3 471840  9592 ?        S    12:47   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    13895  0.0  0.3 471784  9148 ?        S    12:56   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    14018  0.0  0.3 471784  9144 ?        S    12:56   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    14146  0.0  0.3 471784  9144 ?        S    12:56   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  15896 12.9  2.7 457244 67628 ?        R    12:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  15902 13.4  2.7 457244 67632 ?        S    12:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  15928 15.0  2.9 461852 72056 ?        R    12:59   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   16297  0.0  0.2 397064  5612 ?        S    13:00   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    982  0.0  0.5 114016 13056 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   920 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10460  3676 ?        Rs   09:46   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   840 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   868 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   380 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.4 5654048 36148 ?       SLsl 09:46   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2924 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47852  3756 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2892 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47644  3628 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2604 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   660 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1524 ?        S    09:46   0:00  \_ dovecot/auth
root      15245  0.0  0.1  60820  4508 ?        S    12:58   0:00  \_ dovecot/lmtp
root       1012  0.0  1.1 261164 27568 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      15943  0.0  0.0      0     0 ?        Z    12:59   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
systuser   1204  0.0  0.1 157704  2888 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35768 ?        Ss   09:46   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13172 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209536 20564 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6100 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1448 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4 10.4 1458588 251824 ?      Sl   09:46   4:47 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12828   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12860   404 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    90209  0.1  0.8 277880 20872 ?        S    12:10   0:03  \_ /usr/sbin/httpd -k start
nobody    93404  0.0  0.8 277868 20636 ?        S    12:17   0:02  \_ /usr/sbin/httpd -k start
nobody    99433  0.1  0.8 277580 20100 ?        S    12:27   0:02  \_ /usr/sbin/httpd -k start
nobody     4798  0.0  0.8 277592 20036 ?        S    12:39   0:01  \_ /usr/sbin/httpd -k start
nobody     8276  0.0  0.7 277524 19232 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody     9351  0.0  0.8 277840 19436 ?        S    12:48   0:00  \_ /usr/sbin/httpd -k start
nobody     9780  0.1  0.8 277888 19584 ?        S    12:49   0:00  \_ /usr/sbin/httpd -k start
nobody    10510  0.0  0.7 277556 19180 ?        S    12:50   0:00  \_ /usr/sbin/httpd -k start
nobody    11876  0.0  0.7 277564 19052 ?        S    12:52   0:00  \_ /usr/sbin/httpd -k start
nobody    11969  0.1  0.7 277536 19224 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
nobody    12476  0.1  0.7 277880 19164 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
nobody    12637  0.0  0.7 277872 18988 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
nobody    12681  0.0  0.7 277536 19108 ?        S    12:54   0:00  \_ /usr/sbin/httpd -k start
nobody    14110  0.0  0.7 277376 18284 ?        S    12:56   0:00  \_ /usr/sbin/httpd -k start
nobody    14116  0.1  0.7 277572 18888 ?        S    12:56   0:00  \_ /usr/sbin/httpd -k start
nobody    14214  0.0  0.7 277504 19160 ?        S    12:56   0:00  \_ /usr/sbin/httpd -k start
nobody    14766  0.1  0.7 277556 18892 ?        S    12:57   0:00  \_ /usr/sbin/httpd -k start
nobody    14767  0.0  0.7 277556 18748 ?        S    12:57   0:00  \_ /usr/sbin/httpd -k start
nobody    16284  0.0  0.7 277232 17564 ?        S    13:00   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 182492 10252 ?        Ss   09:46   0:11 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.1 259304 125788 ?       S    11:00   0:01  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11692 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 33308  Threads: 4  Questions: 2117156  Slow queries: 0  Opens: 4213  Flush tables: 1  Open tables: 2000  Queries per second avg: 63.562
*************************** 1. row ***************************
     Id: 31324
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 31331
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 31338
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 31342
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 5. row ***************************
     Id: 31343
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 ::1 TIME_WAIT
      1 20.222.66.73 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      8 104.248.90.230 TIME_WAIT
     36 103.253.27.139 TIME_WAIT
     37 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 13:00:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 15 minutes 1 second
   Server load: 0.94 0.91 0.90
   Total accesses: 61698 - Total Traffic: 932.3 MB - Total Duration: 72050750
   CPU Usage: u9.92 s5.02 cu542.47 cs369.75 - 2.78% CPU load
   1.85 requests/sec - 28.7 kB/second - 15.5 kB/request - 1167.8 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

WW_WKKWWC_W._KK._W.K.W..._......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-0  10510 0/111/3041  W 1.71  193  0   3877639 0.0  1.91  49.01 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630363630392p2231223
   1-0  11876 0/103/3260  W 1.80  11   0   3343745 0.0  1.74  55.97 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630363739312p2231223
   2-0  93404 0/676/2961  _ 9.65  0    340 4408158 0.0  8.80  49.29 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3493632504 HTTP/1.1
   3-0  14110 0/6/2839    W 0.03  173  0   5454006 0.0  0.02  48.47 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630363632392p2231223
   4-0  11969 1/101/2827  K 1.66  1    265 3919154 30.8 1.76  48.10 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3568229967 HTTP/1.1
   5-0  14116 2/152/3045  K 0.83  1    262 3356764 60.9 0.89  39.99 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2305132506 HTTP/1.1
   6-0  9780  0/231/3156  W 2.88  0    0   2455930 0.0  2.78  44.45 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-0  4798  0/390/2866  W 5.48  233  0   3104634 0.0  4.03  37.43 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630363536392p2231223
   8-0  99433 1/634/3091  C 10.12 0    998 2659070 5.7  8.47  41.30 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-0  16284 0/1/2971    _ 0.00  0    121 4334896 0.0  0.01  43.61 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   10-0 14214 0/29/2430   W 0.26  0    0   2722643 0.0  0.34  38.92 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 -     0/0/2748    . 0.00  95   0   2162781 0.0  0.00  42.81 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 12476 0/211/2618  _ 2.58  0    143 2062243 0.0  2.36  38.21 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   13-0 14766 1/93/2167   K 0.31  0    394 1666861 30.2 0.34  34.73 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3710053475 HTTP/1.1
   14-0 8276  2/139/2478  K 1.96  2    406 2075274 63.7 2.43  43.35 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1257947184 HTTP/1.1
   15-0 -     0/0/2040    . 0.00  37   0   897494  0.0  0.00  28.35 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 12637 0/57/2104   _ 1.07  0    156 3653047 0.0  1.13  34.59 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue1.php HTTP/1.1
   17-0 9351  0/158/1474  W 1.35  213  0   1603997 0.0  1.15  17.21 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630363538392p2231223
   18-0 -     0/0/2066    . 0.00  81   0   3660218 0.0  0.00  26.91 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 14767 1/32/2056   K 0.51  1    406 2345714 31.4 0.59  29.41 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1611411850 HTTP/1.1
   20-0 -     0/0/1126    . 0.00  98   0   610630  0.0  0.00  18.91 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 12681 1/75/629    W 1.22  0    0   1293556 29.7 1.14  11.01 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=473983275 HTTP/1.1
   22-0 -     0/0/2019    . 0.00  14   0   1350071 0.0  0.00  27.37 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/1203    . 0.00  16   0   2000749 0.0  0.00  16.74 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/396     . 0.00  101  0   1278227 0.0  0.00  7.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 90209 0/1311/1330 _ 13.28 0    215 1221007 0.0  16.78 16.96 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue5.php HTTP/1.1
   26-0 -     0/0/258     . 0.00  248  4   646379  0.0  0.00  4.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/752     . 0.00  74   0   2036699 0.0  0.00  10.69 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/346     . 0.00  1054 0   672034  0.0  0.00  5.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/340     . 0.00  1870 0   168303  0.0  0.00  8.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/70      . 0.00  1911 0   31830   0.0  0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/32      . 0.00  1872 0   15979   0.0  0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/19      . 0.00  2119 0   7018    0.0  0.00  0.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/34      . 0.00  2082 0   30745   0.0  0.00  0.56  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/17      . 0.00  2079 0   4967    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/28      . 0.00  2081 0   14042   0.0  0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78      . 0.00  7162 0   121446  0.0  0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4       . 0.00  7423 0   2767    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193     . 0.00  6964 0   241489  0.0  0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3       . 0.00  7432 0   50      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5       . 0.00  7422 0   2478    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21      . 0.00  7368 0   11757   0.0  0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8       . 0.00  7412 0   3645    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00  7429 0   709     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3       . 0.00  7434 0   703     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2       . 0.00  7440 0   2       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9       . 0.00  7400 0   2869    0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172     . 0.00  6987 0   242408  0.0  0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8       . 0.00  7411 0   2838    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10      . 0.00  7414 0   5104    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160     . 0.00  7071 0   174079  0.0  0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00  7415 0   2028    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175     . 0.00  7204 0   89852   0.0  0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 353
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 29 seconds, (range: 0...91)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 15416
   total entries replaced since starting: 0
   total entries expired since starting: 15047
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 60 miss
   total removes since starting: 16 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit