403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.11.54.txt
 ## swap threshold exceeded
## server overview
2025-11-15.11.54 load[0] mem[62/56] mysql[1/8] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1410         148          43         804         736
Swap:          1999        1212         787
 11:54:01 up  2:22,  0 users,  load average: 0.13, 0.15, 0.16
## system overview
top - 11:54:01 up  2:22,  0 users,  load average: 0.13, 0.15, 0.16
Tasks: 207 total,   3 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 43.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   131832 free,  1464308 used,   824160 buff/cache
KiB Swap:  2047996 total,   806396 free,  1241600 used.   733700 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1749 mysql     20   0 1462292 243056   4204 S  18.8 10.0   1:55.03 /usr/sbin+
 92665 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.02 /opt/cpan+
   358 root      20   0   39500   4928   4616 S   6.2  0.2   0:04.98 /usr/lib/+
 92674 pactpay   20   0  479860  16176  10576 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44424   3568   1684 S   0.0  0.1   0:12.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.29 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.08 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.30 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.32 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.44 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   383 root      20   0   45352    676    528 S   0.0  0.0   0:00.37 /usr/lib/+
   411 root      16  -4   55532    600    472 S   0.0  0.0   0:00.74 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   509 rpc       20   0   69256    324    216 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58716   1688    928 S   0.0  0.1   0:04.44 /usr/bin/+
   525 root      20   0  224280   7632   1844 S   0.0  0.3   0:00.25 queueproc+
   526 root      20   0   24704   1368   1012 R   0.0  0.1   0:01.98 /usr/lib/+
   530 root      20   0   21540    620    508 S   0.0  0.0   0:00.19 /usr/sbin+
   531 root      20   0  152780    492    448 S   0.0  0.0   0:00.00 /usr/sbin+
   533 root      20   0   52852    520    436 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  612240   3388    912 S   0.0  0.1   0:01.21 /usr/lib/+
   538 nscd      20   0  926904   1368    816 S   0.0  0.1   0:05.17 /usr/sbin+
   542 root      20   0    4388    280    276 S   0.0  0.0   0:00.00 /usr/sbin+
   544 root      20   0  195208    292    292 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   572 root      20   0  124480    720    588 S   0.0  0.0   0:00.25 /usr/sbin+
   573 root      20   0   24208    208    208 S   0.0  0.0   0:00.00 /usr/sbin+
   595 root      20   0  108296    376    372 S   0.0  0.0   0:00.00 /sbin/age+
   596 root      20   0  114704    416    416 S   0.0  0.0   0:00.02 /bin/bash
   633 mailnull  20   0   89120   4180   1132 S   0.0  0.2   0:00.19 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.31 [loop0]
   665 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   923 systuser  20   0  114016  10936   2592 S   0.0  0.5   0:02.20 /usr/loca+
   924 systuser  20   0  111608   1608      0 S   0.0  0.1   0:00.00 /usr/loca+
   928 root      20   0 1277312  13296    364 S   0.0  0.5   0:28.66 /usr/bin/+
   929 root      20   0  111304    852    756 S   0.0  0.0   0:01.08 /usr/sbin+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   931 memcach+  20   0  342400    276    276 S   0.0  0.0   0:00.18 /usr/bin/+
   934 root      20   0   51508    956    772 S   0.0  0.0   0:00.13 /usr/sbin+
   937 systuser  20   0  112524   2056      0 S   0.0  0.1   0:00.00 /usr/loca+
   938 root      20   0  572372   1348    764 S   0.0  0.1   0:00.80 /usr/bin/+
   939 root      20   0  261292   7532   2372 S   0.0  0.3   0:02.13 cpsrvd (S+
   940 root      20   0  396248    908    732 S   0.0  0.0   0:00.28 php-fpm: +
   941 named     20   0 1186868  37464   2368 S   0.0  1.5   0:04.84 /usr/sbin+
   950 root      20   0  439788  11632  11540 S   0.0  0.5   0:00.34 php-fpm: +
   958 root      20   0  400740   3416    972 S   0.0  0.1   0:01.39 php-fpm: +
   962 root      20   0  240976   7540   3928 S   0.0  0.3   0:02.45 /usr/sbin+
   963 root      20   0 1763124 390808   1408 S   0.0 16.1   0:13.95 /usr/loca+
   975 root      20   0  389508   1036    828 S   0.0  0.0   0:00.28 php-fpm: +
   978 root      20   0  153404    712    628 S   0.0  0.0   0:00.19 pure-ftpd+
   985 root      20   0  388892   1028    816 S   0.0  0.0   0:00.29 php-fpm: +
   986 root      20   0 1276356   9648    364 S   0.0  0.4   0:23.18 /usr/bin/+
   988 telegraf  20   0 5654048  36552   6028 S   0.0  1.5   0:05.08 /usr/loca+
   998 cpanelc+  20   0   10184   3304   2364 S   0.0  0.1   0:06.55 /usr/loca+
   999 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1000 root      20   0  445028   3044   3044 S   0.0  0.1   0:00.05 sw-engine+
  1076 dovenull  20   0   46912   2636   2032 S   0.0  0.1   0:00.12 dovecot/p+
  1077 dovenull  20   0   47328   3376   2400 S   0.0  0.1   0:00.06 dovecot/i+
  1078 dovecot   20   0   10320    636    524 S   0.0  0.0   0:00.02 dovecot/a+
  1079 root      20   0   10452    600    428 S   0.0  0.0   0:00.09 dovecot/l+
  1080 dovenull  20   0   46912   3012   2300 S   0.0  0.1   0:00.16 dovecot/p+
  1081 dovenull  20   0   47288   3272   2372 S   0.0  0.1   0:00.07 dovecot/i+
  1093 root      20   0   24556   2580    728 S   0.0  0.1   0:00.08 dovecot/c+
  1096 dovecot   20   0   13568    832    608 S   0.0  0.0   0:00.02 dovecot/s+
  1170 systuser  20   0  157708   3204   1156 S   0.0  0.1   0:00.06 SonarPush+
  1175 dovecot   20   0   41056   1620   1188 S   0.0  0.1   0:00.25 dovecot/a+
  1202 wp-tool+  20   0  387528  13512   1888 S   0.0  0.6   0:00.16 /usr/bin/+
  1203 wp-tool+  20   0  410452  37084   1988 S   0.0  1.5   0:07.35 /usr/bin/+
  1214 root      20   0  209436  21280   3752 S   0.0  0.9   0:01.20 tailwatchd
  1216 root      20   0  183900   6092   2864 S   0.0  0.3   0:00.36 cpdavd - +
  1219 root      20   0  167452   1672   1068 S   0.0  0.1   0:00.16 dnsadmin +
  1605 root      20   0  299272   1064    680 S   0.0  0.0   0:00.24 php-fpm: +
  1663 root      38  18  130416   1548    820 S   0.0  0.1   0:00.01 cpanellog+
  1911 root      20   0  266984   9844    912 S   0.0  0.4   0:00.72 /usr/sbin+
  1912 root      20   0   12816    628    524 S   0.0  0.0   0:00.72 /usr/loca+
  1913 root      20   0   12732    600    520 S   0.0  0.0   0:00.62 /usr/loca+
  1915 root      20   0   12864    604    492 S   0.0  0.0   0:00.69 /usr/loca+
  1922 root      20   0   53340    412    412 S   0.0  0.0   0:00.05 /usr/loca+
  2002 root      20   0  181868  11352   1344 S   0.0  0.5   0:08.02 lfd - sle+
 25822 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 25829 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.12 [kworker]
 44918 root      20   0       0      0      0 D   0.0  0.0   0:00.20 [kworker/+
 55735 root      20   0  248136 121288   4560 S   0.0  5.0   0:03.20 /usr/loca+
 58136 root      20   0  259788 126768   3100 S   0.0  5.2   0:03.91 spamd chi+
 58137 root      20   0  258860 125364   2840 S   0.0  5.2   0:00.37 spamd chi+
 71350 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 72675 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 73993 nobody    20   0  277728  22068   4980 S   0.0  0.9   0:02.20 /usr/sbin+
 76277 worencom  20   0   38364   2880   2076 S   0.0  0.1   0:00.00 dovecot/i+
 77024 nobody    20   0  277680  21512   4576 S   0.0  0.9   0:01.61 /usr/sbin+
 77104 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 77868 nobody    20   0  277684  21600   4736 S   0.0  0.9   0:01.42 /usr/sbin+
 81589 nobody    20   0  277624  21392   4512 S   0.0  0.9   0:01.18 /usr/sbin+
 82907 nobody    20   0  277828  21480   4532 S   0.0  0.9   0:01.18 /usr/sbin+
 85164 nobody    20   0  277588  21096   4300 S   0.0  0.9   0:00.71 /usr/sbin+
 85165 nobody    20   0  277592  20944   4224 S   0.0  0.9   0:00.84 /usr/sbin+
 85211 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86362 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 87365 nobody    20   0  277876  21124   4184 S   0.0  0.9   0:00.48 /usr/sbin+
 88639 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89186 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 89620 nobody    20   0  277844  20880   4000 S   0.0  0.9   0:00.28 /usr/sbin+
 89659 nobody    20   0  277568  20740   4096 S   0.0  0.9   0:00.24 /usr/sbin+
 90550 nobody    20   0  277556  20488   3924 S   0.0  0.8   0:00.25 /usr/sbin+
 92083 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92129 mailnull  20   0   90256   9708   4244 S   0.0  0.4   0:00.00 /usr/sbin+
 92138 mailnull  20   0   90256   9708   4244 S   0.0  0.4   0:00.01 /usr/sbin+
 92188 nobody    20   0  277472  20324   3836 S   0.0  0.8   0:00.06 /usr/sbin+
 92196 nobody    20   0  277744  20068   3392 S   0.0  0.8   0:00.04 /usr/sbin+
 92197 nobody    20   0  277488  19904   3432 S   0.0  0.8   0:00.05 /usr/sbin+
 92285 root      20   0   41052   2784   2128 S   0.0  0.1   0:00.00 dovecot/a+
 92286 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 92444 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 92513 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 92533 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 92570 nigeria   20   0  400460   5380   2180 S   0.0  0.2   0:00.00 php-fpm: +
 92571 root      20   0  157100   5076   3784 S   0.0  0.2   0:00.00 sshd: unk+
 92572 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: unk+
 92578 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 92579 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: unk+
 92580 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 92581 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 92596 nobody    20   0  277040  17960   2076 S   0.0  0.7   0:00.00 /usr/sbin+
 92597 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 92598 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 92600 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 92601 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92602 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92603 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92604 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92606 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92608 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92609 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92610 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92611 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92612 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92613 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92614 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92615 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92616 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 92617 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 92618 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 92641 root      20   0  160216   2236   1584 R   0.0  0.1   0:00.00 top -bcn1
 92642 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92643 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92644 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 92645 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92646 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 92647 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92648 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92650 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92651 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 92656 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92658 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 92659 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92660 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 92661 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92664 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 92668 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92675 saboakin  20   0  404052  15608  10156 S   0.0  0.6   0:00.00 /opt/cpan+
 92677 robocal+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 92678 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 92679 robocal+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 92681 robocal+  20   0  400440  12112   8312 R   0.0  0.5   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:31   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    09:31   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:31   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:31   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:31   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:31   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:31   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:31   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [xprtiod]
root        558  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   09:31   0:02  \_ [loop0]
root        665  0.0  0.0      0     0 ?        S    09:31   0:00  \_ [jbd2/loop0-8]
root        666  0.0  0.0      0     0 ?        S<   09:31   0:00  \_ [ext4-rsv-conver]
root      44918  0.0  0.0      0     0 ?        D    10:32   0:00  \_ [kworker/0:0]
root      71350  0.0  0.0      0     0 ?        S    11:18   0:00  \_ [kworker/1:2]
root      72675  0.0  0.0      0     0 ?        D    11:20   0:00  \_ [kworker/u200:0]
root      77104  0.0  0.0      0     0 ?        S    11:28   0:00  \_ [kworker/1:0]
root      85211  0.0  0.0      0     0 ?        D    11:41   0:00  \_ [kworker/1:3]
root      86362  0.0  0.0      0     0 ?        R    11:43   0:00  \_ [kworker/0:3]
root      88639  0.0  0.0      0     0 ?        S    11:47   0:00  \_ [kworker/1:4]
root      89186  0.0  0.0      0     0 ?        S    11:48   0:00  \_ [kworker/0:1]
root      92083  0.0  0.0      0     0 ?        S    11:53   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44424  3568 ?        Ss   09:31   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  4936 ?        Ss   09:31   0:04 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   676 ?        Ss   09:31   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   600 ?        S<sl 09:31   0:00 /sbin/auditd
rpc         509  0.0  0.0  69256   324 ?        Ss   09:31   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58716  1688 ?        Ss   09:31   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        525  0.0  0.3 224280  7632 ?        Ss   09:31   0:00 queueprocd - waiting up to 60s to process a task
root        526  0.0  0.0  24704  1368 ?        Rs   09:31   0:01 /usr/lib/systemd/systemd-logind
root        530  0.0  0.0  21540   620 ?        Ss   09:31   0:00 /usr/sbin/irqbalance --foreground
root        531  0.0  0.0 152780   492 ?        Ss   09:31   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        533  0.0  0.0  52852   520 ?        Ss   09:31   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.1 612240  3388 ?        Ssl  09:31   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        538  0.0  0.0 926904  1368 ?        Ssl  09:31   0:05 /usr/sbin/nscd
root        542  0.0  0.0   4388   280 ?        Ss   09:31   0:00 /usr/sbin/acpid
root        544  0.0  0.0 195208   292 ?        Ssl  09:31   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124480   720 ?        Ss   09:31   0:00 /usr/sbin/crond -n
root      92600  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92616  0.0  0.0 113284  1212 ?        Ss   11:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      92617  0.0  0.0 108052   360 ?        S    11:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      92618  0.0  0.0 113288  1520 ?        S    11:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      92686  0.0  0.0 153840  2092 ?        R    11:54   0:00  |               \_ ps auxf
root      92601  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92642  0.0  0.0  20164   804 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      92602  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92643  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      92603  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92656  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      92604  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92650  0.0  0.0  20164   804 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      92606  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92647  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      92608  0.0  0.0 183048  2144 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92648  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      92610  0.0  0.0 183048  2144 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92645  0.0  0.0  20164   804 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      92611  0.0  0.0 183048  2144 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92659  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      92612  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92646  0.0  0.0  20164   964 ?        Ss   11:54   0:00  |   \_ jailshell (pactpay) [92668] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92668  0.0  0.0  20164   260 ?        S    11:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92674  0.0  0.6 479860 16176 ?        Sl   11:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      92614  0.0  0.0 183048  2144 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root      92644  0.0  0.0  20164   964 ?        Ss   11:54   0:00  |   \_ jailshell (nigeria) [92661] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92661  0.0  0.0  20164   260 ?        S    11:54   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92665  0.0  0.6 404052 16140 ?        S    11:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      92615  0.0  0.0      0     0 ?        Z    11:54   0:00  \_ [crond] <defunct>
root        573  0.0  0.0  24208   208 ?        Ss   09:31   0:00 /usr/sbin/atd -f
root        595  0.0  0.0 108296   376 tty1     Ss+  09:31   0:00 /sbin/agetty --noclear tty1 linux
root        596  0.0  0.0 114704   416 ttyS0    Ss+  09:31   0:00 /bin/bash
mailnull    633  0.0  0.1  89120  4180 ?        Ss   09:31   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  92129  0.0  0.4  90256  9708 ?        S    11:53   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  92138  0.0  0.4  90256  9708 ?        S    11:53   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    923  0.0  0.4 114016 10936 ?        Ssl  09:32   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    924  0.0  0.0 111608  1608 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        928  0.3  0.5 1277312 13296 ?       Ssl  09:32   0:28 /usr/bin/checkstatus
root        929  0.0  0.0 111304   852 ?        Ss   09:32   0:01 /usr/sbin/sshd -D
root      92513  0.0  0.1 111304  4264 ?        Ss   11:53   0:00  \_ sshd: [accepted]
root      92571  0.0  0.2 157100  5076 ?        Ss   11:53   0:00  \_ sshd: unknown [priv]
sshd      92572  0.0  0.1 115644  2628 ?        S    11:53   0:00  |   \_ sshd: unknown [net]
root      92578  0.0  0.2 157100  5076 ?        Ss   11:53   0:00  \_ sshd: unknown [priv]
sshd      92579  0.0  0.1 115644  2624 ?        S    11:53   0:00  |   \_ sshd: unknown [net]
root      92580  0.0  0.1 111304  4440 ?        Ss   11:53   0:00  \_ sshd: [accepted]
sshd      92581  0.0  0.1 115644  2628 ?        S    11:53   0:00  |   \_ sshd: [net]
root      92597  0.0  0.2 157100  5068 ?        Ss   11:54   0:00  \_ sshd: unknown [priv]
sshd      92598  0.0  0.1 115644  2628 ?        S    11:54   0:00      \_ sshd: unknown [net]
systuser    930  0.0  0.0  10132    48 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
memcach+    931  0.0  0.0 342400   276 ?        Ssl  09:32   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        934  0.0  0.0  51508   956 ?        Ss   09:32   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1076  0.0  0.1  46912  2636 ?        S    09:32   0:00  \_ dovecot/pop3-login
dovenull   1077  0.0  0.1  47328  3376 ?        S    09:32   0:00  \_ dovecot/imap-login
dovecot    1078  0.0  0.0  10320   636 ?        S    09:32   0:00  \_ dovecot/anvil
root       1079  0.0  0.0  10452   600 ?        S    09:32   0:00  \_ dovecot/log
dovenull   1080  0.0  0.1  46912  3012 ?        S    09:32   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47288  3272 ?        S    09:32   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24556  2580 ?        S    09:32   0:00  \_ dovecot/config
dovecot    1096  0.0  0.0  13568   832 ?        S    09:32   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41056  1620 ?        S    09:32   0:00  \_ dovecot/auth
worencom  76277  0.0  0.1  38364  2880 ?        S    11:26   0:00  \_ dovecot/imap
root      92285  0.0  0.1  41052  2784 ?        S    11:53   0:00  \_ dovecot/auth -w
root      92286  0.0  0.1  41052  2724 ?        S    11:53   0:00  \_ dovecot/auth -w
root      92444  0.0  0.0  28936  2372 ?        S    11:53   0:00  \_ dovecot/quota-status -p postfix
systuser    937  0.0  0.0 112524  2056 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 572372  1348 ?        Ssl  09:32   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        939  0.0  0.3 261292  7532 ?        Ss   09:32   0:02 cpsrvd (SSL) - waiting for connections                   
root      92533  0.0  0.0      0     0 ?        Z    11:53   0:00  \_ [cpaneld - servi] <defunct>
root        940  0.0  0.0 396248   908 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       941  0.0  1.5 1186868 37464 ?       Ssl  09:32   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        950  0.0  0.4 439788 11632 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        958  0.0  0.1 400740  3416 ?        Ss   09:32   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   92570  0.0  0.2 400460  5380 ?        S    11:53   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 240976  7552 ?        Ssl  09:32   0:02 /usr/sbin/rsyslogd -n
root        963  0.1 16.1 1763124 390808 ?      Ssl  09:32   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.0 389508  1036 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        978  0.0  0.0 153404   712 ?        Ss   09:32   0:00 pure-ftpd (SERVER)
root        985  0.0  0.0 388892  1028 ?        Ss   09:32   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.2  0.3 1276356 9648 ?        Ssl  09:32   0:23 /usr/bin/cspdaemon
telegraf    988  0.0  1.5 5654048 36552 ?       SLsl 09:32   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
cpanelc+    998  0.0  0.1  10184  3304 ?        Ss   09:32   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    999  0.0  0.0  14068    48 ?        Ssl  09:32   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1000  0.0  0.1 445028  3044 ?        Ss   09:32   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1170  0.0  0.1 157708  3204 ?        S    09:32   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1202  0.0  0.5 387528 13512 ?        Ss   09:32   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1203  0.0  1.5 410452 37084 ?        Ss   09:32   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1214  0.0  0.8 209436 21280 ?        Ss   09:32   0:01 tailwatchd
root       1216  0.0  0.2 183900  6092 ?        Ss   09:32   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1219  0.0  0.0 167452  1672 ?        Ss   09:32   0:00 dnsadmin - dormant mode
root       1605  0.0  0.0 299272  1064 ?        Ss   09:32   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1663  0.0  0.0 130416  1548 ?        SN   09:32   0:00 cpanellogd - sleeping for logs
mysql      1749  1.3 10.0 1462292 243056 ?      Sl   09:32   1:55 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1911  0.0  0.4 266984  9844 ?        Ss   09:32   0:00 /usr/sbin/httpd -k start
root       1912  0.0  0.0  12816   628 ?        S    09:32   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1913  0.0  0.0  12732   600 ?        S    09:32   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1915  0.0  0.0  12864   604 ?        S    09:32   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1922  0.0  0.0  53340   412 ?        S    09:32   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    73993  0.1  0.9 277728 22068 ?        S    11:22   0:02  \_ /usr/sbin/httpd -k start
nobody    77024  0.1  0.8 277680 21512 ?        S    11:27   0:01  \_ /usr/sbin/httpd -k start
nobody    77868  0.0  0.8 277684 21600 ?        S    11:28   0:01  \_ /usr/sbin/httpd -k start
nobody    81589  0.1  0.8 277624 21392 ?        S    11:34   0:01  \_ /usr/sbin/httpd -k start
nobody    82907  0.1  0.8 277828 21480 ?        S    11:37   0:01  \_ /usr/sbin/httpd -k start
nobody    85164  0.0  0.8 277588 21096 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    92687  0.0  0.5 297236 13176 ?        S    11:54   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    85165  0.1  0.8 277592 20944 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    87365  0.0  0.8 277876 21124 ?        S    11:44   0:00  \_ /usr/sbin/httpd -k start
nobody    89620  0.0  0.8 277844 20880 ?        S    11:48   0:00  \_ /usr/sbin/httpd -k start
nobody    89659  0.0  0.8 277568 20740 ?        S    11:48   0:00  \_ /usr/sbin/httpd -k start
nobody    90550  0.1  0.8 277556 20488 ?        S    11:50   0:00  \_ /usr/sbin/httpd -k start
nobody    92188  0.1  0.8 277472 20324 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody    92196  0.0  0.8 277744 20068 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody    92197  0.1  0.8 277488 19904 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody    92596  0.0  0.7 277040 17960 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
root       2002  0.0  0.4 181868 11352 ?        Ss   09:32   0:08 lfd - sleeping
oysipao+  25822  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  25829  0.0  0.0   3152   424 ?        S    10:01   0:00  \_ [kworker]
root      55735  0.0  5.0 248136 121288 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      58136  0.1  5.2 259788 126768 ?       S    10:54   0:03  \_ spamd child
root      58137  0.0  5.1 258860 125364 ?       S    10:54   0:00  \_ spamd child
## mysql stats
Uptime: 30230  Threads: 3  Questions: 615169  Slow queries: 0  Opens: 4435  Flush tables: 1  Open tables: 2000  Queries per second avg: 20.349
*************************** 1. row ***************************
     Id: 9707
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 2. row ***************************
     Id: 9708
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 9714
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.224.65.220 TIME_WAIT
      1 114.119.133.34 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 57.141.0.41 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 11:54:01 WAT
   Restart Time: Saturday, 15-Nov-2025 03:30:16 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 23 minutes 44 seconds
   Server load: 0.13 0.15 0.16
   Total accesses: 31432 - Total Traffic: 818.9 MB - Total Duration: 58414310
   CPU Usage: u7.6 s3.65 cu415.01 cs303.81 - 2.42% CPU load
   1.04 requests/sec - 27.7 kB/second - 26.7 kB/request - 1858.43 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K__KWRK._KKKRW_K................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  89620 4/62/1635  K 1.10 1     390 795999   119.4 1.92  44.47 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=837048
   1-0  92596 0/1/1839   _ 0.00 0     1   44238280 0.0   0.01  45.54 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  87365 0/97/1614  _ 2.28 1     26  780162   0.0   2.54  40.84 116.203.129.16 http/1.1 cloudsms.com.ng:443        GET /cron/process_queue1.php HTTP/1.1
   3-0  77024 1/384/1668 K 6.91 3     265 782208   30.9  8.20  41.48 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=404073
   4-0  85164 0/130/1657 W 3.28 0     0   760183   0.0   4.00  41.36 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=198619
   5-0  81589 0/232/1535 R 4.94 1     25  761500   0.0   7.21  40.36 102.91.92.180  http/1.1
   6-0  89659 2/50/1714  K 0.82 2     335 816019   59.1  1.40  60.45 66.249.70.8    http/1.1 test.cloudware.ng:443      GET /183901568?goodscode=0183661306 HTTP/1.1
   7-0  -     0/0/1446   . 0.00 42    0   654783   0.0   0.00  39.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  92188 0/11/1524  _ 0.22 0     24  762151   0.0   0.24  38.81 128.140.8.200  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   9-0  73993 1/497/1649 K 9.90 1     388 706613   29.7  10.09 36.40 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=561449
   10-0 82907 2/221/1556 K 5.25 2     391 874126   61.9  6.16  53.18 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=655431
   11-0 92196 1/7/1442   K 0.15 3     343 735435   33.3  0.19  38.00 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=3343697286 HTTP/1.1
   12-0 77868 0/280/1845 R 6.35 24    436 713547   0.0   8.65  39.18 102.91.92.180  http/1.1
   13-0 92197 0/9/1190   W 0.20 0     0   608228   0.0   0.22  29.18 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-0 90550 0/57/1477  _ 1.07 0     10  705231   0.0   1.70  39.45 191.242.52.173 http/1.1
   15-0 85165 3/146/1260 K 3.70 1     345 605492   94.3  4.55  30.87 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=124695
   16-0 -     0/0/998    . 0.00 1887  0   459379   0.0   0.00  22.41 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/1099   . 0.00 1068  0   450921   0.0   0.00  22.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/950    . 0.00 2017  0   411547   0.0   0.00  19.27 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/358    . 0.00 1913  0   222411   0.0   0.00  10.42 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/357    . 0.00 2005  0   198218   0.0   0.00  9.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/299    . 0.00 2007  0   156776   0.0   0.00  7.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/248    . 0.00 1964  0   149718   0.0   0.00  6.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/332    . 0.00 1914  0   202276   0.0   0.00  17.29 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/202    . 0.00 2013  0   135986   0.0   0.00  6.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/153    . 0.00 1592  0   78234    0.0   0.00  3.82  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/235    . 0.00 2012  0   118385   0.0   0.00  6.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/358    . 0.00 1532  4   140950   0.0   0.00  7.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/280    . 0.00 3702  0   151172   0.0   0.00  10.21 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/102    . 0.00 26189 0   57399    0.0   0.00  2.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/156    . 0.00 26252 19  95777    0.0   0.00  4.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/58     . 0.00 29066 0   26226    0.0   0.00  1.44  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/196    . 0.00 29603 0   58961    0.0   0.00  3.33  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 565
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 25 seconds, (range: 1...83)
   index usage: 9%, cache usage: 13%
   total entries stored since starting: 15993
   total entries replaced since starting: 0
   total entries expired since starting: 15413
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 97 miss
   total removes since starting: 18 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit