403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-20.01.30 load[3] mem[77/59] mysql[7/10] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1740          85          30         537         426
Swap:          1999        1286         713
 01:30:02 up 35 min,  0 users,  load average: 4.88, 3.55, 3.02
## system overview
top - 01:30:03 up 35 min,  0 users,  load average: 4.88, 3.55, 3.02
Tasks: 225 total,   5 running, 219 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.0 us, 20.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    93728 free,  1787260 used,   539312 buff/cache
KiB Swap:  2047996 total,   730620 free,  1317376 used.   432076 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 219360   3780 S  94.1  9.1   1:09.60 /usr/sbin+
 28607 healtho+  20   0  462820  69452   4216 R  17.6  2.9   0:05.44 php-fpm: +
 28759 healtho+  20   0  457188  63516   4216 R  17.6  2.6   0:01.28 php-fpm: +
 28744 nigeria   20   0  400460   5432   2408 S   5.9  0.2   0:00.01 php-fpm: +
 28914 nigeria   20   0  404052  16136  10380 S   5.9  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44256   3300   1480 S   0.0  0.1   0:03.60 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:02.43 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.58 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:08.08 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kauditd]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.56 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.65 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   1644   1324 S   0.0  0.1   0:01.40 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 S   0.0  0.0   0:00.21 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    856    492 S   0.0  0.0   0:00.32 /usr/lib/+
   477 dbus      20   0   58592   1296    624 S   0.0  0.1   0:01.19 /usr/bin/+
   486 rpc       20   0   69256    168     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1160    812 S   0.0  0.0   0:00.53 /usr/lib/+
   499 root      20   0   52852    252    188 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1304    604 S   0.0  0.1   0:01.58 /usr/sbin+
   506 root      20   0  224144   6436    860 S   0.0  0.3   0:00.10 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.05 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.06 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3500    496 S   0.0  0.1   0:00.08 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.71 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.04 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    500    340 S   0.0  0.0   0:00.06 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.04 /usr/bin/+
   927 telegraf  20   0 5654048  37732   3504 S   0.0  1.6   0:01.41 /usr/loca+
   928 systuser  20   0  114016  13776   2492 S   0.0  0.6   0:00.60 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.45 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.23 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  224592   2484    980 S   0.0  0.1   0:00.68 /usr/sbin+
   935 root      20   0  439788  11368  11160 S   0.0  0.5   0:00.18 php-fpm: +
   936 named     20   0  636992  28204   2460 S   0.0  1.2   0:01.97 /usr/sbin+
   938 root      20   0  261028   4812   1272 S   0.0  0.2   0:00.35 cpsrvd (S+
   942 root      20   0  400740   2892    656 S   0.0  0.1   0:00.97 php-fpm: +
   947 root      20   0 1763312 354380    648 S   0.0 14.6   0:13.73 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.29 /usr/sbin+
   972 root      20   0  389508    644    436 S   0.0  0.0   0:00.13 php-fpm: +
   979 cpanelc+  20   0    9960   2744   2312 S   0.0  0.1   0:01.77 /usr/loca+
   982 root      20   0  396248    556    380 S   0.0  0.0   0:00.13 php-fpm: +
   984 root      20   0  388892    696    484 S   0.0  0.0   0:00.13 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.14 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    760    292 S   0.0  0.0   0:00.31 /usr/bin/+
  1116 dovenull  20   0   46912   1544    960 S   0.0  0.1   0:00.02 dovecot/p+
  1117 dovenull  20   0   47592   2688   1596 S   0.0  0.1   0:00.04 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.00 dovecot/a+
  1119 root      20   0   10452    380    212 S   0.0  0.0   0:00.02 dovecot/l+
  1120 dovenull  20   0   46912   1744   1152 S   0.0  0.1   0:00.05 dovecot/p+
  1121 dovenull  20   0   47068   2416   1712 S   0.0  0.1   0:00.00 dovecot/i+
  1128 root      20   0   24396   2124    448 S   0.0  0.1   0:00.03 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.02 SonarPush+
  1137 dovecot   20   0   13568    452    244 S   0.0  0.0   0:00.00 dovecot/s+
  1172 root      20   0  248320 119764   2872 S   0.0  4.9   0:03.08 /usr/loca+
  1190 dovecot   20   0   41144   1484   1012 S   0.0  0.1   0:00.05 dovecot/a+
  1258 wp-tool+  20   0  412368  32236   1444 S   0.0  1.3   0:00.90 /usr/bin/+
  1259 wp-tool+  20   0  387528  12948   1320 S   0.0  0.5   0:00.11 /usr/bin/+
  1294 root      20   0  167452   4168   2804 S   0.0  0.2   0:00.12 dnsadmin +
  1298 root      20   0  262224  22436   4572 S   0.0  0.9   0:00.17 cpdavd - +
  1300 root      20   0  209344  10560   1680 S   0.0  0.4   0:00.64 tailwatchd
  1692 root      20   0  299272    812    432 S   0.0  0.0   0:00.06 php-fpm: +
  1709 root      38  18  130416   1420    704 S   0.0  0.1   0:00.00 cpanellog+
  1943 root      20   0  266992   8056    772 S   0.0  0.3   0:00.29 /usr/sbin+
  1945 root      20   0   12784    424    292 S   0.0  0.0   0:00.36 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.30 /usr/loca+
  1947 root      20   0   12804    344    232 S   0.0  0.0   0:00.33 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  181448   9856   1192 S   0.0  0.4   0:02.15 lfd - sle+
  2273 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.02 [kworker]
  7285 root      20   0  260432 124472   2552 S   0.0  5.1   0:00.30 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
 12301 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13141 nobody    20   0  277700  20556   4804 S   0.0  0.8   0:02.10 /usr/sbin+
 13621 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 15871 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19084 nobody    20   0  277764  19964   4472 S   0.0  0.8   0:01.37 /usr/sbin+
 19107 nobody    20   0  277696  20028   4432 S   0.0  0.8   0:01.33 /usr/sbin+
 20164 nobody    20   0  277892  20232   4608 S   0.0  0.8   0:01.38 /usr/sbin+
 20701 nobody    20   0  277696  20316   4648 S   0.0  0.8   0:01.12 /usr/sbin+
 20729 nobody    20   0  277764  19624   4380 S   0.0  0.8   0:00.93 /usr/sbin+
 22427 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 23328 nobody    20   0  277760  20032   4316 S   0.0  0.8   0:00.81 /usr/sbin+
 23739 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 23750 root      20   0  178148  26128   2644 S   0.0  1.1   0:00.14 /usr/loca+
 23807 root      20   0  158896  15184   2596 S   0.0  0.6   0:00.07 /usr/loca+
 23821 root      20   0  195360  34472   2936 S   0.0  1.4   0:00.20 /usr/loca+
 23842 root      20   0   76780  16864   2896 S   0.0  0.7   0:00.18 /usr/loca+
 25292 nobody    20   0  277772  19644   4248 S   0.0  0.8   0:00.57 /usr/sbin+
 25324 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26402 nobody    20   0  277496  19080   4196 S   0.0  0.8   0:00.37 /usr/sbin+
 26412 nobody    20   0  277496  18820   3972 S   0.0  0.8   0:00.40 /usr/sbin+
 26414 nobody    20   0  277764  19356   4224 S   0.0  0.8   0:00.31 /usr/sbin+
 26415 nobody    20   0  277908  19224   4056 S   0.0  0.8   0:00.35 /usr/sbin+
 26426 nobody    20   0  277904  19264   4128 S   0.0  0.8   0:00.37 /usr/sbin+
 26428 nobody    20   0  277760  19056   3952 S   0.0  0.8   0:00.39 /usr/sbin+
 26429 nobody    20   0  277764  19456   4324 S   0.0  0.8   0:00.34 /usr/sbin+
 26433 nobody    20   0  277896  19312   4208 S   0.0  0.8   0:00.37 /usr/sbin+
 26781 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 26967 nobody    20   0  277764  19072   4000 S   0.0  0.8   0:00.31 /usr/sbin+
 28011 nobody    20   0  277904  19076   3984 S   0.0  0.8   0:00.13 /usr/sbin+
 28517 nobody    20   0  277892  18832   3808 S   0.0  0.8   0:00.05 /usr/sbin+
 28642 healtho+  20   0  463344  71416   4384 S   0.0  3.0   0:04.76 php-fpm: +
 28678 healtho+  20   0  462688  69452   4220 S   0.0  2.9   0:03.69 php-fpm: +
 28700 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 28726 nigeria   20   0  401380   9920   5064 S   0.0  0.4   0:00.03 php-fpm: +
 28727 nobody    20   0  277464  18252   3572 S   0.0  0.8   0:00.01 /usr/sbin+
 28781 healtho+  20   0  446304  52896   4220 S   0.0  2.2   0:00.70 php-fpm: +
 28809 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 28819 root      20   0  111304   4448   3416 S   0.0  0.2   0:00.00 sshd: [ac+
 28820 sshd      20   0  115644   2620   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 28824 root      20   0  183052   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 28826 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 28827 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28829 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28830 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28831 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28832 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28833 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28834 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28835 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28837 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28838 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28839 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28840 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 28841 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28843 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28846 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 28848 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28849 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 28851 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 28852 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28854 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 28855 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 28856 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28858 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 28859 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28861 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 28862 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28865 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 28866 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28867 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28868 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28869 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 28871 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 28872 root      20   0  188216  11096   5148 S   0.0  0.5   0:00.01 /usr/loca+
 28880 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 28891 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 28896 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 28897 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 28900 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 28909 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.01 /opt/cpan+
 28910 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 28922 root      20   0  160224   2388   1636 S   0.0  0.1   0:00.00 top -n 2 +
 28960 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 28979 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 28984 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 28986 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 28987 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 28988 cloudsms  20   0  399788  11220   7872 R   0.0  0.5   0:00.00 /opt/cpan+
 28992 root      20   0  113284    612    396 S   0.0  0.0   0:00.00 bash /usr+
 28993 root      20   0  108076    360    284 R   0.0  0.0   0:00.00 cat /usr/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    00:54   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    00:54   0:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        104  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:3]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.1  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2273  0.0  0.0      0     0 ?        D    00:55   0:00  \_ [kworker/1:3]
root      12301  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      12309  0.0  0.0      0     0 ?        D    01:07   0:00  \_ [kworker/u200:0]
root      28995  0.0  0.0      0     0 ?        R    01:30   0:00  |   \_ [kworker/u200:0]
root      13621  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      15871  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/0:1]
root      22427  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/1:0]
root      25324  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:0]
root      26781  0.0  0.0      0     0 ?        D    01:27   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44256  3300 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.0  39500  1644 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        R<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   856 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58592  1296 ?        Rs   00:54   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   168 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1160 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   252 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1304 ?        Ssl  00:54   0:01 /usr/sbin/nscd
root        506  0.0  0.2 224144  6436 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      23739  0.0  0.0 183048  2140 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      23750  0.0  1.0 178148 26128 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      23807  0.0  0.6 158896 15184 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      23821  0.0  1.4 195360 34472 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      23842  0.0  0.6  76780 16864 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      28824  0.0  0.0 183052  2164 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28851  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      28869  0.0  0.0 113284  1476 ?        S    01:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      28826  0.0  0.0 183048  2164 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28849  0.0  0.0 113284  1208 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      28871  0.0  0.0 108052   356 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      28880  0.0  0.0 113288  1520 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      28994  0.0  0.0 153840  2092 ?        R    01:30   0:00  |               \_ ps auxf
root      28827  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28866  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      28829  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28859  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      28830  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28848  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      28831  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28868  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      28832  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28856  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      28833  0.0  0.0 183048  2160 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28846  0.0  0.0  20164   968 ?        Ss   01:30   0:00  |   \_ jailshell (cloudsms) [28891] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  28891  0.0  0.0  20164   264 ?        S    01:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  28900  0.0  0.0 113284  1212 ?        S    01:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  28909  1.0  0.6 404052 15612 ?        S    01:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      28835  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28862  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      28837  0.0  0.0 183044  2216 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28838  0.0  0.0 183048  2152 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28852  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      28839  0.0  0.0 183048  2152 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28867  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      28840  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28855  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      28872  1.0  0.4 188216 11096 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      28922  0.0  0.0 160224  2388 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root      28841  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28861  0.0  0.0  20164   964 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [28896] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28896  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28910  1.0  0.7 480124 17684 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      28843  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      28854  0.0  0.0  20164   972 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [28897] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28897  0.0  0.0  20164   260 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28914  6.0  0.6 404052 16136 ?        S    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3500 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   500 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  1544 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  2688 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   380 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  1744 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.0  47068  2416 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24396  2124 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   452 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41144  1484 ?        S    00:54   0:00  \_ dovecot/auth
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.5 5654048 37732 ?       SLsl 00:54   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.5 114016 13776 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  1.4  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  1.0  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.1 224592  2484 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11368 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.1 636992 28204 ?        Ssl  00:54   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.1 261028  4812 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      28809  0.0  0.0      0     0 ?        Z    01:29   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2892 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  28607 22.7  2.8 462820 69452 ?        R    01:29   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  28642 23.8  2.9 463344 71416 ?        S    01:29   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  28678 21.7  2.8 462688 69452 ?        S    01:29   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   28726  0.2  0.4 401380  9920 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   28744  0.1  0.2 400460  5432 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  28759 21.5  2.6 459236 65100 ?        R    01:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  28781 17.5  2.1 446304 52896 ?        S    01:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        947  0.6 14.6 1763312 354380 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      28819  0.0  0.1 111304  4448 ?        Ss   01:30   0:00  \_ sshd: [accepted]
sshd      28820  0.0  0.1 115644  2620 ?        S    01:30   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   644 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1   9960  2744 ?        Ss   00:54   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   556 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   696 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  28700  0.0  0.0 445028   320 ?        S    01:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   760 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.1  4.9 248320 119764 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.1 260432 124472 ?       S    01:00   0:00  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32236 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 12948 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  4168 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.9 262224 22436 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.4 209344 10560 ?        Ss   00:54   0:00 tailwatchd
root       1692  0.0  0.0 299272   812 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1420 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  3.2  9.0 1462280 219360 ?      Sl   00:54   1:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8056 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12784   424 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12804   344 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    13141  0.1  0.8 277700 20556 ?        S    01:08   0:02  \_ /usr/sbin/httpd -k start
nobody    19084  0.1  0.8 277764 19964 ?        S    01:16   0:01  \_ /usr/sbin/httpd -k start
nobody    19107  0.1  0.8 277696 20028 ?        S    01:16   0:01  \_ /usr/sbin/httpd -k start
nobody    20164  0.1  0.8 277892 20232 ?        S    01:18   0:01  \_ /usr/sbin/httpd -k start
nobody    20701  0.1  0.8 277696 20316 ?        S    01:18   0:01  \_ /usr/sbin/httpd -k start
nobody    20729  0.1  0.8 277764 19624 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    23328  0.1  0.8 277760 20032 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    25292  0.1  0.8 277772 19644 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    28960  1.0  0.6 353712 15980 ?        S    01:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    26402  0.1  0.7 277496 19080 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26412  0.1  0.7 277496 18820 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26414  0.1  0.7 277764 19356 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26415  0.1  0.7 277908 19224 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26426  0.1  0.7 277904 19264 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26428  0.1  0.7 277760 19056 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26429  0.1  0.8 277764 19456 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26433  0.1  0.7 277896 19312 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    26967  0.1  0.7 277764 19072 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody    28011  0.1  0.7 277904 19076 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    28517  0.1  0.7 277892 18832 ?        S    01:29   0:00  \_ /usr/sbin/httpd -k start
nobody    28727  0.0  0.7 277464 18252 ?        S    01:29   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.1  0.4 181448  9856 ?        Ss   00:54   0:02 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 2146  Threads: 6  Questions: 591474  Slow queries: 0  Opens: 2064  Flush tables: 1  Open tables: 1902  Queries per second avg: 275.616
*************************** 1. row ***************************
     Id: 8816
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 8823
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 8827
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 8829
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 8833
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 114.119.139.166 TIME_WAIT
      1 148.113.128.50 TIME_WAIT
      1 152.42.189.164 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.131.219.100 TIME_WAIT
      1 54.39.0.244 TIME_WAIT
      1 68.221.75.24 TIME_WAIT
      1 74.7.228.23 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
    194 129.212.183.198 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 01:30:03 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 35 minutes 39 seconds
   Server load: 4.88 3.55 3.02
   Total accesses: 15567 - Total Traffic: 274.1 MB - Total Duration: 10494138
   CPU Usage: u9.91 s3.38 cu126.86 cs93.81 - 10.9% CPU load
   7.28 requests/sec - 131.2 kB/second - 18.0 kB/request - 674.127 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KWK_..KW.KK_K.W..KRWW.K_....._..K...K...........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn  Child  Slot     Client      Protocol           VHost                        Request
   0-0  26967 5/69/663  K 1.08 1   383 420982 153.4 1.29  11.00 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=293824031 HTTP/1.1
   1-0  28011 0/33/657  W 0.42 0   0   448938 0.0   0.48  10.31 129.212.183.198 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-0  28517 1/19/593  K 0.13 1   0   387738 0.6   0.33  10.96 45.84.107.101   http/1.1 nigeriadecide.org:80       GET / HTTP/1.1
   3-0  28727 0/6/679   _ 0.01 0   683 443497 0.0   0.04  12.65 129.212.183.198 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  -     0/0/570   . 0.00 146 0   382491 0.0   0.00  9.83  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  -     0/0/631   . 0.00 186 0   417148 0.0   0.00  10.36 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  23328 1/185/613 K 2.79 3   266 429009 33.8  4.70  11.54 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3395115507 HTTP/1.1
   7-0  19084 0/319/671 W 4.69 0   0   461562 0.0   5.93  11.67 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=1930033143 HTTP/1.1
   8-0  -     0/0/633   . 0.00 205 0   419187 0.0   0.00  9.91  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  13141 3/527/604 K 6.77 3   347 419068 93.4  7.92  9.31  192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=1301989646 HTTP/1.1
   10-0 25292 3/136/489 K 2.13 0   459 342142 93.1  2.29  8.64  192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=1702113906 HTTP/1.1
   11-0 19107 0/301/628 _ 4.99 0   304 440499 0.0   5.38  12.89 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=915960287 HTTP/1.1
   12-0 26402 5/89/639  K 1.14 2   453 448129 161.3 1.40  12.02 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=4048067958 HTTP/1.1
   13-0 -     0/0/329   . 0.00 201 0   234869 0.0   0.00  5.41  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 26412 0/82/280  W 1.44 1   0   201451 0.0   1.63  5.34  129.212.183.198 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   15-0 -     0/0/274   . 0.00 192 0   195344 0.0   0.00  4.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/325   . 0.00 204 0   207895 0.0   0.00  7.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 20164 4/382/481 K 4.51 0   444 294643 123.9 6.05  8.37  192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=1731232611 HTTP/1.1
   18-0 26414 0/150/478 R 0.56 37  6   308922 0.0   1.01  7.93  152.42.189.164  http/1.1 health.oyostate.gov.ng:443
   19-0 26415 0/85/570  W 1.07 0   0   371731 0.0   1.29  9.90  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-0 26426 0/81/225  W 1.29 0   0   152046 0.0   1.51  4.66  45.84.107.101   http/1.1 nigeriadecide.org:443      GET / HTTP/1.1
   21-0 -     0/0/122   . 0.00 143 0   82632  0.0   0.00  2.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 26428 1/83/437  K 1.45 2   354 308547 35.8  1.71  10.20 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=2852144930 HTTP/1.1
   23-0 26429 0/92/596  _ 0.90 0   261 420613 0.0   1.72  12.46 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=3541166903 HTTP/1.1
   24-0 -     0/0/277   . 0.00 175 0   125018 0.0   0.00  4.76  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/605   . 0.00 172 0   393479 0.0   0.00  10.34 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/502   . 0.00 81  0   317797 0.0   0.00  10.51 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/80    . 0.00 197 0   73485  0.0   0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/230   . 0.00 202 0   168829 0.0   0.00  3.54  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 26433 0/93/203  _ 1.43 0   0   145259 0.0   1.44  2.79  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   30-0 -     0/0/248   . 0.00 606 0   177664 0.0   0.00  3.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/59    . 0.00 569 0   37456  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 20701 3/270/427 K 3.75 3   285 300880 96.5  4.71  6.60  192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=470022769 HTTP/1.1
   33-0 -     0/0/218   . 0.00 624 0   146168 0.0   0.00  2.90  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/197   . 0.00 203 0   131720 0.0   0.00  3.89  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/98    . 0.00 649 0   88437  0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 20729 3/233/233 K 3.24 1   390 147438 94.3  3.66  3.66  192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=3332767716 HTTP/1.1
   37-0 -     0/0/3     . 0.00 657 0   1408   0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 977
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...42)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 6436
   total entries replaced since starting: 0
   total entries expired since starting: 5451
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 15 miss
   total removes since starting: 8 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit