403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.12.06.txt
 ## swap threshold exceeded
## server overview
2025-11-08.12.06 load[0] mem[67/65] mysql[6/11] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1545          81          43         736         606
Swap:          1999        1379         620
 12:06:02 up  2:19,  0 users,  load average: 0.56, 0.71, 0.83
## system overview
top - 12:06:02 up  2:19,  0 users,  load average: 0.56, 0.71, 0.83
Tasks: 201 total,   4 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.6 us, 16.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.8 si,  0.0 st
KiB Mem :  2420300 total,    76244 free,  1604876 used,   739180 buff/cache
KiB Swap:  2047996 total,   635388 free,  1412608 used.   598152 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 238740   3568 S  82.4  9.9   3:25.88 /usr/sbin+
 87558 cloudw    20   0  478340  87180   4036 R  76.5  3.6   0:00.36 php-fpm: +
 87548 nigeria   20   0  400652  15940  10220 R  11.8  0.7   0:00.05 /opt/cpan+
    36 root      20   0       0      0      0 S   5.9  0.0   0:13.33 [kswapd0]
   512 dbus      20   0   58768   1472    708 S   5.9  0.1   0:04.57 /usr/bin/+
 86049 nobody    20   0  277504  18740   3688 S   5.9  0.8   0:00.25 /usr/sbin+
     1 root      20   0   44424   3668   1712 S   0.0  0.2   0:13.63 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.96 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:10.61 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.47 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.43 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.13 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.61 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   7836   7516 S   0.0  0.3   0:05.45 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    516    388 S   0.0  0.0   0:00.93 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7584   1352 S   0.0  0.3   0:00.26 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.01 /sbin/rpc+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.18 /usr/sbin+
   539 root      20   0   52852    396    300 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.04 /usr/lib/+
   541 root      20   0  152780    220    176 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    968    512 S   0.0  0.0   0:01.21 /usr/lib/+
   547 nscd      20   0  928956   1504    808 S   0.0  0.1   0:04.45 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.25 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   4028   1008 S   0.0  0.2   0:00.16 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.46 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 196156    548 S   0.0  8.1   0:13.52 /usr/loca+
   975 root      20   0  240976  10000   6576 S   0.0  0.4   0:02.64 /usr/sbin+
   976 named     20   0 1186804  33676   1632 S   0.0  1.4   0:04.82 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:02.57 php-fpm: +
   982 systuser  20   0  114016  12992   2656 S   0.0  0.5   0:02.05 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.80 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.17 /usr/bin/+
   986 cpanelc+  20   0   10340   3504   2436 S   0.0  0.1   0:06.87 /usr/loca+
   987 root      20   0  386112    820    608 S   0.0  0.0   0:00.26 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    744    536 S   0.0  0.0   0:00.27 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.18 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.33 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.24 php-fpm: +
  1006 telegraf  20   0 5654048  36180   5536 S   0.0  1.5   0:04.91 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.13 /usr/sbin+
  1012 root      20   0  261032  29932   7564 S   0.0  1.2   0:01.38 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.30 /usr/sbin+
  1129 dovenull  20   0   46984   2712   1932 S   0.0  0.1   0:00.13 dovecot/p+
  1130 dovenull  20   0   47600   3528   2240 S   0.0  0.1   0:00.10 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.10 dovecot/l+
  1133 dovenull  20   0   47188   2644   1708 S   0.0  0.1   0:00.18 dovecot/p+
  1134 dovenull  20   0   47500   3160   2000 S   0.0  0.1   0:00.10 dovecot/i+
  1142 root      20   0   24528   2368    456 S   0.0  0.1   0:00.07 dovecot/c+
  1144 dovecot   20   0   13568    664    436 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2896    864 S   0.0  0.1   0:00.06 SonarPush+
  1217 wp-tool+  20   0  410452  36048   2028 S   0.0  1.5   0:07.09 /usr/bin/+
  1218 wp-tool+  20   0  387528  13408   1784 S   0.0  0.6   0:00.15 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.19 dovecot/a+
  1264 root      20   0  209272  20372   2924 S   0.0  0.8   0:01.05 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.16 dnsadmin +
  1268 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.53 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.21 php-fpm: +
  1717 root      38  18  130416   1440    716 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.61 /usr/sbin+
  1952 root      20   0   12804    436    324 S   0.0  0.0   0:00.98 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.81 /usr/loca+
  1954 root      20   0   12840    404    280 S   0.0  0.0   0:00.89 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  181984  11048   1212 S   0.0  0.5   0:08.46 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.14 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.24 /usr/loca+
 47195 root      20   0  258908 124960   2320 S   0.0  5.2   0:00.71 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54240 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 67846 nobody    20   0  277892  19740   4248 S   0.0  0.8   0:01.47 /usr/sbin+
 67853 nobody    20   0  277536  20088   4520 S   0.0  0.8   0:01.64 /usr/sbin+
 67977 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 68001 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 71252 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 71949 cloudw    20   0  471856   9448   5048 S   0.0  0.4   0:01.12 php-fpm: +
 73427 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 74758 nobody    20   0  277532  19952   4384 S   0.0  0.8   0:00.81 /usr/sbin+
 76930 worencom  20   0   38484   3584   2568 S   0.0  0.1   0:00.00 dovecot/i+
 77613 cloudw    20   0  471840   9500   5084 S   0.0  0.4   0:00.77 php-fpm: +
 79320 nobody    20   0  277896  19140   3852 S   0.0  0.8   0:00.28 /usr/sbin+
 80859 nobody    20   0  277528  19104   3996 S   0.0  0.8   0:00.34 /usr/sbin+
 81209 nobody    20   0  277556  19424   4224 S   0.0  0.8   0:00.62 /usr/sbin+
 81217 nobody    20   0  277856  19280   4096 S   0.0  0.8   0:00.55 /usr/sbin+
 82096 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.05 /usr/bin/+
 84123 root      20   0 1277056  11980    596 S   0.0  0.5   0:00.06 /usr/bin/+
 84530 nobody    20   0  277536  18980   3836 S   0.0  0.8   0:00.22 /usr/sbin+
 84976 nobody    20   0  277840  19120   3820 S   0.0  0.8   0:00.26 /usr/sbin+
 85018 nobody    20   0  277880  19116   3840 S   0.0  0.8   0:00.40 /usr/sbin+
 85108 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86048 nobody    20   0  277556  18808   3740 S   0.0  0.8   0:00.19 /usr/sbin+
 86209 cloudw    20   0  471784   9148   4744 S   0.0  0.4   0:00.18 php-fpm: +
 86312 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86441 cloudw    20   0  471784   9148   4744 S   0.0  0.4   0:00.18 php-fpm: +
 86570 nobody    20   0  277232  17204   2704 S   0.0  0.7   0:00.00 /usr/sbin+
 86571 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.18 php-fpm: +
 86590 nobody    20   0  277908  19084   3804 S   0.0  0.8   0:00.14 /usr/sbin+
 86591 nobody    20   0  277884  18528   3428 S   0.0  0.8   0:00.05 /usr/sbin+
 86596 nobody    20   0  277780  19340   4032 S   0.0  0.8   0:00.09 /usr/sbin+
 86597 nobody    20   0  277536  18780   3640 S   0.0  0.8   0:00.10 /usr/sbin+
 86598 nobody    20   0  277880  18852   3664 S   0.0  0.8   0:00.19 /usr/sbin+
 86599 nobody    20   0  277536  18688   3640 S   0.0  0.8   0:00.15 /usr/sbin+
 86844 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86985 nobody    20   0  277556  18652   3660 S   0.0  0.8   0:00.05 /usr/sbin+
 87149 healtho+  20   0  459424  69676   4208 S   0.0  2.9   0:05.66 php-fpm: +
 87224 healtho+  20   0  459292  69672   4208 S   0.0  2.9   0:04.64 php-fpm: +
 87233 healtho+  20   0  459292  69692   4224 S   0.0  2.9   0:04.26 php-fpm: +
 87358 nobody    20   0  277552  18388   3344 S   0.0  0.8   0:00.02 /usr/sbin+
 87384 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
 87419 nescrow+  20   0   61796   6200   4464 S   0.0  0.3   0:00.01 dovecot/l+
 87420 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 87449 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 87491 cloudw    20   0  543952  80992   5936 S   0.0  3.3   0:00.32 php-fpm: +
 87494 mailnull  20   0   89288   5492   2264 S   0.0  0.2   0:00.00 /usr/sbin+
 87497 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87498 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87500 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87501 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87503 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87504 root      20   0  183040   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87506 root      20   0  183040   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87508 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87509 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87511 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87519 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 87521 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87522 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87523 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87524 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87525 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87527 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 87528 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87530 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87531 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 87535 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 87536 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 87541 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 87543 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 87544 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 87545 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 87547 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 87594 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      54240  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:0]
root      67977  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:2]
root      68001  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:0]
root      71252  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:1]
root      73427  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      82096  0.0  0.0      0     0 ?        S    11:58   0:00  \_ [kworker/0:1]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      85108  0.0  0.0      0     0 ?        S    12:02   0:00  \_ [kworker/1:3]
root      86312  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/1:4]
root      86844  0.0  0.0      0     0 ?        S    12:05   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44424  3668 ?        Ss   09:46   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  40240  7836 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   516 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.3 224280  7584 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   396 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   220 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   968 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1504 ?        Ssl  09:46   0:04 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      87497  0.0  0.0 183040  2140 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87531  0.0  0.0 113284  1212 ?        Ss   12:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      87536  0.0  0.0 108052   356 ?        S    12:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      87545  0.0  0.0 113288  1516 ?        S    12:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      87598  0.0  0.0 153840  2088 ?        R    12:06   0:00  |               \_ ps auxf
root      87498  0.0  0.0 183040  2140 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87521  0.0  0.0  20164   804 ?        Ss   12:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      87500  0.0  0.0 183040  2140 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87530  0.0  0.0  20164   808 ?        Ss   12:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      87501  0.0  0.0 183040  2144 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87522  0.0  0.0  20164   808 ?        Ss   12:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      87503  0.0  0.0 183040  2140 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87524  0.0  0.0  20164   808 ?        Ss   12:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      87504  0.0  0.0 183040  2136 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87523  0.0  0.0  20164   804 ?        Ss   12:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      87506  0.0  0.0 183040  2132 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87528  0.0  0.0  20164   804 ?        Ss   12:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      87508  0.0  0.0 183040  2136 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87525  0.0  0.0  20164   980 ?        Ss   12:06   0:00  |   \_ jailshell (cloudsms) [87601] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  87601  0.0  0.0  20164   256 ?        S    12:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      87509  0.0  0.0 183040  2140 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87535  0.0  0.0  20164   964 ?        Ss   12:06   0:00  |   \_ jailshell (pactpay) [87541] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87541  0.0  0.0  20164   256 ?        S    12:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87547  0.0  0.7 476724 17484 ?        S    12:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      87511  0.0  0.0 183040  2136 ?        S    12:06   0:00  \_ /usr/sbin/CROND -n
root      87527  0.0  0.0  20164   964 ?        Ss   12:06   0:00      \_ jailshell (nigeria) [87544] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87544  0.0  0.0  20164   256 ?        S    12:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87548  0.0  0.6 400652 15940 ?        S    12:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  4028 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  87494  0.0  0.2  89288  5492 ?        S    12:06   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  8.0 1763032 195564 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.4 240976 10000 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.3 1186804 33676 ?       Ssl  09:46   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9448 ?        S    11:41   0:01  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    77613  0.0  0.3 471840  9500 ?        S    11:50   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    86209  0.1  0.3 471784  9148 ?        S    12:03   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    86441  0.1  0.3 471784  9148 ?        S    12:04   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    86571  0.2  0.3 471784  9144 ?        S    12:04   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  87149 14.8  2.8 459424 69676 ?        S    12:05   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  87224 15.4  2.8 459292 69672 ?        S    12:05   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  87233 14.6  2.8 459292 69692 ?        S    12:05   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   87384  0.0  0.2 397064  5612 ?        S    12:05   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    87491 32.0  3.3 543952 80992 ?        S    12:06   0:00  \_ php-fpm: pool cloudware_ng
cloudw    87558  0.0  4.0 488580 97740 ?        R    12:06   0:00  \_ php-fpm: pool cloudware_ng
cloudw    87600  0.0  0.5 403272 13044 ?        R    12:06   0:00  \_ php-fpm: pool cloudware_ng
systuser    982  0.0  0.5 114016 12980 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3504 ?        Rs   09:46   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   820 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   744 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.4 5654048 36180 ?       SLsl 09:46   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2712 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47600  3528 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2644 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3160 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.0  24528  2368 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   664 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  76930  0.0  0.1  38484  3584 ?        S    11:49   0:00  \_ dovecot/imap
nescrow+  87419  0.0  0.2  61796  6200 ?        S    12:05   0:00  \_ dovecot/lmtp
root      87420  0.0  0.1  41052  2728 ?        S    12:05   0:00  \_ dovecot/auth -w
root       1012  0.0  1.2 261032 29932 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      87449  0.0  0.0      0     0 ?        Z    12:05   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      87519  0.0  0.1 111304  4440 ?        Ss   12:06   0:00  \_ sshd: [accepted]
sshd      87543  0.0  0.1 115644  2628 ?        S    12:06   0:00      \_ sshd: [net]
systuser   1204  0.0  0.1 157704  2896 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 36048 ?        Ss   09:46   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13408 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209272 20372 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6692 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1440 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4  9.8 1458588 238740 ?      Sl   09:46   3:25 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12804   436 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12840   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    67846  0.0  0.8 277892 19740 ?        S    11:33   0:01  \_ /usr/sbin/httpd -k start
nobody    67853  0.0  0.8 277536 20088 ?        S    11:33   0:01  \_ /usr/sbin/httpd -k start
nobody    74758  0.0  0.8 277532 19952 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody    79320  0.0  0.7 277896 19140 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody    80859  0.0  0.7 277528 19104 ?        S    11:56   0:00  \_ /usr/sbin/httpd -k start
nobody    81209  0.1  0.8 277556 19424 ?        S    11:56   0:00  \_ /usr/sbin/httpd -k start
nobody    81217  0.0  0.7 277856 19280 ?        S    11:56   0:00  \_ /usr/sbin/httpd -k start
nobody    84530  0.0  0.7 277536 18980 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84976  0.1  0.7 277840 19292 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    85018  0.1  0.7 277880 19116 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86048  0.1  0.7 277556 18808 ?        S    12:03   0:00  \_ /usr/sbin/httpd -k start
nobody    86049  0.1  0.7 277504 18740 ?        S    12:03   0:00  \_ /usr/sbin/httpd -k start
nobody    86570  0.0  0.7 277232 17204 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86590  0.1  0.7 277908 19084 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86591  0.0  0.7 277884 18528 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86596  0.1  0.7 277780 19340 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86597  0.1  0.7 277536 18780 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86598  0.2  0.7 277880 18852 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86599  0.1  0.7 277536 18688 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86985  0.0  0.7 277556 18652 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    87358  0.1  0.7 277552 18388 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 181984 11048 ?        Ss   09:46   0:08 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.1 258908 124960 ?       S    11:00   0:00  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11980 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 30068  Threads: 5  Questions: 1515639  Slow queries: 0  Opens: 3419  Flush tables: 1  Open tables: 1986  Queries per second avg: 50.407
*************************** 1. row ***************************
     Id: 21921
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 21924
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 21925
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 21935
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.173.226.92 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 178.20.44.82 TIME_WAIT
      1 192.110.213.58 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.150 TIME_WAIT
      1 43.167.245.18 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.78.70.188 TIME_WAIT
      4 173.199.190.174 TIME_WAIT
      6 80.241.214.201 TIME_WAIT
      8 105.113.58.231 TIME_WAIT
      8 57.130.20.252 TIME_WAIT
     40 103.253.27.139 TIME_WAIT
     40 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 12:06:03 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 21 minutes 2 seconds
   Server load: 0.56 0.71 0.83
   Total accesses: 42970 - Total Traffic: 647.1 MB - Total Duration: 34862314
   CPU Usage: u5.88 s2.56 cu392.12 cs260.05 - 2.2% CPU load
   1.43 requests/sec - 22.0 kB/second - 15.4 kB/request - 811.318 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

W_KKCW_.WWKKWC_W._WW._K....W....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req    Dur   Conn Child  Slot     Client      Protocol              VHost                                          Request
   0-0  86570 0/0/2403   W 0.00 86   0    1831807 0.0  0.00  39.54 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630333437362p2231223
   1-0  84530 0/50/2403  _ 0.81 0    334  1745476 0.0  0.88  42.65 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80      GET /?p=4114276272 HTTP/1.1
   2-0  87358 1/5/2093   K 0.05 3    361  2239932 31.5 0.10  38.01 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80      GET /?p=1383581474 HTTP/1.1
   3-0  79320 2/80/2175  K 1.58 0    449  2973864 61.8 7.91  37.47 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80      GET /?p=407308588 HTTP/1.1
   4-0  86985 1/19/2218  C 0.18 0    142  2154705 24.3 0.27  38.11 80.241.214.201  http/1.1 cloudware.ng:443                POST /xmlrpc.php HTTP/1.1
   5-0  80859 0/102/2153 W 0.91 152  0    1584920 0.0  1.23  29.73 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630333431312p2231223
   6-0  86590 0/32/2283  _ 0.72 0    770  1309257 0.0  0.53  34.18 173.199.190.174 http/1.1 cloudware.ng:443                POST /?wordfence_syncAttackData=1762599962.1262 HTTP/1.1
   7-0  -     0/0/2044   . 0.00 79   0    1070011 0.0  0.00  27.83 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  86591 0/10/2194  W 0.20 66   0    1459708 0.0  0.23  28.65 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630333439372p2231223
   9-0  81209 0/154/2297 W 2.20 1    0    1931423 0.0  2.54  32.87 217.113.194.228 http/1.1 cloudware.ng:443                GET /category/newspapers-magazines-and-book-publishing/ HTTP/1.
   10-0 67846 2/325/1568 K 5.65 1    366  2319170 59.9 6.68  25.75 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80      GET /?p=3226524907 HTTP/1.1
   11-0 81217 3/138/2008 K 1.88 0    448  1074741 89.3 2.41  31.02 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80      GET /?p=2065025193 HTTP/1.1
   12-0 86596 0/25/1911  W 0.29 0    0    1024849 0.0  0.37  26.58 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80      GET /?p=885197310 HTTP/1.1
   13-0 86597 1/25/1553  C 0.37 0    0    980873  7.3  0.44  25.06 167.99.178.180  http/1.1 bayewu.staging.cloudware.ng:443 GET / HTTP/1.1
   14-0 84976 0/74/1688  _ 1.01 0    2    787610  0.0  0.91  21.08 167.99.178.180  http/1.1
   15-0 85018 0/165/1522 W 1.97 0    0    739486  0.0  1.71  22.37 103.253.27.139  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   16-0 -     0/0/1374   . 0.00 36   0    1946829 0.0  0.00  23.16 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 86048 0/43/1115  _ 1.00 0    1    1060037 0.0  0.79  13.97 167.99.178.180  http/1.1
   18-0 67853 0/493/1596 W 5.56 107  0    1614356 0.0  6.26  20.55 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630333435362p2231223
   19-0 86049 0/137/1273 W 1.04 0    0    1033156 0.0  0.68  15.32 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   20-0 -     0/0/855    . 0.00 77   0    472930  0.0  0.00  14.84 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 86598 0/110/295  _ 0.89 0    832  163740  0.0  0.67  3.34  167.99.178.180  http/1.1
   22-0 86599 2/31/1750  K 0.64 4    345  772834  60.5 0.73  24.08 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80      GET /?p=437138850 HTTP/1.1
   23-0 -     0/0/731    . 0.00 1188 0    466407  0.0  0.00  8.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/77     . 0.00 1179 0    40454   0.0  0.00  1.25  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/19     . 0.00 1191 2036 11550   0.0  0.00  0.17  98.80.4.112     http/1.1
   26-0 -     0/0/11     . 0.00 1182 0    9391    0.0  0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 74758 0/193/196  W 2.95 127  0    989344  0.0  3.74  3.75  173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630333433362p2231223
   28-0 -     0/0/5      . 0.00 1184 0    4898    0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/269    . 0.00 407  0    134925  0.0  0.00  6.92  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/8      . 0.00 4178 0    2127    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00 4198 0    13      0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00 4184 0    2739    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 4201 0    1       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00 4179 0    2035    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 4173 0    2468    0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 3922 0    121446  0.0  0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 4183 0    2767    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 3725 0    241489  0.0  0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 4192 0    50      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 4182 0    2478    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 4129 0    11757   0.0  0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 4172 0    3645    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 4189 0    709     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 4194 0    703     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 4200 0    2       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 4160 0    2869    0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 3748 0    242408  0.0  0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 4171 0    2838    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 4174 0    5104    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 3832 0    174079  0.0  0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 4175 0    2028    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 3964 0    89852   0.0  0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 343
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 40 seconds, (range: 0...167)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 11423
   total entries replaced since starting: 0
   total entries expired since starting: 11072
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 39 miss
   total removes since starting: 8 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit