403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.15.39.txt
 ## swap threshold exceeded
## server overview
2025-11-15.15.39 load[0] mem[58/66] mysql[1/8] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1315          81          81         966         791
Swap:          1999        1394         605
 15:39:01 up  6:07,  0 users,  load average: 0.10, 0.13, 0.15
## system overview
top - 15:39:01 up  6:07,  0 users,  load average: 0.10, 0.13, 0.15
Tasks: 208 total,   8 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 67.6 us, 32.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    82120 free,  1365276 used,   972904 buff/cache
KiB Swap:  2047996 total,   619260 free,  1428736 used.   793120 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1749 mysql     20   0 1462852 276660   4236 S  50.0 11.4   4:49.19 /usr/sbin+
  9881 root      20   0  151028  10280   2628 R  16.7  0.4   0:00.04 /usr/loca+
  9906 nigeria   20   0  404052  16136  10384 R  16.7  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44424   3580   1696 S  11.1  0.1   0:31.15 /usr/lib/+
  9903 pactpay   20   0  480124  17684  11892 S  11.1  0.7   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   5.6  0.0   0:16.55 [kswapd0]
   358 root      20   0   40244   5140   4824 R   5.6  0.2   0:12.49 /usr/lib/+
   512 dbus      20   0   58716   1688    928 S   5.6  0.1   0:11.45 /usr/bin/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.90 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.66 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:19.43 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.62 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.81 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.93 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.00 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.29 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   383 root      20   0   45352    676    528 S   0.0  0.0   0:00.37 /usr/lib/+
   411 root      16  -4   55532    600    472 S   0.0  0.0   0:01.85 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   509 rpc       20   0   69256    324    216 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0  224280   7888   1956 S   0.0  0.3   0:00.38 queueproc+
   526 root      20   0   24704   1372   1008 S   0.0  0.1   0:05.08 /usr/lib/+
   530 root      20   0   21540    640    528 S   0.0  0.0   0:00.49 /usr/sbin+
   531 root      20   0  152780    492    448 S   0.0  0.0   0:00.09 /usr/sbin+
   533 root      20   0   52852    664    556 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  612240   3636   1128 R   0.0  0.2   0:03.04 /usr/lib/+
   538 nscd      20   0  926904   1356    812 S   0.0  0.1   0:11.63 /usr/sbin+
   542 root      20   0    4388    280    276 S   0.0  0.0   0:00.00 /usr/sbin+
   544 root      20   0  195208    292    292 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   572 root      20   0  124480    716    584 S   0.0  0.0   0:00.64 /usr/sbin+
   573 root      20   0   24208    376    356 S   0.0  0.0   0:00.00 /usr/sbin+
   595 root      20   0  108296    376    372 S   0.0  0.0   0:00.00 /sbin/age+
   596 root      20   0  114704    416    416 S   0.0  0.0   0:00.02 /bin/bash
   633 mailnull  20   0   89120   4144   1088 S   0.0  0.2   0:00.46 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [loop0]
   665 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   923 systuser  20   0  114016  11380   2688 S   0.0  0.5   0:05.36 /usr/loca+
   924 systuser  20   0  111608   1608      0 S   0.0  0.1   0:00.01 /usr/loca+
   928 root      20   0 1277312  13296    364 S   0.0  0.5   0:28.72 /usr/bin/+
   929 root      20   0  111304    852    756 S   0.0  0.0   0:02.68 /usr/sbin+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   931 memcach+  20   0  342400    276    276 S   0.0  0.0   0:00.49 /usr/bin/+
   934 root      20   0   51508    952    768 S   0.0  0.0   0:00.29 /usr/sbin+
   937 systuser  20   0  112524   2056      0 S   0.0  0.1   0:00.01 /usr/loca+
   938 root      20   0  572372   1348    764 S   0.0  0.1   0:01.94 /usr/bin/+
   939 root      20   0  261428  28308   5588 S   0.0  1.2   0:04.60 cpsrvd (S+
   940 root      20   0  396248    960    784 S   0.0  0.0   0:00.59 php-fpm: +
   941 named     20   0 1186868  40852   2540 S   0.0  1.7   0:11.88 /usr/sbin+
   950 root      20   0  439788  11636  11544 S   0.0  0.5   0:00.67 php-fpm: +
   958 root      20   0  400740   3428    984 S   0.0  0.1   0:03.33 php-fpm: +
   962 root      20   0  281936   8356   4408 S   0.0  0.3   0:06.12 /usr/sbin+
   963 root      20   0 1763124 180880   1388 S   0.0  7.5   0:15.01 /usr/loca+
   975 root      20   0  389508   1088    880 S   0.0  0.0   0:00.62 php-fpm: +
   978 root      20   0  153404    712    628 S   0.0  0.0   0:00.60 pure-ftpd+
   985 root      20   0  388892   1120    908 S   0.0  0.0   0:00.64 php-fpm: +
   986 root      20   0 1276356   9648    364 S   0.0  0.4   0:23.32 /usr/bin/+
   988 telegraf  20   0 5654048  36748   6152 S   0.0  1.5   0:12.54 /usr/loca+
   998 cpanelc+  20   0   10560   3948   2504 S   0.0  0.2   0:16.42 /usr/loca+
   999 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1000 root      20   0  445028   3044   3044 S   0.0  0.1   0:00.05 sw-engine+
  1076 dovenull  20   0   46912   2964   2264 S   0.0  0.1   0:00.28 dovecot/p+
  1077 dovenull  20   0   47872   3716   2392 S   0.0  0.2   0:00.25 dovecot/i+
  1078 dovecot   20   0   10320    608    496 S   0.0  0.0   0:00.06 dovecot/a+
  1079 root      20   0   10452    816    620 S   0.0  0.0   0:00.26 dovecot/l+
  1080 dovenull  20   0   46984   3176   2372 S   0.0  0.1   0:00.41 dovecot/p+
  1081 dovenull  20   0   47664   3804   2456 S   0.0  0.2   0:00.22 dovecot/i+
  1093 root      20   0   24556   2696    728 S   0.0  0.1   0:00.18 dovecot/c+
  1096 dovecot   20   0   13568    804    580 S   0.0  0.0   0:00.05 dovecot/s+
  1170 systuser  20   0  157708   3204   1156 S   0.0  0.1   0:00.11 SonarPush+
  1175 dovecot   20   0   41144   1668   1192 S   0.0  0.1   0:00.59 dovecot/a+
  1202 wp-tool+  20   0  387528  13516   1892 S   0.0  0.6   0:00.26 /usr/bin/+
  1203 wp-tool+  20   0  410452  37088   1992 S   0.0  1.5   0:18.82 /usr/bin/+
  1214 root      20   0  209436  21352   3720 S   0.0  0.9   0:02.54 tailwatchd
  1216 root      20   0  183900   6112   2880 S   0.0  0.3   0:00.91 cpdavd - +
  1219 root      20   0  167452   1672   1068 S   0.0  0.1   0:00.35 dnsadmin +
  1605 root      20   0  299272   1064    680 S   0.0  0.0   0:00.61 php-fpm: +
  1663 root      38  18  130416   1556    820 S   0.0  0.1   0:00.05 cpanellog+
  1911 root      20   0  266984   9836    912 S   0.0  0.4   0:01.49 /usr/sbin+
  1912 root      20   0   12824    628    524 S   0.0  0.0   0:01.63 /usr/loca+
  1913 root      20   0   12732    600    520 S   0.0  0.0   0:01.42 /usr/loca+
  1915 root      20   0   12864    612    492 S   0.0  0.0   0:01.54 /usr/loca+
  1922 root      20   0   53340    412    412 S   0.0  0.0   0:00.05 /usr/loca+
  2002 root      20   0  183468  12972   1344 S   0.0  0.5   0:20.65 lfd - sle+
  2479 nobody    20   0  277900  21812   4756 S   0.0  0.9   0:00.87 /usr/sbin+
  3062 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  3507 nobody    20   0  277504  21464   4608 S   0.0  0.9   0:00.87 /usr/sbin+
  4771 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6007 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6757 nobody    20   0  277848  21256   4372 S   0.0  0.9   0:00.49 /usr/sbin+
  7057 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7941 nobody    20   0  277844  21272   4348 S   0.0  0.9   0:00.30 /usr/sbin+
  8590 nobody    20   0  277916  21120   4268 S   0.0  0.9   0:00.16 /usr/sbin+
  9162 nobody    20   0  277576  20792   4128 S   0.0  0.9   0:00.11 /usr/sbin+
  9363 nobody    20   0  277576  20868   4220 S   0.0  0.9   0:00.10 /usr/sbin+
  9378 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  9379 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  9421 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  9509 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  9649 nescrow+  20   0   29148   2728   2236 S   0.0  0.1   0:00.00 dovecot/q+
  9650 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
  9664 nescrow+  20   0   61596   5960   4440 S   0.0  0.2   0:00.00 dovecot/l+
  9760 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  9763 nigeria   20   0  400460   5636   2416 S   0.0  0.2   0:00.00 php-fpm: +
  9769 root      20   0  111304   4448   3416 S   0.0  0.2   0:00.00 sshd: [ac+
  9770 sshd      20   0  115644   2620   1556 S   0.0  0.1   0:00.00 sshd: [ne+
  9777 oyocovi+  20   0  400460   3852   1188 S   0.0  0.2   0:00.00 php-fpm: +
  9785 mailnull  20   0   89504   5612   2356 S   0.0  0.2   0:00.00 /usr/sbin+
  9803 nescrow+  20   0  406604  14716   4144 S   0.0  0.6   0:00.21 php-fpm: +
  9804 nescrow+  20   0  406604  14712   4140 S   0.0  0.6   0:00.18 php-fpm: +
  9805 nescrow+  20   0  406604  14712   4140 S   0.0  0.6   0:00.21 php-fpm: +
  9806 nobody    20   0  277596  19852   3504 S   0.0  0.8   0:00.00 /usr/sbin+
  9809 mailnull  20   0   89504   5088   1872 S   0.0  0.2   0:00.00 /usr/sbin+
  9816 nobody    20   0  277576  20272   3776 S   0.0  0.8   0:00.01 /usr/sbin+
  9817 nobody    20   0  277576  19836   3416 S   0.0  0.8   0:00.01 /usr/sbin+
  9818 nescrow+  20   0  404556  12744   4140 S   0.0  0.5   0:00.04 php-fpm: +
  9819 nescrow+  20   0  404556  12748   4144 S   0.0  0.5   0:00.04 php-fpm: +
  9828 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9829 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9830 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9831 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9832 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9834 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9835 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9836 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9837 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9838 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9839 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9841 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9843 nigeria   20   0  400460   5380   2180 S   0.0  0.2   0:00.00 php-fpm: +
  9844 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  9845 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
  9846 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  9863 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
  9867 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9868 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9873 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9874 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9875 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  9876 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9877 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  9878 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9879 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  9880 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9883 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  9896 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  9898 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
  9899 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  9900 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  9910 cloudw    20   0  295960  11172   7832 R   0.0  0.5   0:00.00 /opt/cpan+
 14406 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 25822 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 25829 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.39 [kworker]
 55735 root      20   0  248136 120736   4392 S   0.0  5.0   0:04.82 /usr/loca+
 58136 root      20   0  263880 131364   3660 S   0.0  5.4   0:15.06 spamd chi+
 58137 root      20   0  259024 125196   2800 S   0.0  5.2   0:00.41 spamd chi+
 67887 worencom  20   0   38492   3904   2924 S   0.0  0.2   0:00.01 dovecot/i+
 73705 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 88966 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 89181 nobody    20   0  277600  22440   5188 S   0.0  0.9   0:02.79 /usr/sbin+
 91653 root      20   0       0      0      0 R   0.0  0.0   0:00.01 [kworker/+
 94167 nobody    20   0  277652  22252   4940 S   0.0  0.9   0:02.32 /usr/sbin+
 94170 nobody    20   0  277828  22440   5076 S   0.0  0.9   0:02.42 /usr/sbin+
 97171 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
101181 nobody    20   0  277528  21884   4880 S   0.0  0.9   0:01.09 /usr/sbin+
101616 nobody    20   0  277876  22224   5080 S   0.0  0.9   0:01.22 /usr/sbin+
101707 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101924 nobody    20   0  277736  22472   5136 S   0.0  0.9   0:01.42 /usr/sbin+
101929 nobody    20   0  277848  22052   4900 R   0.0  0.9   0:01.36 /usr/sbin+
101930 nobody    20   0  277632  22036   4972 S   0.0  0.9   0:01.40 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:31   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:31   0:19  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:31   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:31   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:31   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:31   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:31   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:31   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    09:31   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [xprtiod]
root        558  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   09:31   0:02  \_ [loop0]
root        665  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [jbd2/loop0-8]
root        666  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ext4-rsv-conver]
root      14406  0.0  0.0      0     0 ?        S    12:39   0:00  \_ [kworker/u200:0]
root      73705  0.0  0.0      0     0 ?        S    14:30   0:00  \_ [kworker/u200:1]
root      88966  0.0  0.0      0     0 ?        S    14:59   0:00  \_ [kworker/1:0]
root      91653  0.0  0.0      0     0 ?        D    15:03   0:00  \_ [kworker/0:2]
root      97171  0.0  0.0      0     0 ?        S    15:13   0:00  \_ [kworker/1:1]
root     101707  0.0  0.0      0     0 ?        S    15:21   0:00  \_ [kworker/0:1]
root       3062  0.0  0.0      0     0 ?        S    15:27   0:00  \_ [kworker/1:2]
root       4771  0.0  0.0      0     0 ?        S    15:30   0:00  \_ [kworker/0:0]
root       6007  0.0  0.0      0     0 ?        S    15:32   0:00  \_ [kworker/1:4]
root       7057  0.0  0.0      0     0 ?        S    15:34   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44424  3580 ?        Ss   09:31   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5140 ?        Ss   09:31   0:12 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   676 ?        Ss   09:31   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   600 ?        S<sl 09:31   0:01 /sbin/auditd
rpc         509  0.0  0.0  69256   324 ?        Ss   09:31   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58716  1688 ?        Ss   09:31   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        525  0.0  0.3 224280  7888 ?        Ss   09:31   0:00 queueprocd - waiting up to 60s to process a task
root        526  0.0  0.0  24704  1372 ?        Ss   09:31   0:05 /usr/lib/systemd/systemd-logind
root        530  0.0  0.0  21540   640 ?        Ss   09:31   0:00 /usr/sbin/irqbalance --foreground
root        531  0.0  0.0 152780   492 ?        Ss   09:31   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        533  0.0  0.0  52852   664 ?        Ss   09:31   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.1 612240  3636 ?        Ssl  09:31   0:03 /usr/lib/polkit-1/polkitd --no-debug
nscd        538  0.0  0.0 926904  1356 ?        Ssl  09:31   0:11 /usr/sbin/nscd
root        542  0.0  0.0   4388   280 ?        Ss   09:31   0:00 /usr/sbin/acpid
root        544  0.0  0.0 195208   292 ?        Ssl  09:31   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124480   716 ?        Ss   09:31   0:00 /usr/sbin/crond -n
root       9828  0.0  0.0 183048  2152 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9844  0.0  0.0 113284  1208 ?        Ss   15:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       9845  0.0  0.0 108052   352 ?        S    15:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       9846  0.0  0.0 113288  1516 ?        S    15:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       9915  0.0  0.0 153840  2096 ?        R    15:39   0:00  |               \_ ps auxf
root       9829  0.0  0.0 183048  2156 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9867  0.0  0.0  20164   808 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       9831  0.0  0.0 183048  2156 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9868  0.0  0.0  20164   988 ?        Ss   15:39   0:00  |   \_ jailshell (cloudsms) [9917] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms   9917  0.0  0.0  20164   264 ?        S    15:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       9832  0.0  0.0 183048  2156 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9874  0.0  0.0  20164   804 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       9834  0.0  0.0 183048  2152 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9873  0.0  0.0  20164   804 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       9835  0.0  0.0 183048  2152 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9880  0.0  0.0  20164   804 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       9836  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9876  0.0  0.0  20164   808 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       9837  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9878  0.0  0.0  20164   988 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       9919  0.0  0.0  20164   264 ?        R    15:39   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       9838  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9879  0.0  0.0 113284  1212 ?        Ss   15:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root       9881  0.0  0.4 152116 11328 ?        R    15:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root       9839  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9883  0.0  0.0  20164   964 ?        Ss   15:39   0:00  |   \_ jailshell (pactpay) [9900] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    9900  0.0  0.0  20164   256 ?        S    15:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    9903  0.0  0.7 480124 17684 ?        S    15:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       9841  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root       9877  0.0  0.0  20164   972 ?        Ss   15:39   0:00      \_ jailshell (nigeria) [9899] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    9899  0.0  0.0  20164   260 ?        S    15:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    9906  0.0  0.6 404052 16136 ?        S    15:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        573  0.0  0.0  24208   376 ?        Ss   09:31   0:00 /usr/sbin/atd -f
root        595  0.0  0.0 108296   376 tty1     Ss+  09:31   0:00 /sbin/agetty --noclear tty1 linux
root        596  0.0  0.0 114704   416 ttyS0    Ss+  09:31   0:00 /bin/bash
mailnull    633  0.0  0.1  89120  4144 ?        Ss   09:31   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   9785  0.0  0.2  89504  5612 ?        S    15:38   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   9809  0.0  0.2  89504  5088 ?        S    15:38   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    923  0.0  0.4 114016 11380 ?        Ssl  09:32   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    924  0.0  0.0 111608  1608 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        928  0.1  0.5 1277312 13296 ?       Ssl  09:32   0:28 /usr/bin/checkstatus
root        929  0.0  0.0 111304   852 ?        Ss   09:32   0:02 /usr/sbin/sshd -D
root       9378  0.0  0.1 111304  4268 ?        Ss   15:38   0:00  \_ sshd: [accepted]
sshd       9379  0.0  0.1 115644  2624 ?        S    15:38   0:00  |   \_ sshd: [net]
root       9421  0.0  0.1 111304  4268 ?        Ss   15:38   0:00  \_ sshd: [accepted]
root       9509  0.0  0.1 111304  4272 ?        Ss   15:38   0:00  \_ sshd: [accepted]
root       9769  0.0  0.1 111304  4448 ?        Ss   15:38   0:00  \_ sshd: [accepted]
sshd       9770  0.0  0.1 115644  2620 ?        S    15:38   0:00      \_ sshd: [net]
systuser    930  0.0  0.0  10132    48 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
memcach+    931  0.0  0.0 342400   276 ?        Ssl  09:32   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        934  0.0  0.0  51508   952 ?        Ss   09:32   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1076  0.0  0.1  46912  2964 ?        S    09:32   0:00  \_ dovecot/pop3-login
dovenull   1077  0.0  0.1  47872  3716 ?        S    09:32   0:00  \_ dovecot/imap-login
dovecot    1078  0.0  0.0  10320   608 ?        S    09:32   0:00  \_ dovecot/anvil
root       1079  0.0  0.0  10452   816 ?        S    09:32   0:00  \_ dovecot/log
dovenull   1080  0.0  0.1  46984  3176 ?        S    09:32   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47664  3804 ?        S    09:32   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24556  2696 ?        S    09:32   0:00  \_ dovecot/config
dovecot    1096  0.0  0.0  13568   804 ?        S    09:32   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41144  1668 ?        S    09:32   0:00  \_ dovecot/auth
worencom  67887  0.0  0.1  38492  3904 ?        S    14:18   0:00  \_ dovecot/imap
nescrow+   9649  0.0  0.1  29148  2728 ?        S    15:38   0:00  \_ dovecot/quota-status -p postfix
root       9650  0.0  0.1  41052  2732 ?        S    15:38   0:00  \_ dovecot/auth -w
nescrow+   9664  0.0  0.2  61596  5960 ?        S    15:38   0:00  \_ dovecot/lmtp
systuser    937  0.0  0.0 112524  2056 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 572372  1348 ?        Ssl  09:32   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        939  0.0  1.1 261428 28308 ?        Ss   09:32   0:04 cpsrvd (SSL) - waiting for connections                   
root       9760  0.0  0.0      0     0 ?        Z    15:38   0:00  \_ [cpaneld - servi] <defunct>
root        940  0.0  0.0 396248   960 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       941  0.0  1.6 1186868 40852 ?       Ssl  09:32   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        950  0.0  0.4 439788 11636 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        958  0.0  0.1 400740  3428 ?        Ss   09:32   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    9763  0.0  0.2 400460  5636 ?        S    15:38   0:00  \_ php-fpm: pool nigeriadecide_org
oyocovi+   9777  0.0  0.1 400460  3852 ?        S    15:38   0:00  \_ php-fpm: pool covid19_oyostate_gov_ng
nescrow+   9803  7.0  0.6 406604 14716 ?        S    15:38   0:00  \_ php-fpm: pool webshop_nescrow_com_ng
nescrow+   9804  6.0  0.6 406604 14712 ?        S    15:38   0:00  \_ php-fpm: pool webshop_nescrow_com_ng
nescrow+   9805  7.0  0.6 406604 14712 ?        S    15:38   0:00  \_ php-fpm: pool webshop_nescrow_com_ng
nescrow+   9818  4.0  0.5 404556 12744 ?        S    15:39   0:00  \_ php-fpm: pool webshop_nescrow_com_ng
nescrow+   9819  4.0  0.5 404556 12748 ?        S    15:39   0:00  \_ php-fpm: pool webshop_nescrow_com_ng
nigeria    9843  0.0  0.2 400460  5380 ?        S    15:39   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 281936  8356 ?        Ssl  09:32   0:06 /usr/sbin/rsyslogd -n
root        963  0.0  7.4 1763124 180880 ?      Ssl  09:32   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.0 389508  1088 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        978  0.0  0.0 153404   712 ?        Ss   09:32   0:00 pure-ftpd (SERVER)
root        985  0.0  0.0 388892  1120 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.1  0.3 1276356 9648 ?        Ssl  09:32   0:23 /usr/bin/cspdaemon
telegraf    988  0.0  1.5 5654048 36748 ?       SLsl 09:32   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
cpanelc+    998  0.0  0.1  10560  3948 ?        Ss   09:32   0:16 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    999  0.0  0.0  14068    48 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1000  0.0  0.1 445028  3044 ?        Ss   09:32   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1170  0.0  0.1 157708  3204 ?        S    09:32   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1202  0.0  0.5 387528 13516 ?        Ss   09:32   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1203  0.0  1.5 410452 37088 ?        Ss   09:32   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1214  0.0  0.8 209436 21352 ?        Ss   09:32   0:02 tailwatchd
root       1216  0.0  0.2 183900  6112 ?        Ss   09:32   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1219  0.0  0.0 167452  1672 ?        Ss   09:32   0:00 dnsadmin - dormant mode
root       1605  0.0  0.0 299272  1064 ?        Ss   09:32   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1663  0.0  0.0 130416  1556 ?        SN   09:32   0:00 cpanellogd - sleeping for logs
mysql      1749  1.3 11.4 1462852 276660 ?      Sl   09:32   4:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1911  0.0  0.4 266984  9836 ?        Ss   09:32   0:01 /usr/sbin/httpd -k start
root       1912  0.0  0.0  12824   628 ?        S    09:32   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1913  0.0  0.0  12732   600 ?        S    09:32   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1915  0.0  0.0  12864   612 ?        S    09:32   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1922  0.0  0.0  53340   412 ?        S    09:32   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    89181  0.1  0.9 277600 22440 ?        S    14:59   0:02  \_ /usr/sbin/httpd -k start
nobody    94167  0.1  0.9 277652 22252 ?        S    15:07   0:02  \_ /usr/sbin/httpd -k start
nobody    94170  0.1  0.9 277828 22440 ?        S    15:07   0:02  \_ /usr/sbin/httpd -k start
nobody   101181  0.0  0.9 277528 21884 ?        S    15:20   0:01  \_ /usr/sbin/httpd -k start
nobody   101616  0.1  0.9 277876 22224 ?        S    15:21   0:01  \_ /usr/sbin/httpd -k start
nobody   101924  0.1  0.9 277736 22472 ?        S    15:21   0:01  \_ /usr/sbin/httpd -k start
nobody   101929  0.1  0.9 277848 22052 ?        S    15:21   0:01  \_ /usr/sbin/httpd -k start
root       9914  0.0  0.0   6516   416 ?        R    15:39   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php72
nobody   101930  0.1  0.9 277632 22036 ?        S    15:21   0:01  \_ /usr/sbin/httpd -k start
cloudw     9910  0.0  0.6 300552 16564 ?        Rl   15:39   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     2479  0.1  0.9 277900 21812 ?        S    15:25   0:00  \_ /usr/sbin/httpd -k start
nobody     3507  0.1  0.8 277504 21464 ?        S    15:27   0:00  \_ /usr/sbin/httpd -k start
nobody     6757  0.1  0.8 277848 21256 ?        S    15:33   0:00  \_ /usr/sbin/httpd -k start
nobody     7941  0.1  0.8 277844 21272 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
nobody     8590  0.1  0.8 277916 21120 ?        S    15:36   0:00  \_ /usr/sbin/httpd -k start
nobody     9162  0.1  0.8 277576 20792 ?        S    15:37   0:00  \_ /usr/sbin/httpd -k start
nobody     9363  0.1  0.8 277576 20868 ?        S    15:38   0:00  \_ /usr/sbin/httpd -k start
nobody     9806  0.0  0.8 277596 19852 ?        S    15:38   0:00  \_ /usr/sbin/httpd -k start
nobody     9816  1.0  0.8 277576 20272 ?        S    15:39   0:00  \_ /usr/sbin/httpd -k start
nobody     9817  1.0  0.8 277576 19836 ?        S    15:39   0:00  \_ /usr/sbin/httpd -k start
cloudw     9863  0.0  0.6 353712 15976 ?        S    15:39   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
root       2002  0.0  0.5 183468 12972 ?        Ss   09:32   0:20 lfd - sleeping
oysipao+  25822  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  25829  0.0  0.0   3152   424 ?        S    10:01   0:00  \_ [kworker]
root      55735  0.0  4.9 248136 120736 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      58136  0.0  5.4 263880 131364 ?       S    10:54   0:15  \_ spamd child
root      58137  0.0  5.1 259024 125196 ?       S    10:54   0:00  \_ spamd child
## mysql stats
Uptime: 43731  Threads: 3  Questions: 1589378  Slow queries: 0  Opens: 8076  Flush tables: 1  Open tables: 2000  Queries per second avg: 36.344
*************************** 1. row ***************************
     Id: 23979
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 23982
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 23985
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.89 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.8 TIME_WAIT
      1 82.165.213.127 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 95.111.235.198 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 15:39:02 WAT
   Restart Time: Saturday, 15-Nov-2025 03:30:16 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 8 minutes 45 seconds
   Server load: 0.10 0.13 0.15
   Total accesses: 70615 - Total Traffic: 1.8 GB - Total Duration: 75338859
   CPU Usage: u12.3 s6.13 cu895.76 cs664.59 - 3.61% CPU load
   1.61 requests/sec - 44.0 kB/second - 27.3 kB/request - 1066.9 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KRRKW_KKW__WK_KK...K..K.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS   Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  2479   1/192/4336  K 3.79  4     6   1912439  10.0  3.41  124.40 200.50.234.26   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Gbako&state=Niger&ward=Samma
   1-0  101616 0/267/4322  R 5.23  0     25  45314931 0.0   4.81  106.41 15.223.250.140  http/1.1 webshop.nescrow.com.ng:443
   2-0  89181  0/612/4143  R 12.10 0     25  1935358  0.0   25.74 128.57 14.161.182.94   http/1.1
   3-0  101924 1/378/4316  K 6.57  2     344 1709012  35.5  5.44  94.67  192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1606047181 HTTP/1.1
   4-0  101929 1/316/4177  W 5.46  0     0   1820610  35.6  5.41  107.83 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=3447785354 HTTP/1.1
   5-0  9806   0/3/4143    _ 0.01  0     25  1864566  0.0   0.02  109.07 15.223.250.140  http/1.1 webshop.nescrow.com.ng:443 GET /phpinfo.php~ HTTP/1.1
   6-0  3507   3/203/3887  K 3.58  4     407 1742850  95.8  3.33  128.82 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=1761274642 HTTP/1.1
   7-0  9162   1/26/3132   K 0.35  0     356 1440667  35.3  0.42  77.57  192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=3237620959 HTTP/1.1
   8-0  101930 2/274/3993  W 5.81  0     0   1785167  58.2  5.75  94.60  66.249.70.1     http/1.1 test.cloudware.ng:443      GET /?871950376?goodscode=0870808346 HTTP/1.1
   9-0  9363   0/20/3554   _ 0.35  0     0   1580367  0.0   0.40  86.15  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-0 9816   0/4/3460    _ 0.01  0     40  1735991  0.0   0.03  113.68 15.223.250.140  http/1.1 webshop.nescrow.com.ng:443 GET /php_info.php~ HTTP/1.1
   11-0 6757   0/110/3132  W 1.93  0     0   1408487  0.0   2.12  77.94  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 94167  3/493/3677  K 10.30 0     11  1565920  19.9  9.65  101.22 145.239.65.226  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Bauchi&lga=Shira&ward=Tsaf
   13-0 7941   0/66/2755   _ 1.23  0     25  1371884  0.0   1.26  82.05  15.223.250.140  http/1.1 webshop.nescrow.com.ng:443 GET /test.php~ HTTP/1.1
   14-0 8590   2/48/2826   K 0.49  0     368 1271334  62.5  0.56  67.88  192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=940681933 HTTP/1.1
   15-0 9817   1/3/2589    K 0.01  0     476 1213959  36.8  0.05  60.64  192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=27026484 HTTP/1.1
   16-0 -      0/0/2346    . 0.00  544   0   1038681  0.0   0.00  57.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -      0/0/1896    . 0.00  332   0   804161   0.0   0.00  47.19  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -      0/0/1662    . 0.00  944   0   774714   0.0   0.00  53.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 94170  29/508/1233 K 11.51 0     54  601073   192.2 9.76  27.92  147.135.215.187 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   20-0 -      0/0/443     . 0.00  979   0   238044   0.0   0.00  12.33  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -      0/0/783     . 0.00  679   0   341635   0.0   0.00  13.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 101181 1/256/604   K 4.46  0     6   268819   9.9   4.09  12.05  177.39.231.23   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Karasawa&state=Yobe&ward=Yaj
   23-0 -      0/0/523     . 0.00  2183  0   294224   0.0   0.00  21.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/553     . 0.00  2180  0   299610   0.0   0.00  13.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -      0/0/526     . 0.00  1930  0   274415   0.0   0.00  18.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/320     . 0.00  1928  0   155459   0.0   0.00  7.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/483     . 0.00  2174  0   182275   0.0   0.00  11.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/289     . 0.00  2182  0   153825   0.0   0.00  10.32  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/102     . 0.00  39689 0   57399    0.0   0.00  2.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/156     . 0.00  39752 19  95777    0.0   0.00  4.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/58      . 0.00  42566 0   26226    0.0   0.00  1.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/196     . 0.00  43103 0   58961    0.0   0.00  3.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1272
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...37)
   index usage: 22%, cache usage: 31%
   total entries stored since starting: 45602
   total entries replaced since starting: 0
   total entries expired since starting: 44293
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 154 miss
   total removes since starting: 37 hit, 110 miss
 ## swap threshold exceeded
## server overview
2025-11-15.15.39 load[0] mem[69/42] mysql[3/10] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1591         150          30         622         586
Swap:          1999         955        1044
 15:39:01 up  1:14,  0 users,  load average: 0.40, 0.31, 0.26
## system overview
top - 15:39:01 up  1:14,  0 users,  load average: 0.40, 0.31, 0.26
Tasks: 193 total,   4 running, 188 sleeping,   0 stopped,   1 zombie
%Cpu(s): 72.7 us, 21.2 sy,  0.0 ni,  0.0 id,  3.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   120696 free,  1659976 used,   639628 buff/cache
KiB Swap:  2047996 total,  1069564 free,   978432 used.   569384 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 218852   3936 S  87.5  9.0   0:57.09 /usr/sbin+
 61704 cloudw    20   0  414324  20212   2884 R  31.2  0.8   0:00.05 php-fpm: +
 61653 root      20   0  169872  16848   2876 S  25.0  0.7   0:00.08 /usr/loca+
 61674 nigeria   20   0  404052  16144  10384 S  18.8  0.7   0:00.04 /opt/cpan+
 61702 cloudw    20   0  366220  16596  10884 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44280   3548   1708 S   0.0  0.1   0:06.71 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:04.62 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:08.96 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.91 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:00.67 [kworker/+
   358 root      20   0   40244   6496   6184 S   0.0  0.3   0:02.41 /usr/lib/+
   385 root      20   0   45444    700    552 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    268    160 S   0.0  0.0   0:00.34 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    632    520 S   0.0  0.0   0:00.09 /usr/sbin+
   516 root      20   0  152780    424    380 S   0.0  0.0   0:00.00 /usr/sbin+
   521 root      20   0   24708   1400   1040 S   0.0  0.1   0:01.04 /usr/lib/+
   523 nscd      20   0 1199308   1932    908 S   0.0  0.1   0:03.90 /usr/sbin+
   524 root      20   0   52852    504    440 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1088    696 S   0.0  0.0   0:00.64 /usr/lib/+
   529 root      20   0  224148   5976   1260 S   0.0  0.2   0:00.13 queueproc+
   531 dbus      20   0   58612   1592    900 S   0.0  0.1   0:02.32 /usr/bin/+
   539 rpc       20   0   69256    344    236 S   0.0  0.0   0:00.01 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    216    216 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    668    532 S   0.0  0.0   0:00.12 /usr/sbin+
   577 root      20   0   24208    132    132 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    264    260 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    276    276 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89112   3824    808 S   0.0  0.2   0:00.10 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.34 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    728    628 S   0.0  0.0   0:00.48 /usr/sbin+
   919 root      20   0 1350088   7732    240 S   0.0  0.3   0:19.69 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   921 telegraf  20   0 5654304  34916   3988 S   0.0  1.4   0:02.78 /usr/loca+
   922 memcach+  20   0  342400    300    300 S   0.0  0.0   0:00.10 /usr/bin/+
   924 root      20   0  153404    600    516 S   0.0  0.0   0:00.09 pure-ftpd+
   926 root      20   0  572372   1176    600 S   0.0  0.0   0:00.49 /usr/bin/+
   927 systuser  20   0  114016  15112   2364 S   0.0  0.6   0:01.23 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   930 root      20   0   51508    764    604 S   0.0  0.0   0:00.08 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  445028   2884   2884 S   0.0  0.1   0:00.05 sw-engine+
   935 root      20   0 1277312  11064    296 S   0.0  0.5   0:24.18 /usr/bin/+
   946 root      20   0  396248    808    636 S   0.0  0.0   0:00.19 php-fpm: +
   954 named     20   0 1055796  27844   1732 S   0.0  1.2   0:02.60 /usr/sbin+
   957 root      20   0  224592   5816   5268 S   0.0  0.2   0:01.19 /usr/sbin+
   973 root      20   0  400740   3248   1036 S   0.0  0.1   0:00.68 php-fpm: +
   975 root      20   0  439788  11524  11316 S   0.0  0.5   0:00.23 php-fpm: +
   978 cpanelc+  20   0   10196   3248   2436 S   0.0  0.1   0:03.65 /usr/loca+
   980 root      20   0  388892    992    780 S   0.0  0.0   0:00.19 php-fpm: +
   991 root      20   0  389508    904    664 S   0.0  0.0   0:00.20 php-fpm: +
   992 root      20   0 1689392 699112    400 S   0.0 28.9   0:13.85 /usr/loca+
   993 root      20   0  261288   6180   1468 S   0.0  0.3   0:00.97 cpsrvd (S+
  1065 dovenull  20   0   46984   1812   1108 S   0.0  0.1   0:00.08 dovecot/p+
  1066 dovenull  20   0   47240   3204   2196 S   0.0  0.1   0:00.09 dovecot/i+
  1067 dovecot   20   0   10320    416    304 S   0.0  0.0   0:00.01 dovecot/a+
  1068 root      20   0   10452    660    484 S   0.0  0.0   0:00.04 dovecot/l+
  1069 dovenull  20   0   46916   1820   1168 S   0.0  0.1   0:00.05 dovecot/p+
  1070 dovenull  20   0   47136   3044   2124 S   0.0  0.1   0:00.05 dovecot/i+
  1077 root      20   0   24396   2248    704 S   0.0  0.1   0:00.05 dovecot/c+
  1078 dovecot   20   0   13568    736    516 S   0.0  0.0   0:00.01 dovecot/s+
  1150 root      20   0  248140 119444   2736 S   0.0  4.9   0:03.35 /usr/loca+
  1151 systuser  20   0  157704   3116   1072 S   0.0  0.1   0:00.04 SonarPush+
  1152 dovecot   20   0   41180   1580   1124 S   0.0  0.1   0:00.11 dovecot/a+
  1153 wp-tool+  20   0  387528   4968   1688 S   0.0  0.2   0:00.12 /usr/bin/+
  1154 wp-tool+  20   0  410452  30644   1668 S   0.0  1.3   0:03.89 /usr/bin/+
  1229 root      20   0  183900   6000   2768 S   0.0  0.2   0:00.43 cpdavd - +
  1231 root      20   0  209200  11408   1996 S   0.0  0.5   0:00.59 tailwatchd
  1232 root      20   0  167452   1592    992 S   0.0  0.1   0:00.11 dnsadmin +
  1638 root      20   0  299272    900    524 S   0.0  0.0   0:00.12 php-fpm: +
  1681 root      38  18  130416   1588    820 S   0.0  0.1   0:00.00 cpanellog+
  1909 root      20   0  266984   8896    832 S   0.0  0.4   0:00.51 /usr/sbin+
  1911 root      20   0   12788    584    452 S   0.0  0.0   0:00.52 /usr/loca+
  1912 root      20   0   12732    572    464 S   0.0  0.0   0:00.45 /usr/loca+
  1913 root      20   0   12816    592    448 S   0.0  0.0   0:00.49 /usr/loca+
  1918 root      20   0   53344    360    360 S   0.0  0.0   0:00.04 /usr/loca+
  2012 root      20   0  181368   8476   1336 S   0.0  0.4   0:04.27 lfd - sle+
  8198 root      20   0  249416 119208   1312 S   0.0  4.9   0:00.35 spamd chi+
  8199 root      20   0  248140 117292    620 S   0.0  4.8   0:00.00 spamd chi+
 14831 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 25293 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.04 [kworker]
 38654 nobody    20   0  277528  20628   4640 S   0.0  0.9   0:02.91 /usr/sbin+
 43392 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 47619 nobody    20   0  277896  20824   4640 S   0.0  0.9   0:01.58 /usr/sbin+
 47797 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50023 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 50114 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50993 nobody    20   0  277864  20616   4448 S   0.0  0.9   0:01.27 /usr/sbin+
 51634 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 52433 nobody    20   0  277840  20344   4472 S   0.0  0.8   0:01.09 /usr/sbin+
 52449 nobody    20   0  277508  20220   4428 S   0.0  0.8   0:01.15 /usr/sbin+
 56513 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57122 nobody    20   0  277828  20052   4148 S   0.0  0.8   0:00.50 /usr/sbin+
 57217 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 58790 nobody    20   0  277508  19684   4004 S   0.0  0.8   0:00.35 /usr/sbin+
 58994 nobody    20   0  277508  19584   3956 S   0.0  0.8   0:00.40 /usr/sbin+
 59007 nobody    20   0  277464  19604   3976 S   0.0  0.8   0:00.34 /usr/sbin+
 59333 nobody    20   0  277720  19900   4080 S   0.0  0.8   0:00.16 /usr/sbin+
 59391 nobody    20   0  277452  19320   3736 S   0.0  0.8   0:00.32 /usr/sbin+
 59392 nobody    20   0  277508  19664   4028 S   0.0  0.8   0:00.24 /usr/sbin+
 59393 nobody    20   0  277852  19688   3904 S   0.0  0.8   0:00.28 /usr/sbin+
 59394 nobody    20   0  277596  19528   3796 S   0.0  0.8   0:00.28 /usr/sbin+
 60158 nobody    20   0  277840  19780   3976 S   0.0  0.8   0:00.17 /usr/sbin+
 60169 nobody    20   0  277504  19648   4004 S   0.0  0.8   0:00.21 /usr/sbin+
 60983 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61115 nigeria   20   0  401508   9328   3888 S   0.0  0.4   0:00.22 php-fpm: +
 61214 root      20   0   41052   2780   2124 S   0.0  0.1   0:00.00 dovecot/a+
 61412 nobody    20   0  277344  19228   3784 S   0.0  0.8   0:00.03 /usr/sbin+
 61606 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 61611 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 61612 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 61619 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 61621 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61622 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61623 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61625 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61626 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61627 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61628 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61629 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 61630 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61632 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61639 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61640 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 61641 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61642 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 61643 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61645 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61647 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 61648 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61649 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 61651 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61652 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 61657 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 61662 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61664 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 61667 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 61672 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 61701 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 61706 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 61707 root      20   0  113496   1200   1032 R   0.0  0.0   0:00.00 bash /usr+
 61708 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 61709 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    14:24   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    14:24   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    14:24   0:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root      14831  0.0  0.0      0     0 ?        S    14:39   0:00  \_ [kworker/1:0]
root      25293  0.0  0.0      0     0 ?        S    14:53   0:00  \_ [kworker/0:1]
root      43392  0.0  0.0      0     0 ?        S    15:15   0:00  \_ [kworker/u200:0]
root      47797  0.0  0.0      0     0 ?        S    15:21   0:00  \_ [kworker/0:0]
root      50023  0.0  0.0      0     0 ?        S    15:24   0:00  \_ [kworker/1:1]
root      50114  0.0  0.0      0     0 ?        S    15:24   0:00  \_ [kworker/0:4]
root      51634  0.0  0.0      0     0 ?        S    15:26   0:00  \_ [kworker/1:3]
root      56513  0.0  0.0      0     0 ?        S    15:32   0:00  \_ [kworker/0:2]
root      57217  0.0  0.0      0     0 ?        S    15:33   0:00  \_ [kworker/1:2]
root      60983  0.0  0.0      0     0 ?        S    15:38   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44280  3548 ?        Ss   14:24   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  6496 ?        Ss   14:24   0:02 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   700 ?        Ss   14:24   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   268 ?        S<sl 14:24   0:00 /sbin/auditd
root        512  0.0  0.0  21540   632 ?        Ss   14:24   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   424 ?        Ss   14:24   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1400 ?        Ss   14:24   0:01 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1199308 1932 ?        Ssl  14:24   0:03 /usr/sbin/nscd
root        524  0.0  0.0  52852   504 ?        Ss   14:24   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1088 ?        Ssl  14:24   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5976 ?        Ss   14:24   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58612  1592 ?        Ss   14:24   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   344 ?        Ss   14:24   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   14:24   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   216 ?        Ssl  14:24   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   668 ?        Ss   14:24   0:00 /usr/sbin/crond -n
root      61619  0.0  0.0 183048  2152 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61652  0.0  0.0 113284  1212 ?        Ss   15:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      61657  0.0  0.0 108052   356 ?        S    15:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      61664  0.0  0.0 113288  1516 ?        S    15:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      61710  0.0  0.0 153840  2092 ?        R    15:39   0:00  |               \_ ps auxf
root      61621  0.0  0.0 183048  2156 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61648  0.0  0.0  20164   808 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      61622  0.0  0.0 183048  2156 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61643  0.0  0.0  20164   804 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      61623  0.0  0.0 183048  2156 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61651  0.0  0.0  20164   804 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      61625  0.0  0.0 183048  2152 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61647  0.0  0.0  20164   988 ?        Ss   15:39   0:00  |   \_ jailshell (cloudsms) [61706] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  61706  0.0  0.0  20164   264 ?        S    15:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  61708  0.0  0.0 113284  1208 ?        S    15:39   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  61709  0.0  0.2 269120  6640 ?        R    15:39   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      61626  0.0  0.0 183048  2152 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61641  0.0  0.0  20164   804 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      61627  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61639  0.0  0.0  20164   808 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      61628  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61645  0.0  0.0  20164   804 ?        Ss   15:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      61629  0.0  0.0 183048  2144 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61642  0.0  0.0 113284  1212 ?        Ss   15:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      61653  0.0  0.6 169872 16848 ?        S    15:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      61707  0.0  0.0 113496  1424 ?        S    15:39   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      61711  0.0  0.0    356     4 ?        R    15:39   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      61630  0.0  0.0 183048  2152 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61649  0.0  0.0  20164   968 ?        Ss   15:39   0:00  |   \_ jailshell (pactpay) [61662] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61662  0.0  0.0  20164   260 ?        S    15:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61667  0.0  0.7 480124 17688 ?        S    15:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      61632  0.0  0.0 183048  2148 ?        S    15:39   0:00  \_ /usr/sbin/CROND -n
root      61640  0.0  0.0  20164   972 ?        Ss   15:39   0:00      \_ jailshell (nigeria) [61672] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61672  0.0  0.0  20164   264 ?        S    15:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61674  0.0  0.6 404052 16144 ?        S    15:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   132 ?        Ss   14:24   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   264 tty1     Ss+  14:24   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   276 ttyS0    Ss+  14:24   0:00 /bin/bash
mailnull    622  0.0  0.1  89112  3824 ?        Ss   14:24   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   728 ?        Ss   14:24   0:00 /usr/sbin/sshd -D
root      61611  0.0  0.1 111304  4268 ?        Ss   15:38   0:00  \_ sshd: [accepted]
sshd      61612  0.0  0.1 115644  2628 ?        S    15:38   0:00      \_ sshd: [net]
root        919  0.4  0.3 1350088 7732 ?        Ssl  14:24   0:19 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 34916 ?       SLsl 14:24   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   300 ?        Ssl  14:24   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   600 ?        Ss   14:24   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1176 ?        Ssl  14:24   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15112 ?        Ssl  14:24   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   764 ?        Ss   14:24   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.0  46984  1812 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47240  3204 ?        S    14:24   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   416 ?        S    14:24   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   660 ?        S    14:24   0:00  \_ dovecot/log
dovenull   1069  0.0  0.0  46916  1820 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47136  3044 ?        S    14:24   0:00  \_ dovecot/imap-login
root       1077  0.0  0.0  24396  2248 ?        S    14:24   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   736 ?        S    14:24   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1580 ?        S    14:24   0:00  \_ dovecot/auth
root      61214  0.0  0.1  41052  2780 ?        S    15:38   0:00  \_ dovecot/auth -w
systuser    932  0.0  0.0 113932    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.1 445028  2884 ?        Ss   14:24   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.5  0.4 1277312 11064 ?       Ssl  14:24   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   808 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.1 1055796 27844 ?       Ssl  14:24   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.2 224592  5816 ?        Ssl  14:24   0:01 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3248 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   61115  0.4  0.3 401508  9328 ?        S    15:38   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    61704  0.0  0.8 414324 20212 ?        R    15:39   0:00  \_ php-fpm: pool cloudware_ng
root        975  0.0  0.4 439788 11524 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10196  3248 ?        Ss   14:24   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   992 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   904 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.3 28.8 1689392 699112 ?      Ssl  14:24   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  6180 ?        Ss   14:24   0:00 cpsrvd (SSL) - waiting for connections                   
root      61606  0.0  0.0      0     0 ?        Z    15:38   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  4.9 248140 119444 ?       Ss   14:24   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  4.9 249416 119208 ?       S    14:30   0:00  \_ spamd child
root       8199  0.0  4.8 248140 117292 ?       S    14:30   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3116 ?        S    14:24   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387528  4968 ?        Ss   14:24   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410452 30644 ?        Ss   14:24   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  6000 ?        Ss   14:24   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.4 209200 11408 ?        Ss   14:24   0:00 tailwatchd
root       1232  0.0  0.0 167452  1592 ?        Ss   14:24   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   900 ?        Ss   14:24   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1588 ?        SN   14:24   0:00 cpanellogd - sleeping for logs
mysql      1785  1.2  9.0 1458332 218852 ?      Sl   14:24   0:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8896 ?        Ss   14:24   0:00 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12788   584 ?        S    14:24   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   572 ?        S    14:24   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12816   592 ?        S    14:24   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   360 ?        S    14:24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    38654  0.1  0.8 277528 20628 ?        S    15:08   0:02  \_ /usr/sbin/httpd -k start
nobody    47619  0.1  0.8 277896 20824 ?        S    15:20   0:01  \_ /usr/sbin/httpd -k start
nobody    50993  0.1  0.8 277864 20616 ?        S    15:25   0:01  \_ /usr/sbin/httpd -k start
nobody    52433  0.1  0.8 277840 20344 ?        S    15:26   0:01  \_ /usr/sbin/httpd -k start
nobody    52449  0.1  0.8 277508 20220 ?        S    15:27   0:01  \_ /usr/sbin/httpd -k start
nobody    57122  0.1  0.8 277828 20052 ?        S    15:32   0:00  \_ /usr/sbin/httpd -k start
nobody    58790  0.1  0.8 277508 19684 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
nobody    58994  0.1  0.8 277508 19584 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
nobody    59007  0.1  0.8 277464 19604 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    61702  0.0  0.6 366220 16596 ?        S    15:39   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    59333  0.0  0.8 277720 19900 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
nobody    59391  0.1  0.7 277452 19320 ?        S    15:36   0:00  \_ /usr/sbin/httpd -k start
nobody    59392  0.1  0.8 277508 19664 ?        S    15:36   0:00  \_ /usr/sbin/httpd -k start
nobody    59393  0.1  0.8 277852 19688 ?        S    15:36   0:00  \_ /usr/sbin/httpd -k start
nobody    59394  0.1  0.8 277596 19528 ?        S    15:36   0:00  \_ /usr/sbin/httpd -k start
nobody    60158  0.1  0.8 277840 19780 ?        S    15:36   0:00  \_ /usr/sbin/httpd -k start
nobody    60169  0.1  0.8 277504 19648 ?        S    15:36   0:00  \_ /usr/sbin/httpd -k start
nobody    61412  0.1  0.7 277344 19228 ?        S    15:38   0:00  \_ /usr/sbin/httpd -k start
root       2012  0.0  0.3 181368  8476 ?        Ss   14:24   0:04 lfd - sleeping
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   15:00   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   424 ?        S    15:00   0:00  \_ [kworker]
## mysql stats
Uptime: 4475  Threads: 3  Questions: 296687  Slow queries: 0  Opens: 2360  Flush tables: 1  Open tables: 1955  Queries per second avg: 66.298
*************************** 1. row ***************************
     Id: 4346
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 4347
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 4353
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 185.47.94.123 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.117.22.229 TIME_WAIT
      1 20.117.22.230 TIME_WAIT
      1 44.206.65.8 TIME_WAIT
      1 52.167.144.160 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.4 TIME_WAIT
      1 92.71.99.251 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.181.244.178 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 15:39:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 14 minutes 31 seconds
   Server load: 0.40 0.31 0.26
   Total accesses: 23044 - Total Traffic: 542.9 MB - Total Duration: 13108176
   CPU Usage: u8 s3.8 cu295.61 cs254.88 - 12.6% CPU load
   5.15 requests/sec - 124.3 kB/second - 24.1 kB/request - 568.833 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KK_KKK.KK.RKWK.K...KKWK.K.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  59333 3/34/1125  K 0.63  0    299 630309 83.7  0.79  26.96 66.249.70.3     http/1.1 test.cloudware.ng:443      GET /198204834?goodscode=0197945826 HTTP/1.1
   1-0  61412 1/6/1050   K 0.12  3    361 811391 31.0  0.11  27.47 66.249.70.5     http/1.1 test.cloudware.ng:443      GET /18153648?goodscode=0018130618 HTTP/1.1
   2-0  61714 0/0/1075   _ 0.00  0    0   567319 0.0   0.00  24.01 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  60158 2/32/1067  K 1.06  4    346 616663 59.9  0.77  25.49 66.249.70.3     http/1.1 test.cloudware.ng:443      GET /1268913821?goodscode=1267251526 HTTP/1.1
   4-0  58994 2/68/1295  K 1.83  1    364 613608 57.1  1.74  27.09 66.249.70.6     http/1.1 test.cloudware.ng:443      GET /17090683?goodscode=0017069046 HTTP/1.1
   5-0  59007 2/65/1176  K 1.60  0    307 590459 60.7  1.50  28.46 66.249.70.4     http/1.1 test.cloudware.ng:443      GET /17060275?goodscode=0017038678 HTTP/1.1
   6-0  -     0/0/1087   . 0.00  58   0   579451 0.0   0.00  26.14 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  58790 5/60/1057  K 1.61  3    352 564940 134.4 1.49  24.02 66.249.70.8     http/1.1 test.cloudware.ng:443      GET /198247610?goodscode=0197988546 HTTP/1.1
   8-0  52433 1/209/886  K 4.99  4    434 529003 30.8  5.04  21.00 66.249.70.7     http/1.1 test.cloudware.ng:443      GET /2989453557?goodscode=2985536294 HTTP/1.1
   9-0  -     0/0/894    . 0.00  5    0   497949 0.0   0.00  21.64 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 57122 0/91/853   R 2.53  4    353 530374 0.0   2.14  23.98 185.252.234.215 http/1.1 health.oyostate.gov.ng:443
   11-0 38654 1/517/1044 K 13.81 0    284 583530 35.1  12.87 24.76 66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=3630006283 HTTP/1.1
   12-0 52449 0/209/1021 W 5.58  0    0   809108 0.0   5.14  26.81 34.224.132.215  http/1.1 cloudware.ng:443           GET /mortgage-banking-software-solutions/ HTTP/1.1
   13-0 60169 4/38/1018  K 1.21  4    342 577424 109.7 0.90  24.14 66.249.70.6     http/1.1 test.cloudware.ng:443      GET /198267455?goodscode=0198008366 HTTP/1.1
   14-0 -     0/0/847    . 0.00  133  0   417880 0.0   0.00  18.21 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 47619 1/368/1064 K 7.33  1    355 708938 30.9  6.75  23.71 66.249.70.1     http/1.1 test.cloudware.ng:443      GET /191604912?goodscode=0191354554 HTTP/1.1
   16-0 -     0/0/806    . 0.00  171  0   380219 0.0   0.00  19.58 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/787    . 0.00  146  0   332202 0.0   0.00  15.47 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/1007   . 0.00  172  0   556741 0.0   0.00  23.96 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 50993 3/320/840  K 6.11  4    349 327384 82.6  5.39  12.95 66.249.70.6     http/1.1 test.cloudware.ng:443      GET /890561166?goodscode=0889394746 HTTP/1.1
   20-0 59391 5/56/450   K 1.46  3    262 253179 138.8 1.54  13.34 66.249.70.2     http/1.1 test.cloudware.ng:443      GET /881153209?goodscode=0879999118 HTTP/1.1
   21-0 59392 0/46/943   W 1.11  0    0   474557 0.0   1.09  20.29 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   22-0 59393 1/52/802   K 1.61  0    8   489965 10.1  1.29  19.60 103.92.235.209  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ibadan+south-east&state=Oyo&
   23-0 -     0/0/429    . 0.00  176  0   196415 0.0   0.00  11.52 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 59394 3/51/80    K 1.57  2    461 309206 83.3  1.36  4.01  66.249.70.7     http/1.1 test.cloudware.ng:443      GET /1012284002?goodscode=1010958050 HTTP/1.1
   25-0 -     0/0/128    . 0.00  500  0   52161  0.0   0.00  3.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/32     . 0.00  713  0   14349  0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/37     . 0.00  2052 0   15520  0.0   0.00  0.70  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/3      . 0.00  2149 0   302    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/79     . 0.00  1734 4   42279  0.0   0.00  2.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/58     . 0.00  1850 0   33799  0.0   0.00  1.32  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00  2151 0   654    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00  2150 0   881    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 930
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 1...55)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 13952
   total entries replaced since starting: 0
   total entries expired since starting: 13016
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 10 miss
   total removes since starting: 6 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit