403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2026-01-08.03.24.txt
 ## swap threshold exceeded
## server overview
2026-01-08.03.24 load[0] mem[62/34] mysql[1/26] httpd[3]
              total        used        free      shared  buff/cache   available
Mem:           2363        1281         248           5         833         891
Swap:          4047        1490        2557
 03:24:02 up 45 days,  6:12,  0 users,  load average: 0.45, 1.66, 2.61
## system overview
top - 03:24:02 up 45 days,  6:12,  0 users,  load average: 0.45, 1.66, 2.61
Tasks: 197 total,   9 running, 187 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 31.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   207368 free,  1357844 used,   855088 buff/cache
KiB Swap:  4145144 total,  2618852 free,  1526292 used.   867232 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 19908 mysql     20   0 1483940 268044   3612 S  75.0 11.1 130:59.95 /usr/sbin+
 67845 cloudw    20   0  517816  50536   5840 R  31.2  2.1   0:00.18 php-fpm: +
 67923 nigeria   20   0  404052  16148  10388 R  12.5  0.7   0:00.02 /opt/cpan+
     1 root      20   0  192272   3416   1496 S   6.2  0.1 108:55.56 /usr/lib/+
   489 root      20   0   24896   1144    792 S   6.2  0.0  17:13.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:05.82 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   6:03.24 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:46.73 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  64:43.39 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:11.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:11.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:59.87 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:33.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.42 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.32 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  69:02.07 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.66 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:07.02 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   9:01.09 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:37.85 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   4:11.25 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   3624   3376 S   0.0  0.1  32:55.62 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    160     36 R   0.0  0.0   4:45.49 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:40.00 /usr/sbin+
   494 polkitd   20   0  610664    820    408 S   0.0  0.0   9:36.05 /usr/lib/+
   496 root      20   0   52852     96      0 S   0.0  0.0   0:00.61 /usr/sbin+
   503 dbus      20   0   58748   1380    628 S   0.0  0.1  37:48.38 /usr/bin/+
   511 rpc       20   0   69256     52      0 S   0.0  0.0   0:04.09 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208      4      0 S   0.0  0.0   0:00.11 /usr/sbin+
   558 root      20   0  124508    424    292 S   0.0  0.0   2:21.80 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:51.26 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:16.27 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:02.23 /usr/loca+
   929 systuser  20   0   12756     32      0 S   0.0  0.0   0:02.20 /usr/loca+
   931 systuser  20   0  112524     20      0 S   0.0  0.0   0:02.14 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:02.04 /usr/loca+
   935 root      20   0  572372    812    272 S   0.0  0.0   6:04.71 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   7:03.62 /usr/sbin+
   939 root      20   0 1350728   9972      4 S   0.0  0.4   3:00.27 /usr/bin/+
   952 root      20   0  261812   6172   1644 S   0.0  0.3  13:44.10 cpsrvd (S+
   953 root      20   0  331088   3420   2804 S   0.0  0.1  17:45.73 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:36.03 /usr/bin/+
   974 root      20   0 1277312   2248      0 S   0.0  0.1   0:40.22 /usr/bin/+
   980 systuser  20   0  114272  10040   2892 S   0.0  0.4  19:51.98 /usr/loca+
  1144 systuser  20   0  157704   2956    964 S   0.0  0.1   0:20.88 SonarPush+
  1188 named     20   0 1185868  27688   1376 S   0.0  1.1  19:11.94 /usr/sbin+
  1239 root      20   0  167452   1204    652 S   0.0  0.0   1:06.12 dnsadmin +
  1243 root      20   0  209224   9340   1624 S   0.0  0.4   8:20.79 tailwatchd
  1244 root      20   0  183900      0      0 S   0.0  0.0   8:22.52 cpdavd - +
  5525 root      20   0  183080     32      0 S   0.0  0.0   0:00.00 /usr/sbin+
  5557 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  5571 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 2h +
 12995 root      20   0 1483072 455712   1024 S   0.0 18.8   2:43.27 /usr/loca+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:39.10 [kworker]
 16217 root      20   0   51656    604    296 S   0.0  0.0   0:04.29 /usr/sbin+
 16226 dovecot   20   0   10320    440    320 S   0.0  0.0   0:01.28 dovecot/a+
 16283 root      20   0  153404    216    136 S   0.0  0.0   0:08.07 pure-ftpd+
 16284 root      20   0  152780     44     24 S   0.0  0.0   0:00.30 /usr/sbin+
 17778 dovenull  20   0   47064   2628   1932 S   0.0  0.1   0:00.19 dovecot/p+
 17779 dovenull  20   0   47176   1208    580 S   0.0  0.0   0:00.11 dovecot/i+
 17780 root      20   0   10452    632    436 S   0.0  0.0   0:00.10 dovecot/l+
 17781 dovenull  20   0   47052    856    508 S   0.0  0.0   0:00.15 dovecot/p+
 17782 dovenull  20   0   47592   2512   1720 S   0.0  0.1   0:00.13 dovecot/i+
 17783 root      20   0   24396   1888    492 S   0.0  0.1   0:00.06 dovecot/c+
 17784 dovecot   20   0   13568    504    316 S   0.0  0.0   0:00.02 dovecot/s+
 17785 dovecot   20   0   41156   1400    948 S   0.0  0.1   0:00.31 dovecot/a+
 17786 root      20   0   12780    324    212 S   0.0  0.0   0:00.34 /usr/loca+
 17787 root      20   0   12732    256    180 S   0.0  0.0   0:00.27 /usr/loca+
 17788 root      20   0   12792    336    216 S   0.0  0.0   0:00.32 /usr/loca+
 17789 root      20   0   53252     20     20 S   0.0  0.0   0:00.05 /usr/loca+
 42593 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 46757 nobody    20   0  277748  17072   4016 S   0.0  0.7   0:01.21 /usr/sbin+
 53491 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 54348 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 58918 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 58929 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 183+
 59825 root      20   0       0      0      0 R   0.0  0.0   0:00.01 [kworker/+
 60431 wp-tool+  20   0  445028      0      0 S   0.0  0.0   0:00.00 sw-engine+
 60432 wp-tool+  20   0  445028      0      0 S   0.0  0.0   0:00.00 sw-engine+
 60936 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 61002 nobody    20   0  277928  23364   4036 S   0.0  1.0   0:00.40 /usr/sbin+
 61265 nobody    20   0  277692  23300   4032 S   0.0  1.0   0:00.25 /usr/sbin+
 61298 nobody    20   0  277936  23236   4136 S   0.0  1.0   0:00.29 /usr/sbin+
 61311 nobody    20   0  278008  23264   3888 S   0.0  1.0   0:00.30 /usr/sbin+
 61319 nobody    20   0  277628  23424   4060 S   0.0  1.0   0:00.45 /usr/sbin+
 61337 nobody    20   0  277692  23024   4084 S   0.0  1.0   0:00.22 /usr/sbin+
 61385 nobody    20   0  278032  23064   4088 S   0.0  1.0   0:00.20 /usr/sbin+
 61404 nobody    20   0  277776  23080   4040 S   0.0  1.0   0:00.22 /usr/sbin+
 63705 root      20   0  224412   4156    776 S   0.0  0.2   0:01.28 queueproc+
 63985 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 64008 mailnull  20   0   89196   3256    356 S   0.0  0.1   0:01.62 /usr/sbin+
 64247 nscd      20   0 1377576   2040    676 S   0.0  0.1   0:19.55 /usr/sbin+
 64408 cpanelc+  20   0   10824   3664   2212 S   0.0  0.2   1:06.08 /usr/loca+
 64415 root      38  18  130416   1356    676 S   0.0  0.1   0:00.23 cpanellog+
 64460 root      20   0  299272    400    244 S   0.0  0.0   0:02.95 php-fpm: +
 64914 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65073 root      20   0  248692   2728    720 S   0.0  0.1   0:12.88 /usr/loca+
 65396 nobody    20   0  277552  23044   4156 S   0.0  1.0   0:00.13 /usr/sbin+
 65825 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66576 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66776 nobody    20   0  277636  22884   3948 S   0.0  0.9   0:00.06 /usr/sbin+
 66862 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67750 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 67751 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 67756 mailnull  20   0   89596   4280   1172 S   0.0  0.2   0:00.00 /usr/sbin+
 67820 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 67822 nigeria   20   0  493796  30428   6208 S   0.0  1.3   0:00.23 php-fpm: +
 67832 cloudw    20   0  474256   5368   3092 S   0.0  0.2   0:00.00 php-fpm: +
 67836 nigeria   20   0  419612  26044   3944 S   0.0  1.1   0:00.18 php-fpm: +
 67843 mailnull  20   0   89408   4380   1256 S   0.0  0.2   0:00.00 /usr/sbin+
 67847 mailnull  20   0   89596   4280   1172 S   0.0  0.2   0:00.00 /usr/sbin+
 67848 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67850 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67851 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67852 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67853 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67854 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67855 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67856 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67857 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67858 root      20   0  183072   2204   1636 R   0.0  0.1   0:00.00 /usr/sbin+
 67859 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67860 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67862 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67863 root      20   0  183072   2204   1640 R   0.0  0.1   0:00.00 /usr/sbin+
 67864 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 67865 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 67866 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 67890 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 67894 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67895 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67896 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67897 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67898 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67900 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67901 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67902 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 67903 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 67906 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 67912 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 67913 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 67915 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 67916 pactpay   20   0  480124  16784  11084 S   0.0  0.7   0:00.01 /opt/cpan+
 67920 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 67931 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 69951 root      20   0  271300  66052   1176 S   0.0  2.7   0:13.18 spamd chi+
 72712 root      20   0  445028      4      0 S   0.0  0.0   3:11.59 sw-engine+
 72887 wp-tool+  20   0  412396   3200   1164 S   0.0  0.1  15:49.62 /usr/bin/+
 72891 wp-tool+  20   0  387556   3024   1212 S   0.0  0.1   0:25.72 /usr/bin/+
 73314 root      20   0  248692   1388    324 S   0.0  0.1   0:00.04 spamd chi+
 85039 root      20   0  181908   9360   1100 S   0.0  0.4   0:13.86 lfd - sle+
 85330 telegraf  20   0 5654308  26584   5832 S   0.0  1.1  28:22.34 /usr/loca+
 85507 root      20   0  267196  12580    612 S   0.0  0.5   0:00.92 /usr/sbin+
 85549 root      20   0  400740   1932    600 S   0.0  0.1   0:02.39 php-fpm: +
 85554 root      20   0  388892    148     60 S   0.0  0.0   0:00.61 php-fpm: +
 85559 root      20   0  396248    316    236 S   0.0  0.0   0:00.91 php-fpm: +
 85564 root      20   0  389508    404    316 S   0.0  0.0   0:00.69 php-fpm: +
 85569 root      20   0  439788    440    348 S   0.0  0.0   0:00.74 php-fpm: +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:05 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S     2025   6:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:46  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S     2025  64:43  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:11  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:11  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   1:59  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:33  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  69:02  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:07  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   9:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<    2025   7:37  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S     2025   4:11  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:51  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:16  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root      42593  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:2]
root      53491  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:2]
root      54348  0.0  0.0      0     0 ?        S    02:56   0:00  \_ [kworker/0:0]
root      59825  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:1]
root      60936  0.0  0.0      0     0 ?        D    03:10   0:00  \_ [kworker/u200:0]
root      67941  0.0  0.0      0     0 ?        R    03:24   0:00  |   \_ [kworker/u200:0]
root      63985  0.0  0.0      0     0 ?        S    03:14   0:00  \_ [kworker/0:1]
root      64914  0.0  0.0      0     0 ?        D    03:15   0:00  \_ [kworker/1:3]
root      65825  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:2]
root      66576  0.0  0.0      0     0 ?        D    03:20   0:00  \_ [kworker/1:0]
root      66862  0.0  0.0      0     0 ?        R    03:21   0:00  \_ [kworker/1:4]
root      67935  0.0  0.0      0     0 ?        R    03:24   0:00  \_ [kthreadd]
root          1  0.1  0.1 192272  3416 ?        Ss    2025 108:55 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  40240  3624 ?        Ss    2025  32:55 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   160 ?        S<sl  2025   4:45 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss    2025   1:40 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1144 ?        Rs    2025  17:13 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664   820 ?        Ssl   2025   9:36 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852    96 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1380 ?        Ss    2025  37:48 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    52 ?        Ss    2025   0:04 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208     4 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   424 ?        Ss    2025   2:21 /usr/sbin/crond -n
root       5525  0.0  0.0 183080    32 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5557  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5571  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 2h 52m
root      67848  0.0  0.0 183076  2144 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67864  0.0  0.0 113284  1212 ?        Ss   03:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      67865  0.0  0.0 108052   356 ?        S    03:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      67866  0.0  0.0 113288  1516 ?        S    03:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      67932  0.0  0.0 153840  2096 ?        R    03:24   0:00  |               \_ ps auxf
root      67850  0.0  0.0 183076  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67898  0.0  0.0  20164   808 ?        Rs   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      67851  0.0  0.0 183076  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67894  0.0  0.0  20164   808 ?        Rs   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      67852  0.0  0.0 183076  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67900  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      67853  0.0  0.0 183076  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67890  0.0  0.0  20164   984 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [67933] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  67933  0.0  0.0  20164   260 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  67936  0.0  0.0 113284  1208 ?        S    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  67939  0.0  0.1 131852  3320 ?        R    03:24   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      67855  0.0  0.0 183076  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67897  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      67856  0.0  0.0 183076  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67901  0.0  0.0  20164   984 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67937  0.0  0.0  20164   260 ?        R    03:24   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67857  0.0  0.0 183076  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67895  0.0  0.0  20164   808 ?        Rs   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      67859  0.0  0.0 183076  2144 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67896  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      67860  0.0  0.0 183076  2140 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67906  0.0  0.0  20164   968 ?        Ss   03:24   0:00  |   \_ jailshell (pactpay) [67912] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67912  0.0  0.0  20164   264 ?        S    03:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67916  1.0  0.7 480124 17312 ?        S    03:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      67862  0.0  0.0 183076  2140 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      67902  0.0  0.0  20164   968 ?        Ss   03:24   0:00      \_ jailshell (nigeria) [67920] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67920  0.0  0.0  20164   256 ?        S    03:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67923  2.0  0.6 404052 16148 ?        S    03:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    52 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    32 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    20 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   812 ?        Ssl   2025   6:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss    2025   7:03 /usr/sbin/sshd -D
root      67750  0.0  0.1 111304  4268 ?        Ss   03:23   0:00  \_ sshd: [accepted]
sshd      67751  0.0  0.1 115644  2628 ?        S    03:23   0:00      \_ sshd: [net]
root        939  0.0  0.4 1350728 9972 ?        Ssl   2025   3:00 /usr/bin/cspdaemon
root        952  0.0  0.2 261812  6172 ?        Ss    2025  13:44 cpsrvd (SSL) - waiting for connections                   
root      67820  0.0  0.0      0     0 ?        Z    03:23   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.1 331088  3420 ?        Ssl   2025  17:45 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl   2025   1:36 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2248 ?        Ssl   2025   0:40 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 10040 ?        Ssl   2025  19:51 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2956 ?        S     2025   0:20 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1204 ?        Ss    2025   1:06 dnsadmin - dormant mode
root       1243  0.0  0.3 209224  9340 ?        Ss    2025   8:20 tailwatchd
root       1244  0.0  0.0 183900     0 ?        Ss    2025   8:22 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S     2025   1:39  \_ [kworker]
telegraf  85330  0.0  1.0 5654308 26584 ?       SLsl  2025  28:22 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028     4 ?        Ss    2025   3:11 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  60431  0.0  0.0 445028     0 ?        S    03:10   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  60432  0.0  0.0 445028     0 ?        S    03:10   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3200 ?        Ss    2025  15:49 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3024 ?        Ss    2025   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.1 1185868 27688 ?       Ssl   2025  19:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      12995  0.0 18.8 1483072 455712 ?      Ssl  Jan02   2:43 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.7 11.0 1483940 268044 ?      Sl   Jan02 130:59 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      16217  0.0  0.0  51656   604 ?        Ss   Jan04   0:04 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot   16226  0.0  0.0  10320   440 ?        S    Jan04   0:01  \_ dovecot/anvil
dovenull  17778  0.0  0.1  47064  2628 ?        S    01:29   0:00  \_ dovecot/pop3-login
dovenull  17779  0.0  0.0  47176  1208 ?        S    01:29   0:00  \_ dovecot/imap-login
root      17780  0.0  0.0  10452   632 ?        S    01:29   0:00  \_ dovecot/log
dovenull  17781  0.0  0.0  47052   856 ?        S    01:29   0:00  \_ dovecot/pop3-login
dovenull  17782  0.0  0.1  47592  2512 ?        S    01:29   0:00  \_ dovecot/imap-login
root      17783  0.0  0.0  24396  1888 ?        S    01:29   0:00  \_ dovecot/config
dovecot   17784  0.0  0.0  13568   504 ?        S    01:29   0:00  \_ dovecot/stats
dovecot   17785  0.0  0.0  41156  1400 ?        S    01:29   0:00  \_ dovecot/auth
root      16283  0.0  0.0 153404   216 ?        Ss   Jan04   0:08 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780    44 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      63705  0.0  0.1 224412  4156 ?        Ss   Jan07   0:01 queueprocd - waiting up to 60s to process a task
mailnull  64008  0.0  0.1  89196  3256 ?        Ss   Jan07   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  67756  0.0  0.1  89596  4280 ?        S    03:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  67843  0.0  0.1  89408  4380 ?        S    03:24   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  67847  0.0  0.1  89596  4280 ?        S    03:24   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
nscd      64247  0.0  0.0 1377576 2040 ?        Ssl  Jan07   0:19 /usr/sbin/nscd
cpanelc+  64408  0.0  0.1  10824  3664 ?        Ss   Jan07   1:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      64415  0.0  0.0 130416  1356 ?        SN   Jan07   0:00 cpanellogd - sleeping for logs
root      64460  0.0  0.0 299272   400 ?        Ss   Jan07   0:02 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      65073  0.0  0.1 248692  2728 ?        Ss   Jan07   0:12 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      69951  0.0  2.7 271300 66052 ?        S    Jan07   0:13  \_ spamd child
root      73314  0.0  0.0 248692  1388 ?        S    Jan07   0:00  \_ spamd child
root      85039  0.1  0.3 181908  9360 ?        Ss   00:00   0:13 lfd - sleeping
root      85507  0.0  0.5 267196 12580 ?        Ss   00:00   0:00 /usr/sbin/httpd -k start
root      17786  0.0  0.0  12780   324 ?        S    01:29   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      17787  0.0  0.0  12732   256 ?        S    01:29   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      17788  0.0  0.0  12792   336 ?        S    01:29   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      17789  0.0  0.0  53252    20 ?        S    01:29   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    46757  0.0  0.7 277748 17072 ?        S    02:41   0:01  \_ /usr/sbin/httpd -k start
nobody    61002  0.0  0.9 277928 23364 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    61265  0.0  0.9 277692 23300 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61298  0.0  0.9 277936 23236 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61311  0.0  0.9 278008 23264 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61319  0.0  0.9 277628 23424 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61337  0.0  0.9 277692 23024 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61385  0.0  0.9 278032 23064 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61404  0.0  0.9 277776 23080 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    65396  0.0  0.9 277552 23044 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    66776  0.0  0.9 277636 22884 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
root      85549  0.0  0.0 400740  1932 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   67822  3.2  1.2 493796 30428 ?        S    03:23   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    67832  0.0  0.2 474256  5368 ?        S    03:23   0:00  \_ php-fpm: pool edoocds_cloudware_ng
nigeria   67836  6.0  1.0 419612 26044 ?        S    03:23   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    67845 20.0  2.1 519864 53176 ?        R    03:24   0:00  \_ php-fpm: pool cloudware_ng
root      85554  0.0  0.0 388892   148 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      85559  0.0  0.0 396248   316 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      85564  0.0  0.0 389508   404 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      85569  0.0  0.0 439788   440 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      58918  0.0  0.0 132964     4 ?        SN   03:07   0:00 ConfigServer Version Check
root      58929  0.0  0.0 108056     0 ?        SN   03:07   0:00  \_ sleep 18324
## mysql stats
Uptime: 450485  Threads: 4  Questions: 44695478  Slow queries: 0  Opens: 111982  Flush tables: 1  Open tables: 2000  Queries per second avg: 99.216
*************************** 1. row ***************************
     Id: 662315
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 662316
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 662318
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: optimizing
   Info: SELECT * FROM `05` WHERE `phone`='2347068993992' LIMIT 1
*************************** 4. row ***************************
     Id: 662325
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.248.245.14 TIME_WAIT
      1 142.44.220.121 TIME_WAIT
      1 15.235.98.239 TIME_WAIT
      1 15.235.98.94 TIME_WAIT
      1 165.227.146.235 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 173.252.83.113 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.168.9 TIME_WAIT
      1 57.141.0.53 TIME_WAIT
      1 64.226.68.242 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 112.86.225.205 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 134.122.70.87 TIME_WAIT
      4 138.68.70.41 TIME_WAIT
      6 139.59.144.48 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 08-Jan-2026 03:24:02 WAT
   Restart Time: Thursday, 08-Jan-2026 00:00:25 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 3 hours 23 minutes 37 seconds
   Server load: 0.45 1.66 2.61
   Total accesses: 20747 - Total Traffic: 220.0 MB - Total Duration: 7453654
   CPU Usage: u2.73 s1.9 cu161.68 cs103.24 - 2.21% CPU load
   1.7 requests/sec - 18.4 kB/second - 10.9 kB/request - 359.264 ms/request
   3 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

WW_..._..._........_._.._..K._._................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req  Dur   Conn Child  Slot     Client      Protocol          VHost                                       Request
   0-1  65396 0/56/1883  W 0.25 0   0   770701 0.0  0.31  14.49 202.76.140.125  http/1.1 cloudware.ng:443         GET /shop/products/67011078461.html HTTP/1.1
   1-1  66776 0/21/1459  W 0.10 0   0   409738 0.0  0.32  13.91 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   2-1  61265 0/76/1860  _ 0.76 2   3   691614 0.0  0.46  14.72 173.199.190.175 http/1.1 nigeriadecide.org:443    POST /blog/wp-cron.php?doing_wp_cron=1767839039.484900951385498
   3-1  -     0/0/1414   . 0.00 641 0   505905 0.0  0.00  14.89 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   4-1  -     0/0/1439   . 0.00 675 0   310330 0.0  0.00  10.41 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   5-1  -     0/0/1253   . 0.00 638 5   347911 0.0  0.00  8.86  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   6-1  61298 0/75/1281  _ 1.33 2   49  331516 0.0  0.53  14.57 116.203.129.16  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue2.php HTTP/1.1
   7-1  -     0/0/915    . 0.00 673 0   409996 0.0  0.00  12.20 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   8-1  -     0/0/1226   . 0.00 581 0   377078 0.0  0.00  9.18  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   9-1  -     0/0/935    . 0.00 664 0   322837 0.0  0.00  6.43  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   10-1 46757 0/435/1238 _ 3.82 0   0   420526 0.0  3.69  9.71  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   11-1 -     0/0/1046   . 0.00 670 0   408383 0.0  0.00  16.91 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   12-1 -     0/0/1260   . 0.00 653 0   469475 0.0  0.00  32.16 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   13-1 -     0/0/554    . 0.00 668 0   169626 0.0  0.00  11.67 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   14-1 -     0/0/692    . 0.00 676 0   324676 0.0  0.00  3.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   15-1 -     0/0/881    . 0.00 678 0   259342 0.0  0.00  6.63  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-1 -     0/0/98     . 0.00 677 0   124830 0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   17-1 -     0/0/286    . 0.00 669 0   173567 0.0  0.00  2.28  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-1 -     0/0/13     . 0.00 665 0   110840 0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   19-1 61311 0/154/161  _ 0.74 1   38  55780  0.0  0.50  0.59  116.203.129.16  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue1.php HTTP/1.1
   20-1 -     0/0/13     . 0.00 667 0   63814  0.0  0.00  0.35  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-1 61002 0/124/126  _ 1.89 1   26  33078  0.0  0.86  0.88  128.140.8.200   http/1.1 cloudsms.com.ng:443      GET /cron/process_queue3.php HTTP/1.1
   22-1 -     0/0/273    . 0.00 532 0   97621  0.0  0.00  1.75  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-1 -     0/0/7      . 0.00 666 0   27846  0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-1 61319 0/166/169  _ 2.21 1   21  66270  0.0  9.35  9.37  116.203.134.67  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue4.php HTTP/1.1
   25-1 -     0/0/37     . 0.00 292 0   47481  0.0  0.00  0.34  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-1 -     0/0/3      . 0.00 672 0   25858  0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-1 61337 13/74/74   K 0.37 3   174 50245  11.3 0.92  0.92  216.73.216.182  http/1.1 edoocds.cloudware.ng:443 GET /1606731107 HTTP/1.1
   28-1 -     0/0/2      . 0.00 679 914 12219  0.0  0.00  0.01  54.89.90.224    http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/images/2019elections/2019electio
   29-1 61385 0/63/63    _ 0.56 2   398 11328  0.0  0.62  0.62  43.134.75.206   http/1.1 nigeriadecide.org:443    GET /blog/inec-to-decide-on-poll-shift-saturday/ HTTP/1.1
   30-1 -     0/0/16     . 0.00 470 0   946    0.0  0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-1 61404 0/70/70    _ 0.63 1   43  22262  0.0  0.85  0.85  116.203.129.16  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue5.php HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 354
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 30 seconds, (range: 0...91)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 9444
   total entries replaced since starting: 0
   total entries expired since starting: 9087
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 120 miss
   total removes since starting: 3 hit, 23 miss
Youez - 2016 - github.com/yon3zu
LinuXploit