403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.02.45.txt
 ## swap threshold exceeded
## server overview
2025-11-22.02.45 load[0] mem[64/59] mysql[6/8] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1450          86          51         826         701
Swap:          1999        1300         699
 02:45:01 up  1:48,  0 users,  load average: 0.35, 0.23, 0.24
## system overview
top - 02:45:02 up  1:48,  0 users,  load average: 0.35, 0.23, 0.24
Tasks: 206 total,   2 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 74.2 us, 19.4 sy,  0.0 ni,  6.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    87460 free,  1483672 used,   849168 buff/cache
KiB Swap:  2047996 total,   716284 free,  1331712 used.   719568 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 229340   2984 S 133.3  9.5   1:15.93 /usr/sbin+
 76685 nigeria   20   0  404052  16140  10384 R  20.0  0.7   0:00.04 /opt/cpan+
 76586 cloudsms  20   0  435384  82088  13176 S   6.7  3.4   0:00.33 /opt/cpan+
     1 root      20   0   44396   3308   1472 S   0.0  0.1   0:08.89 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:06.09 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.90 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.62 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.93 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.82 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   4852   4548 S   0.0  0.2   0:03.44 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    488    360 S   0.0  0.0   0:00.51 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.15 /usr/sbin+
   485 root      20   0   24712   1168    808 S   0.0  0.0   0:01.52 /usr/lib/+
   486 root      20   0  152780    124     84 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5552    828 S   0.0  0.2   0:00.14 queueproc+
   488 root      20   0   52852    260    164 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    900    468 S   0.0  0.0   0:00.91 /usr/lib/+
   498 dbus      20   0   58748   1352    612 S   0.0  0.1   0:03.48 /usr/bin/+
   506 rpc       20   0   69256    152     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1392    684 S   0.0  0.1   0:04.74 /usr/sbin+
   554 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.18 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3900    820 S   0.0  0.2   0:00.22 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.18 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    748    164 S   0.0  0.0   0:00.65 /usr/bin/+
   920 root      20   0  232784   4256   3672 S   0.0  0.2   0:01.68 /usr/sbin+
   926 root      20   0 1689392 337392    232 S   0.0 13.9   0:13.50 /usr/loca+
   927 named     20   0 1054792  34132   1952 S   0.0  1.4   0:03.36 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.14 /usr/bin/+
   931 root      20   0  389508    572    364 S   0.0  0.0   0:00.23 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.31 sw-engine+
   939 root      20   0  439788  11380  11048 S   0.0  0.5   0:00.27 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.01 /usr/loca+
   943 root      20   0  388892    596    392 S   0.0  0.0   0:00.22 php-fpm: +
   944 cpanelc+  20   0   10476   3276   2324 S   0.0  0.1   0:05.13 /usr/loca+
   946 systuser  20   0  114016  15744   2620 S   0.0  0.7   0:01.69 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    504    328 S   0.0  0.0   0:00.23 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.68 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.12 /usr/sbin+
   962 root      20   0  261024   6404   1576 S   0.0  0.3   0:00.90 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   2648    644 S   0.0  0.1   0:00.75 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.13 pure-ftpd+
   974 root      20   0 1277312  10444     40 S   0.0  0.4   0:28.01 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.47 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  36216   5736 S   0.0  1.5   0:03.77 /usr/loca+
  1079 dovenull  20   0   47136   3292   2308 S   0.0  0.1   0:00.18 dovecot/p+
  1080 dovenull  20   0   47392   3540   2440 S   0.0  0.1   0:00.14 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.06 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.13 dovecot/l+
  1083 dovenull  20   0   47300   3356   2332 S   0.0  0.1   0:00.29 dovecot/p+
  1084 dovenull  20   0   47424   2896   1864 S   0.0  0.1   0:00.08 dovecot/i+
  1090 root      20   0   24528   2172    500 S   0.0  0.1   0:00.06 dovecot/c+
  1091 dovecot   20   0   13568    608    404 S   0.0  0.0   0:00.01 dovecot/s+
  1141 root      20   0  247944 117432    920 S   0.0  4.9   0:03.62 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.40 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.05 SonarPush+
  1177 wp-tool+  20   0  387528  13228   1600 S   0.0  0.5   0:00.14 /usr/bin/+
  1178 wp-tool+  20   0  412368  32156   1368 S   0.0  1.3   0:02.23 /usr/bin/+
  1261 root      20   0  262228  24620   6760 S   0.0  1.0   0:00.45 cpdavd - +
  1262 root      20   0  209248  11568   2104 S   0.0  0.5   0:00.98 tailwatchd
  1263 root      20   0  167452   2172    796 S   0.0  0.1   0:00.18 dnsadmin +
  1662 root      38  18  130416   1432    696 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    716    336 S   0.0  0.0   0:00.18 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.58 /usr/sbin+
  1929 root      20   0   12820    324    228 S   0.0  0.0   0:00.65 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.58 /usr/loca+
  1931 root      20   0   12844    332    228 S   0.0  0.0   0:00.60 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  181780  10556   1120 S   0.0  0.4   0:05.80 lfd - sle+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.11 [kworker]
  6717 root      20   0  249208 118848   1160 S   0.0  4.9   0:00.53 spamd chi+
  6719 root      20   0  247944 116768    288 S   0.0  4.8   0:00.00 spamd chi+
 27127 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 41828 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 57550 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 60213 nobody    20   0  277632  20708   4892 S   0.0  0.9   0:01.98 /usr/sbin+
 61773 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 63157 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 64549 nobody    20   0  277632  20732   4972 S   0.0  0.9   0:01.46 /usr/sbin+
 66402 nobody    20   0  277604  20564   4920 S   0.0  0.8   0:01.31 /usr/sbin+
 68512 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69356 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69778 nobody    20   0  277588  20268   4696 S   0.0  0.8   0:00.85 /usr/sbin+
 69853 nobody    20   0  277920  20412   4696 S   0.0  0.8   0:00.65 /usr/sbin+
 70855 nobody    20   0  277944  20244   4556 S   0.0  0.8   0:00.64 /usr/sbin+
 70871 nobody    20   0  277560  20104   4528 S   0.0  0.8   0:00.70 /usr/sbin+
 70872 nobody    20   0  277932  20224   4556 S   0.0  0.8   0:00.70 /usr/sbin+
 71073 nobody    20   0  277908  20200   4564 S   0.0  0.8   0:00.64 /usr/sbin+
 71736 nobody    20   0  277584  19980   4432 S   0.0  0.8   0:00.56 /usr/sbin+
 72147 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72509 nobody    20   0  277520  19640   4356 S   0.0  0.8   0:00.57 /usr/sbin+
 72695 nobody    20   0  277584  19704   4260 S   0.0  0.8   0:00.41 /usr/sbin+
 73780 nobody    20   0  277908  19824   4300 S   0.0  0.8   0:00.29 /usr/sbin+
 74054 nobody    20   0  277908  19588   4112 S   0.0  0.8   0:00.25 /usr/sbin+
 74239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74501 nobody    20   0  277908  19424   3980 S   0.0  0.8   0:00.26 /usr/sbin+
 75550 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75613 nobody    20   0  277916  19220   3712 S   0.0  0.8   0:00.06 /usr/sbin+
 75764 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 75821 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 76002 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76008 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 76046 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 76083 wp-tool+  20   0  431444  76388  16932 S   0.0  3.2   0:00.52 /usr/bin/+
 76104 mailnull  20   0   90988   4296   1160 S   0.0  0.2   0:00.00 /usr/sbin+
 76156 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76201 mailnull  20   0   90988   4296   1160 S   0.0  0.2   0:00.00 /usr/sbin+
 76227 nigeria   20   0  403228   9840   3912 S   0.0  0.4   0:00.18 php-fpm: +
 76263 nobody    20   0  277520  18380   3220 S   0.0  0.8   0:00.00 /usr/sbin+
 76281 worencom  20   0   38388   3672   2892 S   0.0  0.2   0:00.00 dovecot/i+
 76557 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 76579 wp-tool+  20   0    8632    648    536 S   0.0  0.0   0:00.00 timeout 6+
 76580 cloudsms  20   0  752836   2028   1392 S   0.0  0.1   0:00.00 /usr/loca+
 76585 cloudsms  20   0    8632    648    536 S   0.0  0.0   0:00.00 /usr/bin/+
 76599 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76600 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76602 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76603 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76604 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76605 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76606 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76607 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76609 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76610 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76611 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76613 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76630 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76632 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76633 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 76634 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 76635 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76637 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76638 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76639 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76640 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 76644 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 76645 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76646 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76651 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 76653 root      20   0  188216  11100   5152 S   0.0  0.5   0:00.02 /usr/loca+
 76662 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 76663 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 76666 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 76667 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 76674 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 76734 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 76745 root      20   0  160224   2340   1636 S   0.0  0.1   0:00.00 top -n 2 +
 76756 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      27127  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/u200:1]
root      41828  0.0  0.0      0     0 ?        S    01:55   0:00  \_ [kworker/0:4]
root      57550  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:3]
root      61773  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/1:0]
root      63157  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:3]
root      68512  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:2]
root      69356  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/1:1]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      72147  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:0]
root      74239  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:1]
root      75550  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44396  3308 ?        Ss   00:56   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  40244  4852 ?        Ss   00:56   0:03 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   488 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1168 ?        Ss   00:56   0:01 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   124 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5552 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   260 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   900 ?        Ssl  00:56   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1352 ?        Ss   00:56   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   152 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1392 ?        Ssl  00:56   0:04 /usr/sbin/nscd
root        554  0.0  0.0  24208     0 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      76599  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76634  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      76651  0.0  0.0 108052   360 ?        S    02:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      76662  0.0  0.0 113288  1516 ?        S    02:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      76763  0.0  0.0 153840  2096 ?        R    02:45   0:00  |               \_ ps auxf
root      76600  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76637  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      76602  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76632  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      76603  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76630  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      76604  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76639  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      76605  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76645  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      76606  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76638  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      76607  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76646  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      76609  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76635  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      76610  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76633  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      76653  2.0  0.4 188216 11100 ?        S    02:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      76745  0.0  0.0 160224  2340 ?        S    02:45   0:00  |           \_ top -n 2 -b -c
root      76611  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76644  0.0  0.0  20164   964 ?        Ss   02:45   0:00  |   \_ jailshell (pactpay) [76663] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76663  0.0  0.0  20164   260 ?        S    02:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76667  1.0  0.7 480124 17676 ?        S    02:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      76613  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      76640  0.0  0.0  20164   964 ?        Ss   02:45   0:00      \_ jailshell (nigeria) [76674] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76674  0.0  0.0  20164   260 ?        S    02:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76685  5.0  0.6 404052 16140 ?        S    02:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3900 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  76104  0.0  0.1  90988  4296 ?        S    02:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  76201  0.0  0.1  90988  4296 ?        S    02:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   748 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 232784  4256 ?        Ssl  00:56   0:01 /usr/sbin/rsyslogd -n
root        926  0.2 13.9 1689392 337392 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.4 1054792 34132 ?       Ssl  00:56   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   572 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  76046  0.0  0.0 445028   320 ?        S    02:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11380 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   596 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10476  3276 ?        Rs   00:56   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15744 ?        Ssl  00:56   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   504 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root      76002  0.0  0.1 111304  4268 ?        Ss   02:44   0:00  \_ sshd: [accepted]
sshd      76008  0.0  0.1 115644  2628 ?        S    02:44   0:00  |   \_ sshd: [net]
root      76156  0.0  0.1 111304  4272 ?        Ss   02:44   0:00  \_ sshd: [accepted]
sshd      76734  0.0  0.1 115644  2632 ?        S    02:45   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3292 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3540 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3356 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2896 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24528  2172 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   608 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
root      75764  0.0  0.1  41052  2724 ?        S    02:44   0:00  \_ dovecot/auth -w
root      75821  0.0  0.1  60820  4512 ?        S    02:44   0:00  \_ dovecot/lmtp
worencom  76281  0.0  0.1  38388  3672 ?        S    02:44   0:00  \_ dovecot/imap
root        962  0.0  0.2 261024  6404 ?        Ss   00:56   0:00 cpsrvd (SSL) - waiting for connections                   
root      76557  0.0  0.0      0     0 ?        Z    02:44   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2648 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   76227  1.8  0.4 403228  9840 ?        S    02:44   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.4  0.4 1277312 10444 ?       Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.3  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 36216 ?       SLsl 00:56   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 117432 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.9 249208 118848 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116768 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13228 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+  76083  3.4  3.1 431444 76388 ?        S    02:44   0:00  \_ /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/instances-auto-update.php
wp-tool+  76579  0.0  0.0   8632   648 ?        S    02:45   0:00      \_ timeout 60 /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user cloudsms -operation run-wp-cli -work-dir /home/cloudsms/public_html/blog -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
cloudsms  76580  0.0  0.0 752836  2028 ?        Sl   02:45   0:00          \_ /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user cloudsms -operation run-wp-cli -work-dir /home/cloudsms/public_html/blog -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
cloudsms  76585  0.0  0.0   8632   648 ?        S    02:45   0:00              \_ /usr/bin/timeout 60 /usr/local/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/cloudsms/public_html/blog theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
cloudsms  76586 33.0  3.3 435384 82088 ?        S    02:45   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/cloudsms/public_html/blog theme auto-updates status --all --enabled-only --field=name --skip-plugins=false --skip-themes=false
wp-tool+   1178  0.0  1.3 412368 32156 ?        Ss   00:56   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  1.0 262228 24620 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.4 209248 11568 ?        Ss   00:56   0:00 tailwatchd
root       1263  0.0  0.0 167452  2172 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1432 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   716 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  9.4 1457824 229340 ?      Sl   00:56   1:15 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12820   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12844   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60213  0.1  0.8 277632 20708 ?        S    02:21   0:01  \_ /usr/sbin/httpd -k start
nobody    64549  0.1  0.8 277632 20732 ?        S    02:28   0:01  \_ /usr/sbin/httpd -k start
nobody    66402  0.1  0.8 277604 20564 ?        S    02:30   0:01  \_ /usr/sbin/httpd -k start
nobody    69778  0.1  0.8 277588 20268 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69853  0.1  0.8 277920 20412 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    70855  0.1  0.8 277944 20244 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    70871  0.1  0.8 277560 20104 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    70872  0.1  0.8 277932 20224 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    71073  0.1  0.8 277908 20200 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    71736  0.1  0.8 277584 19980 ?        S    02:38   0:00  \_ /usr/sbin/httpd -k start
cloudw    76666  1.0  0.6 353712 15972 ?        R    02:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    72509  0.1  0.8 277520 19640 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    72695  0.1  0.8 277584 19704 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    73780  0.1  0.8 277908 19824 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    74054  0.1  0.8 277908 19588 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    74501  0.1  0.8 277908 19424 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    75613  0.1  0.7 277916 19220 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    76263  0.0  0.7 277520 18380 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181780 10556 ?        Ss   00:56   0:05 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 6491  Threads: 4  Questions: 415506  Slow queries: 0  Opens: 2446  Flush tables: 1  Open tables: 1998  Queries per second avg: 64.012
*************************** 1. row ***************************
     Id: 7759
   User: cloudsms_wp167
   Host: localhost
     db: cloudsms_wp167
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 7760
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 7765
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 7770
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 102.67.30.228 TIME_WAIT
      1 114.119.128.35 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 160.30.112.53 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.37.84 TIME_WAIT
      1 66.249.70.3 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 02:45:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 48 minutes 7 seconds
   Server load: 0.35 0.23 0.24
   Total accesses: 29161 - Total Traffic: 720.6 MB - Total Duration: 13734962
   CPU Usage: u8.45 s3.44 cu359.69 cs289.8 - 10.2% CPU load
   4.5 requests/sec - 113.8 kB/second - 25.3 kB/request - 471.004 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

WK___.__KK._.._KK.K..KKK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol            VHost                                        Request
   0-0  73780 0/56/1362  W 1.28 0    0   675177 0.0   1.36  32.50 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   1-0  71073 2/121/1527 K 2.72 0    301 670329 64.1  3.14  39.57 192.178.4.99  http/1.1 team.cloudware.ng:443       GET /?l=760673434 HTTP/1.1
   2-0  74054 0/51/1445  _ 0.98 1    1   691735 0.0   1.06  39.47 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80      GET / HTTP/1.1
   3-0  74501 0/46/1422  _ 1.07 2    2   811048 0.0   1.18  35.56 18.207.89.138 http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php/images/2019elections/blog/2019el
   4-0  76263 0/2/1432   _ 0.02 1    1   679757 0.0   0.03  34.51 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80      GET / HTTP/1.1
   5-0  -     0/0/1355   . 0.00 51   0   590638 0.0   0.00  29.93 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   6-0  64549 0/264/1622 _ 6.06 0    0   688049 0.0   7.01  36.59 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   7-0  75613 0/11/1678  _ 0.23 2    271 713305 0.0   0.28  37.18 192.178.4.103 http/1.1 team.cloudware.ng:443       GET /?l=335714502 HTTP/1.1
   8-0  71736 5/101/1488 K 2.28 0    444 624448 153.2 2.45  36.51 192.178.4.101 http/1.1 team.cloudware.ng:443       GET /?l=511309936 HTTP/1.1
   9-0  72509 5/93/1020  K 2.41 1    297 509320 153.8 2.56  26.09 192.178.4.96  http/1.1 team.cloudware.ng:443       GET /?l=3054184416 HTTP/1.1
   10-0 -     0/0/1059   . 0.00 178  0   514305 0.0   0.00  25.69 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   11-0 66402 0/235/1329 _ 5.67 0    0   619182 0.0   8.61  35.90 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80      GET /whm-server-status HTTP/1.0
   12-0 -     0/0/936    . 0.00 115  0   374563 0.0   0.00  20.56 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   13-0 -     0/0/1319   . 0.00 185  0   763925 0.0   0.00  35.13 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   14-0 70855 0/130/1233 _ 2.53 2    346 610029 0.0   2.93  31.22 192.178.4.103 http/1.1 team.cloudware.ng:443       GET /?l=440142952 HTTP/1.1
   15-0 72695 1/76/668   K 1.70 1    393 327697 36.9  1.82  17.04 192.178.4.105 http/1.1 team.cloudware.ng:443       GET /?l=2054183664 HTTP/1.1
   16-0 69778 8/167/954  K 3.46 4    405 450163 251.1 4.46  23.14 192.178.4.104 http/1.1 team.cloudware.ng:443       GET /?l=958865743 HTTP/1.1
   17-0 -     0/0/625    . 0.00 351  0   310465 0.0   0.00  15.56 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   18-0 69853 7/116/1394 K 2.70 1    304 515942 216.5 2.84  43.67 192.178.4.97  http/1.1 team.cloudware.ng:443       GET /?l=3983796469 HTTP/1.1
   19-0 -     0/0/332    . 0.00 370  0   159610 0.0   0.00  7.69  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   20-0 -     0/0/453    . 0.00 443  0   187237 0.0   0.00  9.93  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   21-0 70871 1/124/694  K 2.99 0    275 363116 34.4  3.29  17.95 192.178.4.102 http/1.1 team.cloudware.ng:443       GET /?l=4115798858 HTTP/1.1
   22-0 60213 1/353/960  K 8.26 4    170 481128 5.2   8.96  23.20 74.7.243.192  http/1.1 schoolplus.cloudware.ng:443 GET / HTTP/1.1
   23-0 70872 3/127/619  K 3.03 0    275 443479 95.4  3.21  14.72 192.178.4.98  http/1.1 team.cloudware.ng:443       GET /?l=3550990224 HTTP/1.1
   24-0 -     0/0/243    . 0.00 564  0   115317 0.0   0.00  5.86  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/7      . 0.00 4252 0   3826   0.0   0.00  0.18  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/3      . 0.00 4279 0   753    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/3      . 0.00 4276 0   57     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/4      . 0.00 4264 0   743    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/8      . 0.00 4258 0   4677   0.0   0.00  0.21  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00 4280 0   14     0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/503    . 0.00 2120 0   236742 0.0   0.00  12.77 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 4306 0   7      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 4261 0   1824   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 4303 0   21     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/145    . 0.00 3863 0   57340  0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/234    . 0.00 3414 0   102124 0.0   0.00  5.53  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 4287 0   4587   0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/3      . 0.00 4282 0   34     0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 4305 0   8      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00 4268 0   4408   0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/5      . 0.00 4262 0   2050   0.0   0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/9      . 0.00 4269 0   4574   0.0   0.00  0.23  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 4302 0   12     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/31     . 0.00 4169 0   20604  0.0   0.00  0.82  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/458    . 0.00 2847 0   169465 0.0   0.00  9.10  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00 4310 0   4      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00 4277 0   766    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 4304 0   48     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 4275 0   10     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 4260 0   695    0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 4253 0   3150   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 4256 0   538    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00 4254 0   8196   0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 4267 0   519    0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00 4291 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00 3861 0   48080  0.0   0.00  2.48  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 4145 0   13507  0.0   0.00  0.78  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00 4263 0   7269   0.0   0.00  0.33  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00 4247 0   1848   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00 4300 0   1      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00 4138 0   10684  0.0   0.00  0.71  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00 4272 0   7      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00 4298 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00 4259 0   1750   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 4296 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00 4297 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00 4274 0   6      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00 4248 0   859    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00 4015 0   36843  0.0   0.00  1.92  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00 3652 0   74918  0.0   0.00  4.57  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00 4292 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00 4295 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00 4251 0   3305   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00 4246 0   2230   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00 4294 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00 4293 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00 4155 0   15854  0.0   0.00  0.86  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00 4299 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 4290 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1020
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...48)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 20837
   total entries replaced since starting: 0
   total entries expired since starting: 19812
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 16 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit