403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.11.45.txt
 ## swap threshold exceeded
## server overview
2025-11-17.11.45 load[0] mem[62/70] mysql[3/25] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1397         173          44         792         759
Swap:          1999        1489         510
 11:45:01 up  6:24,  0 users,  load average: 0.28, 0.37, 0.45
## system overview
top - 11:45:01 up  6:24,  0 users,  load average: 0.28, 0.37, 0.45
Tasks: 207 total,   6 running, 201 sleeping,   0 stopped,   0 zombie
%Cpu(s): 82.4 us, 17.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   149392 free,  1444820 used,   826088 buff/cache
KiB Swap:  2047996 total,   522840 free,  1525156 used.   763864 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 271932   3164 S 147.1 11.2   5:24.60 /usr/sbin+
 37484 nigeria   20   0  404052  16136  10380 S  11.8  0.7   0:00.07 /opt/cpan+
 37489 pactpay   20   0  480124  17688  11892 S   5.9  0.7   0:00.02 /opt/cpan+
 37509 root      20   0  160224   2352   1636 S   5.9  0.1   0:00.01 top -n 2 +
 37566 zabymmmd  20   0  190488  14088   4696 R   5.9  0.6   0:00.01 /usr/loca+
     1 root      20   0   44400   3364   1468 S   0.0  0.1   0:30.87 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.58 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.31 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:25.50 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.29 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.67 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:53.01 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:05.02 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.00 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   2572   2332 S   0.0  0.1   0:13.23 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    180     52 S   0.0  0.0   0:02.06 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    836    460 S   0.0  0.0   0:03.24 /usr/lib/+
   476 root      20   0   24716   1156    792 S   0.0  0.0   0:05.44 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.51 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    100      0 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1328    600 S   0.0  0.1   0:12.48 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1348    668 S   0.0  0.1   0:22.52 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   4968   1120 S   0.0  0.2   0:00.39 queueproc+
   545 root      20   0  124480    428    296 S   0.0  0.0   0:00.67 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3276    360 S   0.0  0.1   0:00.42 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.77 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.95 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  290128   2972   2292 S   0.0  0.1   0:06.70 /usr/sbin+
   918 named     20   0 1185864  36280   1956 S   0.0  1.5   0:15.89 /usr/sbin+
   919 root      20   0 1828136 314608    916 S   0.0 13.0   0:35.59 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    608    428 S   0.0  0.0   0:00.28 /usr/sbin+
   926 root      20   0  572372    764    300 S   0.0  0.0   0:02.06 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.91 sw-engine+
   937 root      20   0  439788    408    316 S   0.0  0.0   0:00.89 php-fpm: +
   938 systuser  20   0  114016  13436   2204 S   0.0  0.6   0:05.67 /usr/loca+
   939 root      20   0  261296   5720    960 S   0.0  0.2   0:05.24 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.30 /usr/bin/+
   944 root      20   0 1276356   6524      4 S   0.0  0.3   0:24.95 /usr/bin/+
   947 cpanelc+  20   0   10400   3328   2396 R   0.0  0.1   0:19.60 /usr/loca+
   952 root      20   0  396248    272    188 S   0.0  0.0   0:00.80 php-fpm: +
   957 root      20   0  388892    356    260 S   0.0  0.0   0:00.81 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  35052   5852 S   0.0  1.4   0:13.14 /usr/loca+
   964 root      20   0  153404    292    188 S   0.0  0.0   0:00.48 pure-ftpd+
   967 root      20   0  400740    776    604 S   0.0  0.0   0:03.90 php-fpm: +
   968 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.51 /usr/bin/+
   974 root      20   0  389508    376    288 S   0.0  0.0   0:00.76 php-fpm: +
  1080 dovenull  20   0   47332   2628   1540 S   0.0  0.1   0:00.38 dovecot/p+
  1081 dovenull  20   0   48020   3104   1748 S   0.0  0.1   0:00.22 dovecot/i+
  1082 dovecot   20   0   10320    208    100 S   0.0  0.0   0:00.05 dovecot/a+
  1083 root      20   0   10452    452    256 S   0.0  0.0   0:00.26 dovecot/l+
  1084 dovenull  20   0   47520   3324   2140 S   0.0  0.1   0:00.47 dovecot/p+
  1085 dovenull  20   0   47764   3160   1812 S   0.0  0.1   0:00.20 dovecot/i+
  1091 root      20   0   24396   2412    496 S   0.0  0.1   0:00.16 dovecot/c+
  1095 dovecot   20   0   13568    604    404 S   0.0  0.0   0:00.06 dovecot/s+
  1160 dovecot   20   0   41160   1484   1004 S   0.0  0.1   0:00.49 dovecot/a+
  1168 systuser  20   0  157704   2972   1004 S   0.0  0.1   0:00.12 SonarPush+
  1176 wp-tool+  20   0  387556   3148   1232 S   0.0  0.1   0:00.28 /usr/bin/+
  1177 wp-tool+  20   0  412368   9640   1244 S   0.0  0.4   0:07.58 /usr/bin/+
  1211 root      20   0  209332  19292   1900 S   0.0  0.8   0:02.96 tailwatchd
  1213 root      20   0  262224  24620   6760 S   0.0  1.0   0:01.31 cpdavd - +
  1216 root      20   0  228228  18884   5980 S   0.0  0.8   0:00.51 dnsadmin +
  1627 root      20   0  299272    452    288 S   0.0  0.0   0:00.63 php-fpm: +
  1673 root      38  18  130416   1352    684 S   0.0  0.1   0:00.06 cpanellog+
  1928 root      20   0  266984   4960    472 S   0.0  0.2   0:02.95 /usr/sbin+
  1932 root      20   0   12832    324    212 S   0.0  0.0   0:03.04 /usr/loca+
  1933 root      20   0   12732    276    196 S   0.0  0.0   0:02.65 /usr/loca+
  1934 root      20   0   12868    332    216 S   0.0  0.0   0:02.88 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  5994 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 10515 root      30  10  132964     44      0 S   0.0  0.0   0:00.00 ConfigSer+
 10528 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 161+
 19658 nobody    20   0  277860  19732   4672 S   0.0  0.8   0:01.90 /usr/sbin+
 21099 nobody    20   0  277548  19992   5080 S   0.0  0.8   0:01.94 /usr/sbin+
 21262 nobody    20   0  277896  19868   4772 S   0.0  0.8   0:01.69 /usr/sbin+
 22290 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 24600 nobody    20   0  277680  19764   4820 S   0.0  0.8   0:01.50 /usr/sbin+
 24753 worencom  20   0   38444   3588   2636 S   0.0  0.1   0:00.00 dovecot/i+
 25361 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29937 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30447 nobody    20   0  277744  18068   4124 S   0.0  0.7   0:01.02 /usr/sbin+
 30463 nobody    20   0  277744  18596   4180 S   0.0  0.8   0:00.62 /usr/sbin+
 30464 nobody    20   0  277680  18448   4324 S   0.0  0.8   0:00.49 /usr/sbin+
 30486 nobody    20   0  277676  19108   4492 S   0.0  0.8   0:00.81 /usr/sbin+
 30489 nobody    20   0  277744  18792   4372 S   0.0  0.8   0:00.83 /usr/sbin+
 31437 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31577 nobody    20   0  277744  19004   4432 S   0.0  0.8   0:00.63 /usr/sbin+
 31787 nobody    20   0  277744  19092   4472 S   0.0  0.8   0:00.44 /usr/sbin+
 34016 nobody    20   0  277756  18760   4216 S   0.0  0.8   0:00.43 /usr/sbin+
 34076 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34436 nobody    20   0  277744  18688   4356 S   0.0  0.8   0:00.30 /usr/sbin+
 34787 nobody    20   0  277876  18208   4104 S   0.0  0.8   0:00.28 /usr/sbin+
 35864 nobody    20   0  277876  18056   3996 S   0.0  0.7   0:00.16 /usr/sbin+
 35865 nobody    20   0  277744  17616   3580 S   0.0  0.7   0:00.11 /usr/sbin+
 36177 nobody    20   0  277460  17404   3764 S   0.0  0.7   0:00.07 /usr/sbin+
 36374 nobody    20   0  277744  16964   3244 S   0.0  0.7   0:00.15 /usr/sbin+
 36402 zabymmmd  20   0  271892  18420   4200 S   0.0  0.8   0:00.04 cpaneld -+
 36417 zabymmmd  20   0  275232  16484   4084 S   0.0  0.7   0:00.03 cpaneld -+
 36462 nobody    20   0  277928  18428   3896 S   0.0  0.8   0:00.05 /usr/sbin+
 36541 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36588 zabymmmd  20   0  267684  16804   4032 S   0.0  0.7   0:00.03 cpaneld -+
 36757 nobody    20   0  277876  17620   3736 S   0.0  0.7   0:00.12 /usr/sbin+
 36774 nobody    20   0  277740  17872   3868 S   0.0  0.7   0:00.05 /usr/sbin+
 36775 nobody    20   0  277876  18036   3776 S   0.0  0.7   0:00.09 /usr/sbin+
 36856 zabymmmd  20   0  270440  15900   4040 S   0.0  0.7   0:00.01 cpaneld -+
 36881 zabymmmd  20   0  266928  16724   4456 S   0.0  0.7   0:00.01 cpaneld -+
 36882 zabymmmd  20   0  266156  16320   4460 S   0.0  0.7   0:00.01 cpaneld -+
 36915 zabymmmd  20   0  267152  16512   4060 S   0.0  0.7   0:00.01 cpaneld -+
 36928 zabymmmd  20   0  261428  14248   3808 S   0.0  0.6   0:00.00 cpaneld -+
 36929 zabymmmd  20   0  262420  15816   4020 S   0.0  0.7   0:00.00 cpaneld -+
 37052 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 37245 nigeria   20   0  400460   4424   2332 S   0.0  0.2   0:00.01 php-fpm: +
 37413 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37415 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37416 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37417 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37418 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37419 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37422 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37423 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37424 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37425 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37427 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37444 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 /usr/loca+
 37445 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 37449 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37450 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37451 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37452 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37453 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 37454 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37455 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 37456 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 37459 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 37462 root      20   0  188232  11108   5148 S   0.0  0.5   0:00.01 /usr/loca+
 37467 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 37475 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 37477 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 37481 zabymmmd  20   0  261736  13864   3764 S   0.0  0.6   0:00.00 cpaneld -+
 37482 root      20   0  261428   8060   1908 S   0.0  0.3   0:00.00 cpsrvd (S+
 37483 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 37564 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 37565 zabymmmd  20   0  184300  11484   4360 R   0.0  0.5   0:00.00 /usr/loca+
 37567 root      20   0   38516   5820   2928 R   0.0  0.2   0:00.00 /usr/loca+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.43 [kworker]
 40218 root      20   0  183312  10816   1100 S   0.0  0.4   0:20.88 lfd - sle+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 81155 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 92278 root      20   0  248096 117672   1036 S   0.0  4.9   0:03.14 /usr/loca+
 98393 root      20   0  259724 125892   2496 S   0.0  5.2   0:01.93 spamd chi+
 98394 root      20   0  248096 117076    480 S   0.0  4.8   0:00.00 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    05:20   0:25  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:53  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:05  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      37613  0.0  0.0      0     0 ?        S    09:55   0:00  \_ [kworker/1:1]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root      81155  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:4]
root       4438  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/u200:1]
root       5994  0.0  0.0      0     0 ?        S    11:06   0:00  \_ [kworker/1:4]
root      22290  0.0  0.0      0     0 ?        S    11:26   0:00  \_ [kworker/1:0]
root      25361  0.0  0.0      0     0 ?        S    11:30   0:00  \_ [kworker/0:0]
root      29937  0.0  0.0      0     0 ?        S    11:36   0:00  \_ [kworker/0:2]
root      31437  0.0  0.0      0     0 ?        S    11:38   0:00  \_ [kworker/0:3]
root      34076  0.0  0.0      0     0 ?        S    11:41   0:00  \_ [kworker/1:2]
root      36541  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44400  3364 ?        Ss   05:20   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  2572 ?        Ss   05:20   0:13 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   180 ?        S<sl 05:20   0:02 /sbin/auditd
root        470  0.0  0.0 152780    80 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   836 ?        Ssl  05:20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1156 ?        Ss   05:20   0:05 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   100 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1328 ?        Ss   05:20   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1348 ?        Ssl  05:20   0:22 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  4968 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   428 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      37413  0.0  0.0 183048  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37455  0.0  0.0 113284  1208 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      37467  0.0  0.0 108052   356 ?        S    11:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      37475  0.0  0.0 113288  1516 ?        S    11:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      37568  0.0  0.0 153840  2096 ?        R    11:45   0:00  |               \_ ps auxf
root      37415  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37454  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      37416  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37456  0.0  0.0  20164   812 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      37417  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37452  0.0  0.0  20164   804 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      37418  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37451  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      37419  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37444  0.0  0.0  20164   984 ?        Ss   11:45   0:00  |   \_ jailshell (cloudsms) [37569] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  37569  0.0  0.0  20164   256 ?        S    11:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  37570  0.0  0.0 113284  1212 ?        S    11:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      37422  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37449  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      37423  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37450  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      37424  0.0  0.0 183048  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37453  0.0  0.0 113284  1212 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      37462  1.0  0.4 188232 11108 ?        S    11:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      37509  1.0  0.0 160224  2352 ?        S    11:45   0:00  |           \_ top -n 2 -b -c
root      37425  0.0  0.0 183048  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37459  0.0  0.0  20164   968 ?        Ss   11:45   0:00  |   \_ jailshell (pactpay) [37483] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37483  0.0  0.0  20164   264 ?        S    11:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37489  2.0  0.7 480124 17688 ?        S    11:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      37427  0.0  0.0 183048  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      37445  0.0  0.0  20164   968 ?        Ss   11:45   0:00      \_ jailshell (nigeria) [37477] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37477  0.0  0.0  20164   260 ?        S    11:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37484  8.0  0.6 404052 16136 ?        S    11:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3276 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:02 /usr/sbin/sshd -D
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 290128  2972 ?        Ssl  05:20   0:06 /usr/sbin/rsyslogd -n
named       918  0.0  1.4 1185864 36280 ?       Ssl  05:20   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 12.9 1828136 314608 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   608 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47332  2628 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48020  3104 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   208 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   452 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47520  3324 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47764  3160 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24396  2412 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   604 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1484 ?        S    05:20   0:00  \_ dovecot/auth
worencom  24753  0.0  0.1  38444  3588 ?        S    11:29   0:00  \_ dovecot/imap
root        926  0.0  0.0 572372   764 ?        Ssl  05:20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   05:20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  37052  0.0  0.0 445028   312 ?        S    11:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   408 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13436 ?        Ssl  05:20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  5720 ?        Ss   05:20   0:05 cpsrvd (SSL) - waiting for connections                   
zabymmmd  36402  0.0  0.7 271892 18420 ?        S    11:43   0:00  \_ cpaneld - serving 102.211.164.2
zabymmmd  37565  0.0  0.6 194416 16592 ?        R    11:45   0:00  |   \_ /usr/local/cpanel/uapi --json-connect
zabymmmd  36417  0.0  0.6 275232 16484 ?        S    11:43   0:00  \_ cpaneld - serving 102.211.164.2
zabymmmd  36588  0.0  0.6 267684 16804 ?        S    11:44   0:00  \_ cpaneld - serving 102.211.164.2
zabymmmd  36856  0.0  0.6 270440 15900 ?        S    11:44   0:00  \_ cpaneld - serving 102.211.164.2
zabymmmd  36881  0.0  0.6 266928 16724 ?        S    11:44   0:00  \_ cpaneld - serving 154.113.160.25
zabymmmd  36882  0.0  0.6 266156 16320 ?        S    11:44   0:00  \_ cpaneld - serving 154.113.160.25
zabymmmd  36915  0.0  0.6 267152 16512 ?        S    11:44   0:00  \_ cpaneld - serving 154.113.160.25
zabymmmd  36928  0.0  0.5 261428 14248 ?        S    11:44   0:00  \_ cpaneld - serving 154.113.160.25
zabymmmd  36929  0.0  0.6 262420 15816 ?        S    11:44   0:00  \_ cpaneld - serving 154.113.160.25
zabymmmd  37481  0.0  0.5 261736 13864 ?        S    11:45   0:00  \_ cpaneld - serving 102.211.164.2
zabymmmd  37566  0.0  0.6 194152 15944 ?        R    11:45   0:00  |   \_ /usr/local/cpanel/uapi --json-connect
root      37482  0.0  0.3 261428  8060 ?        S    11:45   0:00  \_ cpsrvd (SSL) - waiting for connections                   
root        943  0.0  0.1 1277312 3688 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6524 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3328 ?        Ss   05:20   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   272 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   356 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35052 ?       SLsl 05:20   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   292 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   776 ?        Ss   05:20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   37245  0.0  0.1 400460  4424 ?        S    11:44   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    68 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   376 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.1 157704  2972 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3148 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  9640 ?        Ss   05:20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.7 209332 19292 ?        Ss   05:20   0:02 tailwatchd
root       1213  0.0  1.0 262224 24620 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.7 228228 18884 ?        Ss   05:20   0:00 dnsadmin - server mode
root       1627  0.0  0.0 299272   452 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1352 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4960 ?        Ss   05:20   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12832   324 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   276 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12868   332 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    19658  0.1  0.8 277860 19732 ?        S    11:22   0:01  \_ /usr/sbin/httpd -k start
nobody    21099  0.1  0.8 277548 19992 ?        S    11:24   0:01  \_ /usr/sbin/httpd -k start
nobody    21262  0.1  0.8 277896 19868 ?        S    11:24   0:01  \_ /usr/sbin/httpd -k start
nobody    24600  0.1  0.8 277680 19764 ?        S    11:29   0:01  \_ /usr/sbin/httpd -k start
nobody    30447  0.2  0.7 277744 18068 ?        S    11:36   0:01  \_ /usr/sbin/httpd -k start
nobody    30463  0.1  0.7 277744 18596 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    30464  0.0  0.7 277680 18448 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    30486  0.1  0.7 277676 19108 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    30489  0.1  0.7 277744 18792 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    31577  0.1  0.7 277744 19004 ?        S    11:38   0:00  \_ /usr/sbin/httpd -k start
nobody    31787  0.1  0.7 277744 19092 ?        S    11:38   0:00  \_ /usr/sbin/httpd -k start
nobody    34016  0.1  0.7 277756 18760 ?        S    11:40   0:00  \_ /usr/sbin/httpd -k start
nobody    34436  0.1  0.7 277744 18688 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    34787  0.1  0.7 277876 18208 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    35864  0.1  0.7 277876 18056 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    35865  0.1  0.7 277744 17616 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    36177  0.0  0.7 277460 17404 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    36374  0.2  0.7 277744 16964 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    36462  0.0  0.7 277928 18428 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    36757  0.2  0.7 277876 17620 ?        S    11:44   0:00  \_ /usr/sbin/httpd -k start
nobody    36774  0.1  0.7 277740 17872 ?        S    11:44   0:00  \_ /usr/sbin/httpd -k start
nobody    36775  0.1  0.7 277876 18036 ?        S    11:44   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 11.2 1468028 271932 ?      Sl   05:21   5:24 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183312 10816 ?        Ss   06:01   0:20 lfd - sleeping
root      10515  0.0  0.0 132964    44 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056     0 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.0  4.8 248096 117672 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.0  5.2 259724 125892 ?       S    10:55   0:01  \_ spamd child
root      98394  0.0  4.8 248096 117076 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 44728  Threads: 3  Questions: 1847008  Slow queries: 0  Opens: 10320  Flush tables: 1  Open tables: 2000  Queries per second avg: 41.294
*************************** 1. row ***************************
     Id: 26580
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 26581
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 26590
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.23.187.238 TIME_WAIT
      1 104.23.190.17 TIME_WAIT
      1 104.23.190.93 TIME_WAIT
      1 104.23.253.4 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 15.235.98.200 TIME_WAIT
      1 162.158.154.55 TIME_WAIT
      1 162.158.62.158 TIME_WAIT
      1 172.70.111.52 TIME_WAIT
      1 172.71.203.70 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.98.186.202 TIME_WAIT
      1 51.161.37.234 TIME_WAIT
      1 54.39.6.201 TIME_WAIT
      1 64.90.54.26 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 67.23.236.167 TIME_WAIT
      3 45.82.78.113 TIME_WAIT
      5 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 11:45:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 26 minutes 12 seconds
   Server load: 0.28 0.37 0.45
   Total accesses: 137487 - Total Traffic: 3.4 GB - Total Duration: 113631247
   CPU Usage: u9.94 s6.69 cu1874.31 cs1545.85 - 7.68% CPU load
   3.07 requests/sec - 79.7 kB/second - 26.0 kB/request - 826.487 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

.KWKKK_KK.K.R_.._K_WRKK_K.....K.._..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur    Conn  Child  Slot      Client      Protocol          VHost                                       Request
   0-0  -     0/0/5923    . 0.00 7    0   3088134  0.0   0.00  149.46 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   1-0  34436 1/54/5399   K 1.25 1    283 2863699  33.9  1.36  155.31 66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=2977034756 HTTP/1.1
   2-0  34016 0/73/5823   W 1.84 0    0   2833033  0.0   1.90  142.89 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   3-0  36177 1/14/5739   K 0.23 0    494 2871289  34.9  0.30  146.10 66.249.64.69    http/1.1 team.cloudware.ng:443    GET /?l=1753393387 HTTP/1.1
   4-0  21262 1/294/5544  K 7.70 3    371 2701649  33.4  7.70  142.95 192.178.4.103   http/1.1 team.cloudware.ng:443    GET /?l=3184274836 HTTP/1.1
   5-0  34787 1/55/5379   K 1.25 1    306 2698047  36.4  1.39  136.76 66.249.64.40    http/1.1 team.cloudware.ng:443    GET /?l=1854350434 HTTP/1.1
   6-0  36374 0/21/5539   _ 0.61 1    400 2803817  0.0   0.65  144.94 192.178.4.96    http/1.1 team.cloudware.ng:443    GET /?l=2913592797 HTTP/1.1
   7-0  36462 1/13/5275   K 0.15 2    6   2716505  10.6  0.20  134.85 192.178.4.103   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Borno&lga=Ngala&ward=Sagir
   8-0  36757 5/21/5359   K 0.55 3    354 2616413  157.1 0.56  129.67 192.178.4.105   http/1.1 team.cloudware.ng:443    GET /?l=4215806078 HTTP/1.1
   9-0  -     0/0/5263    . 0.00 17   0   2626140  0.0   0.00  132.01 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   10-0 36774 1/10/5067   K 0.16 2    342 2549835  34.1  0.41  130.36 66.249.64.11    http/1.1 team.cloudware.ng:443    GET /?l=3261754960 HTTP/1.1
   11-0 -     0/0/4848    . 0.00 39   0   2486799  0.0   0.00  121.44 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   12-0 24600 0/252/4951  R 6.45 1    28  2532238  0.0   7.23  126.66 41.193.5.57     http/1.1 cloudware.ng:443
   13-0 36775 0/17/4968   _ 0.40 0    25  2574656  0.0   0.42  126.10 116.203.129.16  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue2.php HTTP/1.1
   14-0 -     0/0/4953    . 0.00 16   0   45946860 0.0   0.00  123.63 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   15-0 -     0/0/4423    . 0.00 71   0   2269983  0.0   0.00  113.82 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 21099 0/334/5217  _ 8.16 0    0   2599443  0.0   8.75  130.06 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   17-0 35864 1/28/4542   K 0.70 2    349 2360390  33.8  0.88  117.87 66.249.64.129   http/1.1 team.cloudware.ng:443    GET /?l=1867471415 HTTP/1.1
   18-0 31577 0/110/4141  _ 2.67 0    350 2120561  0.0   2.76  106.63 192.178.4.96    http/1.1 team.cloudware.ng:443    GET /?l=2740502275 HTTP/1.1
   19-0 30447 29/221/3806 W 6.09 0    0   1920175  198.6 3.53  98.07  147.135.214.166 http/1.1 cloudsms.com.ng:443      GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   20-0 31787 0/79/3945   R 1.85 1    33  2009937  0.0   1.82  96.00  66.249.64.165   http/1.1 team.cloudware.ng:443
   21-0 30463 2/105/3530  K 2.98 4    346 1894494  64.1  2.80  94.78  192.178.4.102   http/1.1 team.cloudware.ng:443    GET /?l=1925051379 HTTP/1.1
   22-0 30464 1/81/3066   K 2.06 0    268 1744923  34.4  2.51  73.39  66.249.70.135   http/1.1 team.cloudware.ng:443    GET /?l=37738375 HTTP/1.1
   23-0 19658 0/326/3579  _ 8.49 0    258 1730181  0.0   8.53  90.24  192.178.4.102   http/1.1 team.cloudware.ng:443    GET /?l=3423121618 HTTP/1.1
   24-0 35865 1/16/3053   K 0.46 3    398 1542954  35.8  0.48  77.83  192.178.4.104   http/1.1 team.cloudware.ng:443    GET /?l=404431616 HTTP/1.1
   25-0 -     0/0/2608    . 0.00 296  0   1512109  0.0   0.00  68.43  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/2258    . 0.00 495  0   1087592  0.0   0.00  51.30  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/1846    . 0.00 491  0   1176556  0.0   0.00  43.29  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/1603    . 0.00 493  0   819401   0.0   0.00  40.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/946     . 0.00 494  0   490491   0.0   0.00  24.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 30486 3/137/1670  K 3.49 3    405 835104   95.4  3.85  40.24  192.178.4.98    http/1.1 team.cloudware.ng:443    GET /?l=910244830 HTTP/1.1
   31-0 -     0/0/827     . 0.00 482  0   383933   0.0   0.00  18.43  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/430     . 0.00 234  0   186993   0.0   0.00  8.89   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 30489 0/193/600   _ 4.91 0    0   265964   0.0   3.15  13.85  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   34-0 -     0/0/623     . 0.00 379  0   307619   0.0   0.00  15.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/692     . 0.00 1267 0   379452   0.0   0.00  18.83  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/336     . 0.00 1317 0   169758   0.0   0.00  8.46   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/393     . 0.00 1264 0   204443   0.0   0.00  9.75   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/165     . 0.00 1316 0   87126    0.0   0.00  4.11   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/433     . 0.00 1288 0   222341   0.0   0.00  11.45  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/139     . 0.00 1289 0   38901    0.0   0.00  2.51   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/94      . 0.00 1141 0   51889    0.0   0.00  2.54   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/47      . 0.00 1315 0   22499    0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/119     . 0.00 1302 0   52925    0.0   0.00  2.38   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/669     . 0.00 1283 0   368833   0.0   0.00  17.91  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/75      . 0.00 1298 0   37747    0.0   0.00  1.71   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/41      . 0.00 1192 0   16481    0.0   0.00  0.75   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/125     . 0.00 1310 0   57498    0.0   0.00  3.23   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/223     . 0.00 1281 0   109674   0.0   0.00  5.99   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -     0/0/164     . 0.00 1280 0   87203    0.0   0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -     0/0/14      . 0.00 1279 0   5010     0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -     0/0/15      . 0.00 1296 0   5645     0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -     0/0/7       . 0.00 1300 0   5381     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -     0/0/69      . 0.00 1293 0   35130    0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -     0/0/194     . 0.00 572  0   103660   0.0   0.00  5.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -     0/0/74      . 0.00 1047 0   36386    0.0   0.00  1.75   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -     0/0/191     . 0.00 1322 0   98835    0.0   0.00  5.54   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -     0/0/54      . 0.00 1276 0   25519    0.0   0.00  1.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -     0/0/5       . 0.00 1282 0   2796     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -     0/0/7       . 0.00 1292 0   4222     0.0   0.00  0.19   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00 1326 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -     0/0/143     . 0.00 821  0   82081    0.0   0.00  3.78   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -     0/0/9       . 0.00 1278 0   8650     0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -     0/0/1       . 0.00 1304 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -     0/0/34      . 0.00 1217 0   19658    0.0   0.00  0.90   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00 1323 0   1        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -     0/0/21      . 0.00 1218 0   11992    0.0   0.00  0.62   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -     0/0/54      . 0.00 1143 0   33510    0.0   0.00  1.51   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -     0/0/1       . 0.00 1324 0   1        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -     0/0/4       . 0.00 1285 0   1380     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -     0/0/1       . 0.00 1325 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -     0/0/21      . 0.00 1213 0   13454    0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -     0/0/3       . 0.00 1303 0   1252     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -     0/0/11      . 0.00 1265 0   5534     0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -     0/0/11      . 0.00 1235 0   7108     0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -     0/0/2       . 0.00 1311 0   2977     0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -     0/0/3       . 0.00 1299 0   2082     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -     0/0/70      . 0.00 1015 0   41610    0.0   0.00  1.72   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -     0/0/4       . 0.00 1287 0   747      0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   79-0 -     0/0/4       . 0.00 1286 0   1901     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1145
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...44)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 102416
   total entries replaced since starting: 0
   total entries expired since starting: 101250
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 367 miss
   total removes since starting: 21 hit, 25 miss
Youez - 2016 - github.com/yon3zu
LinuXploit