403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.19.45.txt
 ## swap threshold exceeded
## server overview
2025-11-16.19.45 load[0] mem[63/64] mysql[3/11] httpd[23]
              total        used        free      shared  buff/cache   available
Mem:           2363        1432         130          92         800         677
Swap:          1999        1375         624
 19:45:01 up  2:42,  0 users,  load average: 0.75, 0.80, 0.87
## system overview
top - 19:45:01 up  2:42,  0 users,  load average: 0.75, 0.80, 0.87
Tasks: 216 total,   6 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 76.5 us, 23.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   133192 free,  1466668 used,   820440 buff/cache
KiB Swap:  2047996 total,   639996 free,  1408000 used.   693464 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1458592 254956   3024 S  52.9 10.5   2:32.98 /usr/sbin+
 49877 healtho+  20   0  446304  53336   4216 R  35.3  2.2   0:00.80 php-fpm: +
 50078 pactpay   20   0  480124  17684  11892 S   5.9  0.7   0:00.02 /opt/cpan+
 50090 nigeria   20   0  404052  16144  10384 S   5.9  0.7   0:00.03 /opt/cpan+
 50171 cloudsms  20   0  404052  15872  10220 S   5.9  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44280   3424   1580 S   0.0  0.1   0:13.97 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.55 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:10.61 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.55 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:02.04 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.97 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.19 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.07 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   3280   2964 S   0.0  0.1   0:06.05 /usr/lib/+
   389 root      20   0   45352    516    368 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    580    448 S   0.0  0.0   0:00.97 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 dbus      20   0   58728   1496    776 S   0.0  0.1   0:05.22 /usr/bin/+
   493 rpc       20   0   69256    252    152 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24704   1276    904 S   0.0  0.1   0:02.30 /usr/lib/+
   525 root      20   0  152780    340    296 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    520    408 S   0.0  0.0   0:00.22 /usr/sbin+
   530 polkitd   20   0  612240    996    544 S   0.0  0.0   0:01.35 /usr/lib/+
   531 root      20   0  224144   5756   1008 S   0.0  0.2   0:00.17 queueproc+
   538 root      20   0   52852    456    360 S   0.0  0.0   0:00.01 /usr/sbin+
   542 root      20   0  195208    128    128 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    148    144 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1704    776 S   0.0  0.1   0:10.00 /usr/sbin+
   578 root      20   0   24208    256    232 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    592    460 S   0.0  0.0   0:00.28 /usr/sbin+
   585 root      20   0  114704    236    236 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    236    232 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   626 mailnull  20   0   89120   3972    952 S   0.0  0.2   0:00.13 /usr/sbin+
   685 root       0 -20       0      0      0 S   0.0  0.0   0:02.14 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  314704   3312   2536 S   0.0  0.1   0:02.94 /usr/sbin+
   935 root      20   0  388892   1996    664 R   0.0  0.1   0:00.35 php-fpm: +
   937 named     20   0  924724  33876   1924 S   0.0  1.4   0:04.92 /usr/sbin+
   939 root      20   0 1763124 246960    760 S   0.0 10.2   0:13.40 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 cpanelc+  20   0   10332   3424   2368 S   0.0  0.1   0:08.15 /usr/loca+
   945 root      20   0  572372   1108    532 S   0.0  0.0   0:00.91 /usr/bin/+
   946 root      20   0  261296   6792   1868 S   0.0  0.3   0:02.31 cpsrvd (S+
   947 root      20   0  400740   3504    832 S   0.0  0.1   0:01.85 php-fpm: +
   952 root      20   0  396248    708    532 S   0.0  0.0   0:00.31 php-fpm: +
   953 root      20   0  445028   4772   3284 S   0.0  0.2   0:00.69 sw-engine+
   954 root      20   0 1277312  12128    244 S   0.0  0.5   0:26.52 /usr/bin/+
   955 root      20   0   51508    708    544 S   0.0  0.0   0:00.14 /usr/sbin+
   957 root      20   0 1415624   7780    244 S   0.0  0.3   0:25.37 /usr/bin/+
   959 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    616    516 S   0.0  0.0   0:01.40 /usr/sbin+
   962 root      20   0  153404    512    432 S   0.0  0.0   0:00.20 pure-ftpd+
   980 systuser  20   0  114016  12436   2768 S   0.0  0.5   0:02.36 /usr/loca+
   981 memcach+  20   0  342400    308    308 S   0.0  0.0   0:00.20 /usr/bin/+
   987 root      20   0  389508    804    592 S   0.0  0.0   0:00.30 php-fpm: +
   989 telegraf  20   0 5654048  36524   5768 S   0.0  1.5   0:05.59 /usr/loca+
   992 root      20   0  439788  11360  11268 S   0.0  0.5   0:00.42 php-fpm: +
  1097 dovenull  20   0   47544   3172   1984 S   0.0  0.1   0:00.16 dovecot/p+
  1098 dovenull  20   0   47476   3120   2092 S   0.0  0.1   0:00.10 dovecot/i+
  1099 dovecot   20   0   10320    472    360 S   0.0  0.0   0:00.02 dovecot/a+
  1100 root      20   0   10452    740    552 S   0.0  0.0   0:00.10 dovecot/l+
  1101 dovenull  20   0   47652   3236   1948 S   0.0  0.1   0:00.23 dovecot/p+
  1102 dovenull  20   0   47180   3000   2132 S   0.0  0.1   0:00.04 dovecot/i+
  1110 root      20   0   24564   2784    592 S   0.0  0.1   0:00.09 dovecot/c+
  1117 dovecot   20   0   13568    824    540 S   0.0  0.0   0:00.03 dovecot/s+
  1136 systuser  20   0  157708   3012   1024 S   0.0  0.1   0:00.05 SonarPush+
  1147 root      20   0  248052 118096   1452 S   0.0  4.9   0:03.97 /usr/loca+
  1176 wp-tool+  20   0  412368  24764   1604 S   0.0  1.0   0:03.25 /usr/bin/+
  1177 wp-tool+  20   0  387528  12512   1644 S   0.0  0.5   0:00.16 /usr/bin/+
  1181 dovecot   20   0   41148   1584   1108 S   0.0  0.1   0:00.23 dovecot/a+
  1229 root      20   0  167452   1484    884 S   0.0  0.1   0:00.19 dnsadmin +
  1231 root      20   0  262224  24220   6488 S   0.0  1.0   0:00.57 cpdavd - +
  1233 root      20   0  209860  12920   2148 S   0.0  0.5   0:01.38 tailwatchd
  1607 root      20   0  299272    916    536 S   0.0  0.0   0:00.26 php-fpm: +
  1637 root      38  18  130416   1548    812 S   0.0  0.1   0:00.02 cpanellog+
  1985 root      20   0  266984   8396    820 S   0.0  0.3   0:01.63 /usr/sbin+
  1988 root      20   0   12836    488    380 S   0.0  0.0   0:01.38 /usr/loca+
  1989 root      20   0   12732    436    364 S   0.0  0.0   0:01.21 /usr/loca+
  1992 root      20   0   12876    488    368 S   0.0  0.0   0:01.32 /usr/loca+
  1995 root      20   0   53340    276    276 S   0.0  0.0   0:00.04 /usr/loca+
  2081 root      20   0  182384  11720   1244 S   0.0  0.5   0:10.37 lfd - sle+
  8203 root      20   0  261784 127596   2024 S   0.0  5.3   0:01.14 spamd chi+
  8204 root      20   0  248052 117144    540 S   0.0  4.8   0:00.00 spamd chi+
 19071 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 24931 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 25194 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29989 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35235 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35888 worencom  20   0   38492   3444   2464 S   0.0  0.1   0:00.00 dovecot/i+
 36058 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 37107 nobody    20   0  277752  20104   4632 S   0.0  0.8   0:01.53 /usr/sbin+
 38452 nobody    20   0  277748  20456   4792 S   0.0  0.8   0:01.13 /usr/sbin+
 38527 nobody    20   0  277748  20320   4708 S   0.0  0.8   0:01.13 /usr/sbin+
 38542 nobody    20   0  277524  20196   4792 S   0.0  0.8   0:01.13 /usr/sbin+
 39405 nobody    20   0  277884  20248   4704 S   0.0  0.8   0:01.08 /usr/sbin+
 40007 nobody    20   0  277752  20404   4840 S   0.0  0.8   0:00.95 /usr/sbin+
 40443 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 41013 nobody    20   0  277748  20032   4516 S   0.0  0.8   0:00.97 /usr/sbin+
 43891 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44080 nobody    20   0  277748  19908   4472 S   0.0  0.8   0:00.61 /usr/sbin+
 44931 nobody    20   0  277744  19708   4336 S   0.0  0.8   0:00.55 /usr/sbin+
 45239 nobody    20   0  277488  19396   4232 S   0.0  0.8   0:00.74 /usr/sbin+
 46159 nobody    20   0  277892  19656   4256 S   0.0  0.8   0:00.46 /usr/sbin+
 46586 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46858 nobody    20   0  277744  19476   4120 S   0.0  0.8   0:00.45 /usr/sbin+
 47584 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47654 nobody    20   0  277744  19476   4140 S   0.0  0.8   0:00.38 /usr/sbin+
 47684 nobody    20   0  277744  19608   4156 S   0.0  0.8   0:00.26 /usr/sbin+
 47709 nobody    20   0  277744  19712   4184 S   0.0  0.8   0:00.23 /usr/sbin+
 48361 nobody    20   0  277744  19288   3912 S   0.0  0.8   0:00.23 /usr/sbin+
 48371 nobody    20   0  277744  19564   4116 S   0.0  0.8   0:00.14 /usr/sbin+
 49330 nobody    20   0  277720  19360   3896 S   0.0  0.8   0:00.11 /usr/sbin+
 49491 healtho+  20   0  462688  69876   4220 S   0.0  2.9   0:04.67 php-fpm: +
 49608 nobody    20   0  277876  18804   3512 S   0.0  0.8   0:00.05 /usr/sbin+
 49837 wp-tool+  20   0  445028   1700    196 S   0.0  0.1   0:00.00 sw-engine+
 49850 wp-tool+  20   0  445028   1696    192 S   0.0  0.1   0:00.00 sw-engine+
 49941 nigeria   20   0  400460   5868   2412 S   0.0  0.2   0:00.00 php-fpm: +
 49946 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 49947 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 49958 nobody    20   0  277176  17372   2656 S   0.0  0.7   0:00.00 /usr/sbin+
 49963 cpanell+  20   0  274196  11616   2468 S   0.0  0.5   0:00.00 whostmgrd+
 49971 cpanell+  20   0  265952  10684   2396 S   0.0  0.4   0:00.00 whostmgrd+
 49973 nobody    20   0  277176  17372   2656 S   0.0  0.7   0:00.00 /usr/sbin+
 49974 nobody    20   0  277308  17888   3108 S   0.0  0.7   0:00.00 /usr/sbin+
 49992 cpanell+  20   0  270032  10500   2340 S   0.0  0.4   0:00.00 whostmgrd+
 50012 cpanell+  20   0  265396   9880   2208 S   0.0  0.4   0:00.00 whostmgrd+
 50013 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 50014 nobody    20   0  277176  17632   3000 S   0.0  0.7   0:00.00 /usr/sbin+
 50020 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50022 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50024 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50025 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50026 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50027 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50028 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50029 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50030 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50031 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50032 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50034 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50038 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 50041 root      20   0  188228  11112   5152 S   0.0  0.5   0:00.02 /usr/loca+
 50043 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50045 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 50048 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 50049 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 50051 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 50052 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50053 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50055 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 50056 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 50057 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 50059 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 50066 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 50072 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 50073 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 50084 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 50086 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 50088 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 50091 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
 50102 cloudsms  20   0  404052  15348  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 50149 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 50160 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 50166 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 50167 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 50168 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 50169 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 50170 cloudsms  20   0  131852   3316   2384 R   0.0  0.1   0:00.00 /usr/loca+
 50173 root      20   0  111304   1016      0 R   0.0  0.0   0:00.00 sshd: [ac+
 50174 root      20   0    6728    416    336 S   0.0  0.0   0:00.00 /usr/sbin+
 58384 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
 58386 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.11 [kworker]
 79618 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    17:02   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    17:02   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    17:02   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   17:02   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   17:02   0:01  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.0  0.0      0     0 ?        S<   17:02   0:02  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root      79618  0.0  0.0      0     0 ?        S    18:25   0:00  \_ [kworker/u200:2]
root      19071  0.0  0.0      0     0 ?        S    19:11   0:00  \_ [kworker/0:0]
root      24931  0.0  0.0      0     0 ?        S    19:16   0:00  \_ [kworker/u200:0]
root      25194  0.0  0.0      0     0 ?        S    19:17   0:00  \_ [kworker/1:0]
root      29989  0.0  0.0      0     0 ?        S    19:22   0:00  \_ [kworker/1:1]
root      35235  0.0  0.0      0     0 ?        S    19:28   0:00  \_ [kworker/1:2]
root      36058  0.0  0.0      0     0 ?        S    19:29   0:00  \_ [kworker/0:3]
root      40443  0.0  0.0      0     0 ?        S    19:34   0:00  \_ [kworker/0:5]
root      43891  0.0  0.0      0     0 ?        S    19:38   0:00  \_ [kworker/1:4]
root      46586  0.0  0.0      0     0 ?        S    19:41   0:00  \_ [kworker/0:1]
root      47584  0.0  0.0      0     0 ?        S    19:42   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44280  3424 ?        Ss   17:02   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  3280 ?        Ss   17:02   0:06 /usr/lib/systemd/systemd-journald
root        389  0.0  0.0  45352   516 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   580 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.0  0.0  58728  1496 ?        Ss   17:02   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   252 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24704  1276 ?        Ss   17:02   0:02 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   340 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   520 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.0 612240   996 ?        Ssl  17:02   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.0  0.2 224144  5756 ?        Ss   17:02   0:00 queueprocd - waiting up to 60s to process a task
root        538  0.0  0.0  52852   456 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   128 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   148 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.1  0.0 1131720 1704 ?        Ssl  17:02   0:10 /usr/sbin/nscd
root        578  0.0  0.0  24208   256 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   592 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root      50020  0.0  0.0 183048  2152 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50051  0.0  0.0 113284  1212 ?        Ss   19:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      50066  0.0  0.0 108052   356 ?        S    19:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      50072  0.0  0.0 113288  1516 ?        S    19:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      50175  0.0  0.0 153840  2096 ?        R    19:45   0:00  |               \_ ps auxf
root      50022  0.0  0.0 183048  2148 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50052  0.0  0.0  20164   808 ?        Ss   19:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      50024  0.0  0.0 183048  2148 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50053  0.0  0.0  20164   808 ?        Ss   19:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      50025  0.0  0.0 183048  2144 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50043  0.0  0.0  20164   808 ?        Ss   19:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      50026  0.0  0.0 183048  2144 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50056  0.0  0.0  20164   964 ?        Ss   19:45   0:00  |   \_ jailshell (cloudsms) [50084] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  50084  0.0  0.0  20164   260 ?        S    19:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  50088  0.0  0.0 113284  1208 ?        S    19:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  50102  0.0  0.6 404052 15348 ?        S    19:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      50027  0.0  0.0 183048  2140 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50045  0.0  0.0  20164   804 ?        Ss   19:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      50028  0.0  0.0 183048  2140 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50055  0.0  0.0  20164   984 ?        Ss   19:45   0:00  |   \_ jailshell (cloudsms) [50160] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  50160  0.0  0.0      0     0 ?        D    19:45   0:00  |       \_ [jailshell]
root      50029  0.0  0.0 183048  2140 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50049  0.0  0.0  20164   804 ?        Ss   19:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      50030  0.0  0.0 183048  2140 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50057  0.0  0.0  20164   984 ?        Ss   19:45   0:00  |   \_ jailshell (cloudsms) [50166] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  50166  0.0  0.0  20164   260 ?        S    19:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  50168  0.0  0.0 113284  1208 ?        S    19:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  50170  0.0  0.6 404052 14824 ?        R    19:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      50031  0.0  0.0 183048  2144 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50038  0.0  0.0 113284  1212 ?        Ss   19:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      50041  0.0  0.4 188228 11112 ?        S    19:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      50091  0.0  0.0 160224  2368 ?        S    19:45   0:00  |           \_ top -n 2 -b -c
root      50032  0.0  0.0 183048  2140 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50059  0.0  0.0  20164   968 ?        Ss   19:45   0:00  |   \_ jailshell (pactpay) [50073] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   50073  0.0  0.0  20164   260 ?        S    19:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   50078  0.0  0.7 480124 17684 ?        S    19:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      50034  0.0  0.0 183048  2140 ?        S    19:45   0:00  \_ /usr/sbin/CROND -n
root      50048  0.0  0.0  20164   964 ?        Ss   19:45   0:00      \_ jailshell (nigeria) [50086] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   50086  0.0  0.0  20164   256 ?        S    19:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   50090  0.0  0.6 404052 16144 ?        S    19:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        585  0.0  0.0 114704   236 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   236 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.1  89120  3972 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.1 314704  3312 ?        Ssl  17:02   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.0 388892  1996 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       937  0.0  1.3 924724 33876 ?        Ssl  17:02   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939  0.1 10.2 1763124 246960 ?      Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268    72 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132    28 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864    80 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1  10332  3424 ?        Ss   17:02   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.0  0.0 572372  1108 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.0  0.2 261296  6792 ?        Ss   17:02   0:02 cpsrvd (SSL) - waiting for connections                   
cpanell+  49963  0.0  0.4 274196 11616 ?        S    19:44   0:00  \_ whostmgrd - serving 127.0.0.1
cpanell+  49971  0.0  0.4 265952 10684 ?        S    19:44   0:00  \_ whostmgrd - serving 127.0.0.1
cpanell+  49992  0.0  0.4 270032 10500 ?        S    19:44   0:00  \_ whostmgrd - serving 127.0.0.1
cpanell+  50012  0.0  0.4 265396  9880 ?        S    19:44   0:00  \_ whostmgrd - serving 127.0.0.1
root      50013  0.0  0.0      0     0 ?        Z    19:44   0:00  \_ [cpaneld - servi] <defunct>
root        947  0.0  0.1 400740  3504 ?        Ss   17:02   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  49491 11.6  2.8 462688 69876 ?        S    19:44   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  49877  9.2  2.2 446304 53336 ?        R    19:44   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   49941  0.0  0.2 400460  5868 ?        S    19:44   0:00  \_ php-fpm: pool nigeriadecide_org
root        952  0.0  0.0 396248   708 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.0  0.1 445028  4772 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  49837  0.0  0.0 445028  1700 ?        S    19:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  49850  0.0  0.0 445028  1696 ?        S    19:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954  0.2  0.5 1277312 12128 ?       Ssl  17:02   0:26 /usr/bin/checkstatus
root        955  0.0  0.0  51508   708 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.1  47544  3172 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47476  3120 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   472 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   740 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47652  3236 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47180  3000 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.1  24564  2784 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13568   824 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41148  1584 ?        S    17:02   0:00  \_ dovecot/auth
worencom  35888  0.0  0.1  38492  3444 ?        S    19:28   0:00  \_ dovecot/imap
root        957  0.2  0.3 1415624 7780 ?        Ssl  17:02   0:25 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756    60 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   616 ?        Ss   17:02   0:01 /usr/sbin/sshd -D
root      49946  0.0  0.2 157100  5072 ?        Ss   19:44   0:00  \_ sshd: unknown [priv]
sshd      49947  0.0  0.1 115644  2628 ?        S    19:44   0:00  |   \_ sshd: unknown [net]
root      50169  0.0  0.1 111304  4260 ?        Ss   19:45   0:00  \_ sshd: [accepted]
sshd      50173  0.0  0.1 115644  2628 ?        S    19:45   0:00      \_ sshd: [net]
root        962  0.0  0.0 153404   512 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.5 114016 12436 ?        Ssl  17:02   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   308 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.0  0.0 389508   804 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.0  1.5 5654048 36524 ?       SLsl 17:02   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.0  0.4 439788 11360 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1136  0.0  0.1 157708  3012 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  0.0  4.8 248052 118096 ?       Ss   17:02   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8203  0.0  5.2 261784 127596 ?       S    17:08   0:01  \_ spamd child
root       8204  0.0  4.8 248052 117144 ?       S    17:08   0:00  \_ spamd child
wp-tool+   1176  0.0  1.0 412368 24764 ?        Ss   17:02   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.5 387528 12512 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.0  0.0 167452  1484 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.0  1.0 262224 24220 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1233  0.0  0.5 209860 12920 ?        Ss   17:02   0:01 tailwatchd
root       1607  0.0  0.0 299272   916 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416  1548 ?        SN   17:02   0:00 cpanellogd - sleeping for logs
mysql      1750  1.5 10.5 1458592 254956 ?      Sl   17:02   2:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.0  0.3 266984  8396 ?        Ss   17:02   0:01 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12836   488 ?        S    17:02   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   436 ?        S    17:02   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12876   488 ?        S    17:02   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.0  0.0  53340   276 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    37107  0.1  0.8 277752 20104 ?        S    19:30   0:01  \_ /usr/sbin/httpd -k start
nobody    38452  0.1  0.8 277748 20456 ?        S    19:31   0:01  \_ /usr/sbin/httpd -k start
nobody    38527  0.1  0.8 277748 20320 ?        S    19:31   0:01  \_ /usr/sbin/httpd -k start
nobody    38542  0.1  0.8 277524 20196 ?        S    19:31   0:01  \_ /usr/sbin/httpd -k start
nobody    39405  0.1  0.8 277884 20248 ?        S    19:32   0:01  \_ /usr/sbin/httpd -k start
nobody    40007  0.1  0.8 277752 20404 ?        S    19:33   0:00  \_ /usr/sbin/httpd -k start
nobody    41013  0.1  0.8 277748 20032 ?        S    19:34   0:00  \_ /usr/sbin/httpd -k start
nobody    44080  0.1  0.8 277748 19908 ?        S    19:38   0:00  \_ /usr/sbin/httpd -k start
nobody    44931  0.1  0.8 277744 19708 ?        S    19:39   0:00  \_ /usr/sbin/httpd -k start
nobody    45239  0.2  0.8 277488 19396 ?        S    19:39   0:00  \_ /usr/sbin/httpd -k start
nobody    46159  0.1  0.8 277892 19656 ?        S    19:40   0:00  \_ /usr/sbin/httpd -k start
nobody    46858  0.2  0.8 277744 19476 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    47654  0.2  0.8 277744 19476 ?        S    19:42   0:00  \_ /usr/sbin/httpd -k start
nobody    47684  0.1  0.8 277744 19608 ?        S    19:42   0:00  \_ /usr/sbin/httpd -k start
nobody    47709  0.1  0.8 277744 19712 ?        S    19:42   0:00  \_ /usr/sbin/httpd -k start
nobody    48361  0.1  0.7 277744 19288 ?        S    19:42   0:00  \_ /usr/sbin/httpd -k start
cloudw    50174  0.0  0.6 288176 15948 ?        Rl   19:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    48371  0.1  0.8 277744 19564 ?        S    19:42   0:00  \_ /usr/sbin/httpd -k start
nobody    49330  0.1  0.7 277720 19360 ?        S    19:44   0:00  \_ /usr/sbin/httpd -k start
nobody    49608  0.1  0.7 277876 18804 ?        S    19:44   0:00  \_ /usr/sbin/httpd -k start
nobody    49958  0.0  0.7 277176 17372 ?        S    19:44   0:00  \_ /usr/sbin/httpd -k start
nobody    49973  0.0  0.7 277176 17372 ?        S    19:44   0:00  \_ /usr/sbin/httpd -k start
nobody    49974  0.0  0.7 277308 17888 ?        S    19:44   0:00  \_ /usr/sbin/httpd -k start
nobody    50014  0.0  0.7 277176 17632 ?        S    19:44   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.1  0.4 182384 11720 ?        Ss   17:02   0:10 lfd - sleeping
oysipao+  58384  0.0  0.0   3148   412 ?        Ss   18:00   0:00 [kworker]
oysipao+  58386  0.0  0.0   3152   420 ?        S    18:00   0:00  \_ [kworker]
## mysql stats
Uptime: 9755  Threads: 4  Questions: 918545  Slow queries: 0  Opens: 4430  Flush tables: 1  Open tables: 2000  Queries per second avg: 94.161
*************************** 1. row ***************************
     Id: 14806
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 14807
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: System lock
   Info: SELECT * FROM `27` WHERE `phone`='2348167205939' LIMIT 1
*************************** 3. row ***************************
     Id: 14810
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 14815
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 114.119.144.127 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 15.235.27.138 TIME_WAIT
      1 15.235.27.33 TIME_WAIT
      1 15.235.96.204 TIME_WAIT
      1 170.23.25.27 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.226.212.211 TIME_WAIT
      1 47.236.234.177 TIME_WAIT
      1 47.237.65.178 TIME_WAIT
      1 74.7.228.57 TIME_WAIT
      1 8.222.185.122 TIME_WAIT
      1 92.71.34.78 TIME_WAIT
      2 101.53.245.15 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      7 104.248.90.230 TIME_WAIT
     38 124.248.184.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 19:45:01 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 42 minutes 28 seconds
   Server load: 0.75 0.80 0.87
   Total accesses: 65569 - Total Traffic: 1.4 GB - Total Duration: 31416996
   CPU Usage: u8.81 s4.95 cu846.55 cs683.67 - 15.8% CPU load
   6.73 requests/sec - 155.7 kB/second - 23.2 kB/request - 479.144 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

WWKRKKKKKKKKKKKRKK_W.K..K.K.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  48361 1/42/2705  W 0.88 0    0   1235108 36.1  0.99  57.67 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=3695559407 HTTP/1.1
   1-0  47654 0/66/3028  W 1.64 0    0   1411542 0.0   1.77  61.94 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   2-0  46858 6/76/2805  K 1.89 3    296 1339023 193.3 1.99  62.83 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=3111329357 HTTP/1.1
   3-0  47684 0/49/2460  R 1.07 1    337 1266616 0.0   1.11  55.66 47.236.21.74    http/1.1
   4-0  37107 2/280/2440 K 6.19 2    353 1175926 66.2  6.47  57.37 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=1184601600 HTTP/1.1
   5-0  48371 1/32/2441  K 0.50 1    5   1207011 3.3   0.63  62.44 8.222.167.171   http/1.1 chs1.nescrow.com.ng:443         GET /cPanel_magic_revision_1658331961/unprotected/cpanel/images
   6-0  49958 3/3/2742   K 0.00 2    1   1342905 28.5  0.03  61.69 47.236.224.45   http/1.1 chs1.nescrow.com.ng:443         GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/
   7-0  40007 5/180/2773 K 4.16 1    24  1230636 9.1   5.41  57.67 66.249.70.7     http/1.1 test.cloudware.ng:443           GET /4142604?goodscode=0004137938 HTTP/1.1
   8-0  49608 4/12/2293  K 0.26 2    356 1137125 126.2 0.18  54.13 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1490995
   9-0  49973 3/3/2508   K 0.00 1    1   1098831 27.6  0.03  52.71 47.236.253.140  http/1.1 chs1.nescrow.com.ng:443         GET /cPanel_magic_revision_1658331961/unprotected/cpanel/images
   10-0 49330 1/20/2638  K 0.48 4    284 1271434 34.2  0.56  54.91 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=3342228839 HTTP/1.1
   11-0 44080 2/122/2293 K 2.60 1    402 1125635 67.4  2.38  50.52 192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=2566116305 HTTP/1.1
   12-0 45239 1/119/2437 K 3.14 2    347 1151286 34.1  3.28  59.21 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=1727374982 HTTP/1.1
   13-0 39405 6/217/2400 K 4.90 1    397 1213917 189.3 4.39  56.45 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=999929584 HTTP/1.1
   14-0 47709 7/49/2254  K 0.94 1    1   1108181 83.6  0.97  48.64 8.222.167.171   http/1.1 chs1.nescrow.com.ng:443         GET /cPanel_magic_revision_1658331961/unprotected/cpanel/images
   15-0 49974 0/1/2068   R 0.00 2    156 980308  0.0   0.00  45.72 8.219.251.109   http/1.1
   16-0 46159 9/93/2138  K 1.97 2    269 1057904 278.9 1.88  50.53 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=1721978570 HTTP/1.1
   17-0 38527 1/255/2067 K 4.86 3    359 971574  35.7  4.60  45.24 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=3499375295 HTTP/1.1
   18-0 41013 0/182/2241 _ 3.92 0    4   1069411 0.0   4.23  48.78 47.236.234.177  http/1.1 proxy-subdomains-vhost.localhos GET /?locale=vi HTTP/1.1
   19-0 50014 0/0/1949   W 0.00 0    0   1009482 0.0   0.00  43.76 124.248.184.195 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   20-0 -     0/0/2509   . 0.00 289  0   1114773 0.0   0.00  66.98 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 38452 4/206/1583 K 4.39 1    346 752991  129.7 4.92  35.03 192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=2178742697 HTTP/1.1
   22-0 -     0/0/1351   . 0.00 288  0   616806  0.0   0.00  28.76 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/1359   . 0.00 343  0   671886  0.0   0.00  31.88 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 38542 1/225/1593 K 4.77 4    268 812425  35.1  4.55  38.03 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=2137888173 HTTP/1.1
   25-0 -     0/0/833    . 0.00 344  0   401808  0.0   0.00  18.60 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 44931 4/100/1165 K 2.44 2    406 587976  126.3 2.28  27.23 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=618474
   27-0 -     0/0/1053   . 0.00 347  0   497734  0.0   0.00  25.47 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/652    . 0.00 159  0   345055  0.0   0.00  15.64 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/776    . 0.00 924  0   371895  0.0   0.00  16.41 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/538    . 0.00 1752 0   249927  0.0   0.00  11.31 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/692    . 0.00 2351 0   340863  0.0   0.00  15.89 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/261    . 0.00 3182 0   135603  0.0   0.00  6.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/321    . 0.00 3202 0   147880  0.0   0.00  6.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/377    . 0.00 2376 0   198139  0.0   0.00  9.31  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/206    . 0.00 3200 0   87118   0.0   0.00  4.40  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/249    . 0.00 2937 0   125311  0.0   0.00  8.48  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/281    . 0.00 2964 0   104922  0.0   0.00  5.75  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/138    . 0.00 2929 0   37965   0.0   0.00  2.20  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/129    . 0.00 3201 0   57212   0.0   0.00  2.90  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/165    . 0.00 3017 0   65065   0.0   0.00  3.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/64     . 0.00 3016 0   21758   0.0   0.00  1.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/146    . 0.00 2713 0   76144   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/8      . 0.00 3190 0   1778    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/15     . 0.00 3198 0   7320    0.0   0.00  0.37  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/7      . 0.00 3206 0   2146    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/31     . 0.00 3204 0   16393   0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/48     . 0.00 3196 0   31675   0.0   0.00  1.35  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/19     . 0.00 3148 0   10797   0.0   0.00  0.54  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/149    . 0.00 3185 0   51163   0.0   0.00  2.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/9      . 0.00 3176 0   1467    0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/85     . 0.00 2905 0   28360   0.0   0.00  1.44  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/16     . 0.00 3135 0   7274    0.0   0.00  0.38  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 3193 0   1042    0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/46     . 0.00 3034 0   27516   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/11     . 0.00 3156 0   4925    0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/1      . 0.00 3208 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1258
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...19)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 44316
   total entries replaced since starting: 0
   total entries expired since starting: 43052
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 61 miss
   total removes since starting: 6 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit