403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.04.00.txt
 ## swap threshold exceeded
## server overview
2025-11-15.04.00 load[0] mem[77/36] mysql[5/7] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1786          86          21         491         399
Swap:          1999         809        1190
 04:00:02 up 30 min,  0 users,  load average: 0.54, 0.50, 0.44
## system overview
top - 04:00:02 up 30 min,  0 users,  load average: 0.54, 0.50, 0.44
Tasks: 212 total,   7 running, 204 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    83032 free,  1829244 used,   508024 buff/cache
KiB Swap:  2047996 total,  1219068 free,   828928 used.   409412 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1749 mysql     20   0 1460256 204912   4636 S 112.5  8.5   0:24.11 /usr/sbin+
 25821 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.05 /opt/cpan+
   261 root       0 -20       0      0      0 S   6.2  0.0   0:00.52 [kworker/+
 25182 nobody    20   0  277852  32108   3624 S   6.2  1.3   0:00.06 /usr/sbin+
     1 root      20   0   44264   3408   1620 R   0.0  0.1   0:03.00 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 D   0.0  0.0   0:00.16 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:01.90 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:06.83 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   266 root       0 -20       0      0      0 S   0.0  0.0   0:00.59 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39496   6956   6664 S   0.0  0.3   0:01.04 /usr/lib/+
   383 root      20   0   45352    680    532 S   0.0  0.0   0:00.37 /usr/lib/+
   411 root      16  -4   55532    440    332 S   0.0  0.0   0:00.14 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   509 rpc       20   0   69256    372    264 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58716   1644    908 S   0.0  0.1   0:00.92 /usr/bin/+
   525 root      20   0  224148   6428   1156 S   0.0  0.3   0:00.10 queueproc+
   526 root      20   0   24716   1364   1008 S   0.0  0.1   0:00.42 /usr/lib/+
   530 root      20   0   21540    624    512 S   0.0  0.0   0:00.04 /usr/sbin+
   531 root      20   0  152780    472    428 S   0.0  0.0   0:00.00 /usr/sbin+
   533 root      20   0   52852    564    560 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  612240   3324    852 S   0.0  0.1   0:00.26 /usr/lib/+
   538 nscd      20   0  861368   1348    808 R   0.0  0.1   0:01.50 /usr/sbin+
   542 root      20   0    4388    280    276 S   0.0  0.0   0:00.00 /usr/sbin+
   544 root      20   0  195208    292    292 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   572 root      20   0  124480    716    584 S   0.0  0.0   0:00.05 /usr/sbin+
   573 root      20   0   24208    240    240 S   0.0  0.0   0:00.00 /usr/sbin+
   595 root      20   0  108296    376    372 S   0.0  0.0   0:00.00 /sbin/age+
   596 root      20   0  114704    420    420 S   0.0  0.0   0:00.02 /bin/bash
   633 mailnull  20   0   88992   3532    580 S   0.0  0.1   0:00.06 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [loop0]
   665 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   923 systuser  20   0  114016  12484   2344 S   0.0  0.5   0:00.57 /usr/loca+
   924 systuser  20   0  111608   1608      0 S   0.0  0.1   0:00.00 /usr/loca+
   928 root      20   0 1277312  13296    364 S   0.0  0.5   0:28.63 /usr/bin/+
   929 root      20   0  111304    856    760 S   0.0  0.0   0:00.21 /usr/sbin+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   931 memcach+  20   0  342400    332    332 S   0.0  0.0   0:00.04 /usr/bin/+
   934 root      20   0   51508    892    732 S   0.0  0.0   0:00.05 /usr/sbin+
   937 systuser  20   0  112524   2056      0 S   0.0  0.1   0:00.00 /usr/loca+
   938 root      20   0  572372   1332    864 S   0.0  0.1   0:00.25 /usr/bin/+
   939 root      20   0  261028   7332   2692 S   0.0  0.3   0:00.54 cpsrvd (S+
   940 root      20   0  396248    968    804 S   0.0  0.0   0:00.11 php-fpm: +
   941 named     20   0  990260  27876   1612 S   0.0  1.2   0:01.26 /usr/sbin+
   950 root      20   0  439788  11608  11516 S   0.0  0.5   0:00.15 php-fpm: +
   958 root      20   0  400740   3408    968 S   0.0  0.1   0:00.44 php-fpm: +
   962 root      20   0  216400   9044   5648 S   0.0  0.4   0:00.50 /usr/sbin+
   963 root      20   0 1763124 784884    892 S   0.0 32.4   0:13.32 /usr/loca+
   975 root      20   0  389508   1000    792 S   0.0  0.0   0:00.11 php-fpm: +
   978 root      20   0  153404    712    628 S   0.0  0.0   0:00.04 pure-ftpd+
   985 root      20   0  388892    628    548 S   0.0  0.0   0:00.11 php-fpm: +
   986 root      20   0 1276356   9648    364 S   0.0  0.4   0:23.10 /usr/bin/+
   988 telegraf  20   0 5654048  35596   3856 S   0.0  1.5   0:01.23 /usr/loca+
   998 cpanelc+  20   0    9820   2856   2388 S   0.0  0.1   0:01.45 /usr/loca+
   999 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
  1000 root      20   0  445028   3044   3044 S   0.0  0.1   0:00.05 sw-engine+
  1076 dovenull  20   0   46912   1912   1328 S   0.0  0.1   0:00.02 dovecot/p+
  1077 dovenull  20   0   46780    904    640 S   0.0  0.0   0:00.00 dovecot/i+
  1078 dovecot   20   0   10320    640    528 S   0.0  0.0   0:00.00 dovecot/a+
  1079 root      20   0   10452    780    608 S   0.0  0.0   0:00.01 dovecot/l+
  1080 dovenull  20   0   46912   2316   1688 S   0.0  0.1   0:00.03 dovecot/p+
  1081 dovenull  20   0   47056   2056   1308 S   0.0  0.1   0:00.00 dovecot/i+
  1093 root      20   0   24528   2264    660 S   0.0  0.1   0:00.03 dovecot/c+
  1096 dovecot   20   0   13568    628    416 S   0.0  0.0   0:00.00 dovecot/s+
  1145 root      20   0  248036 119272   2860 S   0.0  4.9   0:03.06 /usr/loca+
  1170 systuser  20   0  157708   3108   1052 S   0.0  0.1   0:00.02 SonarPush+
  1175 dovecot   20   0   41056   1432   1048 S   0.0  0.1   0:00.03 dovecot/a+
  1202 wp-tool+  20   0  387528  12392   1736 S   0.0  0.5   0:00.10 /usr/bin/+
  1203 wp-tool+  20   0  410452  35020   1572 S   0.0  1.4   0:01.68 /usr/bin/+
  1214 root      20   0  209100   9924   1516 S   0.0  0.4   0:00.37 tailwatchd
  1216 root      20   0  183900    528    528 S   0.0  0.0   0:00.08 cpdavd - +
  1219 root      20   0  167452   1668   1064 S   0.0  0.1   0:00.07 dnsadmin +
  1605 root      20   0  299272    872    492 S   0.0  0.0   0:00.04 php-fpm: +
  1663 root      38  18  130416   1532    812 S   0.0  0.1   0:00.00 cpanellog+
  1911 root      20   0  266984  22988    932 S   0.0  0.9   0:00.29 /usr/sbin+
  1912 root      20   0   12820    732    524 S   0.0  0.0   0:00.20 /usr/loca+
  1913 root      20   0   12732    700    516 S   0.0  0.0   0:00.18 /usr/loca+
  1915 root      20   0   12860    712    492 S   0.0  0.0   0:00.18 /usr/loca+
  1922 root      20   0   53340   9744    416 S   0.0  0.4   0:00.05 /usr/loca+
  2002 root      20   0  181060  28104   1348 S   0.0  1.2   0:01.68 lfd - sle+
  6770 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  7214 root      20   0  261780 127712   2268 S   0.0  5.3   0:00.51 spamd chi+
  7215 root      20   0  248036 117184    832 S   0.0  4.8   0:00.00 spamd chi+
  8960 nobody    20   0  277660  32624   4316 S   0.0  1.3   0:01.74 /usr/sbin+
 10269 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 11902 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17424 nobody    20   0  277512  32216   3988 S   0.0  1.3   0:01.04 /usr/sbin+
 19366 nobody    20   0  277900  32532   4104 S   0.0  1.3   0:00.86 /usr/sbin+
 19368 nobody    20   0  277548  32300   4040 S   0.0  1.3   0:00.78 /usr/sbin+
 19913 nobody    20   0  277572  32336   4060 S   0.0  1.3   0:00.46 /usr/sbin+
 20767 nobody    20   0  277728  32656   4216 S   0.0  1.3   0:00.53 /usr/sbin+
 20920 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 21693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22085 nobody    20   0  277584  32280   3984 S   0.0  1.3   0:00.35 /usr/sbin+
 22564 nobody    20   0  277464  32172   4008 S   0.0  1.3   0:00.36 /usr/sbin+
 23050 nobody    20   0  277720  32032   3636 S   0.0  1.3   0:00.33 /usr/sbin+
 23096 nobody    20   0  277672  31920   3544 S   0.0  1.3   0:00.33 /usr/sbin+
 23654 nobody    20   0  277488  31928   3740 S   0.0  1.3   0:00.26 /usr/sbin+
 23673 nobody    20   0  277488  32084   3920 S   0.0  1.3   0:00.26 /usr/sbin+
 23688 nobody    20   0  277876  32412   3996 S   0.0  1.3   0:00.25 /usr/sbin+
 24283 mailnull  20   0   89536   4808   1744 S   0.0  0.2   0:00.00 /usr/sbin+
 24886 nobody    20   0  277468  31676   3528 S   0.0  1.3   0:00.09 /usr/sbin+
 24920 nobody    20   0  277508  31948   3760 S   0.0  1.3   0:00.08 /usr/sbin+
 24921 nobody    20   0  277512  32092   3900 S   0.0  1.3   0:00.04 /usr/sbin+
 25322 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 25332 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 25425 nigeria   20   0  400460   5636   2404 S   0.0  0.2   0:00.00 php-fpm: +
 25481 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 25670 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 25679 root      20   0  183052   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 25680 root      20   0  183052   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 25681 root      20   0  183052   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 25682 root      20   0  183052   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 25687 root      20   0  183052   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 25688 root      20   0  183052   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25690 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25692 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25693 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25694 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25695 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25696 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25697 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25700 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25701 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25703 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 25704 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25707 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25715 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 25721 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 25723 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 25725 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 25727 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 25729 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25730 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25731 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25732 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25733 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 25734 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 25736 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25739 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25740 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 25741 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25742 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25743 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25745 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 25748 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 25749 root      20   0  188204  11084   5148 S   0.0  0.5   0:00.01 /usr/loca+
 25750 root      20   0 1276060  10940    596 S   0.0  0.5   0:00.05 /usr/bin/+
 25754 root      20   0 1277356  12016    596 S   0.0  0.5   0:00.06 /usr/bin/+
 25756 root      20   0 1415584  10992    600 S   0.0  0.5   0:00.06 /usr/bin/+
 25762 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 25767 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 25790 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 25811 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 25814 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 25820 root      20   0  160224   2372   1636 S   0.0  0.1   0:00.00 top -n 2 +
 25822 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 25829 oysipao+  20   0    3152    636    212 S   0.0  0.0   0:00.00 [kworker]
 25911 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25921 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 25927 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25934 cloudw    20   0  297236  13176   8860 S   0.0  0.5   0:00.00 /opt/cpan+
 25941 cloudw    20   0  296284  11576   8120 R   0.0  0.5   0:00.00 /opt/cpan+
 25942 root      35  15  113288    192      0 R   0.0  0.0   0:00.00 /bin/bash+
 25943 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
 25944 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:29   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    03:29   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    03:29   0:06  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:29   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:29   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [kworker/1:2]
root        104  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    03:29   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   03:29   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   03:30   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   03:30   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   03:30   0:00  \_ [xprtiod]
root        558  0.0  0.0      0     0 ?        S<   03:30   0:00  \_ [kvm-irqfd-clean]
root        655  0.1  0.0      0     0 ?        S<   03:30   0:02  \_ [loop0]
root        665  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [jbd2/loop0-8]
root        666  0.0  0.0      0     0 ?        S<   03:30   0:00  \_ [ext4-rsv-conver]
root       6770  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/0:2]
root      10269  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:0]
root      11902  0.0  0.0      0     0 ?        S    03:42   0:00  \_ [kworker/0:4]
root      20920  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/0:3]
root      21693  0.0  0.0      0     0 ?        S    03:55   0:00  \_ [kworker/1:1]
root      25911  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/0:1]
root      25927  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44264  3408 ?        Ss   03:29   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39496  6956 ?        Ss   03:30   0:01 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   680 ?        Ss   03:30   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   440 ?        S<sl 03:30   0:00 /sbin/auditd
rpc         509  0.0  0.0  69256   372 ?        Ss   03:30   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58716  1644 ?        Ss   03:30   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        525  0.0  0.2 224148  6428 ?        Ss   03:30   0:00 queueprocd - waiting up to 60s to process a task
root        526  0.0  0.0  24716  1364 ?        Ss   03:30   0:00 /usr/lib/systemd/systemd-logind
root        530  0.0  0.0  21540   624 ?        Ss   03:30   0:00 /usr/sbin/irqbalance --foreground
root        531  0.0  0.0 152780   472 ?        Ss   03:30   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        533  0.0  0.0  52852   564 ?        Ss   03:30   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.1 612240  3324 ?        Ssl  03:30   0:00 /usr/lib/polkit-1/polkitd --no-debug
nscd        538  0.0  0.0 861368  1348 ?        Ssl  03:30   0:01 /usr/sbin/nscd
root        542  0.0  0.0   4388   280 ?        Ss   03:30   0:00 /usr/sbin/acpid
root        544  0.0  0.0 195208   292 ?        Ssl  03:30   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124480   716 ?        Ss   03:30   0:00 /usr/sbin/crond -n
root      25679  0.0  0.0 183052  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25725  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      25756  6.0  0.6 1416224 15160 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      25680  0.0  0.0 183052  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25733  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      25754  6.0  0.4 1277356 12016 ?       Sl   04:00   0:00  |       \_ /usr/bin/update_imunify
root      25681  0.0  0.0 183052  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25727  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      25750  5.0  0.4 1276316 10940 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      25682  0.0  0.0 183052  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25740  0.0  0.0 113284  1208 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      25748  0.0  0.0 113288  1428 ?        SN   04:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      25942  0.0  0.0   6080   140 ?        RN   04:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      25687  0.0  0.0 183052  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25734  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      25762  0.0  0.0 108052   360 ?        S    04:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      25767  0.0  0.0 113288  1516 ?        S    04:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      25945  0.0  0.0 153840  2096 ?        R    04:00   0:00  |               \_ ps auxf
root      25688  0.0  0.0 183052  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25731  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      25690  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25721  0.0  0.0  20164   984 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [25947] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      25947  0.0  0.0  20164   256 ?        R    04:00   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      25692  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25736  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      25693  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25730  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      25694  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25739  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      25695  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25742  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      25696  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25732  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      25697  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25741  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      25700  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25743  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      25701  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25729  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      25703  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25723  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      25749  1.0  0.4 188204 11084 ?        S    04:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      25820  0.0  0.0 160224  2372 ?        S    04:00   0:00  |           \_ top -n 2 -b -c
root      25704  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25715  0.0  0.0  20164   964 ?        Ss   04:00   0:00  |   \_ jailshell (pactpay) [25790] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25790  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25811  2.0  0.7 480124 17684 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      25707  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      25745  0.0  0.0  20164   968 ?        Ss   04:00   0:00      \_ jailshell (nigeria) [25814] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25814  0.0  0.0  20164   260 ?        S    04:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25821  5.0  0.6 404052 16144 ?        R    04:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        573  0.0  0.0  24208   240 ?        Ss   03:30   0:00 /usr/sbin/atd -f
root        595  0.0  0.0 108296   376 tty1     Ss+  03:30   0:00 /sbin/agetty --noclear tty1 linux
root        596  0.0  0.0 114704   420 ttyS0    Ss+  03:30   0:00 /bin/bash
mailnull    633  0.0  0.1  88992  3532 ?        Ss   03:30   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  24283  0.0  0.1  89536  4808 ?        S    03:58   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    923  0.0  0.5 114016 12484 ?        Ssl  03:30   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    924  0.0  0.0 111608  1608 ?        Ssl  03:30   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        928  1.5  0.5 1277312 13296 ?       Ssl  03:30   0:28 /usr/bin/checkstatus
root        929  0.0  0.0 111304   856 ?        Ss   03:30   0:00 /usr/sbin/sshd -D
root      25322  0.0  0.1 111304  4268 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      25332  0.0  0.1 111304  4272 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      25481  0.0  0.1 111304  4272 ?        Ss   03:59   0:00  \_ sshd: [accepted]
systuser    930  0.0  0.0  10132    48 ?        Ssl  03:30   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
memcach+    931  0.0  0.0 342400   332 ?        Ssl  03:30   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        934  0.0  0.0  51508   892 ?        Ss   03:30   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1076  0.0  0.0  46912  1912 ?        S    03:30   0:00  \_ dovecot/pop3-login
dovenull   1077  0.0  0.0  46780   904 ?        S    03:30   0:00  \_ dovecot/imap-login
dovecot    1078  0.0  0.0  10320   640 ?        S    03:30   0:00  \_ dovecot/anvil
root       1079  0.0  0.0  10452   780 ?        S    03:30   0:00  \_ dovecot/log
dovenull   1080  0.0  0.0  46912  2316 ?        S    03:30   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47056  2056 ?        S    03:30   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  2264 ?        S    03:30   0:00  \_ dovecot/config
dovecot    1096  0.0  0.0  13568   628 ?        S    03:30   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41056  1432 ?        S    03:30   0:00  \_ dovecot/auth
systuser    937  0.0  0.0 112524  2056 ?        Ssl  03:30   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 572372  1332 ?        Ssl  03:30   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        939  0.0  0.3 261028  7332 ?        Ss   03:30   0:00 cpsrvd (SSL) - waiting for connections                   
root      25670  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [cpaneld - servi] <defunct>
root        940  0.0  0.0 396248   968 ?        Ss   03:30   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       941  0.0  1.1 990260 27876 ?        Ssl  03:30   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        950  0.0  0.4 439788 11608 ?        Ss   03:30   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        958  0.0  0.1 400740  3408 ?        Ss   03:30   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   25425  0.0  0.2 400460  5636 ?        S    03:59   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 216400  9044 ?        Ssl  03:30   0:00 /usr/sbin/rsyslogd -n
root        963  0.7 32.4 1763124 784884 ?      Ssl  03:30   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.0 389508  1000 ?        Ss   03:30   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        978  0.0  0.0 153404   712 ?        Ss   03:30   0:00 pure-ftpd (SERVER)
root        985  0.0  0.0 388892   628 ?        Ss   03:30   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  1.2  0.3 1276356 9648 ?        Ssl  03:30   0:23 /usr/bin/cspdaemon
telegraf    988  0.0  1.4 5654048 35596 ?       SLsl 03:30   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
cpanelc+    998  0.0  0.1   9820  2856 ?        Rs   03:30   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    999  0.0  0.0  14068    48 ?        Ssl  03:30   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1000  0.0  0.1 445028  3044 ?        Ss   03:30   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root       1145  0.1  4.9 248036 119272 ?       Rs   03:30   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7214  0.0  5.2 261780 127712 ?       S    03:36   0:00  \_ spamd child
root       7215  0.0  4.8 248036 117184 ?       S    03:36   0:00  \_ spamd child
systuser   1170  0.0  0.1 157708  3108 ?        S    03:30   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1202  0.0  0.5 387528 12392 ?        Ss   03:30   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1203  0.0  1.4 410452 35020 ?        Ss   03:30   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1214  0.0  0.4 209100  9924 ?        Ss   03:30   0:00 tailwatchd
root       1216  0.0  0.0 183900   528 ?        Ss   03:30   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1219  0.0  0.0 167452  1668 ?        Ss   03:30   0:00 dnsadmin - dormant mode
root       1605  0.0  0.0 299272   872 ?        Ss   03:30   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1663  0.0  0.0 130416  1532 ?        SN   03:30   0:00 cpanellogd - sleeping for logs
mysql      1749  1.3  8.4 1460256 204912 ?      Sl   03:30   0:24 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1911  0.0  0.9 266984 22988 ?        Ss   03:30   0:00 /usr/sbin/httpd -k start
root       1912  0.0  0.0  12820   732 ?        S    03:30   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1913  0.0  0.0  12732   700 ?        S    03:30   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1915  0.0  0.0  12860   712 ?        S    03:30   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1922  0.0  0.4  53340  9744 ?        S    03:30   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     8960  0.1  1.3 277660 32624 ?        S    03:38   0:01  \_ /usr/sbin/httpd -k start
nobody    17424  0.1  1.3 277512 32216 ?        S    03:49   0:01  \_ /usr/sbin/httpd -k start
nobody    19366  0.1  1.3 277900 32532 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    19368  0.1  1.3 277548 32300 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    19913  0.1  1.3 277572 32336 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    20767  0.1  1.3 277728 32656 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    22085  0.1  1.3 277584 32280 ?        S    03:55   0:00  \_ /usr/sbin/httpd -k start
nobody    22564  0.1  1.3 277464 32172 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
cloudw    25941  0.0  0.6 300552 16564 ?        Rl   04:00   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    23050  0.1  1.3 277720 32032 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    23096  0.1  1.3 277672 31920 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    23654  0.1  1.3 277488 31928 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    23673  0.1  1.3 277488 32084 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    23688  0.1  1.3 277876 32412 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    24886  0.1  1.3 277468 31676 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    24920  0.1  1.3 277508 31948 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    24921  0.0  1.3 277512 32092 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    25182  0.1  1.3 277852 32108 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    25934  0.0  0.6 366088 16596 ?        R    04:00   0:00      \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
root       2002  0.0  1.1 181060 28104 ?        Ss   03:30   0:01 lfd - sleeping
oysipao+  25822  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  25829  0.0  0.0   3152   636 ?        S    04:00   0:00  \_ [kworker]
## mysql stats
Uptime: 1791  Threads: 3  Questions: 119168  Slow queries: 0  Opens: 1721  Flush tables: 1  Open tables: 1612  Queries per second avg: 66.537
*************************** 1. row ***************************
     Id: 1975
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: query end
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 1979
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 1987
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.129.22 TIME_WAIT
      1 15.235.98.142 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 198.145.105.13 TIME_WAIT
      1 ::1 TIME_WAIT
      1 31.56.252.141 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 84.37.49.171 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 04:00:02 WAT
   Restart Time: Saturday, 15-Nov-2025 03:30:16 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 29 minutes 45 seconds
   Server load: 0.54 0.50 0.44
   Total accesses: 9177 - Total Traffic: 228.5 MB - Total Duration: 4694562
   CPU Usage: u5.55 s2.55 cu114.41 cs94.83 - 12.2% CPU load
   5.14 requests/sec - 131.1 kB/second - 25.5 kB/request - 511.557 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

__W_.KW.._KKK.KK_WK__...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  23654 0/42/472  _ 1.14 2    1   230563 0.0   1.19  11.87 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   1-0  20767 0/96/487  _ 2.17 0    271 191972 0.0   2.82  10.29 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=896315555 HTTP/1.1
   2-0  22564 0/62/359  W 1.51 0    0   205036 0.0   1.53  8.91  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2108475655 HTTP/1.1
   3-0  19913 0/76/274  _ 1.94 1    7   151349 0.0   2.44  7.15  18.208.11.93  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/2019elections
   4-0  -     0/0/280   . 0.00 23   0   144539 0.0   0.00  6.92  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  23673 8/50/374  K 1.07 1    345 199885 242.0 1.14  10.64 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=204192222 HTTP/1.1
   6-0  25182 2/11/373  W 0.22 0    0   220457 58.0  0.45  12.61 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1012431932 HTTP/1.1
   7-0  -     0/0/392   . 0.00 54   0   216604 0.0   0.00  11.28 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  -     0/0/399   . 0.00 51   0   174354 0.0   0.00  8.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  23688 0/41/320  _ 1.08 0    0   198302 0.0   1.33  8.77  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-0 8960  5/301/386 K 7.93 3    263 230314 155.5 8.57  10.67 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=549021013 HTTP/1.1
   11-0 22085 10/61/308 K 1.69 2    264 192194 300.7 2.43  9.14  66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3568256018 HTTP/1.1
   12-0 17424 1/258/534 K 4.29 1    269 220147 30.1  4.86  10.62 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=719481490 HTTP/1.1
   13-0 -     0/0/268   . 0.00 43   0   159026 0.0   0.00  7.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 24886 1/15/424  K 0.39 2    447 196840 32.7  0.38  9.36  66.249.70.7   http/1.1 test.cloudware.ng:443      GET /1575041498?goodscode=1572977986 HTTP/1.1
   15-0 24920 5/15/465  K 0.59 1    410 218232 155.6 0.36  10.97 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3979978674 HTTP/1.1
   16-0 24921 0/10/262  _ 0.14 0    13  137908 0.0   0.16  5.97  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   17-0 19366 0/223/314 W 3.55 0    0   130007 0.0   3.99  6.35  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 23050 3/52/415  K 1.45 2    254 179347 90.6  1.50  8.56  66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1025306010 HTTP/1.1
   19-0 23096 0/52/251  _ 1.69 2    267 156262 0.0   1.68  7.70  66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3878168305 HTTP/1.1
   20-0 19368 0/137/194 _ 3.44 2    1   113320 0.0   3.91  5.24  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   21-0 -     0/0/148   . 0.00 148  0   79532  0.0   0.00  3.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/84    . 0.00 149  0   44067  0.0   0.00  2.21  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/162   . 0.00 565  0   105052 0.0   0.00  4.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/175   . 0.00 629  0   107633 0.0   0.00  5.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/53    . 0.00 802  0   28502  0.0   0.00  1.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/128   . 0.00 888  0   74689  0.0   0.00  3.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/252   . 0.00 853  0   91840  0.0   0.00  4.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/132   . 0.00 499  0   73828  0.0   0.00  3.67  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/84    . 0.00 735  0   48935  0.0   0.00  2.21  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/154   . 0.00 502  0   88624  0.0   0.00  4.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/58    . 0.00 627  0   26226  0.0   0.00  1.44  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/196   . 0.00 1163 0   58961  0.0   0.00  3.33  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 608
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...49)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 2689
   total entries replaced since starting: 0
   total entries expired since starting: 2080
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 41 miss
   total removes since starting: 5 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit