403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.01.09.txt
 ## swap threshold exceeded
## server overview
2025-11-21.01.09 load[0] mem[57/65] mysql[1/10] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1268         116          92         978         819
Swap:          1999        1379         620
 01:09:01 up  6:19,  0 users,  load average: 0.35, 0.18, 0.21
## system overview
top - 01:09:01 up  6:19,  0 users,  load average: 0.35, 0.18, 0.21
Tasks: 213 total,   5 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 69.7 us, 24.2 sy,  0.0 ni,  0.0 id,  3.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    98164 free,  1316616 used,  1005520 buff/cache
KiB Swap:  2047996 total,   635644 free,  1412352 used.   821484 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462004 274080   3644 S  81.2 11.3   4:32.02 /usr/sbin+
 92008 root      20   0  169872  16852   2884 S  31.2  0.7   0:00.08 /usr/loca+
 92020 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44396   3516   1640 S   6.2  0.1   0:32.21 /usr/lib/+
 92016 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
 92040 cloudw    20   0  353712  15964  10484 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.31 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.13 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:22.44 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.10 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.94 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.82 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.43 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.72 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.65 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.12 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   2708   2392 S   0.0  0.1   0:11.36 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    584    456 S   0.0  0.0   0:01.79 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.50 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.01 /usr/sbin+
   485 root      20   0  224148   6780   1196 S   0.0  0.3   0:00.29 queueproc+
   486 dbus      20   0   58728   1520    792 S   0.0  0.1   0:12.04 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    484    372 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1300    940 S   0.0  0.1   0:05.30 /usr/lib/+
   522 nscd      20   0 1344744   2300    928 S   0.0  0.1   0:18.30 /usr/sbin+
   523 polkitd   20   0  610540   3220    712 S   0.0  0.1   0:03.09 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.64 /usr/sbin+
   575 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4172   1084 S   0.0  0.2   0:00.59 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.58 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13388   2720 S   0.0  0.6   0:05.51 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:02.50 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.48 pure-ftpd+
   915 root      20   0  445028   3400   3284 S   0.0  0.1   0:00.97 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  11168    276 S   0.0  0.5   0:35.77 /usr/bin/+
   923 root      20   0  396248    736    564 S   0.0  0.0   0:00.59 php-fpm: +
   927 root      20   0  439788  12244  11296 S   0.0  0.5   0:00.66 php-fpm: +
   929 named     20   0 1055796  39268   2012 S   0.0  1.6   0:11.02 /usr/sbin+
   930 root      20   0 1763340 215256   1092 S   0.0  8.9   0:13.76 /usr/loca+
   937 root      20   0  261028   6908   1936 S   0.0  0.3   0:03.29 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51508    724    560 S   0.0  0.0   0:00.31 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.50 /usr/bin/+
   952 cpanelc+  20   0   10592   3608   2388 S   0.0  0.1   0:18.60 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  281936   3384   2364 S   0.0  0.1   0:05.73 /usr/sbin+
   966 root      20   0  389508    824    608 S   0.0  0.0   0:00.64 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:02.76 php-fpm: +
   976 telegraf  20   0 5654304  36468   6020 S   0.0  1.5   0:12.36 /usr/loca+
   985 root      20   0  388892    888    680 S   0.0  0.0   0:00.59 php-fpm: +
   986 root      20   0 1341892   9740    280 S   0.0  0.4   0:23.13 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:01.98 /usr/bin/+
  1078 dovenull  20   0   47276   2972   1984 S   0.0  0.1   0:00.53 dovecot/p+
  1079 dovenull  20   0   47668   3264   1928 S   0.0  0.1   0:00.27 dovecot/i+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.09 dovecot/a+
  1081 root      20   0   10452    612    440 S   0.0  0.0   0:00.31 dovecot/l+
  1082 dovenull  20   0   47140   2740   1868 S   0.0  0.1   0:00.39 dovecot/p+
  1083 dovenull  20   0   48016   3624   1948 S   0.0  0.1   0:00.33 dovecot/i+
  1086 root      20   0   24528   2572    552 S   0.0  0.1   0:00.15 dovecot/c+
  1092 dovecot   20   0   13568    808    572 S   0.0  0.0   0:00.05 dovecot/s+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.51 /usr/loca+
  1156 systuser  20   0  157708   3028   1044 S   0.0  0.1   0:00.10 SonarPush+
  1161 wp-tool+  20   0  387556  13692   2032 S   0.0  0.6   0:00.25 /usr/bin/+
  1162 wp-tool+  20   0  412396  33264   2456 S   0.0  1.4   0:07.30 /usr/bin/+
  1171 dovecot   20   0   41192   1692   1156 S   0.0  0.1   0:00.67 dovecot/a+
  1235 root      20   0  183900   6444   3212 S   0.0  0.3   0:02.39 cpdavd - +
  1239 root      20   0  167452   4260   2888 S   0.0  0.2   0:00.39 dnsadmin +
  1241 root      20   0  209680  12620   2536 S   0.0  0.5   0:02.90 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.61 php-fpm: +
  1658 root      38  18  130416   1548    812 S   0.0  0.1   0:00.05 cpanellog+
  1937 root      20   0  267084   8268    852 S   0.0  0.3   0:02.21 /usr/sbin+
  1938 root      20   0   12808    524    420 S   0.0  0.0   0:02.55 /usr/loca+
  1939 root      20   0   12732    484    408 S   0.0  0.0   0:02.26 /usr/loca+
  1940 root      20   0   12848    524    412 S   0.0  0.0   0:02.41 /usr/loca+
  1945 root      20   0   53268    372    372 S   0.0  0.0   0:00.04 /usr/loca+
  6916 root      20   0  261368 128320   3248 S   0.0  5.3   0:02.22 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.00 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.41 [kworker]
 40404 root      20   0  181360  29404   2296 S   0.0  1.2   0:03.70 lfd - sle+
 52112 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 60882 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 62260 nobody    20   0  277576  20364   4896 S   0.0  0.8   0:03.86 /usr/sbin+
 62339 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71035 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 71042 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72454 nobody    20   0  277904  20348   4812 S   0.0  0.8   0:02.50 /usr/sbin+
 72726 worencom  20   0   38444   2512   1600 S   0.0  0.1   0:00.00 dovecot/i+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 79962 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 81902 nobody    20   0  277600  19988   4652 S   0.0  0.8   0:01.35 /usr/sbin+
 82072 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84944 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85029 root      20   0  108056    360    284 S   0.0  0.0   0:00.00 sleep 5h +
 85108 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86327 nobody    20   0  277596  19636   4472 S   0.0  0.8   0:00.62 /usr/sbin+
 86335 nobody    20   0  277648  19592   4360 S   0.0  0.8   0:00.75 /usr/sbin+
 87627 nobody    20   0  277572  19104   4000 S   0.0  0.8   0:00.45 /usr/sbin+
 87632 nobody    20   0  277648  19628   4364 S   0.0  0.8   0:00.58 /usr/sbin+
 87633 nobody    20   0  277584  19372   4236 S   0.0  0.8   0:00.65 /usr/sbin+
 88228 nobody    20   0  277900  19412   4132 S   0.0  0.8   0:00.51 /usr/sbin+
 88249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89296 nobody    20   0  277900  19228   4012 S   0.0  0.8   0:00.34 /usr/sbin+
 90034 nobody    20   0  277580  19328   4116 S   0.0  0.8   0:00.21 /usr/sbin+
 90261 nobody    20   0  277576  18996   3924 S   0.0  0.8   0:00.22 /usr/sbin+
 90593 nobody    20   0  277904  19416   4060 S   0.0  0.8   0:00.11 /usr/sbin+
 90872 nobody    20   0  277576  18912   3808 S   0.0  0.8   0:00.14 /usr/sbin+
 90888 nobody    20   0  277580  19160   4032 S   0.0  0.8   0:00.09 /usr/sbin+
 90889 nobody    20   0  277576  18324   3280 S   0.0  0.8   0:00.22 /usr/sbin+
 91362 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 91438 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 91439 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 91562 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 91573 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 91739 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 91742 nigeria   20   0  400460   4820   2404 S   0.0  0.2   0:00.00 php-fpm: +
 91745 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 91770 nobody    20   0  277484  18384   3404 S   0.0  0.8   0:00.01 /usr/sbin+
 91792 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 91831 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 91865 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 91888 nobody    20   0  277464  18336   3384 S   0.0  0.8   0:00.01 /usr/sbin+
 91895 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 91896 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 91901 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 91944 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 91962 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91963 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91965 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91966 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91967 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91968 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91969 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91970 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91971 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91972 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91973 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91975 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91978 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91979 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 91980 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 91992 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 91993 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 91995 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91996 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91997 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91998 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 92000 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92001 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92003 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 92004 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92009 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92010 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 92018 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92036 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92038 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 92043 root      20   0  113496   1424   1236 S   0.0  0.1   0:00.00 bash /usr+
 92044 root      20   0   18864   3284   1648 R   0.0  0.1   0:00.00 /usr/bin/+
 92045 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 92046 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 92047 cloudsms  20   0  399788  11224   7872 R   0.0  0.5   0:00.00 /opt/cpan+
 92049 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92050 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 92051 cloudsms  20   0   25416    576    428 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      52112  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      60882  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:0]
root      62339  0.0  0.0      0     0 ?        S    00:29   0:00  \_ [kworker/0:3]
root      71035  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/1:2]
root      71042  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/0:2]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:2]
root      79962  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/1:3]
root      82072  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/1:4]
root      85108  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:0]
root      88249  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/1:1]
root      92036  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44396  3516 ?        Ss   Nov20   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40244  2708 ?        Ss   Nov20   0:11 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   584 ?        S<sl Nov20   0:01 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224148  6780 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Ss   Nov20   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   484 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1300 ?        Ss   Nov20   0:05 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2300 ?        Ssl  Nov20   0:18 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   360 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      91962  0.0  0.0 183044  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      91978  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      91979  0.0  0.0 108052   360 ?        S    01:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      91980  0.0  0.0 113288  1512 ?        S    01:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      92052  0.0  0.0 153840  2088 ?        R    01:09   0:00  |               \_ ps auxf
root      91963  0.0  0.0 183044  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      91996  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      91965  0.0  0.0 183044  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      91993  0.0  0.0  20164   988 ?        Ss   01:09   0:00  |   \_ jailshell (cloudsms) [92045] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  92045  0.0  0.0      0     0 ?        D    01:09   0:00  |       \_ [jailshell]
root      91966  0.0  0.0 183044  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      91997  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      91967  0.0  0.0 183044  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      91992  0.0  0.0  20164   984 ?        Ss   01:09   0:00  |   \_ jailshell (cloudsms) [92049] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  92049  0.0  0.0  20164   260 ?        S    01:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  92050  0.0  0.0 113284  1212 ?        S    01:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  92051  0.0  0.4 373788  9944 ?        R    01:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      91968  0.0  0.0 183044  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      92001  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      91969  0.0  0.0 183044  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      92000  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      91970  0.0  0.0 183044  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      92004  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      91971  0.0  0.0 183044  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      91995  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      91972  0.0  0.0 183044  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      91998  0.0  0.0 113284  1208 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      92008  0.0  0.6 169872 16852 ?        S    01:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      92043  0.0  0.0 113496  1424 ?        S    01:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      92044  0.0  0.1  19124  3544 ?        R    01:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      91973  0.0  0.0 183044  2140 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      92003  0.0  0.0  20164   964 ?        Ss   01:09   0:00  |   \_ jailshell (pactpay) [92009] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92009  0.0  0.0  20164   260 ?        S    01:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92016  0.0  0.7 480124 17672 ?        S    01:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      91975  0.0  0.0 183044  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      92010  0.0  0.0  20164   964 ?        Ss   01:09   0:00      \_ jailshell (nigeria) [92018] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92018  0.0  0.0  20164   260 ?        S    01:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92020  0.0  0.6 404052 16136 ?        S    01:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   244 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4172 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13388 ?        Ssl  Nov20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:02 /usr/sbin/sshd -D
root      91438  0.0  0.1 111304  4264 ?        Ss   01:08   0:00  \_ sshd: [accepted]
sshd      91439  0.0  0.1 115644  2628 ?        S    01:08   0:00  |   \_ sshd: [net]
root      91562  0.0  0.1 111304  4272 ?        Ss   01:08   0:00  \_ sshd: [accepted]
sshd      91573  0.0  0.1 115644  2632 ?        S    01:08   0:00  |   \_ sshd: [net]
root      91739  0.0  0.1 111304  4272 ?        Ss   01:08   0:00  \_ sshd: [accepted]
sshd      91745  0.0  0.1 115644  2628 ?        S    01:08   0:00  |   \_ sshd: [net]
root      91792  0.0  0.1 111304  4276 ?        Ss   01:08   0:00  \_ sshd: [accepted]
root      91831  0.0  0.1 111304  4272 ?        Ss   01:08   0:00  \_ sshd: [accepted]
root      91865  0.0  0.1 111304  4272 ?        Ss   01:08   0:00  \_ sshd: [accepted]
root      91895  0.0  0.1 111304  4448 ?        Ss   01:08   0:00  \_ sshd: [accepted]
sshd      91896  0.0  0.1 115644  2628 ?        S    01:08   0:00      \_ sshd: [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.1 445028  3400 ?        Ss   Nov20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  91901  0.0  0.0 445028   552 ?        S    01:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 11168 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   736 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.5 439788 12244 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.6 1055796 39268 ?       Ssl  Nov20   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  8.8 1763340 215256 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261028  6908 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root      91944  0.0  0.0      0     0 ?        Z    01:08   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51508   724 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1078  0.0  0.1  47276  2972 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1079  0.0  0.1  47668  3264 ?        S    Nov20   0:00  \_ dovecot/imap-login
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
root       1081  0.0  0.0  10452   612 ?        S    Nov20   0:00  \_ dovecot/log
dovenull   1082  0.0  0.1  47140  2740 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1083  0.0  0.1  48016  3624 ?        S    Nov20   0:00  \_ dovecot/imap-login
root       1086  0.0  0.1  24528  2572 ?        S    Nov20   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   808 ?        S    Nov20   0:00  \_ dovecot/stats
dovecot    1171  0.0  0.0  41192  1692 ?        S    Nov20   0:00  \_ dovecot/auth
worencom  72726  0.0  0.1  38444  2512 ?        S    00:43   0:00  \_ dovecot/imap
root      91362  0.0  0.1  60820  4512 ?        S    01:08   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3608 ?        Ss   Nov20   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.1 281936  3384 ?        Ssl  Nov20   0:05 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   824 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   91742  0.0  0.1 400460  4820 ?        S    01:08   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.5 5654304 36468 ?       SLsl Nov20   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   888 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.1  0.4 1341892 9740 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 261368 128320 ?       S    Nov20   0:02  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3028 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13692 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 33264 ?        Ss   Nov20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.2 183900  6444 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.1 167452  4260 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12620 ?        Ss   Nov20   0:02 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1548 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  0.3 267084  8268 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       1938  0.0  0.0  12808   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1939  0.0  0.0  12732   484 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1940  0.0  0.0  12848   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1945  0.0  0.0  53268   372 ?        S    Nov20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    62260  0.1  0.8 277576 20364 ?        S    00:28   0:03  \_ /usr/sbin/httpd -k start
nobody    72454  0.1  0.8 277904 20348 ?        S    00:42   0:02  \_ /usr/sbin/httpd -k start
nobody    81902  0.1  0.8 277600 19988 ?        S    00:55   0:01  \_ /usr/sbin/httpd -k start
nobody    86327  0.1  0.8 277596 19636 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86335  0.1  0.8 277648 19592 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    87627  0.1  0.7 277572 19104 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    87632  0.1  0.8 277648 19628 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    87633  0.1  0.8 277584 19372 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    88228  0.1  0.8 277900 19412 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    89296  0.1  0.7 277900 19228 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    90034  0.1  0.7 277580 19328 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    90261  0.1  0.7 277576 18996 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    90593  0.0  0.8 277904 19416 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90872  0.1  0.7 277576 18912 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90888  0.1  0.7 277580 19160 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90889  0.2  0.7 277576 18324 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    91770  0.0  0.7 277484 18384 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91888  0.1  0.7 277464 18336 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    92040  0.0  0.6 353712 15964 ?        S    01:09   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
mysql      2435  1.1 11.3 1462004 274080 ?      Sl   Nov20   4:32 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181360 29404 ?        Ss   00:00   0:03 lfd - sleeping
## mysql stats
Uptime: 22678  Threads: 4  Questions: 1713029  Slow queries: 0  Opens: 5981  Flush tables: 1  Open tables: 2000  Queries per second avg: 75.537
*************************** 1. row ***************************
     Id: 28258
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-21' LIMIT 1
*************************** 2. row ***************************
     Id: 28259
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `21` WHERE `phone`='2348030852137' LIMIT 1
*************************** 3. row ***************************
     Id: 28267
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.132.202 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 142.44.228.134 TIME_WAIT
      1 178.33.109.193 TIME_WAIT
      1 ::1 TIME_WAIT
      1 74.7.244.61 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 35.241.149.38 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 01:09:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 18 minutes 44 seconds
   Server load: 0.35 0.18 0.21
   Total accesses: 119510 - Total Traffic: 3.0 GB - Total Duration: 64240923
   CPU Usage: u9.3 s5.53 cu1559.67 cs1260.96 - 12.5% CPU load
   5.26 requests/sec - 136.8 kB/second - 26.0 kB/request - 537.536 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KK__KKK_K_K_KKWW.._..K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client      Protocol         VHost                                      Request
   0-0  90034 8/37/5892   K 0.80  0    427 3172093 248.4 2.28  152.94 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3645968260 HTTP/1.1
   1-0  81902 10/225/5637 K 6.08  1    337 2927188 308.3 6.53  139.15 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=3003408487 HTTP/1.1
   2-0  90261 0/38/5293   _ 0.92  2    3   2809174 0.0   0.99  134.02 52.0.218.219    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/2019elections/2019electio
   3-0  90593 0/20/5705   _ 0.42  0    76  3190761 0.0   0.49  150.67 66.249.70.7     http/1.1 test.cloudware.ng:443  GET /?880122206?goodscode=0878969466 HTTP/1.1
   4-0  87627 13/72/5860  K 1.97  3    254 3011171 403.6 2.06  145.99 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=807356446 HTTP/1.1
   5-0  87632 7/99/5492   K 2.41  2    391 3124622 221.8 2.73  143.54 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=424711174 HTTP/1.1
   6-0  88228 1/90/5657   K 2.16  2    349 3072412 33.6  2.33  162.24 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=1835860998 HTTP/1.1
   7-0  72454 0/434/5413  _ 10.69 0    164 2952488 0.0   11.64 144.68 217.113.194.126 http/1.1 team.cloudware.ng:80   GET /vendor/symfony/web-profiler-bundle/Tests/Fixtures/?C=S;O=A
   8-0  89296 1/58/5689   K 1.44  0    8   3043942 10.1  1.65  141.13 190.89.30.71    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?lga=Sapele&state=Delta&ward=Sape
   9-0  87633 0/103/5382  _ 2.84  0    0   2773017 0.0   2.89  132.79 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   10-0 90872 4/26/5484   K 0.57  0    349 2770825 124.7 0.62  127.76 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=4220343186 HTTP/1.1
   11-0 90888 0/17/5029   _ 0.35  1    6   2629242 0.0   0.40  127.10 142.44.228.134  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Benue&lga=Buruku&ward=Mbai
   12-0 62260 4/658/5310  K 17.16 1    389 2792906 126.9 17.29 134.98 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=1004396644 HTTP/1.1
   13-0 90889 8/33/5382   K 0.95  3    390 2736508 245.9 1.00  130.26 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=1919156113 HTTP/1.1
   14-0 91770 0/4/4989    W 0.05  0    0   2596373 0.0   0.07  120.59 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   15-0 91888 1/2/4584    W 0.01  0    0   2557379 35.3  0.04  117.87 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=1658594738 HTTP/1.1
   16-0 -     0/0/4206    . 0.00  414  0   2236824 0.0   0.00  113.93 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/3447    . 0.00  126  0   1902752 0.0   0.00  84.35  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 86327 0/111/3832  _ 2.57  0    289 2110454 0.0   3.65  94.30  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=846624674 HTTP/1.1
   19-0 -     0/0/3272    . 0.00  29   0   1839481 0.0   0.00  86.50  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/3131    . 0.00  379  0   1840870 0.0   0.00  80.94  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 86335 1/122/2424  K 3.19  3    358 1326950 33.8  3.68  61.76  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=3961427562 HTTP/1.1
   22-0 -     0/0/2735    . 0.00  413  0   1397862 0.0   0.00  65.39  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/2365    . 0.00  2120 0   1276872 0.0   0.00  58.96  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1555    . 0.00  2271 0   823579  0.0   0.00  39.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1018    . 0.00  3562 0   628117  0.0   0.00  27.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/703     . 0.00  2928 0   428614  0.0   0.00  18.18  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/420     . 0.00  3468 0   254505  0.0   0.00  9.65   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/523     . 0.00  3560 0   349352  0.0   0.00  15.17  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/430     . 0.00  3561 0   260468  0.0   0.00  11.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/318     . 0.00  3173 0   200447  0.0   0.00  7.21   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/271     . 0.00  3564 0   193700  0.0   0.00  6.36   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593     . 0.00  3563 0   371705  0.0   0.00  14.42  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301     . 0.00  3102 0   111013  0.0   0.00  5.26   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28      . 0.00  5292 0   15090   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7       . 0.00  5299 0   640     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74      . 0.00  5171 0   36928   0.0   0.00  1.90   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61      . 0.00  5128 0   25914   0.0   0.00  1.45   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65      . 0.00  5221 0   27597   0.0   0.00  1.54   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28      . 0.00  5252 0   13821   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265     . 0.00  4401 0   139506  0.0   0.00  7.31   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00  5308 0   8       0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12      . 0.00  5307 0   4242    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89      . 0.00  5033 0   42251   0.0   0.00  2.07   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10      . 0.00  5296 0   2792    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55      . 0.00  5034 0   25889   0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463     . 0.00  3985 0   190150  0.0   0.00  10.76  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7       . 0.00  5312 0   2404    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 986
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...18)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 79293
   total entries replaced since starting: 0
   total entries expired since starting: 78282
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 176 miss
   total removes since starting: 25 hit, 19 miss
Youez - 2016 - github.com/yon3zu
LinuXploit