403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.01.09.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-20.01.09 load[5] mem[82/50] mysql[9/9] httpd[23]
              total        used        free      shared  buff/cache   available
Mem:           2363        1977          78          42         307         189
Swap:          1999        1088         911
 01:09:02 up 14 min,  0 users,  load average: 6.03, 2.86, 1.45
## system overview
top - 01:09:02 up 14 min,  0 users,  load average: 6.03, 2.86, 1.45
Tasks: 223 total,   9 running, 212 sleeping,   0 stopped,   2 zombie
%Cpu(s): 77.1 us, 22.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    71136 free,  2051076 used,   298088 buff/cache
KiB Swap:  2047996 total,   933116 free,  1114880 used.   167376 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1461588 206908   2816 S  61.1  8.5   0:17.98 /usr/sbin+
 13551 healtho+  20   0  452960  58456   3856 R  38.9  2.4   0:00.24 php-fpm: +
 13403 oyrtmay+  20   0  459224  65288   4164 R  22.2  2.7   0:04.53 php-fpm: +
 13485 healtho+  20   0  465964  73300   4276 R  16.7  3.0   0:01.62 php-fpm: +
 13596 oyrtmay+  20   0  432340  38376   3684 R  16.7  1.6   0:00.14 php-fpm: +
    36 root      20   0       0      0      0 S   5.6  0.0   0:05.09 [kswapd0]
 12513 nobody    20   0  277764  18972   3836 S   5.6  0.8   0:00.17 /usr/sbin+
 13528 oyrtmay+  20   0  448472  55168   4156 S   5.6  2.3   0:00.80 php-fpm: +
 13654 root      20   0  177280   6180   2876 S   5.6  0.3   0:00.01 /usr/bin/+
 13660 root      20   0  160220   2056   1580 R   5.6  0.1   0:00.01 top -bcn1
     1 root      20   0   44256   3240   1432 S   0.0  0.1   0:01.96 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:00.97 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.34 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.39 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   5028   4704 S   0.0  0.2   0:00.66 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    224    112 S   0.0  0.0   0:00.09 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    860    496 S   0.0  0.0   0:00.14 /usr/lib/+
   477 dbus      20   0   58592   1296    624 S   0.0  0.1   0:00.52 /usr/bin/+
   486 rpc       20   0   69256    108      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1160    812 S   0.0  0.0   0:00.24 /usr/lib/+
   499 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780     68     60 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1288    588 S   0.0  0.1   0:00.66 /usr/sbin+
   506 root      20   0  224144   6344    768 S   0.0  0.3   0:00.08 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.01 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.02 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3388    388 S   0.0  0.1   0:00.05 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:00.11 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    280    196 S   0.0  0.0   0:00.02 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    232     72 S   0.0  0.0   0:00.05 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.02 /usr/bin/+
   927 telegraf  20   0 5654048  33160     80 S   0.0  1.4   0:00.65 /usr/loca+
   928 systuser  20   0  114016  11872    632 S   0.0  0.5   0:00.28 /usr/loca+
   929 root      20   0 1276100   9312     12 S   0.0  0.4   0:30.44 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.22 /usr/bin/+
   931 systuser  20   0   12660     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  216400   5340   3896 S   0.0  0.2   0:00.32 /usr/sbin+
   935 root      20   0  439788  11316  11108 S   0.0  0.5   0:00.14 php-fpm: +
   936 named     20   0  637996  20952   1340 S   0.0  0.9   0:00.86 /usr/sbin+
   938 root      20   0  261028   2980    780 S   0.0  0.1   0:00.22 cpsrvd (S+
   942 root      20   0  400740   2884    648 S   0.0  0.1   0:00.36 php-fpm: +
   947 root      20   0 1689580 548696     80 S   0.0 22.7   0:13.58 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.12 /usr/sbin+
   972 root      20   0  389508    640    432 S   0.0  0.0   0:00.10 php-fpm: +
   979 cpanelc+  20   0    9700   2548   2208 R   0.0  0.1   0:00.71 /usr/loca+
   982 root      20   0  396248    304    224 S   0.0  0.0   0:00.10 php-fpm: +
   984 root      20   0  388892    752    540 S   0.0  0.0   0:00.10 php-fpm: +
   985 root      20   0  445028   3112   3000 S   0.0  0.1   0:00.09 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    760    292 S   0.0  0.0   0:00.20 /usr/bin/+
  1116 dovenull  20   0   46912   1340    756 S   0.0  0.1   0:00.01 dovecot/p+
  1117 dovenull  20   0   47056   1420    656 S   0.0  0.1   0:00.01 dovecot/i+
  1118 dovecot   20   0   10320    116      0 S   0.0  0.0   0:00.00 dovecot/a+
  1119 root      20   0   10452    360    192 S   0.0  0.0   0:00.00 dovecot/l+
  1120 dovenull  20   0   46912   1228    644 S   0.0  0.1   0:00.02 dovecot/p+
  1121 dovenull  20   0   46780    404    152 S   0.0  0.0   0:00.00 dovecot/i+
  1128 root      20   0   24396   1724    192 S   0.0  0.1   0:00.02 dovecot/c+
  1133 systuser  20   0  157708   2156    104 S   0.0  0.1   0:00.01 SonarPush+
  1137 dovecot   20   0   13568    208      0 S   0.0  0.0   0:00.00 dovecot/s+
  1172 root      20   0  248320 119624   2732 S   0.0  4.9   0:02.93 /usr/loca+
  1190 dovecot   20   0   41056    340     56 S   0.0  0.0   0:00.01 dovecot/a+
  1258 wp-tool+  20   0  412368  32288   1496 S   0.0  1.3   0:00.52 /usr/bin/+
  1259 wp-tool+  20   0  387528  12708   1080 S   0.0  0.5   0:00.10 /usr/bin/+
  1294 root      20   0  167452   1224    620 S   0.0  0.1   0:00.06 dnsadmin +
  1298 root      20   0  183900     72     72 S   0.0  0.0   0:00.09 cpdavd - +
  1300 root      20   0  209344   9656    884 S   0.0  0.4   0:00.40 tailwatchd
  1692 root      20   0  299272    748    368 S   0.0  0.0   0:00.01 php-fpm: +
  1709 root      38  18  130416   1292    580 S   0.0  0.1   0:00.00 cpanellog+
  1943 root      20   0  266992   8044    760 S   0.0  0.3   0:00.17 /usr/sbin+
  1945 root      20   0   12844    344    208 S   0.0  0.0   0:00.11 /usr/loca+
  1946 root      20   0   12732     68      0 S   0.0  0.0   0:00.10 /usr/loca+
  1947 root      20   0   12888    312    204 S   0.0  0.0   0:00.10 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  181100   9316   1080 S   0.0  0.4   0:00.99 lfd - sle+
  2273 root      20   0       0      0      0 D   0.0  0.0   0:00.05 [kworker/+
  3866 nobody    20   0  277892  19688   4184 S   0.0  0.8   0:01.19 /usr/sbin+
  3922 nobody    20   0  277784  19732   4212 S   0.0  0.8   0:01.21 /usr/sbin+
  4530 nobody    20   0  277552  19916   4356 S   0.0  0.8   0:01.26 /usr/sbin+
  4787 nobody    20   0  277760  19820   4308 S   0.0  0.8   0:01.04 /usr/sbin+
  4823 nobody    20   0  277896  19952   4312 S   0.0  0.8   0:01.09 /usr/sbin+
  4824 nobody    20   0  277760  19656   4340 S   0.0  0.8   0:01.01 /usr/sbin+
  6131 nobody    20   0  277900  20004   4156 S   0.0  0.8   0:00.77 /usr/sbin+
  6304 nobody    20   0  277912  19820   4308 S   0.0  0.8   0:01.13 /usr/sbin+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.00 [kworker]
  7285 root      20   0  249444 118788    852 S   0.0  4.9   0:00.05 spamd chi+
  7286 root      20   0  248320 117532    676 S   0.0  4.9   0:00.00 spamd chi+
  7626 nobody    20   0  277888  19688   4264 S   0.0  0.8   0:00.78 /usr/sbin+
  7815 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9240 nobody    20   0  277756  19340   4072 S   0.0  0.8   0:00.71 /usr/sbin+
  9334 nobody    20   0  277892  19380   4076 S   0.0  0.8   0:00.64 /usr/sbin+
  9391 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12301 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12325 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12369 nobody    20   0  277492  18752   3840 S   0.0  0.8   0:00.21 /usr/sbin+
 12668 nobody    20   0  277360  18004   3356 S   0.0  0.7   0:00.05 /usr/sbin+
 12683 nobody    20   0  277764  18780   3652 S   0.0  0.8   0:00.14 /usr/sbin+
 12684 nobody    20   0  277760  18992   3856 S   0.0  0.8   0:00.17 /usr/sbin+
 12794 nobody    20   0  277764  18760   3632 S   0.0  0.8   0:00.15 /usr/sbin+
 13141 nobody    20   0  277764  18484   3604 S   0.0  0.8   0:00.03 /usr/sbin+
 13162 root      20   0  111304   3668   2632 S   0.0  0.2   0:00.00 sshd: [ac+
 13163 sshd      20   0  115644   2356   1288 S   0.0  0.1   0:00.00 sshd: [ne+
 13254 wp-tool+  20   0  445028    192     64 S   0.0  0.0   0:00.00 sw-engine+
 13284 healtho+  20   0  462688  69464   4184 S   0.0  2.9   0:04.84 php-fpm: +
 13353 nobody    20   0  277188  17616   3252 S   0.0  0.7   0:00.00 /usr/sbin+
 13369 nobody    20   0  277052  16280   2044 S   0.0  0.7   0:00.00 /usr/sbin+
 13370 nobody    20   0  277760  18600   3528 S   0.0  0.8   0:00.04 /usr/sbin+
 13387 nobody    20   0  277760  18176   3168 S   0.0  0.8   0:00.04 /usr/sbin+
 13388 nobody    20   0  277456  18416   3648 S   0.0  0.8   0:00.03 /usr/sbin+
 13390 nobody    20   0  277188  17812   3360 S   0.0  0.7   0:00.03 /usr/sbin+
 13394 nobody    20   0  277648  18712   3704 S   0.0  0.8   0:00.04 /usr/sbin+
 13395 nobody    20   0  277760  18304   3292 S   0.0  0.8   0:00.06 /usr/sbin+
 13396 nobody    20   0  277764  18604   3520 S   0.0  0.8   0:00.02 /usr/sbin+
 13397 nobody    20   0  277620  18340   3492 S   0.0  0.8   0:00.01 /usr/sbin+
 13398 nobody    20   0  277188  17824   3344 S   0.0  0.7   0:00.03 /usr/sbin+
 13399 nobody    20   0  277784  18740   3708 S   0.0  0.8   0:00.03 /usr/sbin+
 13401 nobody    20   0  277320  18084   3508 S   0.0  0.7   0:00.02 /usr/sbin+
 13420 healtho+  20   0  462820  69468   4184 S   0.0  2.9   0:03.12 php-fpm: +
 13425 oyrtmay+  20   0  456664  63424   4156 S   0.0  2.6   0:04.05 php-fpm: +
 13530 nigeria   20   0  400460   5176   2188 S   0.0  0.2   0:00.00 php-fpm: +
 13542 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 13543 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 13546 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 13553 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13554 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13555 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [crond] <+
 13556 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13557 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13560 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13561 root      20   0  150420   1660   1208 R   0.0  0.1   0:00.00 /usr/sbin+
 13562 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13563 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13564 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13566 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13571 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 13573 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 13574 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 13576 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 13577 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13578 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13580 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 /usr/loca+
 13583 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13584 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 13590 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 13591 root      20   0  169872  16848   2876 S   0.0  0.7   0:00.09 /usr/loca+
 13595 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 13599 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13605 nigeria   20   0  404052  16076  10316 S   0.0  0.7   0:00.05 /opt/cpan+
 13611 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 13612 pactpay   20   0  480124  17632  11832 S   0.0  0.7   0:00.02 /opt/cpan+
 13621 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 13633 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 13634 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 13636 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 13637 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 13640 cloudsms  20   0  404052  15548  10104 S   0.0  0.6   0:00.01 /opt/cpan+
 13648 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 13651 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
 13665 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        D    00:54   0:00  \_ [kworker/1:1]
root         36  0.5  0.0      0     0 ?        S    00:54   0:05  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        104  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        D    00:54   0:00  \_ [kworker/u200:3]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2273  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/1:3]
root       7815  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/1:0]
root       9391  0.0  0.0      0     0 ?        S    01:03   0:00  \_ [kworker/0:3]
root      12301  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      12325  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:2]
root      13621  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root          1  0.2  0.1  44256  3240 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  5028 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   224 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   860 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58592  1296 ?        Ss   00:54   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   108 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1160 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   104 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780    68 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1300 ?        Ssl  00:54   0:00 /usr/sbin/nscd
root        506  0.0  0.2 224144  6344 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      13553  0.0  0.0 183048  2160 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13576  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      13590  0.0  0.0 108052   356 ?        S    01:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      13595  0.0  0.0 113288  1516 ?        S    01:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      13667  0.0  0.0 153840  2096 ?        R    01:09   0:00  |               \_ ps auxf
root      13554  0.0  0.0 183048  2156 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13580  0.0  0.0  20164   984 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      13665  0.0  0.2  38648  6508 ?        R    01:09   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      13556  0.0  0.0 183048  2156 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13578  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      13557  0.0  0.0 183048  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13584  0.0  0.0  20164   992 ?        Ss   01:09   0:00  |   \_ jailshell (cloudsms) [13634] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  13634  0.0  0.0  20164   264 ?        S    01:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  13637  0.0  0.0 113284  1212 ?        S    01:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  13640  0.0  0.6 404052 15548 ?        S    01:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      13560  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13583  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      13562  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13577  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      13563  0.0  0.0 183048  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13573  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      13591  9.0  0.6 169872 16848 ?        S    01:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      13651  0.0  0.0 113496  1420 ?        S    01:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      13654  0.0  0.3 185332  7492 ?        R    01:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      13564  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13571  0.0  0.0  20164   972 ?        Ss   01:09   0:00  |   \_ jailshell (pactpay) [13611] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13611  0.0  0.0  20164   264 ?        S    01:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13612  2.0  0.7 480124 17632 ?        S    01:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      13566  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13574  0.0  0.0  20164   968 ?        Ss   01:09   0:00      \_ jailshell (nigeria) [13599] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13599  0.0  0.0  20164   260 ?        S    01:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13605  5.0  0.6 404052 16076 ?        S    01:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3388 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   280 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   232 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  1340 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.0  47056  1420 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   116 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   360 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  1228 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.0  46780   404 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24396  1724 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   208 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41056   340 ?        S    00:54   0:00  \_ dovecot/auth
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.3 5654048 33160 ?       SLsl 00:54   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.4 114016 11872 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  3.4  0.3 1276100 9312 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  2.6  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 216400  5340 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11316 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  0.8 637996 20952 ?        Ssl  00:54   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.1 261028  2980 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      13543  0.0  0.0      0     0 ?        Z    01:08   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2884 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  13284 18.6  2.8 462688 69464 ?        S    01:08   0:04  \_ php-fpm: pool health_oyostate_gov_ng
oyrtmay+  13403 23.8  2.6 459224 65288 ?        R    01:08   0:04  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
healtho+  13420 18.3  2.8 462820 69468 ?        S    01:08   0:03  \_ php-fpm: pool health_oyostate_gov_ng
oyrtmay+  13425 25.3  2.6 456664 63424 ?        R    01:08   0:04  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
healtho+  13485 18.2  3.0 465964 73300 ?        R    01:08   0:01  \_ php-fpm: pool health_oyostate_gov_ng
oyrtmay+  13528 26.6  2.2 448472 55168 ?        S    01:08   0:00  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
nigeria   13530  0.0  0.2 400460  5176 ?        S    01:08   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  13551 13.0  2.6 457056 63112 ?        R    01:08   0:00  \_ php-fpm: pool health_oyostate_gov_ng
oyrtmay+  13596 15.0  1.6 434388 40488 ?        R    01:09   0:00  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
root        947  1.5 22.6 1689580 548696 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      13162  0.0  0.1 111304  3668 ?        Ss   01:08   0:00  \_ sshd: [accepted]
sshd      13163  0.0  0.0 115644  2356 ?        S    01:08   0:00  |   \_ sshd: [net]
root      13542  0.0  0.1 111304  4448 ?        Ss   01:08   0:00  \_ sshd: [accepted]
sshd      13546  0.0  0.1 115644  2632 ?        S    01:08   0:00  |   \_ sshd: [net]
root      13633  0.0  0.1 111304  4268 ?        Ss   01:09   0:00  \_ sshd: [accepted]
sshd      13636  0.0  0.1 115644  2628 ?        S    01:09   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   640 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1   9700  2548 ?        Rs   00:54   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   304 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   752 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3112 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  13254  0.0  0.0 445028   192 ?        S    01:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   760 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.0 157708  2156 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.3  4.9 248320 119624 ?       Ss   00:54   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  4.9 249444 118788 ?       S    01:00   0:00  \_ spamd child
root       7286  0.0  4.8 248320 117532 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32288 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 12708 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.0 167452  1224 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.0 183900    72 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.0  0.3 209344  9656 ?        Ss   00:54   0:00 tailwatchd
root       1692  0.0  0.0 299272   748 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1292 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.0  8.5 1461588 206884 ?      Sl   00:54   0:18 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8044 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12844   344 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732    68 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12888   312 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3866  0.1  0.8 277892 19688 ?        S    00:56   0:01  \_ /usr/sbin/httpd -k start
nobody     3922  0.1  0.8 277784 19732 ?        S    00:56   0:01  \_ /usr/sbin/httpd -k start
nobody     4530  0.1  0.8 277552 19916 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     4787  0.1  0.8 277760 19820 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     4823  0.1  0.8 277896 19952 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     4824  0.1  0.8 277760 19656 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     6131  0.1  0.8 277900 20004 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     6304  0.2  0.8 277912 19820 ?        S    00:59   0:01  \_ /usr/sbin/httpd -k start
nobody     7626  0.1  0.8 277888 19688 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody     9240  0.1  0.7 277756 19340 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody     9334  0.1  0.8 277892 19380 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    12369  0.1  0.7 277492 18752 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12513  0.1  0.7 277764 18972 ?        R    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12668  0.0  0.7 277360 18004 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12683  0.1  0.7 277764 18780 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12684  0.2  0.7 277760 18992 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12794  0.2  0.7 277764 18760 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    13141  0.0  0.7 277764 18484 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13353  0.0  0.7 277188 17616 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13369  0.0  0.6 277052 16280 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13370  0.1  0.7 277760 18600 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13387  0.2  0.7 277760 18176 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13388  0.1  0.7 277456 18416 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13390  0.1  0.7 277188 17812 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13394  0.2  0.7 277648 18712 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13395  0.3  0.7 277760 18304 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13396  0.1  0.7 277764 18604 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13397  0.0  0.7 277620 18340 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13398  0.1  0.7 277188 17824 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13399  0.1  0.7 277784 18740 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    13648  0.0  0.6 353712 15972 ?        R    01:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    13401  0.1  0.7 277320 18084 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.1  0.3 181100  9316 ?        Ss   00:54   0:00 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   424 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 886  Threads: 10  Questions: 127946  Slow queries: 0  Opens: 1427  Flush tables: 1  Open tables: 1375  Queries per second avg: 144.408
*************************** 1. row ***************************
     Id: 2018
   User: oyrtmayouthvol78_mda
   Host: localhost
     db: oyrtmayouthvol78_mda
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 2019
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2021
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 2025
   User: oyrtmayouthvol78_mda
   Host: localhost
     db: oyrtmayouthvol78_mda
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 2030
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 6. row ***************************
     Id: 2031
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 2032
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 2035
   User: oyrtmayouthvol78_mda
   Host: localhost
     db: oyrtmayouthvol78_mda
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 9. row ***************************
     Id: 2037
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.138 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 191.242.72.106 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.82.78.112 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 52.13.138.225 TIME_WAIT
      1 52.167.144.236 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 142.93.88.84 TIME_WAIT
      3 138.68.241.57 TIME_WAIT
      3 52.167.144.23 TIME_WAIT
    335 129.212.183.198 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 01:09:03 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 minutes 39 seconds
   Server load: 6.03 2.86 1.45
   Total accesses: 4888 - Total Traffic: 104.5 MB - Total Duration: 3103390
   CPU Usage: u8.9 s3.34 cu43.28 cs35.5 - 10.4% CPU load
   5.56 requests/sec - 121.7 kB/second - 21.9 kB/request - 634.9 ms/request
   23 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

CK.KW.WWWR_K_RW_.RRKWK_K._K_KK_R_K.R............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS Req   Dur   Conn  Child Slot     Client      Protocol              VHost                          Request
   0-0  9240  1/149/223 C 2.75 5  91   132461 13.6  3.32  4.83 105.112.225.91  http/1.1 cloudsms.com.ng:443             GET /login.php HTTP/1.1
   1-0  6131  5/170/208 K 3.26 2  293  142922 155.3 2.95  3.62 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=3865703315 HTTP/1.1
   2-0  -     0/0/221   . 0.00 14 0    138689 0.0   0.00  4.94 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   3-0  6304  6/225/278 K 4.23 3  405  172688 192.1 4.60  5.80 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=1060604363 HTTP/1.1
   4-0  3866  0/235/250 W 4.51 1  0    155001 0.0   4.96  5.08 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   5-0  -     0/0/310   . 0.00 15 0    206662 0.0   0.00  4.99 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   6-0  7626  0/154/181 W 3.51 0  0    122553 0.0   3.25  3.87 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   7-0  9334  0/138/161 W 2.32 0  0    121366 0.0   2.59  2.99 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   8-0  12513 0/45/233  W 0.48 0  0    147282 0.0   0.59  3.28 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   9-0  13141 0/9/86    R 0.05 21 504  63268  0.0   0.09  1.48 49.13.142.149   http/1.1
   10-0 12369 0/44/76   _ 0.78 0  877  64925  0.0   0.91  1.70 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   11-0 12794 1/45/265  K 0.35 1  459  184700 35.3  0.51  6.87 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=2851782310 HTTP/1.1
   12-0 3922  0/234/238 _ 5.06 1  983  143030 0.0   5.46  5.48 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   13-0 12668 0/22/105  R 0.05 56 417  65899  0.0   0.12  2.36 182.2.166.136   http/1.1
   14-0 12683 0/39/108  W 0.38 1  0    72525  0.0   0.51  2.14 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   15-0 12684 0/39/54   _ 0.53 0  203  47015  0.0   0.61  0.94 52.13.138.225   http/1.1 cloudsms.com.ng:443             GET / HTTP/1.1
   16-0 -     0/0/259   . 0.00 12 0    167556 0.0   0.00  5.99 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 13353 0/1/93    R 0.00 21 341  47201  0.0   0.01  2.29 49.13.142.149   http/1.1
   18-0 13369 0/0/116   R 0.00 21 0    62718  0.0   0.00  2.95 49.13.142.149   http/1.1
   19-0 13370 4/8/145   K 0.14 1  475  79207  127.1 0.20  3.55 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=576611125 HTTP/1.1
   20-0 13387 1/6/68    W 0.15 0  0    37181  35.6  0.18  1.73 192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=3684531456 HTTP/1.1
   21-0 13388 1/12/45   K 0.03 2  436  28849  34.6  0.10  0.98 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=3931099785 HTTP/1.1
   22-0 4530  0/244/244 _ 4.97 0  417  148968 0.0   6.93  6.93 192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=3020761402 HTTP/1.1
   23-0 4787  1/196/196 K 3.89 3  417  139461 34.8  5.75  5.75 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=1313339187 HTTP/1.1
   24-0 -     0/0/228   . 0.00 16 0    94755  0.0   0.00  3.90 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 4823  0/216/216 _ 4.20 0  819  129850 0.0   4.60  4.60 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   26-0 4824  6/208/208 K 3.92 2  338  115232 186.1 4.47  4.47 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=1810535405 HTTP/1.1
   27-0 13390 0/12/12   _ 0.03 0  1065 13490  0.0   0.07  0.07 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   28-0 13394 1/8/8     K 0.15 1  523  6959   36.4  0.20  0.20 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=3464744914 HTTP/1.1
   29-0 13395 8/10/10   K 0.22 0  375  8163   245.8 0.24  0.24 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=1635422963 HTTP/1.1
   30-0 13396 0/7/7     _ 0.08 1  819  7273   0.0   0.11  0.11 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   31-0 13397 0/5/5     R 0.02 6  424  4812   0.0   0.06  0.06 105.112.225.91  http/1.1
   32-0 13398 0/11/11   _ 0.03 0  19   10755  0.0   0.07  0.07 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   33-0 13399 2/7/7     K 0.08 0  639  5846   68.8  0.10  0.10 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=868980920 HTTP/1.1
   34-0 -     0/0/3     . 0.00 13 0    3111   0.0   0.00  0.01 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 13401 0/10/10   R 0.02 1  679  11000  0.0   0.06  0.06 129.212.183.198 http/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 876
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...30)
   index usage: 15%, cache usage: 20%
   total entries stored since starting: 2683
   total entries replaced since starting: 0
   total entries expired since starting: 1801
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 7 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit