403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.18.30.txt
 ## swap threshold exceeded
## server overview
2025-11-16.18.30 load[0] mem[78/57] mysql[3/11] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1777          71          77         513         348
Swap:          1999        1255         744
 18:30:02 up  1:27,  0 users,  load average: 1.13, 0.74, 0.56
## system overview
top - 18:30:02 up  1:27,  0 users,  load average: 1.13, 0.74, 0.56
Tasks: 228 total,   7 running, 220 sleeping,   0 stopped,   1 zombie
%Cpu(s): 74.3 us, 22.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    65064 free,  1823608 used,   531628 buff/cache
KiB Swap:  2047996 total,   762364 free,  1285632 used.   353520 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1458592 252356   3568 S 123.5 10.4   1:15.48 /usr/sbin+
 83998 nigeria   20   0  404052  16132  10380 S   5.9  0.7   0:00.06 /opt/cpan+
 84079 cloudw    20   0  353712  15980  10492 S   5.9  0.7   0:00.01 /opt/cpan+
 84090 cloudsms  20   0  388736  10524   7368 R   5.9  0.4   0:00.01 /opt/cpan+
 84095 cloudsms  20   0  404052  15084   9848 R   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44280   3356   1540 S   0.0  0.1   0:07.69 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.32 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:05.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.33 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.14 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 R   0.0  0.0   0:09.88 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.87 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.73 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   2676   2360 S   0.0  0.1   0:02.97 /usr/lib/+
   389 root      20   0   45352    516    368 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    420    288 S   0.0  0.0   0:00.44 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 dbus      20   0   58728   1496    776 S   0.0  0.1   0:02.83 /usr/bin/+
   493 rpc       20   0   69256    252    152 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24704   1276    904 S   0.0  0.1   0:01.26 /usr/lib/+
   525 root      20   0  152780    340    296 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    520    408 S   0.0  0.0   0:00.12 /usr/sbin+
   530 polkitd   20   0  612240    996    544 S   0.0  0.0   0:00.75 /usr/lib/+
   531 root      20   0  224144   5880   1128 S   0.0  0.2   0:00.14 queueproc+
   538 root      20   0   52852    392    328 S   0.0  0.0   0:00.01 /usr/sbin+
   542 root      20   0  195208    128    128 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    148    144 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1716    780 S   0.0  0.1   0:05.58 /usr/sbin+
   578 root      20   0   24208     60     60 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    592    460 S   0.0  0.0   0:00.15 /usr/sbin+
   585 root      20   0  114704    236    236 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    236    232 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   626 mailnull  20   0   88988   3984    972 S   0.0  0.2   0:00.08 /usr/sbin+
   685 root       0 -20       0      0      0 S   0.0  0.0   0:02.09 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  298320   2424   1816 S   0.0  0.1   0:01.47 /usr/sbin+
   935 root      20   0  388892   1912    580 S   0.0  0.1   0:00.24 php-fpm: +
   937 named     20   0  924724  30476   1728 S   0.0  1.3   0:02.74 /usr/sbin+
   939 root      20   0 1689392 373976    356 S   0.0 15.5   0:13.31 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 cpanelc+  20   0   10200   3192   2372 S   0.0  0.1   0:04.37 /usr/loca+
   945 root      20   0  572372   1108    532 S   0.0  0.0   0:00.55 /usr/bin/+
   946 root      20   0  261296   6588   1840 S   0.0  0.3   0:01.11 cpsrvd (S+
   947 root      20   0  400740   3500    828 S   0.0  0.1   0:00.95 php-fpm: +
   952 root      20   0  396248    656    480 S   0.0  0.0   0:00.20 php-fpm: +
   953 root      20   0  445028   4772   3284 S   0.0  0.2   0:00.40 sw-engine+
   954 root      20   0 1277312  12128    244 S   0.0  0.5   0:26.50 /usr/bin/+
   955 root      20   0   51508    704    544 S   0.0  0.0   0:00.09 /usr/sbin+
   957 root      20   0 1341892   7780    244 S   0.0  0.3   0:25.32 /usr/bin/+
   959 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    616    516 S   0.0  0.0   0:00.61 /usr/sbin+
   962 root      20   0  153404    512    432 S   0.0  0.0   0:00.11 pure-ftpd+
   980 systuser  20   0  114016  12352   2472 S   0.0  0.5   0:01.35 /usr/loca+
   981 memcach+  20   0  342400    308    308 S   0.0  0.0   0:00.11 /usr/bin/+
   987 root      20   0  389508    788    576 S   0.0  0.0   0:00.19 php-fpm: +
   989 telegraf  20   0 5654048  37628   5528 S   0.0  1.6   0:03.14 /usr/loca+
   992 root      20   0  439788  11360  11268 S   0.0  0.5   0:00.29 php-fpm: +
  1097 dovenull  20   0   47420   2616   1688 S   0.0  0.1   0:00.08 dovecot/p+
  1098 dovenull  20   0   47324   2680   1676 S   0.0  0.1   0:00.04 dovecot/i+
  1099 dovecot   20   0   10320    472    360 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    740    552 S   0.0  0.0   0:00.05 dovecot/l+
  1101 dovenull  20   0   47452   2692   1536 S   0.0  0.1   0:00.13 dovecot/p+
  1102 dovenull  20   0   47056   2432   1628 S   0.0  0.1   0:00.02 dovecot/i+
  1110 root      20   0   24396   2592    544 S   0.0  0.1   0:00.05 dovecot/c+
  1117 dovecot   20   0   13568    832    548 S   0.0  0.0   0:00.01 dovecot/s+
  1136 systuser  20   0  157708   3012   1024 S   0.0  0.1   0:00.03 SonarPush+
  1147 root      20   0  248052 118096   1452 S   0.0  4.9   0:03.44 /usr/loca+
  1176 wp-tool+  20   0  412368  24724   1568 S   0.0  1.0   0:01.86 /usr/bin/+
  1177 wp-tool+  20   0  387528  12460   1592 S   0.0  0.5   0:00.12 /usr/bin/+
  1181 dovecot   20   0   41188   1324    848 S   0.0  0.1   0:00.12 dovecot/a+
  1229 root      20   0  167452   1472    872 S   0.0  0.1   0:00.12 dnsadmin +
  1231 root      20   0  262224  24148   6428 S   0.0  1.0   0:00.34 cpdavd - +
  1233 root      20   0  209860  12912   2292 S   0.0  0.5   0:00.94 tailwatchd
  1607 root      20   0  299272    852    472 S   0.0  0.0   0:00.13 php-fpm: +
  1637 root      38  18  130416   1536    804 S   0.0  0.1   0:00.01 cpanellog+
  1985 root      20   0  266984   8396    820 S   0.0  0.3   0:01.05 /usr/sbin+
  1988 root      20   0   12792    488    380 S   0.0  0.0   0:00.74 /usr/loca+
  1989 root      20   0   12732    436    364 S   0.0  0.0   0:00.65 /usr/loca+
  1992 root      20   0   12828    488    368 S   0.0  0.0   0:00.71 /usr/loca+
  1995 root      20   0   53340    276    276 S   0.0  0.0   0:00.04 /usr/loca+
  2081 root      20   0  181668  11160   1244 S   0.0  0.5   0:05.76 lfd - sle+
  7498 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  8203 root      20   0  249328 119088   1256 S   0.0  4.9   0:00.41 spamd chi+
  8204 root      20   0  248052 117144    540 S   0.0  4.8   0:00.00 spamd chi+
 48119 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 56522 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58384 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
 58386 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.03 [kworker]
 58395 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 65385 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 65736 nobody    20   0  277680  20488   4976 S   0.0  0.8   0:02.09 /usr/sbin+
 67153 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69593 nobody    20   0  277720  20264   4752 S   0.0  0.8   0:01.54 /usr/sbin+
 73397 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73522 nobody    20   0  277764  20192   4684 S   0.0  0.8   0:01.07 /usr/sbin+
 74186 nobody    20   0  277868  19868   4524 S   0.0  0.8   0:01.20 /usr/sbin+
 74297 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 75331 nobody    20   0  277744  20152   4676 S   0.0  0.8   0:01.03 /usr/sbin+
 76332 nobody    20   0  277520  19636   4456 S   0.0  0.8   0:00.96 /usr/sbin+
 76733 nobody    20   0  277472  19504   4372 S   0.0  0.8   0:00.79 /usr/sbin+
 77941 nobody    20   0  277744  19752   4304 S   0.0  0.8   0:00.70 /usr/sbin+
 77957 nobody    20   0  277744  19944   4524 S   0.0  0.8   0:00.66 /usr/sbin+
 78690 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79380 nobody    20   0  277744  19592   4228 S   0.0  0.8   0:00.54 /usr/sbin+
 79389 nobody    20   0  277520  19440   4272 S   0.0  0.8   0:00.55 /usr/sbin+
 79618 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 80291 nobody    20   0  277588  19840   4544 S   0.0  0.8   0:00.45 /usr/sbin+
 80557 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 80738 nobody    20   0  277468  19172   4076 S   0.0  0.8   0:00.39 /usr/sbin+
 81813 nobody    20   0  277744  19196   3836 S   0.0  0.8   0:00.25 /usr/sbin+
 82282 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82744 nobody    20   0  277752  19420   3940 S   0.0  0.8   0:00.10 /usr/sbin+
 82817 nobody    20   0  277768  19052   3676 S   0.0  0.8   0:00.13 /usr/sbin+
 83235 nobody    20   0  277744  19264   3916 S   0.0  0.8   0:00.06 /usr/sbin+
 83251 nobody    20   0  277744  19168   3864 S   0.0  0.8   0:00.08 /usr/sbin+
 83252 nobody    20   0  277744  19184   3884 S   0.0  0.8   0:00.10 /usr/sbin+
 83635 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 83767 wp-tool+  20   0  445028   1924    376 S   0.0  0.1   0:00.00 sw-engine+
 83784 wp-tool+  20   0  445028   1692    188 S   0.0  0.1   0:00.00 sw-engine+
 83855 nigeria   20   0  400460   5868   2404 S   0.0  0.2   0:00.00 php-fpm: +
 83873 healtho+  20   0  473988  81436   4100 S   0.0  3.4   0:01.16 php-fpm: +
 83874 healtho+  20   0  469892  77320   4120 S   0.0  3.2   0:01.11 php-fpm: +
 83875 healtho+  20   0  467944  75180   4120 S   0.0  3.1   0:01.08 php-fpm: +
 83876 healtho+  20   0  474088  81432   4100 S   0.0  3.4   0:01.19 php-fpm: +
 83882 nobody    20   0  277308  18152   3376 S   0.0  0.7   0:00.00 /usr/sbin+
 83884 healtho+  20   0  463748  71024   4100 S   0.0  2.9   0:00.82 php-fpm: +
 83885 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 83886 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 83887 nobody    20   0  277324  17148   2408 S   0.0  0.7   0:00.00 /usr/sbin+
 83888 nobody    20   0  277716  18356   3216 S   0.0  0.8   0:00.00 /usr/sbin+
 83895 root      20   0  157100   5076   3784 S   0.0  0.2   0:00.00 sshd: unk+
 83900 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 83911 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 83923 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83925 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83926 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83927 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83928 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83929 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83931 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83932 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83933 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83934 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83935 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83936 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83938 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83939 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83940 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83942 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83948 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 83951 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83953 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 83955 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 83956 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 83958 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83959 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 83960 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 83961 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83962 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83964 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83967 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83968 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83969 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 83970 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 83971 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83973 root      20   0  114252   2240   1264 S   0.0  0.1   0:00.00 bash /usr+
 83979 root      20   0  188232  11116   5148 S   0.0  0.5   0:00.01 /usr/loca+
 83980 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 83982 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 83986 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 83987 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 83988 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 83991 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 83995 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 84001 cloudsms  20   0  404052  15352  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 84013 cloudw    20   0  353712  16240  10612 S   0.0  0.7   0:00.01 /opt/cpan+
 84035 cloudw    20   0  353712  15980  10492 R   0.0  0.7   0:00.02 /opt/cpan+
 84037 root      20   0  160224   2372   1632 S   0.0  0.1   0:00.00 top -n 2 +
 84053 cloudw    20   0  366220  16596  10892 R   0.0  0.7   0:00.01 /opt/cpan+
 84078 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 84085 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 84088 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 84091 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 84092 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 84096 root      20   0  114252   1148      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    17:02   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    17:02   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    17:02   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.0  0.0      0     0 ?        S<   17:02   0:02  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root       7498  0.0  0.0      0     0 ?        S    17:07   0:00  \_ [kworker/u200:0]
root      48119  0.0  0.0      0     0 ?        S    17:49   0:00  \_ [kworker/0:0]
root      56522  0.0  0.0      0     0 ?        S    17:58   0:00  \_ [kworker/1:4]
root      58395  0.0  0.0      0     0 ?        S    18:00   0:00  \_ [kworker/0:1]
root      65385  0.0  0.0      0     0 ?        S    18:09   0:00  \_ [kworker/u200:1]
root      67153  0.0  0.0      0     0 ?        S    18:11   0:00  \_ [kworker/1:2]
root      73397  0.0  0.0      0     0 ?        S    18:18   0:00  \_ [kworker/1:3]
root      74297  0.0  0.0      0     0 ?        S    18:19   0:00  \_ [kworker/0:2]
root      78690  0.0  0.0      0     0 ?        S    18:24   0:00  \_ [kworker/1:0]
root      79618  0.0  0.0      0     0 ?        D    18:25   0:00  \_ [kworker/u200:2]
root      84099  0.0  0.0      0     0 ?        R    18:30   0:00  |   \_ [kworker/u200:2]
root      80557  0.0  0.0      0     0 ?        D    18:26   0:00  \_ [kworker/0:3]
root      82282  0.0  0.0      0     0 ?        S    18:28   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44280  3356 ?        Ss   17:02   0:07 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  2664 ?        Ss   17:02   0:02 /usr/lib/systemd/systemd-journald
root        389  0.0  0.0  45352   516 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   420 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.0  0.0  58728  1496 ?        Ss   17:02   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   252 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24704  1276 ?        Ss   17:02   0:01 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   332 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   520 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.0 612240   996 ?        Ssl  17:02   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.0  0.2 224144  5880 ?        Ss   17:02   0:00 queueprocd - waiting up to 60s to process a task
root        538  0.0  0.0  52852   392 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   128 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   148 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.1  0.0 1131720 1716 ?        Ssl  17:02   0:05 /usr/sbin/nscd
root        578  0.0  0.0  24208    60 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   592 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root      83923  0.0  0.0 183048  2144 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83948  0.0  0.0 113284  1212 ?        Ss   18:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      83973  0.0  0.0 114252  2416 ?        S    18:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      84098  0.0  0.0 114252  1148 ?        R    18:30   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      83925  0.0  0.0 183048  2144 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83969  0.0  0.0 113284  1208 ?        Ss   18:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      83980  0.0  0.0 108052   352 ?        S    18:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      83988  0.0  0.0 113288  1516 ?        S    18:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      84097  0.0  0.0 153840  2092 ?        R    18:30   0:00  |               \_ ps auxf
root      83926  0.0  0.0 183048  2148 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83967  0.0  0.0  20164   808 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      83927  0.0  0.0 183048  2148 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83964  0.0  0.0  20164   804 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      83928  0.0  0.0 183048  2148 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83961  0.0  0.0  20164   804 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      83929  0.0  0.0 183048  2148 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83951  0.0  0.0  20164   808 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      83931  0.0  0.0 183048  2148 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83971  0.0  0.0  20164   808 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      83932  0.0  0.0 183048  2148 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83968  0.0  0.0  20164   808 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      83933  0.0  0.0 183048  2144 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83958  0.0  0.0  20164   804 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      83934  0.0  0.0 183048  2144 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83960  0.0  0.0  20164   968 ?        Ss   18:30   0:00  |   \_ jailshell (cloudsms) [83987] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  83987  0.0  0.0  20164   260 ?        S    18:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  83995  0.0  0.0 113284  1208 ?        S    18:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  84001  1.0  0.6 404052 15352 ?        S    18:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      83935  0.0  0.0 183048  2144 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83962  0.0  0.0  20164   808 ?        Ss   18:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      83936  0.0  0.0 183048  2140 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83953  0.0  0.0  20164   980 ?        Ss   18:30   0:00  |   \_ jailshell (cloudsms) [84085] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  84085  0.0  0.0  20164   256 ?        S    18:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  84088  0.0  0.0 113284  1212 ?        S    18:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  84090  0.0  0.6 404052 15084 ?        R    18:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      83939  0.0  0.0 183048  2136 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83959  0.0  0.0 113284  1212 ?        Ss   18:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      83979  1.0  0.4 188232 11116 ?        S    18:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      84037  0.0  0.0 160224  2372 ?        S    18:30   0:00  |           \_ top -n 2 -b -c
root      83940  0.0  0.0 183048  2140 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83955  0.0  0.0  20164   968 ?        Ss   18:30   0:00  |   \_ jailshell (pactpay) [83982] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83982  0.0  0.0  20164   264 ?        S    18:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83991  2.0  0.7 480124 17684 ?        S    18:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      83942  0.0  0.0 183048  2140 ?        S    18:30   0:00  \_ /usr/sbin/CROND -n
root      83956  0.0  0.0  20164   968 ?        Ss   18:30   0:00      \_ jailshell (nigeria) [83986] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83986  0.0  0.0  20164   264 ?        S    18:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83998  6.0  0.6 404052 16132 ?        S    18:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        585  0.0  0.0 114704   236 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   236 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.1  88988  3980 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0 298320  2392 ?        Ssl  17:02   0:01 /usr/sbin/rsyslogd -n
root        935  0.0  0.0 388892  1912 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       937  0.0  1.2 924724 30008 ?        Ssl  17:02   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939  0.2 15.4 1689392 373924 ?      Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268    72 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132    28 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864    80 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1  10200  3192 ?        Rs   17:02   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.0  0.0 572372  1108 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.0  0.2 261296  6572 ?        Ss   17:02   0:01 cpsrvd (SSL) - waiting for connections                   
root      83911  0.0  0.0      0     0 ?        Z    18:29   0:00  \_ [cpaneld - servi] <defunct>
root        947  0.0  0.1 400740  3500 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   83855  0.0  0.2 400460  5868 ?        S    18:29   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  83873 29.0  3.3 473988 81436 ?        S    18:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  83874 27.7  3.1 469892 77320 ?        S    18:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  83875 27.0  3.1 467944 75180 ?        S    18:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  83876 29.7  3.3 474088 81432 ?        S    18:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  83884 27.3  2.9 463748 71024 ?        S    18:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        952  0.0  0.0 396248   656 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.0  0.1 445028  4772 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  83767  0.0  0.0 445028  1924 ?        S    18:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  83784  0.0  0.0 445028  1692 ?        S    18:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954  0.5  0.5 1277312 12128 ?       Ssl  17:02   0:26 /usr/bin/checkstatus
root        955  0.0  0.0  51508   692 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  47420  2312 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.0  47324  2372 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   472 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   740 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47452  2392 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.0  47056  2128 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.1  24396  2588 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13568   828 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41188  1296 ?        S    17:02   0:00  \_ dovecot/auth
root        957  0.4  0.3 1341892 7780 ?        Ssl  17:02   0:25 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756    60 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   616 ?        Ss   17:02   0:00 /usr/sbin/sshd -D
root      83635  0.0  0.1 111304  4268 ?        Ss   18:29   0:00  \_ sshd: [accepted]
root      83885  0.0  0.1 111304  4448 ?        Ss   18:29   0:00  \_ sshd: [accepted]
sshd      83886  0.0  0.1 115644  2624 ?        S    18:29   0:00  |   \_ sshd: [net]
root      83895  0.0  0.2 157100  5076 ?        Ss   18:29   0:00  \_ sshd: unknown [priv]
sshd      83900  0.0  0.1 115644  2632 ?        S    18:29   0:00      \_ sshd: unknown [net]
root        962  0.0  0.0 153404   512 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.5 114016 12352 ?        Ssl  17:02   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   308 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.0  0.0 389508   788 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.0  1.5 5654048 37584 ?       SLsl 17:02   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.0  0.4 439788 11360 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1136  0.0  0.1 157708  3012 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  0.0  4.8 248052 118096 ?       Ss   17:02   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8203  0.0  4.9 249328 119088 ?       S    17:08   0:00  \_ spamd child
root       8204  0.0  4.8 248052 117144 ?       S    17:08   0:00  \_ spamd child
wp-tool+   1176  0.0  1.0 412368 24724 ?        Ss   17:02   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.5 387528 12460 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.0  0.0 167452  1472 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.0  0.9 262224 23968 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1233  0.0  0.5 209860 12912 ?        Ss   17:02   0:00 tailwatchd
root       1607  0.0  0.0 299272   852 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416  1536 ?        SN   17:02   0:00 cpanellogd - sleeping for logs
mysql      1750  1.4 10.4 1458592 252356 ?      Sl   17:02   1:15 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.0  0.3 266984  8396 ?        Ss   17:02   0:01 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12792   488 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   436 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12828   488 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.0  0.0  53340   276 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    65736  0.1  0.8 277680 20472 ?        S    18:09   0:02  \_ /usr/sbin/httpd -k start
nobody    69593  0.1  0.8 277720 20264 ?        S    18:13   0:01  \_ /usr/sbin/httpd -k start
nobody    73522  0.1  0.8 277764 20192 ?        S    18:18   0:01  \_ /usr/sbin/httpd -k start
nobody    74186  0.1  0.8 277868 19868 ?        S    18:18   0:01  \_ /usr/sbin/httpd -k start
nobody    75331  0.1  0.8 277744 20152 ?        S    18:20   0:01  \_ /usr/sbin/httpd -k start
nobody    76332  0.1  0.8 277520 19636 ?        S    18:21   0:00  \_ /usr/sbin/httpd -k start
nobody    76733  0.1  0.8 277472 19504 ?        S    18:21   0:00  \_ /usr/sbin/httpd -k start
nobody    77941  0.1  0.8 277744 19752 ?        S    18:23   0:00  \_ /usr/sbin/httpd -k start
nobody    77957  0.1  0.8 277744 19944 ?        S    18:23   0:00  \_ /usr/sbin/httpd -k start
nobody    79380  0.1  0.8 277744 19592 ?        S    18:24   0:00  \_ /usr/sbin/httpd -k start
nobody    79389  0.1  0.8 277520 19440 ?        S    18:24   0:00  \_ /usr/sbin/httpd -k start
nobody    80291  0.1  0.8 277588 19824 ?        S    18:25   0:00  \_ /usr/sbin/httpd -k start
nobody    80738  0.1  0.7 277468 19172 ?        S    18:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    84053  1.0  0.6 366220 16596 ?        S    18:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81813  0.1  0.7 277744 19196 ?        S    18:27   0:00  \_ /usr/sbin/httpd -k start
cloudw    84013  1.0  0.6 353712 16240 ?        S    18:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    82744  0.1  0.8 277752 19452 ?        S    18:28   0:00  \_ /usr/sbin/httpd -k start
nobody    82817  0.1  0.7 277768 19052 ?        S    18:28   0:00  \_ /usr/sbin/httpd -k start
nobody    83235  0.1  0.7 277744 19264 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    83251  0.1  0.7 277744 19168 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
cloudw    84079  0.0  0.6 353712 15980 ?        S    18:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    83252  0.1  0.7 277744 19184 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    83882  0.0  0.7 277308 18152 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    83887  0.0  0.7 277324 17148 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    83888  0.0  0.7 277716 18356 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.1  0.4 181668 11160 ?        Ss   17:02   0:05 lfd - sleeping
oysipao+  58384  0.0  0.0   3148   412 ?        Ss   18:00   0:00 [kworker]
oysipao+  58386  0.0  0.0   3152   420 ?        S    18:00   0:00  \_ [kworker]
## mysql stats
Uptime: 5256  Threads: 3  Questions: 426235  Slow queries: 0  Opens: 3067  Flush tables: 1  Open tables: 2000  Queries per second avg: 81.094
*************************** 1. row ***************************
     Id: 6843
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 6844
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 6855
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.131.163 TIME_WAIT
      1 114.119.149.43 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 142.44.225.100 TIME_WAIT
      1 15.235.27.57 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.40 TIME_WAIT
      1 40.77.167.25 TIME_WAIT
      1 51.161.65.2 TIME_WAIT
      1 74.7.228.57 TIME_WAIT
      1 74.7.228.61 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 74.7.230.56 TIME_WAIT
     13 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 18:30:02 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 27 minutes 29 seconds
   Server load: 1.13 0.74 0.56
   Total accesses: 35433 - Total Traffic: 835.3 MB - Total Duration: 17244144
   CPU Usage: u9.05 s4.69 cu459.54 cs380.27 - 16.3% CPU load
   6.75 requests/sec - 163.0 kB/second - 24.1 kB/request - 486.669 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

K_K_WKK___RKKK_RW_W_....K..K....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  82744 1/17/1330  K 0.64 0    419  640235 34.9  0.46  31.17 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=3529370390 HTTP/1.1
   1-0  65736 0/407/1639 _ 9.60 0    1954 794482 0.0   8.57  34.74 104.248.90.230 http/1.1 health.oyostate.gov.ng:443 GET /php_info.php HTTP/1.1
   2-0  76332 1/159/1434 K 4.26 4    6    662202 10.0  4.16  32.95 186.82.84.222  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ohimini&state=Benue&ward=Aga
   3-0  83235 0/12/1276  _ 0.21 0    1973 694747 0.0   0.44  32.33 104.248.90.230 http/1.1 health.oyostate.gov.ng:443 GET /adminer.php HTTP/1.1
   4-0  83251 2/12/1301  W 0.26 0    0    601926 63.7  0.32  29.58 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=96329149 HTTP/1.1
   5-0  80291 6/80/1257  K 1.91 3    542  645316 190.1 2.05  33.72 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=891620394 HTTP/1.1
   6-0  80738 1/65/1477  K 1.64 0    497  768087 31.0  1.66  37.34 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3583972493 HTTP/1.1
   7-0  74186 0/200/1509 _ 5.17 0    0    650644 0.0   5.44  31.02 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  83882 0/2/1190   _ 0.00 0    9    596545 0.0   0.14  29.41 57.141.0.36    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Kaduna&lga=Kubau&ward=Dama
   9-0  83252 0/17/1232  _ 0.44 0    0    546364 0.0   0.50  27.09 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   10-0 83887 0/1/1354   R 0.00 1    2    643139 0.0   0.00  30.56 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   11-0 77941 1/126/1211 K 3.21 1    517  633324 34.0  2.80  29.25 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=3342495782 HTTP/1.1
   12-0 79380 3/90/1203  K 2.26 0    469  629459 96.5  2.34  35.72 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=593703222 HTTP/1.1
   13-0 81813 1/47/1302  K 1.41 0    517  626527 35.9  1.07  31.92 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1266944920 HTTP/1.1
   14-0 76733 0/142/1294 _ 3.58 0    1728 668945 0.0   3.38  28.92 104.248.90.230 http/1.1 health.oyostate.gov.ng:443 GET /admin.php HTTP/1.1
   15-0 82817 0/25/1099  R 0.56 1    1408 470318 0.0   0.64  22.75 104.248.90.230 http/1.1 health.oyostate.gov.ng:443 GET /bin/cron.php HTTP/1.1
   16-0 69593 0/257/1183 W 6.58 0    0    599312 0.0   6.93  28.24 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 75331 0/179/1102 _ 4.45 0    1630 505572 0.0   4.63  25.35 104.248.90.230 http/1.1 health.oyostate.gov.ng:443 GET /phpinfo.php HTTP/1.1
   18-0 83888 1/2/1226   W 0.00 0    0    580524 34.0  0.03  27.27 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=3644294841 HTTP/1.1
   19-0 79389 0/87/1106  _ 2.61 0    2135 558126 0.0   2.63  24.37 104.248.90.230 http/1.1 health.oyostate.gov.ng:443 GET /.env HTTP/1.1
   20-0 -     0/0/1255   . 0.00 15   0    569240 0.0   0.00  29.63 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/705    . 0.00 402  0    369183 0.0   0.00  17.83 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/785    . 0.00 407  0    359413 0.0   0.00  17.07 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/713    . 0.00 304  0    353434 0.0   0.00  17.73 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 73522 3/201/692  K 5.47 0    399  417074 95.4  9.30  21.18 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=3475478781 HTTP/1.1
   25-0 -     0/0/543    . 0.00 290  0    240524 0.0   0.00  11.76 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/567    . 0.00 307  0    308135 0.0   0.00  14.98 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 77957 8/124/566  K 3.25 3    86   261432 11.0  2.70  12.53 66.249.70.7    http/1.1 test.cloudware.ng:443      GET /188783995?goodscode=0188537334 HTTP/1.1
   28-0 -     0/0/472    . 0.00 2093 0    256540 0.0   0.00  11.90 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/507    . 0.00 1698 0    242626 0.0   0.00  10.77 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/337    . 0.00 2179 0    167342 0.0   0.00  7.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/688    . 0.00 975  0    340230 0.0   0.00  15.87 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/256    . 0.00 2328 0    134886 0.0   0.00  6.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/319    . 0.00 2389 0    147876 0.0   0.00  6.62  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/157    . 0.00 2392 0    78505  0.0   0.00  3.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/204    . 0.00 2355 0    87115  0.0   0.00  4.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/188    . 0.00 3027 0    98171  0.0   0.00  6.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/206    . 0.00 3111 0    66892  0.0   0.00  3.76  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/49     . 0.00 4906 0    9438   0.0   0.00  0.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/127    . 0.00 4564 0    57209  0.0   0.00  2.90  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/96     . 0.00 4730 0    38412  0.0   0.00  1.79  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/7      . 0.00 5021 0    1435   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00 4970 0    11034  0.0   0.00  0.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/5      . 0.00 5026 0    1769   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/13     . 0.00 4994 0    7314   0.0   0.00  0.35  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 5016 0    2116   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/29     . 0.00 4910 0    15427  0.0   0.00  0.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/46     . 0.00 4917 0    31137  0.0   0.00  1.31  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/5      . 0.00 5017 0    2706   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/146    . 0.00 4496 0    50309  0.0   0.00  2.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 5032 0    1402   0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1282
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...52)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 25774
   total entries replaced since starting: 0
   total entries expired since starting: 24488
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 26 miss
   total removes since starting: 6 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit