403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.19.03.txt
 ## swap threshold exceeded
## server overview
2025-11-16.19.03 load[0] mem[64/60] mysql[1/11] httpd[22]
              total        used        free      shared  buff/cache   available
Mem:           2363        1470         263          84         630         647
Swap:          1999        1296         703
 19:03:01 up  2:00,  0 users,  load average: 0.68, 0.86, 0.75
## system overview
top - 19:03:01 up  2:00,  0 users,  load average: 0.68, 0.86, 0.75
Tasks: 221 total,   3 running, 204 sleeping,   0 stopped,  14 zombie
%Cpu(s): 78.8 us, 12.1 sy,  0.0 ni,  3.0 id,  6.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   250764 free,  1516252 used,   653284 buff/cache
KiB Swap:  2047996 total,   720892 free,  1327104 used.   652720 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 10750 healtho+  20   0  465248  73356   4188 S  81.2  3.0   0:05.51 php-fpm: +
  1750 mysql     20   0 1458592 253888   3500 S  56.2 10.5   1:45.73 /usr/sbin+
   944 cpanelc+  20   0   10332   3184   2364 S   6.2  0.1   0:06.00 /usr/loca+
 11814 nigeria   20   0  404052  17544  10364 S   6.2  0.7   0:00.02 /opt/cpan+
 11822 cloudw    20   0  353712  17584  10496 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44280   3408   1568 S   0.0  0.1   0:10.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.43 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:07.62 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.44 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:10.83 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.04 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.89 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   2468   2152 S   0.0  0.1   0:04.39 /usr/lib/+
   389 root      20   0   45352    516    368 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    420    288 S   0.0  0.0   0:00.69 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   468 nobody    20   0  277608  20232   4784 S   0.0  0.8   0:01.00 /usr/sbin+
   489 dbus      20   0   58728   1496    776 S   0.0  0.1   0:03.91 /usr/bin/+
   493 rpc       20   0   69256    252    152 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24704   1276    904 S   0.0  0.1   0:01.73 /usr/lib/+
   525 root      20   0  152780    340    296 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    520    408 S   0.0  0.0   0:00.16 /usr/sbin+
   530 polkitd   20   0  612240    996    544 S   0.0  0.0   0:01.02 /usr/lib/+
   531 root      20   0  224144   5724    976 S   0.0  0.2   0:00.15 queueproc+
   538 root      20   0   52852    536    440 S   0.0  0.0   0:00.01 /usr/sbin+
   542 root      20   0  195208    128    128 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    148    144 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1664    736 S   0.0  0.1   0:07.55 /usr/sbin+
   578 root      20   0   24208    272    248 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    592    460 S   0.0  0.0   0:00.21 /usr/sbin+
   585 root      20   0  114704    236    236 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    236    232 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   626 mailnull  20   0   89120   4076   1056 S   0.0  0.2   0:00.12 /usr/sbin+
   685 root       0 -20       0      0      0 S   0.0  0.0   0:02.11 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  306512   2504   1804 S   0.0  0.1   0:02.13 /usr/sbin+
   935 root      20   0  388892   1856    524 S   0.0  0.1   0:00.29 php-fpm: +
   937 named     20   0  924724  31908   1544 S   0.0  1.3   0:03.70 /usr/sbin+
   939 root      20   0 1763124 329972    856 S   0.0 13.6   0:13.37 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  572372   1108    532 S   0.0  0.0   0:00.71 /usr/bin/+
   946 root      20   0  261296   6656   1804 S   0.0  0.3   0:01.71 cpsrvd (S+
   947 root      20   0  400740   3500    828 S   0.0  0.1   0:01.29 php-fpm: +
   952 root      20   0  396248    760    584 S   0.0  0.0   0:00.25 php-fpm: +
   953 root      20   0  445028   4772   3284 S   0.0  0.2   0:00.53 sw-engine+
   954 root      20   0 1277312  12128    244 S   0.0  0.5   0:26.51 /usr/bin/+
   955 root      20   0   51508    708    544 S   0.0  0.0   0:00.12 /usr/sbin+
   957 root      20   0 1415624   7780    244 S   0.0  0.3   0:25.34 /usr/bin/+
   959 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    616    516 S   0.0  0.0   0:00.97 /usr/sbin+
   962 root      20   0  153404    512    432 S   0.0  0.0   0:00.15 pure-ftpd+
   980 systuser  20   0  114016  12848   2272 S   0.0  0.5   0:01.80 /usr/loca+
   981 memcach+  20   0  342400    308    308 S   0.0  0.0   0:00.14 /usr/bin/+
   987 root      20   0  389508    852    640 S   0.0  0.0   0:00.24 php-fpm: +
   989 telegraf  20   0 5654048  34596   3852 S   0.0  1.4   0:04.21 /usr/loca+
   992 root      20   0  439788  11360  11268 S   0.0  0.5   0:00.35 php-fpm: +
  1097 dovenull  20   0   47544   3024   1936 S   0.0  0.1   0:00.11 dovecot/p+
  1098 dovenull  20   0   47324   2924   1920 S   0.0  0.1   0:00.06 dovecot/i+
  1099 dovecot   20   0   10320    472    360 S   0.0  0.0   0:00.01 dovecot/a+
  1100 root      20   0   10452    740    552 S   0.0  0.0   0:00.07 dovecot/l+
  1101 dovenull  20   0   47452   2848   1688 S   0.0  0.1   0:00.15 dovecot/p+
  1102 dovenull  20   0   47056   2608   1780 S   0.0  0.1   0:00.02 dovecot/i+
  1110 root      20   0   24528   2688    592 S   0.0  0.1   0:00.07 dovecot/c+
  1117 dovecot   20   0   13568    824    540 S   0.0  0.0   0:00.01 dovecot/s+
  1136 systuser  20   0  157708   3012   1024 S   0.0  0.1   0:00.04 SonarPush+
  1142 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1147 root      20   0  248052 118096   1452 S   0.0  4.9   0:03.67 /usr/loca+
  1176 wp-tool+  20   0  412368  25048   1888 S   0.0  1.0   0:02.47 /usr/bin/+
  1177 wp-tool+  20   0  387528  12684   1816 S   0.0  0.5   0:00.13 /usr/bin/+
  1181 dovecot   20   0   41188   1536   1060 S   0.0  0.1   0:00.17 dovecot/a+
  1229 root      20   0  167452   1484    884 S   0.0  0.1   0:00.15 dnsadmin +
  1231 root      20   0  262224  22788   4868 S   0.0  0.9   0:00.47 cpdavd - +
  1233 root      20   0  209860  13200   2572 S   0.0  0.5   0:01.16 tailwatchd
  1607 root      20   0  299272    856    476 S   0.0  0.0   0:00.19 php-fpm: +
  1637 root      38  18  130416   1540    804 S   0.0  0.1   0:00.02 cpanellog+
  1985 root      20   0  266984   8396    820 S   0.0  0.3   0:01.33 /usr/sbin+
  1988 root      20   0   12788    488    380 S   0.0  0.0   0:01.01 /usr/loca+
  1989 root      20   0   12732    436    364 S   0.0  0.0   0:00.89 /usr/loca+
  1992 root      20   0   12808    488    368 S   0.0  0.0   0:00.97 /usr/loca+
  1995 root      20   0   53340    276    276 S   0.0  0.0   0:00.04 /usr/loca+
  2053 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2081 root      20   0  181976  11288   1244 S   0.0  0.5   0:07.80 lfd - sle+
  2692 nobody    20   0  277744  19864   4460 S   0.0  0.8   0:00.84 /usr/sbin+
  2923 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3124 nobody    20   0  277744  20164   4672 S   0.0  0.8   0:00.77 /usr/sbin+
  3140 nobody    20   0  277876  19856   4484 S   0.0  0.8   0:00.64 /usr/sbin+
  4558 nobody    20   0  277868  19740   4368 S   0.0  0.8   0:00.69 /usr/sbin+
  6072 nobody    20   0  277744  19644   4256 S   0.0  0.8   0:00.51 /usr/sbin+
  6096 nobody    20   0  277884  19676   4296 S   0.0  0.8   0:00.51 /usr/sbin+
  8090 nobody    20   0  277480  19264   4144 S   0.0  0.8   0:00.35 /usr/sbin+
  8203 root      20   0  261372 127736   2664 S   0.0  5.3   0:00.78 spamd chi+
  8204 root      20   0  248052 117144    540 S   0.0  4.8   0:00.00 spamd chi+
  8268 nobody    20   0  277472  19188   4060 S   0.0  0.8   0:00.36 /usr/sbin+
  8577 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  8809 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9153 nobody    20   0  277880  19588   4220 S   0.0  0.8   0:00.24 /usr/sbin+
  9178 nobody    20   0  277484  19180   3988 S   0.0  0.8   0:00.31 /usr/sbin+
  9205 nobody    20   0  277496  19164   4000 S   0.0  0.8   0:00.22 /usr/sbin+
  9554 nobody    20   0  277744  18708   3384 S   0.0  0.8   0:00.02 /usr/sbin+
  9564 nobody    20   0  277748  19308   3964 S   0.0  0.8   0:00.30 /usr/sbin+
  9565 nobody    20   0  277880  19096   3756 S   0.0  0.8   0:00.13 /usr/sbin+
 10035 nobody    20   0  277876  19224   3892 S   0.0  0.8   0:00.12 /usr/sbin+
 10498 nobody    20   0  277744  19148   3816 S   0.0  0.8   0:00.07 /usr/sbin+
 10514 nobody    20   0  277748  19096   3740 S   0.0  0.8   0:00.17 /usr/sbin+
 10733 nobody    20   0  277304  18468   3632 S   0.0  0.8   0:00.01 /usr/sbin+
 10774 nobody    20   0  277748  18976   3660 S   0.0  0.8   0:00.12 /usr/sbin+
 10831 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 11069 nobody    20   0  277744  18956   3636 S   0.0  0.8   0:00.02 /usr/sbin+
 11109 nobody    20   0  277532  18740   3600 S   0.0  0.8   0:00.03 /usr/sbin+
 11110 nobody    20   0  277560  18340   3328 S   0.0  0.8   0:00.14 /usr/sbin+
 11200 nobody    20   0  277748  18856   3544 S   0.0  0.8   0:00.05 /usr/sbin+
 11201 nobody    20   0  277168  16408   1852 S   0.0  0.7   0:00.04 /usr/sbin+
 11202 nobody    20   0  277880  18788   3604 S   0.0  0.8   0:00.01 /usr/sbin+
 11203 nobody    20   0  277876  18964   3688 S   0.0  0.8   0:00.07 /usr/sbin+
 11501 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 11682 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 11683 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 11686 nigeria   20   0  400460   5868   2408 S   0.0  0.2   0:00.00 php-fpm: +
 11693 wp-tool+  20   0  445028   1696    192 S   0.0  0.1   0:00.00 sw-engine+
 11706 wp-tool+  20   0  445028   1700    196 S   0.0  0.1   0:00.00 sw-engine+
 11716 healtho+  20   0  400460   3336    564 S   0.0  0.1   0:00.00 php-fpm: +
 11728 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11729 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11730 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11731 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11732 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11733 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11734 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11735 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11736 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11738 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11740 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11743 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 11744 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 11745 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 11758 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 11762 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 11763 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11764 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11765 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11766 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11767 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11768 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11769 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11770 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11771 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11772 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11773 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11774 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11775 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11776 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11784 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 11786 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11787 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11788 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 11789 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11790 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 11791 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11792 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11793 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11794 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11803 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 11806 pactpay   20   0  480124  19296  11892 S   0.0  0.8   0:00.02 /opt/cpan+
 11812 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 11819 root      20   0  160220   2056   1584 R   0.0  0.1   0:00.00 top -bcn1
 11825 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 11826 cloudw    20   0   74008   5556   2664 R   0.0  0.2   0:00.00 /opt/cpan+
 11827 cloudsms  20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
 58384 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
 58386 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.07 [kworker]
 65385 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 79618 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 84128 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
 92497 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94184 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 96212 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100300 nobody    20   0  277616  20192   4804 S   0.0  0.8   0:01.20 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    17:02   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    17:02   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    17:02   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   17:02   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.0  0.0      0     0 ?        S<   17:02   0:02  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root      65385  0.0  0.0      0     0 ?        S    18:09   0:00  \_ [kworker/u200:1]
root      79618  0.0  0.0      0     0 ?        S    18:25   0:00  \_ [kworker/u200:2]
root      84128  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/0:4]
root      92497  0.0  0.0      0     0 ?        S    18:39   0:00  \_ [kworker/1:3]
root      94184  0.0  0.0      0     0 ?        S    18:41   0:00  \_ [kworker/0:2]
root      96212  0.0  0.0      0     0 ?        S    18:44   0:00  \_ [kworker/1:0]
root       1142  0.0  0.0      0     0 ?        S    18:52   0:00  \_ [kworker/1:2]
root       2053  0.0  0.0      0     0 ?        S    18:53   0:00  \_ [kworker/1:4]
root       2923  0.0  0.0      0     0 ?        S    18:54   0:00  \_ [kworker/0:0]
root       8577  0.0  0.0      0     0 ?        S    19:00   0:00  \_ [kworker/0:1]
root       8809  0.0  0.0      0     0 ?        S    19:00   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44280  3408 ?        Ss   17:02   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  2468 ?        Ss   17:02   0:04 /usr/lib/systemd/systemd-journald
root        389  0.0  0.0  45352   516 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   420 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.0  0.0  58728  1496 ?        Ss   17:02   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   252 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24704  1276 ?        Ss   17:02   0:01 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   340 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   520 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.0 612240   996 ?        Ssl  17:02   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.0  0.2 224144  5724 ?        Ss   17:02   0:00 queueprocd - waiting up to 60s to process a task
root        538  0.0  0.0  52852   536 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   128 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   148 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.1  0.0 1131720 1664 ?        Ssl  17:02   0:07 /usr/sbin/nscd
root        578  0.0  0.0  24208   272 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   592 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root      11728  0.0  0.0 183048  2152 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11743  0.0  0.0 113284  1208 ?        Ss   19:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      11744  0.0  0.0 108052   356 ?        S    19:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      11745  0.0  0.0 113288  1512 ?        S    19:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      11828  0.0  0.0 153840  2096 ?        R    19:03   0:00  |               \_ ps auxf
root      11729  0.0  0.0 183048  2152 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11791  0.0  0.0  20164   808 ?        Ss   19:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      11730  0.0  0.0 183048  2148 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11794  0.0  0.0  20164   808 ?        Ss   19:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      11731  0.0  0.0 183048  2148 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11784  0.0  0.0  20164   988 ?        Ss   19:03   0:00  |   \_ jailshell (cloudsms) [11825] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  11825  0.0  0.0  20164   264 ?        S    19:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  11827  0.0  0.0 113284  1212 ?        S    19:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  11829  0.0  0.0 113284   184 ?        R    19:03   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      11732  0.0  0.0 183048  2148 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11786  0.0  0.0  20164   804 ?        Ss   19:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      11733  0.0  0.0 183048  2148 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11793  0.0  0.0  20164   808 ?        Ss   19:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      11734  0.0  0.0 183048  2144 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11789  0.0  0.0  20164   808 ?        Ss   19:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      11735  0.0  0.0 183048  2144 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11792  0.0  0.0  20164   804 ?        Ss   19:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      11736  0.0  0.0 183048  2144 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11787  0.0  0.0  20164   808 ?        Ss   19:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      11738  0.0  0.0 183048  2144 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11790  0.0  0.0  20164   964 ?        Ss   19:03   0:00  |   \_ jailshell (pactpay) [11803] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11803  0.0  0.0  20164   256 ?        S    19:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11806  0.0  0.7 480124 19296 ?        S    19:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      11740  0.0  0.0 183048  2144 ?        S    19:03   0:00  \_ /usr/sbin/CROND -n
root      11788  0.0  0.0  20164   972 ?        Ss   19:03   0:00      \_ jailshell (nigeria) [11812] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11812  0.0  0.0  20164   264 ?        S    19:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11814  0.0  0.7 404052 17544 ?        S    19:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        585  0.0  0.0 114704   236 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   236 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.1  89120  4076 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.1 306512  2504 ?        Ssl  17:02   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.0 388892  1856 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       937  0.0  1.3 924724 31908 ?        Ssl  17:02   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939  0.1 13.6 1763124 329972 ?      Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268    72 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132    28 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864    80 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1  10332  3184 ?        Ss   17:02   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.0  0.0 572372  1108 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.0  0.2 261296  6656 ?        Ss   17:02   0:01 cpsrvd (SSL) - waiting for connections                   
root      11763  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11764  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11765  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11766  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11767  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11768  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11769  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11770  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11771  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11772  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11773  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11774  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11775  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root      11776  0.0  0.0      0     0 ?        Z    19:03   0:00  \_ [cpaneld - servi] <defunct>
root        947  0.0  0.1 400740  3500 ?        Ss   17:02   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  10750 10.0  3.0 465248 73356 ?        R    19:02   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   11686  0.0  0.2 400460  5868 ?        S    19:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  11716  0.0  0.1 400460  3336 ?        S    19:02   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        952  0.0  0.0 396248   760 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.0  0.1 445028  4772 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  11693  0.0  0.0 445028  1696 ?        S    19:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  11706  0.0  0.0 445028  1700 ?        S    19:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954  0.3  0.5 1277312 12128 ?       Ssl  17:02   0:26 /usr/bin/checkstatus
root        955  0.0  0.0  51508   708 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.1  47544  3024 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2924 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   472 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   740 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47452  2848 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2608 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.1  24528  2688 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13568   824 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41188  1536 ?        S    17:02   0:00  \_ dovecot/auth
root        957  0.3  0.3 1415624 7780 ?        Ssl  17:02   0:25 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756    60 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   616 ?        Ss   17:02   0:00 /usr/sbin/sshd -D
root      10831  0.0  0.1 111304  4268 ?        Ss   19:02   0:00  \_ sshd: [accepted]
root      11501  0.0  0.1 111304  4264 ?        Ss   19:02   0:00  \_ sshd: [accepted]
root      11682  0.2  0.2 162436  5836 ?        Ss   19:02   0:00  \_ sshd: root [priv]
sshd      11683  0.0  0.1 115644  2632 ?        S    19:02   0:00  |   \_ sshd: root [net]
root      11758  0.0  0.1 111304  4268 ?        Ss   19:03   0:00  \_ sshd: [accepted]
sshd      11762  0.0  0.1 115644  2628 ?        S    19:03   0:00      \_ sshd: [net]
root        962  0.0  0.0 153404   512 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.5 114016 12848 ?        Ssl  17:02   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   308 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.0  0.0 389508   852 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.0  1.4 5654048 34596 ?       SLsl 17:02   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.0  0.4 439788 11360 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1136  0.0  0.1 157708  3012 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  0.0  4.8 248052 118096 ?       Ss   17:02   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8203  0.0  5.2 261372 127736 ?       S    17:08   0:00  \_ spamd child
root       8204  0.0  4.8 248052 117144 ?       S    17:08   0:00  \_ spamd child
wp-tool+   1176  0.0  1.0 412368 25048 ?        Ss   17:02   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.5 387528 12684 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.0  0.0 167452  1484 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.0  0.9 262224 22788 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1233  0.0  0.5 209860 13200 ?        Ss   17:02   0:01 tailwatchd
root       1607  0.0  0.0 299272   856 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416  1540 ?        SN   17:02   0:00 cpanellogd - sleeping for logs
mysql      1750  1.4 10.4 1458592 253888 ?      Sl   17:02   1:45 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.0  0.3 266984  8396 ?        Ss   17:02   0:01 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12788   488 ?        S    17:02   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   436 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12808   488 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.0  0.0  53340   276 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody   100300  0.1  0.8 277616 20192 ?        S    18:49   0:01  \_ /usr/sbin/httpd -k start
cloudw    11826  0.0  0.7 353712 17576 ?        S    19:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody      468  0.1  0.8 277608 20232 ?        S    18:51   0:01  \_ /usr/sbin/httpd -k start
nobody     2692  0.1  0.8 277744 19864 ?        S    18:53   0:00  \_ /usr/sbin/httpd -k start
nobody     3124  0.1  0.8 277744 20164 ?        S    18:54   0:00  \_ /usr/sbin/httpd -k start
nobody     3140  0.1  0.8 277876 19856 ?        S    18:54   0:00  \_ /usr/sbin/httpd -k start
nobody     4558  0.1  0.8 277868 19740 ?        S    18:55   0:00  \_ /usr/sbin/httpd -k start
nobody     6072  0.1  0.8 277744 19644 ?        S    18:57   0:00  \_ /usr/sbin/httpd -k start
nobody     6096  0.1  0.8 277884 19676 ?        S    18:57   0:00  \_ /usr/sbin/httpd -k start
cloudw    11822  0.0  0.7 353712 17584 ?        S    19:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     8090  0.1  0.7 277480 19264 ?        S    18:59   0:00  \_ /usr/sbin/httpd -k start
nobody     8268  0.1  0.7 277472 19188 ?        S    18:59   0:00  \_ /usr/sbin/httpd -k start
nobody     9153  0.1  0.8 277880 19588 ?        S    19:00   0:00  \_ /usr/sbin/httpd -k start
nobody     9178  0.1  0.7 277484 19180 ?        S    19:00   0:00  \_ /usr/sbin/httpd -k start
nobody     9205  0.1  0.7 277496 19164 ?        S    19:00   0:00  \_ /usr/sbin/httpd -k start
nobody     9554  0.0  0.7 277744 18708 ?        S    19:00   0:00  \_ /usr/sbin/httpd -k start
nobody     9564  0.2  0.7 277748 19308 ?        S    19:00   0:00  \_ /usr/sbin/httpd -k start
nobody     9565  0.1  0.7 277880 19096 ?        S    19:00   0:00  \_ /usr/sbin/httpd -k start
nobody    10035  0.1  0.7 277876 19224 ?        S    19:01   0:00  \_ /usr/sbin/httpd -k start
nobody    10498  0.1  0.7 277744 19148 ?        S    19:01   0:00  \_ /usr/sbin/httpd -k start
nobody    10514  0.2  0.7 277748 19096 ?        S    19:01   0:00  \_ /usr/sbin/httpd -k start
nobody    10733  0.0  0.7 277304 18468 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10774  0.2  0.7 277748 18976 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    11069  0.0  0.7 277744 18956 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    11109  0.0  0.7 277532 18740 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    11110  0.4  0.7 277560 18340 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    11200  0.1  0.7 277748 18856 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    11201  0.1  0.6 277168 16408 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    11202  0.0  0.7 277880 18788 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
nobody    11203  0.2  0.7 277876 18964 ?        S    19:02   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.1  0.4 181976 11288 ?        Ss   17:02   0:07 lfd - sleeping
oysipao+  58384  0.0  0.0   3148   412 ?        Ss   18:00   0:00 [kworker]
oysipao+  58386  0.0  0.0   3152   420 ?        S    18:00   0:00  \_ [kworker]
## mysql stats
Uptime: 7235  Threads: 4  Questions: 594328  Slow queries: 0  Opens: 3662  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.146
*************************** 1. row ***************************
     Id: 9778
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 9780
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 9781
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29/17/09/006,pdp103,apc67,pdm1,apa1,ad1.
*************************** 4. row ***************************
     Id: 9784
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.143.119 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 142.44.220.10 TIME_WAIT
      1 142.44.220.15 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 195.250.21.230 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.22.176.188 TIME_WAIT
      1 34.227.246.244 TIME_WAIT
      1 43.153.62.161 TIME_WAIT
      1 45.82.78.114 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 52.167.144.169 TIME_WAIT
      1 54.39.136.151 TIME_WAIT
      1 67.23.236.167 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.174 TIME_WAIT
      2 68.178.161.65 TIME_WAIT
     40 124.248.184.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 19:03:01 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 28 seconds
   Server load: 0.68 0.86 0.75
   Total accesses: 48071 - Total Traffic: 1.1 GB - Total Duration: 22484874
   CPU Usage: u6.4 s3.85 cu616.28 cs509.9 - 15.7% CPU load
   6.65 requests/sec - 155.3 kB/second - 23.3 kB/request - 467.743 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

RW_RRKRKK_K._CKWRR.R_KWKKKKR_....._.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU  SS  Req   Dur   Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  9554   0/5/1909   R 0.08 115 46  816359  0.0   0.12  39.65 195.123.219.34  http/1.1 nescrow.com.ng:443
   1-0  100300 6/228/2244 W 5.13 0   0   1012071 189.3 4.91  45.36 192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=2902979376 HTTP/1.1
   2-0  9564   0/52/2074  _ 1.29 0   0   935726  0.0   1.39  46.22 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  8090   0/65/1828  R 1.45 1   1   927434  0.0   1.56  41.78 50.114.36.105   http/1.1 health.oyostate.gov.ng:443
   4-0  9565   0/23/1772  R 0.51 66  264 819377  0.0   0.56  42.06 195.211.96.85   http/1.1 nescrow.com.ng:443
   5-0  8268   5/66/1738  K 1.73 1   297 866253  159.7 1.38  45.66 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=3951070139 HTTP/1.1
   6-0  2692   0/155/1994 R 3.53 87  266 989480  0.0   3.50  48.14 31.13.213.232   http/1.1 nescrow.com.ng:443
   7-0  10035  4/23/2064  K 0.55 3   259 841739  126.7 0.42  40.42 192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=1753599669 HTTP/1.1
   8-0  10498  1/14/1565  K 0.26 1   22  758374  5.7   0.33  38.21 66.249.70.7     http/1.1 test.cloudware.ng:443           GET /1586925064?goodscode=1584845978 HTTP/1.1
   9-0  9153   0/50/1793  _ 0.93 1   280 752056  0.0   0.93  37.95 124.248.184.195 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   10-0 10514  1/29/1852  K 0.67 0   302 831136  37.4  0.74  38.96 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=3789399021 HTTP/1.1
   11-0 -      0/0/1703   . 0.00 30  0   837343  0.0   0.00  38.80 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 9178   0/93/1717  _ 1.22 0   6   816264  0.0   1.20  44.45 35.169.102.85   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/2019elections/blog/pollin
   13-0 6072   1/105/1772 C 2.11 0   403 833128  5.7   2.14  41.40 124.248.184.195 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   14-0 3124   4/156/1615 K 3.57 0   330 801007  133.7 2.96  35.23 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=974717392 HTTP/1.1
   15-0 6096   3/105/1555 W 1.99 0   0   679619  98.2  2.10  33.02 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=3239827842 HTTP/1.1
   16-0 11069  0/4/1660   R 0.05 21  4   784976  0.0   0.08  39.87 104.194.147.43  http/1.1 nescrow.com.ng:443
   17-0 10733  0/4/1329   R 0.00 53  8   596854  0.0   0.02  29.65 167.88.171.183  http/1.1 nescrow.com.ng:443
   18-0 -      0/0/1570   . 0.00 16  0   745733  0.0   0.00  35.41 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 11109  0/6/1528   R 0.06 9   275 791583  0.0   0.12  35.09 5.181.27.149    http/1.1 nescrow.com.ng:443
   20-0 10774  0/19/1819  _ 0.48 0   341 799572  0.0   0.53  40.71 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=3853907412 HTTP/1.1
   21-0 11110  69/70/1054 K 1.04 0   45  486605  531.6 0.54  23.25 74.176.63.235   http/1.1 equalcash.staging.cloudware.ng: GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   22-0 9205   0/46/1121  W 0.99 0   0   498443  0.0   0.81  23.70 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   23-0 11200  8/10/897   K 0.20 1   268 445134  253.8 0.26  22.32 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=1785985184 HTTP/1.1
   24-0 11201  69/69/837  K 0.04 0   0   454018  35.8  0.03  23.06 74.176.63.235   http/1.1 equalcash.staging.cloudware.ng: GET /ru.php HTTP/1.1
   25-0 3140   7/122/669  K 2.57 2   271 304684  222.3 2.69  14.52 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=2256394106 HTTP/1.1
   26-0 4558   1/115/727  K 2.90 2   294 393756  35.1  3.06  19.12 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=3497999615 HTTP/1.1
   27-0 11202  0/5/825    R 0.03 4   6   379983  0.0   0.07  20.69 195.250.21.230  http/1.1
   28-0 11203  0/12/493   _ 0.30 0   344 265902  0.0   0.35  12.34 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=614860760 HTTP/1.1
   29-0 -      0/0/513    . 0.00 649 0   244618  0.0   0.00  10.86 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -      0/0/393    . 0.00 524 0   200624  0.0   0.00  9.28  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -      0/0/690    . 0.00 683 0   340234  0.0   0.00  15.88 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -      0/0/261    . 0.00 662 0   135603  0.0   0.00  6.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -      0/0/321    . 0.00 682 0   147880  0.0   0.00  6.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 468    0/186/343  _ 4.25 1   323 183923  0.0   5.02  8.73  192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=1213308522 HTTP/1.1
   35-0 -      0/0/206    . 0.00 680 0   87118   0.0   0.00  4.40  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -      0/0/249    . 0.00 417 0   125311  0.0   0.00  8.48  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -      0/0/281    . 0.00 445 0   104922  0.0   0.00  5.75  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -      0/0/138    . 0.00 409 0   37965   0.0   0.00  2.20  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -      0/0/129    . 0.00 681 0   57212   0.0   0.00  2.90  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -      0/0/165    . 0.00 498 0   65065   0.0   0.00  3.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -      0/0/64     . 0.00 497 0   21758   0.0   0.00  1.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -      0/0/146    . 0.00 193 0   76144   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -      0/0/8      . 0.00 670 0   1778    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -      0/0/15     . 0.00 678 0   7320    0.0   0.00  0.37  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -      0/0/7      . 0.00 686 0   2146    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -      0/0/31     . 0.00 684 0   16393   0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -      0/0/48     . 0.00 676 0   31675   0.0   0.00  1.35  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -      0/0/19     . 0.00 628 0   10797   0.0   0.00  0.54  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -      0/0/149    . 0.00 665 0   51163   0.0   0.00  2.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -      0/0/9      . 0.00 656 0   1467    0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -      0/0/85     . 0.00 385 0   28360   0.0   0.00  1.44  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -      0/0/16     . 0.00 615 0   7274    0.0   0.00  0.38  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -      0/0/3      . 0.00 673 0   1042    0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -      0/0/46     . 0.00 514 0   27516   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -      0/0/11     . 0.00 636 0   4925    0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -      0/0/1      . 0.00 688 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1208
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...49)
   index usage: 21%, cache usage: 28%
   total entries stored since starting: 33652
   total entries replaced since starting: 0
   total entries expired since starting: 32438
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 35 miss
   total removes since starting: 6 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit