403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.12.24.txt
 ## swap threshold exceeded
## server overview
2025-11-17.12.24 load[0] mem[58/72] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1327         155          51         880         820
Swap:          1999        1533         466
 12:24:01 up  7:03,  0 users,  load average: 0.43, 1.50, 1.46
## system overview
top - 12:24:01 up  7:03,  0 users,  load average: 0.43, 1.50, 1.46
Tasks: 209 total,   6 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.4 us, 48.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   137540 free,  1380576 used,   902184 buff/cache
KiB Swap:  2047996 total,   477828 free,  1570168 used.   819168 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 249084   3648 S  11.8 10.3   6:07.83 /usr/sbin+
 69259 nigeria   20   0  404052  16140  10384 S  11.8  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44400   3348   1456 S   5.9  0.1   0:33.84 /usr/lib/+
   355 root      20   0   39500   1484   1244 S   5.9  0.1   0:14.47 /usr/lib/+
   476 root      20   0   24716   1160    792 R   5.9  0.0   0:05.99 /usr/lib/+
 69227 cloudw    20   0  353712  15976  10492 S   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.76 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.42 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:27.92 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.40 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.11 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:53.87 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:05.18 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.14 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.63 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    444    316 R   0.0  0.0   0:02.24 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     80     36 S   0.0  0.0   0:00.02 /usr/sbin+
   475 polkitd   20   0  612240   1064    684 S   0.0  0.0   0:03.56 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.56 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    260    164 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1348    600 S   0.0  0.1   0:13.74 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1344    668 S   0.0  0.1   0:24.55 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   4868   1020 S   0.0  0.2   0:00.42 queueproc+
   545 root      20   0  124480    428    296 S   0.0  0.0   0:00.73 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3760    820 S   0.0  0.2   0:00.47 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.80 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:03.21 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  298320   1996   1268 S   0.0  0.1   0:07.30 /usr/sbin+
   918 named     20   0 1185864  36168   1884 S   0.0  1.5   0:17.53 /usr/sbin+
   919 root      20   0 1828136 296076    972 S   0.0 12.2   0:35.67 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    604    424 S   0.0  0.0   0:00.31 /usr/sbin+
   926 root      20   0  572372    764    300 S   0.0  0.0   0:02.25 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:01.02 sw-engine+
   937 root      20   0  439788    360    268 S   0.0  0.0   0:00.95 php-fpm: +
   938 systuser  20   0  114016  13892   2560 S   0.0  0.6   0:06.22 /usr/loca+
   939 root      20   0  261296   6384   1620 S   0.0  0.3   0:05.43 cpsrvd (S+
   943 root      20   0 1277312   2252      8 S   0.0  0.1   0:20.31 /usr/bin/+
   944 root      20   0 1276356   6624      8 S   0.0  0.3   0:24.97 /usr/bin/+
   947 cpanelc+  20   0   10400   3304   2388 R   0.0  0.1   0:21.53 /usr/loca+
   952 root      20   0  396248    272    188 S   0.0  0.0   0:00.85 php-fpm: +
   957 root      20   0  388892    408    312 S   0.0  0.0   0:00.88 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  34880   5900 S   0.0  1.4   0:14.36 /usr/loca+
   964 root      20   0  153404    292    188 S   0.0  0.0   0:00.54 pure-ftpd+
   967 root      20   0  400740    776    604 S   0.0  0.0   0:04.36 php-fpm: +
   968 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.56 /usr/bin/+
   974 root      20   0  389508    340    252 S   0.0  0.0   0:00.82 php-fpm: +
  1080 dovenull  20   0   47616   3000   1700 S   0.0  0.1   0:00.42 dovecot/p+
  1081 dovenull  20   0   48020   2704   1352 S   0.0  0.1   0:00.24 dovecot/i+
  1082 dovecot   20   0   10320    456    344 S   0.0  0.0   0:00.05 dovecot/a+
  1083 root      20   0   10452    452    256 S   0.0  0.0   0:00.29 dovecot/l+
  1084 dovenull  20   0   47520   2976   1596 S   0.0  0.1   0:00.51 dovecot/p+
  1085 dovenull  20   0   47764   2744   1396 S   0.0  0.1   0:00.22 dovecot/i+
  1091 root      20   0   24700   2412    496 S   0.0  0.1   0:00.17 dovecot/c+
  1095 dovecot   20   0   13568    600    400 S   0.0  0.0   0:00.06 dovecot/s+
  1160 dovecot   20   0   41160   1448    968 S   0.0  0.1   0:00.54 dovecot/a+
  1168 systuser  20   0  157704   2972   1004 S   0.0  0.1   0:00.12 SonarPush+
  1176 wp-tool+  20   0  387556   3320   1412 S   0.0  0.1   0:00.29 /usr/bin/+
  1177 wp-tool+  20   0  412368   9444   1364 S   0.0  0.4   0:08.31 /usr/bin/+
  1211 root      20   0  209332  19600   2112 S   0.0  0.8   0:03.21 tailwatchd
  1213 root      20   0  183900   5256   2028 S   0.0  0.2   0:01.32 cpdavd - +
  1216 root      20   0  167452   3344   1976 S   0.0  0.1   0:00.54 dnsadmin +
  1627 root      20   0  299272    496    332 S   0.0  0.0   0:00.69 php-fpm: +
  1673 root      38  18  130416   1364    692 S   0.0  0.1   0:00.07 cpanellog+
  1928 root      20   0  266984   4940    472 S   0.0  0.2   0:03.24 /usr/sbin+
  1932 root      20   0   12836    324    212 S   0.0  0.0   0:03.35 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.91 /usr/loca+
  1934 root      20   0   12856    332    216 S   0.0  0.0   0:03.16 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 10515 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 10528 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 161+
 24753 worencom  20   0   38444   2364   1348 S   0.0  0.1   0:00.01 dovecot/i+
 34076 root      20   0       0      0      0 D   0.0  0.0   0:00.11 [kworker/+
 40045 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.47 [kworker]
 40218 root      20   0  183548  11072   1100 S   0.0  0.5   0:23.44 lfd - sle+
 52734 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55410 nobody    20   0  277616  19708   4856 S   0.0  0.8   0:01.55 /usr/sbin+
 55415 nobody    20   0  277744  19428   4732 S   0.0  0.8   0:01.03 /usr/sbin+
 56799 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 57781 nobody    20   0  277524  19212   4704 S   0.0  0.8   0:01.50 /usr/sbin+
 60948 nobody    20   0  277504  19028   4756 S   0.0  0.8   0:01.02 /usr/sbin+
 61465 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 61494 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62572 nobody    20   0  277560  19284   4748 S   0.0  0.8   0:00.69 /usr/sbin+
 64356 nobody    20   0  277744  19200   4724 S   0.0  0.8   0:00.51 /usr/sbin+
 65196 nobody    20   0  277484  18824   4472 S   0.0  0.8   0:00.47 /usr/sbin+
 65205 nobody    20   0  277868  18592   4328 S   0.0  0.8   0:00.33 /usr/sbin+
 65206 nobody    20   0  277744  18280   4320 S   0.0  0.8   0:00.57 /usr/sbin+
 65478 nobody    20   0  277508  18828   4428 S   0.0  0.8   0:00.35 /usr/sbin+
 65929 nobody    20   0  277876  18528   4448 S   0.0  0.8   0:00.33 /usr/sbin+
 65947 nobody    20   0  277744  18624   4248 S   0.0  0.8   0:00.55 /usr/sbin+
 66150 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66402 nobody    20   0  277744  18496   4128 S   0.0  0.8   0:00.41 /usr/sbin+
 66807 nobody    20   0  277920  18648   4308 S   0.0  0.8   0:00.30 /usr/sbin+
 66871 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67447 nobody    20   0  277884  18448   4120 S   0.0  0.8   0:00.12 /usr/sbin+
 67775 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 68260 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 68315 nobody    20   0  277740  17400   3568 S   0.0  0.7   0:00.11 /usr/sbin+
 68323 nobody    20   0  277744  17920   3912 S   0.0  0.7   0:00.07 /usr/sbin+
 68324 nobody    20   0  277472  17772   3956 S   0.0  0.7   0:00.12 /usr/sbin+
 68349 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 68622 mailnull  20   0   89500   4912   1744 S   0.0  0.2   0:00.00 /usr/sbin+
 68701 nobody    20   0  277744  17184   3460 S   0.0  0.7   0:00.05 /usr/sbin+
 69061 mailnull  20   0   89500   4912   1744 S   0.0  0.2   0:00.00 /usr/sbin+
 69081 nigeria   20   0  400460   4424   2332 S   0.0  0.2   0:00.00 php-fpm: +
 69103 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 69114 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 69140 mailnull  20   0   89424   5648   2416 S   0.0  0.2   0:00.00 /usr/sbin+
 69176 cloudw    20   0  523580  59300   6572 S   0.0  2.5   0:00.44 php-fpm: +
 69182 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69184 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69185 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69186 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69187 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69188 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69189 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69190 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69191 root      20   0  183044   2212   1636 S   0.0  0.1   0:00.00 /usr/sbin+
 69192 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69193 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69194 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69195 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69196 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69197 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 69198 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 69199 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 69200 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 69219 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 69221 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69228 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 69235 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 69236 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69237 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69238 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 69239 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69242 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 69243 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69244 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 69245 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69246 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 69247 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69248 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 69252 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 69254 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 69261 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69262 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 69263 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 69265 saboakin  20   0  404052  15612  10160 S   0.0  0.6   0:00.00 /opt/cpan+
 69267 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69270 pactpay   20   0  131852   3312   2384 R   0.0  0.1   0:00.00 /usr/loca+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 81155 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 92278 root      20   0  248096 117668   1036 S   0.0  4.9   0:03.41 /usr/loca+
 98393 root      20   0  263024 129776   3048 S   0.0  5.4   0:02.95 spamd chi+
 98394 root      20   0  249240 119028   1336 S   0.0  4.9   0:00.04 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    05:20   0:27  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:53  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:05  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root      81155  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:4]
root       4438  0.0  0.0      0     0 ?        D    11:04   0:00  \_ [kworker/u200:1]
root      34076  0.0  0.0      0     0 ?        R    11:41   0:00  \_ [kworker/1:2]
root      52734  0.0  0.0      0     0 ?        S    12:03   0:00  \_ [kworker/0:1]
root      56799  0.0  0.0      0     0 ?        D    12:08   0:00  \_ [kworker/1:1]
root      61465  0.0  0.0      0     0 ?        D    12:14   0:00  \_ [kworker/1:3]
root      61494  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/0:2]
root      66150  0.0  0.0      0     0 ?        S    12:20   0:00  \_ [kworker/0:0]
root      66871  0.0  0.0      0     0 ?        S    12:21   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44400  3348 ?        Ss   05:20   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  39500  1484 ?        Ss   05:20   0:14 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   444 ?        S<sl 05:20   0:02 /sbin/auditd
root        470  0.0  0.0 152780    80 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1064 ?        Ssl  05:20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1160 ?        Ss   05:20   0:05 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   260 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1348 ?        Rs   05:20   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1344 ?        Ssl  05:20   0:24 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  4868 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   428 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      69182  0.0  0.0 183048  2144 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69198  0.0  0.0 113284  1208 ?        Ss   12:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      69199  0.0  0.0 108052   356 ?        S    12:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      69200  0.0  0.0 113288  1516 ?        S    12:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      69272  0.0  0.0 153840  2100 ?        R    12:24   0:00  |               \_ ps auxf
root      69184  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69238  0.0  0.0  20164   968 ?        Ss   12:24   0:00  |   \_ jailshell (cloudsms) [69252] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  69252  0.0  0.0      0     0 ?        R    12:24   0:00  |       \_ [jailshell]
root      69185  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69243  0.0  0.0  20164   808 ?        Ss   12:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      69186  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69239  0.0  0.0  20164   804 ?        Ss   12:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      69187  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69221  0.0  0.0  20164   804 ?        Ss   12:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      69188  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69237  0.0  0.0  20164   804 ?        Ss   12:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      69189  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69245  0.0  0.0  20164   804 ?        Ss   12:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      69190  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69236  0.0  0.0  20164   808 ?        Ss   12:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      69192  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69247  0.0  0.0  20164   804 ?        Ss   12:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      69193  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69244  0.0  0.0  20164   968 ?        Ss   12:24   0:00  |   \_ jailshell (cloudsms) [69263] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  69263  0.0  0.0      0     0 ?        R    12:24   0:00  |       \_ [jailshell]
root      69194  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69248  0.0  0.0  20164   964 ?        Ss   12:24   0:00  |   \_ jailshell (pactpay) [69267] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69267  0.0  0.0  20164   260 ?        S    12:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69270  0.0  0.1 207892  4272 ?        R    12:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      69195  0.0  0.0 183044  2212 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69196  0.0  0.0 183048  2148 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69235  0.0  0.0  20164   964 ?        Ss   12:24   0:00  |   \_ jailshell (nigeria) [69254] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69254  0.0  0.0  20164   256 ?        S    12:24   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69259  0.0  0.6 404052 16140 ?        S    12:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      69197  0.0  0.0 183048  2152 ?        S    12:24   0:00  \_ /usr/sbin/CROND -n
root      69242  0.0  0.0  20164   972 ?        Ss   12:24   0:00      \_ jailshell (saboakin) [69261] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  69261  0.0  0.0  20164   260 ?        R    12:24   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  69265  0.0  0.0      0     0 ?        Z    12:24   0:00              \_ [php-cgi] <defunct>
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3760 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  68622  0.0  0.2  89500  4912 ?        S    12:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  69061  0.0  0.2  89500  4912 ?        S    12:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  69140  0.0  0.2  89424  5648 ?        S    12:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:03 /usr/sbin/sshd -D
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.0 298320  1996 ?        Ssl  05:20   0:07 /usr/sbin/rsyslogd -n
named       918  0.0  1.4 1185864 36168 ?       Ssl  05:20   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 12.2 1828136 296076 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   604 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47616  3000 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48020  2704 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   456 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   452 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47520  2976 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47764  2744 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24700  2412 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   600 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1448 ?        S    05:20   0:00  \_ dovecot/auth
worencom  24753  0.0  0.0  38444  2364 ?        S    11:29   0:00  \_ dovecot/imap
root      67775  0.0  0.1  60820  4512 ?        S    12:22   0:00  \_ dovecot/lmtp
root      68260  0.0  0.0  28936  2372 ?        S    12:22   0:00  \_ dovecot/quota-status -p postfix
root      68349  0.0  0.1  41052  2728 ?        S    12:22   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372   764 ?        Ssl  05:20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   05:20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  69103  0.0  0.0 445028   312 ?        S    12:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   360 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13892 ?        Ssl  05:20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6384 ?        Ss   05:20   0:05 cpsrvd (SSL) - waiting for connections                   
root      69114  0.0  0.0      0     0 ?        Z    12:23   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.0  0.0 1277312 2252 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.0  0.2 1276356 6624 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3304 ?        Ss   05:20   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   272 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   408 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 34880 ?       SLsl 05:20   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   292 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   776 ?        Ss   05:20   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   69081  0.0  0.1 400460  4424 ?        S    12:23   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    69176 44.0  2.4 523580 59300 ?        S    12:23   0:00  \_ php-fpm: pool cloudware_ng
systuser    968  0.0  0.0 112524    68 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   340 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.1 157704  2972 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3320 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  9444 ?        Ss   05:20   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.8 209332 19600 ?        Ss   05:20   0:03 tailwatchd
root       1213  0.0  0.2 183900  5256 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  3344 ?        Ss   05:20   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   496 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1364 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4940 ?        Ss   05:20   0:03 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12836   324 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12856   332 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    55410  0.1  0.8 277616 19708 ?        S    12:06   0:01  \_ /usr/sbin/httpd -k start
nobody    55415  0.0  0.8 277744 19428 ?        S    12:06   0:01  \_ /usr/sbin/httpd -k start
nobody    57781  0.1  0.7 277524 19212 ?        S    12:09   0:01  \_ /usr/sbin/httpd -k start
nobody    60948  0.1  0.7 277504 19028 ?        S    12:13   0:01  \_ /usr/sbin/httpd -k start
nobody    62572  0.1  0.7 277560 19284 ?        S    12:15   0:00  \_ /usr/sbin/httpd -k start
nobody    64356  0.1  0.7 277744 19200 ?        S    12:17   0:00  \_ /usr/sbin/httpd -k start
nobody    65196  0.1  0.7 277484 18824 ?        S    12:18   0:00  \_ /usr/sbin/httpd -k start
nobody    65205  0.1  0.7 277868 18592 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65206  0.1  0.7 277744 18280 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65478  0.1  0.7 277508 18828 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65929  0.1  0.7 277876 18528 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65947  0.2  0.7 277744 18624 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    66402  0.1  0.7 277744 18496 ?        S    12:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66807  0.1  0.7 277920 18648 ?        S    12:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    69219  0.0  0.6 353712 15976 ?        R    12:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    67447  0.0  0.7 277884 18448 ?        S    12:21   0:00  \_ /usr/sbin/httpd -k start
nobody    68315  0.1  0.7 277740 17400 ?        S    12:22   0:00  \_ /usr/sbin/httpd -k start
nobody    68323  0.0  0.7 277744 17920 ?        S    12:22   0:00  \_ /usr/sbin/httpd -k start
nobody    68324  0.1  0.7 277472 17772 ?        S    12:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    69227  0.0  0.6 353712 15976 ?        S    12:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    68701  0.1  0.7 277744 17184 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 10.2 1468028 249084 ?      Sl   05:21   6:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148     8 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    40 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183548 11072 ?        Ss   06:01   0:23 lfd - sleeping
root      10515  0.0  0.0 132964     4 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056     0 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.0  4.8 248096 117668 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.0  5.3 263024 129776 ?       S    10:55   0:02  \_ spamd child
root      98394  0.0  4.9 249240 119028 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 47067  Threads: 3  Questions: 2129449  Slow queries: 0  Opens: 11305  Flush tables: 1  Open tables: 2000  Queries per second avg: 45.242
*************************** 1. row ***************************
     Id: 30613
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30619
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30621
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.181 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 142.44.220.7 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 173.236.217.44 TIME_WAIT
      1 192.110.213.58 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.51 TIME_WAIT
      1 217.154.101.210 TIME_WAIT
      1 222.112.27.113 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 43.231.115.89 TIME_WAIT
      1 51.178.68.226 TIME_WAIT
      1 54.39.0.240 TIME_WAIT
      1 54.39.136.112 TIME_WAIT
      1 54.39.210.55 TIME_WAIT
      1 74.7.230.47 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 12:24:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 5 minutes 12 seconds
   Server load: 0.43 1.50 1.46
   Total accesses: 151244 - Total Traffic: 3.7 GB - Total Duration: 122510422
   CPU Usage: u7.31 s6 cu2049.78 cs1685.5 - 7.96% CPU load
   3.21 requests/sec - 82.9 kB/second - 25.8 kB/request - 810.018 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K__KWKKCW.WKKRKK...R.._.............._......K...................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn  Child  Slot      Client     Protocol            VHost                                         Request
   0-0  57781 1/293/6543 K 6.32 0    542 3476069  6.7   6.20  163.83 112.213.91.118 http/1.1 cloudware.ng:443             GET /wp-login.php HTTP/1.1
   1-0  68315 0/18/5951  _ 0.44 0    294 3219106  0.0   0.47  167.70 192.178.4.97   http/1.1 team.cloudware.ng:443        GET /?l=2850914479 HTTP/1.1
   2-0  65929 0/58/6339  _ 1.39 0    23  3171993  0.0   1.66  155.74 116.203.129.16 http/1.1 cloudsms.com.ng:443          GET /cron/process_queue2.php HTTP/1.1
   3-0  68323 1/14/6223  K 0.26 2    274 3169596  35.7  0.26  156.76 192.178.4.103  http/1.1 team.cloudware.ng:443        GET /?l=3633680998 HTTP/1.1
   4-0  66807 0/59/6114  W 1.25 0    0   3094488  0.0   1.18  156.35 192.178.4.101  http/1.1 team.cloudware.ng:443        GET /?l=1615917277 HTTP/1.1
   5-0  65196 1/82/5918  K 2.02 0    259 3039570  33.8  1.99  150.68 192.178.4.98   http/1.1 team.cloudware.ng:443        GET /?l=3303889525 HTTP/1.1
   6-0  68701 1/8/6090   K 0.20 2    318 3105269  35.4  0.24  155.81 192.178.4.103  http/1.1 team.cloudware.ng:443        GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1301544
   7-0  64356 1/88/5803  C 2.21 5    6   3062258  10.0  2.26  147.58 154.124.157.47 http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php?lga=Ondo+east&state=Ondo&ward=Bo
   8-0  68324 2/20/5713  W 0.73 0    0   2862205  66.7  0.47  137.33 192.178.4.99   http/1.1 team.cloudware.ng:443        GET /?l=3114533920 HTTP/1.1
   9-0  -     0/0/5679   . 0.00 88   0   2886193  0.0   0.00  141.51 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   10-0 62572 0/147/5493 W 2.99 0    0   2837823  0.0   2.63  140.91 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   11-0 65205 2/56/5329  K 1.38 2    289 2829124  69.9  1.40  133.45 192.178.4.104  http/1.1 team.cloudware.ng:443        GET /?l=2696845910 HTTP/1.1
   12-0 60948 3/217/5341 K 4.01 4    368 2826179  98.1  3.93  135.07 192.178.4.100  http/1.1 team.cloudware.ng:443        GET /?l=1052468070 HTTP/1.1
   13-0 65206 0/87/5313  R 2.43 0    24  2812704  0.0   2.52  136.55 104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443
   14-0 66402 6/68/5221  K 1.76 0    265 46119544 189.8 1.79  129.72 192.178.4.101  http/1.1 team.cloudware.ng:443        GET /?l=2099361275 HTTP/1.1
   15-0 67447 1/23/4636  K 0.45 0    307 2459234  35.6  0.48  117.55 192.178.4.96   http/1.1 team.cloudware.ng:443        GET /?l=4085094363 HTTP/1.1
   16-0 -     0/0/5555   . 0.00 118  0   2840562  0.0   0.00  138.93 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   17-0 -     0/0/4889   . 0.00 237  0   2607900  0.0   0.00  126.57 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   18-0 -     0/0/4538   . 0.00 47   0   2401511  0.0   0.00  115.06 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   19-0 65478 0/62/4132  R 1.73 8    2   2106398  0.0   1.41  104.59 112.213.91.118 http/1.1
   20-0 -     0/0/4168   . 0.00 236  0   2187339  0.0   0.00  100.51 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   21-0 -     0/0/3898   . 0.00 126  0   2148313  0.0   0.00  102.51 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   22-0 65947 0/148/3537 _ 3.09 0    24  1954174  0.0   2.20  84.98  128.140.8.200  http/1.1 cloudsms.com.ng:443          GET /cron/process_queue3.php HTTP/1.1
   23-0 -     0/0/3635   . 0.00 1044 0   1753448  0.0   0.00  91.65  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   24-0 -     0/0/3298   . 0.00 206  0   1705780  0.0   0.00  82.65  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   25-0 -     0/0/2647   . 0.00 1028 0   1532928  0.0   0.00  70.07  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   26-0 -     0/0/2345   . 0.00 847  0   1134081  0.0   0.00  55.29  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   27-0 -     0/0/2182   . 0.00 87   0   1426858  0.0   0.00  51.66  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   28-0 -     0/0/1818   . 0.00 1041 0   941909   0.0   0.00  46.30  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   29-0 -     0/0/951    . 0.00 1043 0   491364   0.0   0.00  24.11  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   30-0 -     0/0/1916   . 0.00 1022 0   971304   0.0   0.00  46.94  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   31-0 -     0/0/965    . 0.00 1019 0   457075   0.0   0.00  22.25  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   32-0 -     0/0/563    . 0.00 1040 0   253177   0.0   0.00  12.36  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   33-0 -     0/0/842    . 0.00 901  0   390668   0.0   0.00  20.81  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   34-0 -     0/0/661    . 0.00 922  0   325336   0.0   0.00  16.50  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   35-0 -     0/0/712    . 0.00 1037 0   388555   0.0   0.00  19.29  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   36-0 -     0/0/537    . 0.00 481  0   315926   0.0   0.00  12.93  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   37-0 55410 0/314/709  _ 7.07 0    0   441284   0.0   6.48  16.23  ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   38-0 -     0/0/278    . 0.00 895  0   152754   0.0   0.00  7.36   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   39-0 -     0/0/775    . 0.00 366  0   463839   0.0   0.00  19.61  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   40-0 -     0/0/247    . 0.00 622  0   107453   0.0   0.00  5.09   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   41-0 -     0/0/99     . 0.00 1035 0   53225    0.0   0.00  2.61   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   42-0 -     0/0/51     . 0.00 1039 0   22520    0.0   0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   43-0 -     0/0/136    . 0.00 1029 0   59109    0.0   0.00  2.78   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   44-0 55415 8/221/938  K 4.05 1    258 576267   245.4 4.21  23.19  192.178.4.105  http/1.1 team.cloudware.ng:443        GET /?l=3614493236 HTTP/1.1
   45-0 -     0/0/78     . 0.00 1051 0   37750    0.0   0.00  1.72   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   46-0 -     0/0/44     . 0.00 1050 0   17058    0.0   0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   47-0 -     0/0/130    . 0.00 1052 0   57560    0.0   0.00  3.24   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   48-0 -     0/0/232    . 0.00 1026 0   114638   0.0   0.00  6.17   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   49-0 -     0/0/166    . 0.00 1512 0   88095    0.0   0.00  4.15   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   50-0 -     0/0/16     . 0.00 1510 0   5693     0.0   0.00  0.19   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   51-0 -     0/0/16     . 0.00 1536 0   5645     0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   52-0 -     0/0/116    . 0.00 1027 0   72477    0.0   0.00  3.04   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   53-0 -     0/0/156    . 0.00 1138 0   83798    0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   54-0 -     0/0/233    . 0.00 1362 0   124221   0.0   0.00  6.12   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   55-0 -     0/0/80     . 0.00 1496 0   38998    0.0   0.00  1.88   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   56-0 -     0/0/192    . 0.00 1537 0   98836    0.0   0.00  5.54   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   57-0 -     0/0/56     . 0.00 1509 0   26444    0.0   0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   58-0 -     0/0/9      . 0.00 1492 0   3402     0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   59-0 -     0/0/11     . 0.00 1494 0   5288     0.0   0.00  0.26   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00 1532 0   1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   61-0 -     0/0/147    . 0.00 1493 0   85312    0.0   0.00  3.84   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   62-0 -     0/0/12     . 0.00 1507 0   9904     0.0   0.00  0.29   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   63-0 -     0/0/118    . 0.00 1045 0   58161    0.0   0.00  3.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   64-0 -     0/0/41     . 0.00 1482 0   22612    0.0   0.00  1.07   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   65-0 -     0/0/116    . 0.00 1038 0   58413    0.0   0.00  2.88   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   66-0 -     0/0/33     . 0.00 1495 0   18482    0.0   0.00  0.95   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   67-0 -     0/0/55     . 0.00 1531 0   33511    0.0   0.00  1.51   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   68-0 -     0/0/2      . 0.00 1534 0   1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   69-0 -     0/0/152    . 0.00 979  0   95684    0.0   0.00  4.08   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 1530 0   1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   71-0 -     0/0/22     . 0.00 1529 0   13455    0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   72-0 -     0/0/152    . 0.00 977  0   82450    0.0   0.00  4.24   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   73-0 -     0/0/15     . 0.00 1486 0   6311     0.0   0.00  0.26   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   74-0 -     0/0/17     . 0.00 1480 0   8423     0.0   0.00  0.27   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   75-0 -     0/0/5      . 0.00 1491 0   4241     0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   76-0 -     0/0/4      . 0.00 1535 0   2083     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   77-0 -     0/0/72     . 0.00 1508 0   42788    0.0   0.00  1.74   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   78-0 -     0/0/7      . 0.00 1502 0   2788     0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   79-0 -     0/0/5      . 0.00 1533 0   1902     0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 1513 0   1549     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1219
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...30)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 113320
   total entries replaced since starting: 0
   total entries expired since starting: 112078
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 23 hit, 383 miss
   total removes since starting: 23 hit, 29 miss
Youez - 2016 - github.com/yon3zu
LinuXploit