403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.11.45.txt
 ## swap threshold exceeded
## server overview
2025-11-23.11.45 load[1] mem[72/56] mysql[4/7] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1631          72          50         658         511
Swap:          1999        1240         759
 11:45:01 up  1:44,  0 users,  load average: 1.08, 0.74, 0.57
## system overview
top - 11:45:01 up  1:44,  0 users,  load average: 1.08, 0.74, 0.57
Tasks: 216 total,   3 running, 212 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.8 us, 24.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    66112 free,  1686064 used,   668124 buff/cache
KiB Swap:  2047996 total,   777816 free,  1270180 used.   508708 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1838 mysql     20   0 1463560 228592   3084 S 100.0  9.4   1:27.71 /usr/sbin+
 78694 healtho+  20   0  465380  71208   4224 R  25.0  2.9   0:04.42 php-fpm: +
 79058 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.06 /opt/cpan+
 79109 cloudsms  20   0  404052  15876  10224 S  12.5  0.7   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:11.15 [kswapd0]
 79131 cloudsms  20   0  404052  15876  10224 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44412   3544   1504 S   0.0  0.1   0:11.27 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.89 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:05.99 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.17 [kworker/+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.14 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   6660   6348 S   0.0  0.3   0:03.78 /usr/lib/+
   384 root      20   0   45352    244    104 S   0.0  0.0   0:00.37 /usr/lib/+
   409 root      16  -4   55532    500    368 S   0.0  0.0   0:00.58 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 polkitd   20   0  612240   2864    364 S   0.0  0.1   0:00.92 /usr/lib/+
   489 root      20   0   21540    380    268 S   0.0  0.0   0:00.13 /usr/sbin+
   493 nscd      20   0  994492   1284    576 S   0.0  0.1   0:04.34 /usr/sbin+
   494 root      20   0  152780     96     56 S   0.0  0.0   0:00.00 /usr/sbin+
   496 root      20   0   24704   1156    792 S   0.0  0.0   0:01.55 /usr/lib/+
   513 rpc       20   0   69256    160     52 S   0.0  0.0   0:00.01 /sbin/rpc+
   516 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   531 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   535 dbus      20   0   57020   1324    620 S   0.0  0.1   0:03.46 /usr/bin/+
   552 root      20   0  224144   6360   1348 S   0.0  0.3   0:00.21 queueproc+
   553 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124480    428    296 S   0.0  0.0   0:00.18 /usr/sbin+
   566 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     32     28 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   608 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   630 mailnull  20   0   89124   4440    812 S   0.0  0.2   0:00.22 /usr/sbin+
   658 root       0 -20       0      0      0 S   0.0  0.0   0:02.40 [loop0]
   673 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   932 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   934 root      20   0  445028   3200   3088 S   0.0  0.1   0:00.30 sw-engine+
   936 systuser  20   0  113676     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   937 systuser  20   0  114016  12756   2572 S   0.0  0.5   0:01.58 /usr/loca+
   939 root      20   0  111304    364    264 S   0.0  0.0   0:00.82 /usr/sbin+
   940 systuser  20   0   12660     64      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0 1763224 418408    888 S   0.0 17.3   0:13.87 /usr/loca+
   949 named     20   0  990264  32268   1824 S   0.0  1.3   0:03.22 /usr/sbin+
   951 root      20   0  400740   2972    612 S   0.0  0.1   0:00.93 php-fpm: +
   955 root      20   0  389508    672    456 S   0.0  0.0   0:00.23 php-fpm: +
   957 root      20   0   51508    644    456 S   0.0  0.0   0:00.12 /usr/sbin+
   958 root      20   0  153404    252    168 S   0.0  0.0   0:00.14 pure-ftpd+
   959 systuser  20   0  113272     76      0 S   0.0  0.0   0:00.00 /usr/loca+
   968 root      20   0  396248    564    384 S   0.0  0.0   0:00.22 php-fpm: +
   970 cpanelc+  20   0   10028   3268   2448 S   0.0  0.1   0:05.01 /usr/loca+
   972 root      20   0  232784   6644   5476 S   0.0  0.3   0:01.82 /usr/sbin+
   973 root      20   0 1350088   9588      0 S   0.0  0.4   0:25.95 /usr/bin/+
   974 root      20   0  261024   7100   2136 S   0.0  0.3   0:03.15 cpsrvd (S+
   975 telegraf  20   0 5654048  35812   5812 S   0.0  1.5   0:03.75 /usr/loca+
   976 root      20   0  572372    748    164 S   0.0  0.0   0:00.61 /usr/bin/+
   997 root      20   0  439788  11276  11072 S   0.0  0.5   0:00.24 php-fpm: +
   998 root      20   0 1277312  10388     28 S   0.0  0.4   0:21.06 /usr/bin/+
  1002 root      20   0  388892    452    360 S   0.0  0.0   0:00.20 php-fpm: +
  1006 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.13 /usr/bin/+
  1099 dovenull  20   0   47252   3548   2476 S   0.0  0.1   0:00.21 dovecot/p+
  1100 dovenull  20   0   47484   3896   2604 S   0.0  0.2   0:00.09 dovecot/i+
  1101 dovecot   20   0   10320    236    116 S   0.0  0.0   0:00.04 dovecot/a+
  1102 root      20   0   10452    472    280 S   0.0  0.0   0:00.12 dovecot/l+
  1103 dovenull  20   0   47316   3692   2584 S   0.0  0.2   0:00.25 dovecot/p+
  1104 dovenull  20   0   47440   3736   2580 S   0.0  0.2   0:00.08 dovecot/i+
  1109 root      20   0   24564   2352    500 S   0.0  0.1   0:00.06 dovecot/c+
  1110 dovecot   20   0   13568    536    328 S   0.0  0.0   0:00.01 dovecot/s+
  1135 systuser  20   0  157704   2976    948 S   0.0  0.1   0:00.04 SonarPush+
  1146 wp-tool+  20   0  387528  13020   1392 S   0.0  0.5   0:00.14 /usr/bin/+
  1147 wp-tool+  20   0  412368  32000   1312 S   0.0  1.3   0:02.19 /usr/bin/+
  1197 dovecot   20   0   41156   1488   1020 S   0.0  0.1   0:00.27 dovecot/a+
  1258 root      20   0  167452   1304    704 S   0.0  0.1   0:00.13 dnsadmin +
  1262 root      20   0  209340  21276   3764 S   0.0  0.9   0:01.07 tailwatchd
  1263 root      20   0  262224  22564   4840 S   0.0  0.9   0:01.92 cpdavd - +
  1634 root      20   0  299272    756    380 S   0.0  0.0   0:00.16 php-fpm: +
  1673 root      38  18  130416   1440    708 S   0.0  0.1   0:00.01 cpanellog+
  2047 root      20   0  267052   8176    680 S   0.0  0.3   0:00.47 /usr/sbin+
  2068 root      20   0   12764    388    252 S   0.0  0.0   0:00.71 /usr/loca+
  2069 root      20   0   12732    360    248 S   0.0  0.0   0:00.61 /usr/loca+
  2070 root      20   0   12784    328    216 S   0.0  0.0   0:00.66 /usr/loca+
  2079 root      20   0   53256     40     40 S   0.0  0.0   0:00.05 /usr/loca+
  2194 root      20   0  181676  10348   1152 S   0.0  0.4   0:05.89 lfd - sle+
  2828 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  2835 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.11 [kworker]
 39734 root      20   0  247944 121116   4580 S   0.0  5.0   0:03.07 /usr/loca+
 43004 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48387 root      20   0  265948 130428   3004 S   0.0  5.4   0:02.23 spamd chi+
 48388 root      20   0  247944 117960   1460 S   0.0  4.9   0:00.00 spamd chi+
 56134 nobody    20   0  277908  21084   5016 S   0.0  0.9   0:02.95 /usr/sbin+
 58386 nobody    20   0  277660  20816   4808 S   0.0  0.9   0:02.45 /usr/sbin+
 60414 nobody    20   0  277708  20872   4992 S   0.0  0.9   0:02.40 /usr/sbin+
 62111 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64240 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 64833 nobody    20   0  277616  20352   4764 S   0.0  0.8   0:01.46 /usr/sbin+
 66148 nobody    20   0  277632  20220   4732 S   0.0  0.8   0:01.70 /usr/sbin+
 67037 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69958 nobody    20   0  277908  20188   4516 S   0.0  0.8   0:01.19 /usr/sbin+
 71316 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 71349 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71354 nobody    20   0  277728  20128   4644 S   0.0  0.8   0:01.04 /usr/sbin+
 71440 nobody    20   0  277916  20080   4384 S   0.0  0.8   0:00.77 /usr/sbin+
 73362 nobody    20   0  277632  19664   4376 S   0.0  0.8   0:00.67 /usr/sbin+
 73382 nobody    20   0  277716  19848   4368 S   0.0  0.8   0:00.68 /usr/sbin+
 73626 nobody    20   0  277584  19720   4436 S   0.0  0.8   0:00.60 /usr/sbin+
 74259 nobody    20   0  277792  19896   4360 S   0.0  0.8   0:00.63 /usr/sbin+
 74810 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 74891 nobody    20   0  277780  19364   4036 S   0.0  0.8   0:00.35 /usr/sbin+
 75026 nobody    20   0  277520  19392   4152 S   0.0  0.8   0:00.50 /usr/sbin+
 75371 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75515 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76127 nobody    20   0  277784  19708   4112 S   0.0  0.8   0:00.33 /usr/sbin+
 77262 nobody    20   0  277520  19076   3928 S   0.0  0.8   0:00.26 /usr/sbin+
 77273 nobody    20   0  277780  19352   4032 S   0.0  0.8   0:00.27 /usr/sbin+
 77274 nobody    20   0  277520  19120   4020 S   0.0  0.8   0:00.25 /usr/sbin+
 77736 nobody    20   0  277780  19136   3828 S   0.0  0.8   0:00.18 /usr/sbin+
 78113 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 78334 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78363 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78365 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78483 root      20   0  157100   5076   3792 S   0.0  0.2   0:00.00 sshd: unk+
 78484 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 78485 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 78486 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 78660 healtho+  20   0  462820  69632   4224 S   0.0  2.9   0:05.11 php-fpm: +
 78681 healtho+  20   0  462820  69628   4224 S   0.0  2.9   0:04.94 php-fpm: +
 78825 nigeria   20   0  400460   5300   2192 S   0.0  0.2   0:00.00 php-fpm: +
 78830 wp-tool+  20   0  445028    552    380 S   0.0  0.0   0:00.00 sw-engine+
 78907 mailnull  20   0   89504   6232   2456 S   0.0  0.3   0:00.00 /usr/sbin+
 78916 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 78942 root      20   0  162436   5752   4252 S   0.0  0.2   0:00.02 sshd: roo+
 78943 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 78985 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78987 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78988 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78989 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78990 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78991 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78992 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78993 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78994 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78996 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78997 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78998 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78999 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 79001 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 79016 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 79017 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 79020 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79021 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79022 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79023 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79024 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 79025 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79026 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79027 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 79028 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79029 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 79030 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 79031 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 79036 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 79037 root      20   0  188212  11100   5148 S   0.0  0.5   0:00.01 /usr/loca+
 79038 root      20   0  114252   2400   1264 S   0.0  0.1   0:00.00 bash /usr+
 79041 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 79046 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 79050 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 79054 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 79083 root      20   0  160224   2340   1636 S   0.0  0.1   0:00.01 top -n 2 +
 79098 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 79100 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.02 /opt/cpan+
 79102 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 79121 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 79123 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 79124 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 79134 root      20   0  114252   1140      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:00   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    10:00   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:00   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    10:00   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/1:1H]
root        256  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ttm_swap]
root        266  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [xprtiod]
root        608  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kvm-irqfd-clean]
root        658  0.0  0.0      0     0 ?        S<   10:00   0:02  \_ [loop0]
root        673  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/loop0-8]
root        675  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root      43004  0.0  0.0      0     0 ?        S    10:55   0:00  \_ [kworker/1:4]
root      62111  0.0  0.0      0     0 ?        S    11:21   0:00  \_ [kworker/1:1]
root      64240  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/0:3]
root      67037  0.0  0.0      0     0 ?        S    11:28   0:00  \_ [kworker/1:2]
root      71316  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:1]
root      71349  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:0]
root      74810  0.0  0.0      0     0 ?        S    11:39   0:00  \_ [kworker/0:0]
root      75371  0.0  0.0      0     0 ?        S    11:39   0:00  \_ [kworker/u200:1]
root      75515  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:3]
root      78334  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/1:5]
root      78363  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      78365  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44412  3544 ?        Ss   10:00   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  39500  6660 ?        Ss   10:00   0:03 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   244 ?        Ss   10:00   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   500 ?        S<sl 10:00   0:00 /sbin/auditd
polkitd     487  0.0  0.1 612240  2864 ?        Ssl  10:00   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        489  0.0  0.0  21540   380 ?        Ss   10:00   0:00 /usr/sbin/irqbalance --foreground
nscd        493  0.0  0.0 994492  1284 ?        Ssl  10:00   0:04 /usr/sbin/nscd
root        494  0.0  0.0 152780    96 ?        Ss   10:00   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        496  0.0  0.0  24704  1156 ?        Ss   10:00   0:01 /usr/lib/systemd/systemd-logind
rpc         513  0.0  0.0  69256   160 ?        Ss   10:00   0:00 /sbin/rpcbind -w
root        516  0.0  0.0 195208     0 ?        Ssl  10:00   0:00 /usr/sbin/gssproxy -D
root        531  0.0  0.0  52852   356 ?        Ss   10:00   0:00 /usr/sbin/smartd -n -q never
dbus        535  0.0  0.0  57020  1324 ?        Ss   10:00   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        552  0.0  0.2 224144  6360 ?        Ss   10:00   0:00 queueprocd - waiting up to 60s to process a task
root        553  0.0  0.0   4388    24 ?        Ss   10:00   0:00 /usr/sbin/acpid
root        564  0.0  0.0 124480   428 ?        Ss   10:00   0:00 /usr/sbin/crond -n
root      78985  0.0  0.0 183048  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79030  0.0  0.0 113284  1212 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      79038  0.0  0.1 114256  2424 ?        S    11:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      79136  0.0  0.0 114256  1144 ?        R    11:45   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      78987  0.0  0.0 183048  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79029  0.0  0.0 113284  1208 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      79036  0.0  0.0 108052   360 ?        S    11:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      79041  0.0  0.0 113288  1520 ?        S    11:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      79135  0.0  0.0 153840  2092 ?        R    11:45   0:00  |               \_ ps auxf
root      78988  0.0  0.0 183048  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79028  0.0  0.0  20164   804 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      78989  0.0  0.0 183048  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79021  0.0  0.0  20164   804 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      78990  0.0  0.0 183048  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79022  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      78991  0.0  0.0 183048  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79023  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      78992  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79027  0.0  0.0  20164   988 ?        Ss   11:45   0:00  |   \_ jailshell (cloudsms) [79098] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  79098  0.0  0.0      0     0 ?        D    11:45   0:00  |       \_ [jailshell]
root      78993  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79026  0.0  0.0  20164   804 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      78994  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79025  0.0  0.0  20164   804 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      78996  0.0  0.0 183048  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79020  0.0  0.0  20164   804 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      78997  0.0  0.0 183048  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79017  0.0  0.0  20164   988 ?        Ss   11:45   0:00  |   \_ jailshell (cloudsms) [79123] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  79123  0.0  0.0  20164   264 ?        S    11:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  79124  0.0  0.0 113284  1212 ?        S    11:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  79131  0.0  0.6 404052 15876 ?        R    11:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      78998  0.0  0.0 183048  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79024  0.0  0.0 113284  1212 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      79037  1.0  0.4 188212 11100 ?        S    11:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      79083  0.0  0.0 160224  2340 ?        S    11:45   0:00  |           \_ top -n 2 -b -c
root      78999  0.0  0.0 183048  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79016  0.0  0.0  20164   960 ?        Ss   11:45   0:00  |   \_ jailshell (pactpay) [79050] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   79050  0.0  0.0  20164   260 ?        S    11:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   79054  2.0  0.7 480124 17668 ?        S    11:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      79001  0.0  0.0 183048  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      79031  0.0  0.0  20164   964 ?        Ss   11:45   0:00      \_ jailshell (nigeria) [79046] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   79046  0.0  0.0  20164   260 ?        S    11:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   79058  6.0  0.6 404052 16144 ?        S    11:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        566  0.0  0.0  24208     0 ?        Ss   10:00   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    32 tty1     Ss+  10:00   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704     0 ttyS0    Ss+  10:00   0:00 /bin/bash
mailnull    630  0.0  0.1  89124  4440 ?        Ss   10:00   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  78907  0.0  0.2  89504  6232 ?        S    11:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    932  0.0  0.0  10388    48 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.1 445028  3200 ?        Ss   10:00   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  78830  0.0  0.0 445028   552 ?        S    11:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    936  0.0  0.0 113676    72 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    937  0.0  0.5 114016 12748 ?        Ssl  10:00   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.0 111304   364 ?        Ss   10:00   0:00 /usr/sbin/sshd -D
root      78483  0.0  0.2 157100  5076 ?        Ss   11:44   0:00  \_ sshd: unknown [priv]
sshd      78484  0.0  0.1 115644  2628 ?        S    11:44   0:00  |   \_ sshd: unknown [net]
root      78485  0.0  0.2 157100  5080 ?        Ss   11:44   0:00  \_ sshd: unknown [priv]
sshd      78486  0.0  0.1 115644  2632 ?        S    11:44   0:00  |   \_ sshd: unknown [net]
root      78942  0.5  0.2 162436  5752 ?        Ss   11:44   0:00  \_ sshd: root [priv]
sshd      78943  0.0  0.1 115644  2632 ?        S    11:44   0:00      \_ sshd: root [net]
systuser    940  0.0  0.0  12660    64 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2 17.2 1763224 418260 ?      Ssl  10:00   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       949  0.0  1.3 990264 32268 ?        Ssl  10:00   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        951  0.0  0.1 400740  2972 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  78660 14.6  2.8 462820 69632 ?        S    11:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  78681 15.4  2.8 462820 69628 ?        S    11:44   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  78694 14.7  2.9 465380 71208 ?        R    11:44   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   78825  0.0  0.2 400460  5300 ?        S    11:44   0:00  \_ php-fpm: pool nigeriadecide_org
root        955  0.0  0.0 389508   672 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        957  0.0  0.0  51508   644 ?        Ss   10:00   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1099  0.0  0.1  47252  3548 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1100  0.0  0.1  47484  3896 ?        S    10:00   0:00  \_ dovecot/imap-login
dovecot    1101  0.0  0.0  10320   236 ?        S    10:00   0:00  \_ dovecot/anvil
root       1102  0.0  0.0  10452   472 ?        S    10:00   0:00  \_ dovecot/log
dovenull   1103  0.0  0.1  47316  3692 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1104  0.0  0.1  47440  3736 ?        S    10:00   0:00  \_ dovecot/imap-login
root       1109  0.0  0.0  24564  2352 ?        S    10:00   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   536 ?        S    10:00   0:00  \_ dovecot/stats
dovecot    1197  0.0  0.0  41156  1488 ?        S    10:00   0:00  \_ dovecot/auth
root      78113  0.0  0.0  28936  2372 ?        S    11:43   0:00  \_ dovecot/quota-status -p postfix
root        958  0.0  0.0 153404   252 ?        Ss   10:00   0:00 pure-ftpd (SERVER)
systuser    959  0.0  0.0 113272    76 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        968  0.0  0.0 396248   564 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
cpanelc+    970  0.0  0.1  10028  3268 ?        Ss   10:00   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        972  0.0  0.2 232784  6644 ?        Ssl  10:00   0:01 /usr/sbin/rsyslogd -n
root        973  0.4  0.3 1350088 9588 ?        Ssl  10:00   0:25 /usr/bin/cspdaemon
root        974  0.0  0.2 261024  7100 ?        Ss   10:00   0:03 cpsrvd (SSL) - waiting for connections                   
root      78916  0.0  0.0      0     0 ?        Z    11:44   0:00  \_ [cpaneld - servi] <defunct>
telegraf    975  0.0  1.4 5654048 35808 ?       SLsl 10:00   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        976  0.0  0.0 572372   748 ?        Ssl  10:00   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        997  0.0  0.4 439788 11276 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.3  0.4 1277312 10388 ?       Ssl  10:00   0:21 /usr/bin/checkstatus
root       1002  0.0  0.0 388892   452 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
memcach+   1006  0.0  0.0 342400     0 ?        Ssl  10:00   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser   1135  0.0  0.1 157704  2976 ?        S    10:00   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  0.5 387528 13020 ?        Ss   10:00   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1147  0.0  1.3 412368 32000 ?        Ss   10:00   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1258  0.0  0.0 167452  1304 ?        Ss   10:00   0:00 dnsadmin - dormant mode
root       1262  0.0  0.8 209340 21272 ?        Ss   10:00   0:01 tailwatchd
root       1263  0.0  0.9 262224 22564 ?        Ss   10:00   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1634  0.0  0.0 299272   756 ?        Ss   10:00   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1440 ?        SN   10:00   0:00 cpanellogd - sleeping for logs
mysql      1838  1.4  9.4 1463560 228592 ?      Sl   10:00   1:27 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2047  0.0  0.3 267052  8176 ?        Ss   10:00   0:00 /usr/sbin/httpd -k start
root       2068  0.0  0.0  12764   388 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2069  0.0  0.0  12732   360 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2070  0.0  0.0  12784   328 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2079  0.0  0.0  53256    40 ?        S    10:00   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    56134  0.1  0.8 277908 21076 ?        S    11:13   0:02  \_ /usr/sbin/httpd -k start
nobody    58386  0.1  0.8 277660 20808 ?        S    11:15   0:02  \_ /usr/sbin/httpd -k start
cloudw    79100  0.0  0.6 353712 15968 ?        S    11:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    60414  0.1  0.8 277708 20864 ?        S    11:18   0:02  \_ /usr/sbin/httpd -k start
nobody    64833  0.1  0.8 277616 20344 ?        S    11:25   0:01  \_ /usr/sbin/httpd -k start
nobody    66148  0.1  0.8 277632 20212 ?        S    11:26   0:01  \_ /usr/sbin/httpd -k start
nobody    69958  0.1  0.8 277908 20180 ?        S    11:31   0:01  \_ /usr/sbin/httpd -k start
nobody    71354  0.1  0.8 277728 20120 ?        S    11:34   0:01  \_ /usr/sbin/httpd -k start
nobody    71440  0.1  0.8 277916 20072 ?        S    11:34   0:00  \_ /usr/sbin/httpd -k start
nobody    73362  0.1  0.8 277632 19656 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    73382  0.1  0.8 277716 19840 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    73626  0.1  0.8 277584 19712 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    74259  0.1  0.8 277792 19888 ?        S    11:38   0:00  \_ /usr/sbin/httpd -k start
nobody    74891  0.0  0.8 277780 19364 ?        S    11:39   0:00  \_ /usr/sbin/httpd -k start
nobody    75026  0.1  0.8 277520 19392 ?        S    11:39   0:00  \_ /usr/sbin/httpd -k start
nobody    76127  0.1  0.8 277784 19708 ?        S    11:40   0:00  \_ /usr/sbin/httpd -k start
nobody    77262  0.1  0.7 277520 19076 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    77273  0.1  0.7 277780 19352 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    77274  0.1  0.7 277520 19120 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    77736  0.1  0.7 277780 19136 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
root       2194  0.0  0.4 181676 10348 ?        Ss   10:01   0:05 lfd - sleeping
oysipao+   2828  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   2835  0.0  0.0   3152   492 ?        S    10:01   0:00  \_ [kworker]
root      39734  0.0  5.0 247944 121116 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      48387  0.0  5.3 265948 130428 ?       S    11:02   0:02  \_ spamd child
root      48388  0.0  4.8 247944 117960 ?       S    11:02   0:00  \_ spamd child
## mysql stats
Uptime: 27961  Threads: 4  Questions: 562611  Slow queries: 0  Opens: 2695  Flush tables: 1  Open tables: 1995  Queries per second avg: 20.121
*************************** 1. row ***************************
     Id: 8463
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 8467
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 8470
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 8476
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.228.211 TIME_WAIT
      1 154.53.62.61 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 18.215.112.101 TIME_WAIT
      1 185.211.22.251 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.217.82.254 TIME_WAIT
      1 3.221.222.168 TIME_WAIT
      1 3.227.180.70 TIME_WAIT
      1 3.93.211.16 TIME_WAIT
      1 44.219.134.142 TIME_WAIT
      1 52.22.87.224 TIME_WAIT
      1 54.90.8.255 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     81 159.65.137.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 11:45:02 WAT
   Restart Time: Sunday, 23-Nov-2025 03:59:04 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 45 minutes 58 seconds
   Server load: 1.08 0.74 0.57
   Total accesses: 33725 - Total Traffic: 678.5 MB - Total Duration: 57754238
   CPU Usage: u13.94 s5.2 cu362.51 cs269.47 - 2.33% CPU load
   1.21 requests/sec - 24.9 kB/second - 20.6 kB/request - 1712.51 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

W_WKK_.KKRK_KKK_R_._......K.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  56134 0/585/1865 W 11.40 0    0   809355   0.0   13.92 39.04 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  69958 0/252/1678 _ 4.83  0    564 764597   0.0   4.76  34.69 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-0  77736 0/38/1836  W 0.57  0    0   714025   0.0   0.72  36.68 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-0  60414 3/512/2050 K 9.45  1    307 787665   102.6 11.39 37.09 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=1856894656 HTTP/1.1
   4-0  76127 1/69/1746  K 1.20  0    15  712216   0.9   3.78  39.02 66.249.66.9    http/1.1 theforge.com.ng:80         GET /theforgeapp/css/lib/ HTTP/1.1
   5-0  74259 0/126/1831 _ 2.39  0    298 887954   0.0   2.60  41.73 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=1033986785 HTTP/1.1
   6-0  -     0/0/1865   . 0.00  119  0   44119761 0.0   0.00  33.77 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  66148 3/330/1664 K 6.76  0    383 680975   96.4  7.72  31.64 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=3777874964 HTTP/1.1
   8-0  71354 1/200/1529 K 4.04  3    360 566097   33.7  6.43  28.34 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=2452343730 HTTP/1.1
   9-0  71440 0/171/1180 R 2.88  120  25  551776   0.0   4.14  24.93 128.140.8.200  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   10-0 73362 2/140/1311 K 2.53  2    273 540362   63.0  4.00  25.00 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=1605099915 HTTP/1.1
   11-0 73382 0/147/1836 _ 2.67  0    24  745825   0.0   3.54  35.68 116.203.134.67 http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   12-0 75026 2/105/1221 K 2.04  3    263 552628   62.8  1.96  28.80 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=3960818899 HTTP/1.1
   13-0 77262 1/46/1475  K 1.33  1    284 841539   35.4  1.15  29.86 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=3269609302 HTTP/1.1
   14-0 64833 1/339/1259 K 5.11  0    0   421153   0.7   6.08  18.40 66.249.66.195  http/1.1 theforge.com.ng:80         GET /robots.txt HTTP/1.1
   15-0 77273 0/50/1173  _ 1.09  0    0   517615   0.0   1.15  26.56 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 73626 0/128/662  R 2.48  61   348 306181   0.0   2.39  14.56 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-0 77274 0/49/1170  _ 0.95  0    8   459500   0.0   1.00  20.12 95.217.109.26  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Katsina&lga=Bakori&ward=Ka
   18-0 -     0/0/1117   . 0.00  271  0   524188   0.0   0.00  25.24 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 74891 0/65/324   _ 1.37  0    0   172199   0.0   1.49  7.03  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   20-0 -     0/0/728    . 0.00  1728 0   186269   0.0   0.00  8.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/508    . 0.00  208  0   270061   0.0   0.00  13.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/929    . 0.00  1347 0   277885   0.0   0.00  13.34 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/437    . 0.00  1738 0   179424   0.0   0.00  8.94  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/37     . 0.00  1740 0   5301     0.0   0.00  0.52  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/670    . 0.00  1741 0   327387   0.0   0.00  15.99 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 58386 2/513/914  K 9.47  0    435 467612   68.2  11.48 22.55 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=532765807 HTTP/1.1
   27-0 -     0/0/180    . 0.00  1346 0   102991   0.0   0.00  4.33  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/436    . 0.00  447  0   210989   0.0   0.00  10.75 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/89     . 0.00  1743 0   45248    0.0   0.00  2.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/5      . 0.00  1731 0   5446     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 823
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 1...57)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 18148
   total entries replaced since starting: 0
   total entries expired since starting: 17321
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 60 miss
   total removes since starting: 4 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit