403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.12.27.txt
 ## swap threshold exceeded
## server overview
2025-11-17.12.27 load[0] mem[60/72] mysql[1/25] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1377          98          51         887         770
Swap:          1999        1537         462
 12:27:01 up  7:06,  0 users,  load average: 0.79, 1.05, 1.28
## system overview
top - 12:27:02 up  7:06,  0 users,  load average: 0.79, 1.05, 1.28
Tasks: 201 total,   2 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 21.9 sy,  0.0 ni, 21.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   101760 free,  1409748 used,   908792 buff/cache
KiB Swap:  2047996 total,   473636 free,  1574360 used.   789884 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 263024   3720 S  86.7 10.9   6:10.51 /usr/sbin+
 71637 nigeria   20   0  404052  16140  10384 S  20.0  0.7   0:00.05 /opt/cpan+
 68324 nobody    20   0  277616  18892   4460 S  13.3  0.8   0:00.39 /usr/sbin+
 71646 pactpay   20   0  480124  17688  11892 S  13.3  0.7   0:00.02 /opt/cpan+
   947 cpanelc+  20   0   10400   3304   2388 S   6.7  0.1   0:21.68 /usr/loca+
 71501 nobody    20   0  277752  16916   3220 S   6.7  0.7   0:00.01 /usr/sbin+
     1 root      20   0   44400   3348   1456 S   0.0  0.1   0:34.04 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.77 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.43 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:28.11 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.41 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.15 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:53.92 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.54 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:05.19 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.15 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.64 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   1876   1636 S   0.0  0.1   0:14.54 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    444    316 S   0.0  0.0   0:02.25 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     80     36 S   0.0  0.0   0:00.02 /usr/sbin+
   475 polkitd   20   0  612240   1064    684 S   0.0  0.0   0:03.58 /usr/lib/+
   476 root      20   0   24716   1160    792 S   0.0  0.0   0:06.03 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.57 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    260    164 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1348    600 S   0.0  0.1   0:13.83 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1344    668 S   0.0  0.1   0:24.70 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   4868   1020 S   0.0  0.2   0:00.42 queueproc+
   545 root      20   0  124480    428    296 S   0.0  0.0   0:00.75 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3760    820 S   0.0  0.2   0:00.47 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.80 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:03.22 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  298320   2388   1656 S   0.0  0.1   0:07.35 /usr/sbin+
   918 named     20   0 1185864  36380   1996 S   0.0  1.5   0:17.66 /usr/sbin+
   919 root      20   0 1828136 291912    972 S   0.0 12.1   0:35.67 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    604    424 S   0.0  0.0   0:00.31 /usr/sbin+
   926 root      20   0  572372    764    300 S   0.0  0.0   0:02.27 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:01.02 sw-engine+
   937 root      20   0  439788    360    268 S   0.0  0.0   0:00.96 php-fpm: +
   938 systuser  20   0  114016  13888   2556 S   0.0  0.6   0:06.26 /usr/loca+
   939 root      20   0  261296   6416   1648 S   0.0  0.3   0:05.53 cpsrvd (S+
   943 root      20   0 1277312   2252      8 S   0.0  0.1   0:20.31 /usr/bin/+
   944 root      20   0 1276356   6624      8 S   0.0  0.3   0:24.97 /usr/bin/+
   952 root      20   0  396248    272    188 S   0.0  0.0   0:00.85 php-fpm: +
   957 root      20   0  388892    408    312 S   0.0  0.0   0:00.88 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  35152   5912 S   0.0  1.5   0:14.45 /usr/loca+
   964 root      20   0  153404    292    188 S   0.0  0.0   0:00.54 pure-ftpd+
   967 root      20   0  400740    776    604 S   0.0  0.0   0:04.38 php-fpm: +
   968 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.57 /usr/bin/+
   974 root      20   0  389508    340    252 S   0.0  0.0   0:00.82 php-fpm: +
  1080 dovenull  20   0   47616   3000   1700 S   0.0  0.1   0:00.42 dovecot/p+
  1081 dovenull  20   0   48020   2968   1616 S   0.0  0.1   0:00.25 dovecot/i+
  1082 dovecot   20   0   10320    456    344 S   0.0  0.0   0:00.05 dovecot/a+
  1083 root      20   0   10452    452    256 S   0.0  0.0   0:00.30 dovecot/l+
  1084 dovenull  20   0   47520   2976   1596 S   0.0  0.1   0:00.51 dovecot/p+
  1085 dovenull  20   0   47764   3000   1640 S   0.0  0.1   0:00.23 dovecot/i+
  1091 root      20   0   24528   2412    496 S   0.0  0.1   0:00.17 dovecot/c+
  1095 dovecot   20   0   13568    600    400 S   0.0  0.0   0:00.06 dovecot/s+
  1160 dovecot   20   0   41160   1448    968 S   0.0  0.1   0:00.55 dovecot/a+
  1168 systuser  20   0  157704   2972   1004 S   0.0  0.1   0:00.13 SonarPush+
  1176 wp-tool+  20   0  387556   3320   1412 S   0.0  0.1   0:00.29 /usr/bin/+
  1177 wp-tool+  20   0  412368   9444   1364 S   0.0  0.4   0:08.37 /usr/bin/+
  1211 root      20   0  209332  19600   2112 S   0.0  0.8   0:03.23 tailwatchd
  1213 root      20   0  183900   5256   2028 S   0.0  0.2   0:01.32 cpdavd - +
  1216 root      20   0  167452   3344   1976 S   0.0  0.1   0:00.55 dnsadmin +
  1627 root      20   0  299272    496    332 S   0.0  0.0   0:00.70 php-fpm: +
  1673 root      38  18  130416   1364    692 S   0.0  0.1   0:00.07 cpanellog+
  1928 root      20   0  266984   4940    472 S   0.0  0.2   0:03.27 /usr/sbin+
  1932 root      20   0   12848    324    212 S   0.0  0.0   0:03.37 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.93 /usr/loca+
  1934 root      20   0   12876    332    216 S   0.0  0.0   0:03.18 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 10515 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 10528 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 161+
 24753 worencom  20   0   38444   2364   1348 S   0.0  0.1   0:00.01 dovecot/i+
 34076 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 40045 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.48 [kworker]
 40218 root      20   0  183548  11100   1100 S   0.0  0.5   0:23.63 lfd - sle+
 55415 nobody    20   0  277744  19528   4756 S   0.0  0.8   0:01.22 /usr/sbin+
 56799 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 57781 nobody    20   0  277604  19404   4780 S   0.0  0.8   0:01.76 /usr/sbin+
 61465 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 61494 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65196 nobody    20   0  277640  19140   4560 S   0.0  0.8   0:00.72 /usr/sbin+
 65205 nobody    20   0  277868  19172   4564 S   0.0  0.8   0:00.57 /usr/sbin+
 65929 nobody    20   0  277876  19120   4676 S   0.0  0.8   0:00.61 /usr/sbin+
 65947 nobody    20   0  277744  18904   4400 S   0.0  0.8   0:00.89 /usr/sbin+
 66871 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67447 nobody    20   0  277884  18600   4256 S   0.0  0.8   0:00.25 /usr/sbin+
 68323 nobody    20   0  277744  18420   4232 S   0.0  0.8   0:00.32 /usr/sbin+
 69274 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69525 nobody    20   0  277744  18020   4028 S   0.0  0.7   0:00.23 /usr/sbin+
 69546 nobody    20   0  277744  18228   4108 S   0.0  0.8   0:00.29 /usr/sbin+
 69547 nobody    20   0  277876  18160   4024 S   0.0  0.8   0:00.27 /usr/sbin+
 69589 mailnull  20   0   89500   4916   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 70345 nobody    20   0  277740  17268   3472 S   0.0  0.7   0:00.16 /usr/sbin+
 70569 nobody    20   0  277740  17240   3396 S   0.0  0.7   0:00.19 /usr/sbin+
 70580 nobody    20   0  277876  17636   3800 S   0.0  0.7   0:00.14 /usr/sbin+
 70862 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71000 nobody    20   0  277744  17204   3348 S   0.0  0.7   0:00.09 /usr/sbin+
 71160 nobody    20   0  277744  16972   3276 S   0.0  0.7   0:00.07 /usr/sbin+
 71171 nobody    20   0  277740  17068   3292 S   0.0  0.7   0:00.10 /usr/sbin+
 71172 nobody    20   0  277764  18112   3668 S   0.0  0.7   0:00.03 /usr/sbin+
 71187 nobody    20   0  277876  17556   3780 S   0.0  0.7   0:00.03 /usr/sbin+
 71188 nobody    20   0  277596  17380   3404 S   0.0  0.7   0:00.05 /usr/sbin+
 71189 nobody    20   0  277744  17684   3800 S   0.0  0.7   0:00.03 /usr/sbin+
 71266 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 71270 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 71307 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 71502 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 71504 nigeria   20   0  493668  28584   4744 S   0.0  1.2   0:00.22 php-fpm: +
 71540 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 71541 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 71542 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 71574 nigeria   20   0  419616  26004   3912 S   0.0  1.1   0:00.18 php-fpm: +
 71580 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71583 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71584 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71585 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71586 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71587 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71588 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71589 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71590 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71592 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71594 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 71597 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 71601 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 71612 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 71613 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71614 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 71615 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71616 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 71617 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71618 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71619 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71624 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 71635 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 71644 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 71657 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 71659 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 71662 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 71663 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 71664 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.00 /opt/cpan+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 81155 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 92278 root      20   0  248096 117668   1036 S   0.0  4.9   0:03.43 /usr/loca+
 98393 root      20   0  263024 129776   3048 S   0.0  5.4   0:02.95 spamd chi+
 98394 root      20   0  249240 119028   1336 S   0.0  4.9   0:00.04 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    05:20   0:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:53  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:05  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root      81155  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:4]
root       4438  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/u200:1]
root      34076  0.0  0.0      0     0 ?        S    11:41   0:00  \_ [kworker/1:2]
root      56799  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/1:1]
root      61465  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/1:3]
root      61494  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/0:2]
root      66871  0.0  0.0      0     0 ?        S    12:21   0:00  \_ [kworker/0:3]
root      69274  0.0  0.0      0     0 ?        S    12:24   0:00  \_ [kworker/1:0]
root      70862  0.0  0.0      0     0 ?        S    12:26   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44400  3348 ?        Ss   05:20   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  39500  1876 ?        Ss   05:20   0:14 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   444 ?        S<sl 05:20   0:02 /sbin/auditd
root        470  0.0  0.0 152780    80 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1064 ?        Ssl  05:20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1160 ?        Ss   05:20   0:06 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   260 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1348 ?        Ss   05:20   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1344 ?        Ssl  05:20   0:24 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  4868 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   428 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      71580  0.0  0.0 183048  2144 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71594  0.0  0.0 113284  1212 ?        Ss   12:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      71597  0.0  0.0 108052   356 ?        S    12:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      71601  0.0  0.0 113288  1516 ?        S    12:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      71665  0.0  0.0 153840  2100 ?        R    12:27   0:00  |               \_ ps auxf
root      71583  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71615  0.0  0.0  20164   808 ?        Ss   12:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      71584  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71612  0.0  0.0  20164   980 ?        Ss   12:27   0:00  |   \_ jailshell (cloudsms) [71662] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  71662  0.0  0.0  20164   256 ?        S    12:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  71663  0.0  0.0 113284  1212 ?        S    12:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  71664  0.0  0.6 404052 15612 ?        S    12:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      71585  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71613  0.0  0.0  20164   808 ?        Ss   12:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      71586  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71616  0.0  0.0  20164   804 ?        Ss   12:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      71587  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71619  0.0  0.0  20164   808 ?        Ss   12:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      71588  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71618  0.0  0.0  20164   808 ?        Ss   12:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      71589  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71617  0.0  0.0  20164   808 ?        Ss   12:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      71590  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71624  0.0  0.0  20164   968 ?        Ss   12:27   0:00  |   \_ jailshell (pactpay) [71644] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   71644  0.0  0.0  20164   264 ?        S    12:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   71646  2.0  0.7 480124 17688 ?        S    12:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      71592  0.0  0.0 183048  2148 ?        S    12:27   0:00  \_ /usr/sbin/CROND -n
root      71614  0.0  0.0  20164   968 ?        Ss   12:27   0:00      \_ jailshell (nigeria) [71635] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   71635  0.0  0.0  20164   260 ?        S    12:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   71637  5.0  0.6 404052 16140 ?        S    12:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3760 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  69589  0.0  0.2  89500  4916 ?        S    12:24   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:03 /usr/sbin/sshd -D
root      71266  0.0  0.1 111304  4264 ?        Ss   12:26   0:00  \_ sshd: [accepted]
root      71307  0.0  0.1 111304  4264 ?        Ss   12:26   0:00  \_ sshd: [accepted]
root      71540  0.0  0.2 157100  5072 ?        Ss   12:26   0:00  \_ sshd: unknown [priv]
sshd      71541  0.0  0.1 115644  2624 ?        S    12:26   0:00      \_ sshd: unknown [net]
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.0 298320  2388 ?        Ssl  05:20   0:07 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 1185864 36380 ?       Ssl  05:20   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 12.0 1828136 291912 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   604 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47616  3000 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48020  2968 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   456 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   452 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47520  2976 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47764  3000 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2412 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   600 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1448 ?        S    05:20   0:00  \_ dovecot/auth
worencom  24753  0.0  0.0  38444  2364 ?        S    11:29   0:00  \_ dovecot/imap
root      71270  0.0  0.1  41052  2728 ?        S    12:26   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372   764 ?        Ssl  05:20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Rs   05:20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  71542  0.0  0.0 445028   312 ?        S    12:26   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   360 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13888 ?        Ssl  05:20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6416 ?        Ss   05:20   0:05 cpsrvd (SSL) - waiting for connections                   
root      71502  0.0  0.0      0     0 ?        Z    12:26   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.0  0.0 1277312 2252 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.0  0.2 1276356 6624 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3304 ?        Rs   05:20   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   272 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   408 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35152 ?       SLsl 05:20   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   292 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   776 ?        Ss   05:20   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   71504  3.1  1.1 493668 28584 ?        S    12:26   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   71574 18.0  1.0 419616 26004 ?        S    12:27   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    68 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   340 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.1 157704  2972 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3320 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  9444 ?        Ss   05:20   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.8 209332 19600 ?        Ss   05:20   0:03 tailwatchd
root       1213  0.0  0.2 183900  5256 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  3344 ?        Ss   05:20   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   496 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1364 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4940 ?        Ss   05:20   0:03 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12848   324 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12876   332 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    55415  0.0  0.8 277744 19528 ?        S    12:06   0:01  \_ /usr/sbin/httpd -k start
nobody    57781  0.1  0.8 277604 19404 ?        S    12:09   0:01  \_ /usr/sbin/httpd -k start
nobody    65196  0.1  0.7 277640 19140 ?        S    12:18   0:00  \_ /usr/sbin/httpd -k start
nobody    65205  0.1  0.7 277868 19172 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65929  0.1  0.7 277876 19120 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65947  0.2  0.7 277744 18904 ?        S    12:19   0:00  \_ /usr/sbin/httpd -k start
nobody    67447  0.0  0.7 277884 18600 ?        S    12:21   0:00  \_ /usr/sbin/httpd -k start
nobody    68323  0.1  0.7 277744 18420 ?        S    12:22   0:00  \_ /usr/sbin/httpd -k start
nobody    68324  0.1  0.7 277616 18892 ?        S    12:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    71659  0.0  0.6 353712 15972 ?        S    12:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    69525  0.1  0.7 277744 18020 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
nobody    69546  0.1  0.7 277744 18228 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
nobody    69547  0.1  0.7 277876 18160 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
nobody    70345  0.1  0.7 277740 17268 ?        S    12:25   0:00  \_ /usr/sbin/httpd -k start
nobody    70569  0.2  0.7 277740 17240 ?        S    12:25   0:00  \_ /usr/sbin/httpd -k start
nobody    70580  0.1  0.7 277876 17636 ?        S    12:25   0:00  \_ /usr/sbin/httpd -k start
nobody    71000  0.1  0.7 277744 17204 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71160  0.1  0.7 277744 16972 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71171  0.2  0.7 277740 17068 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71172  0.0  0.7 277764 18112 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71187  0.0  0.7 277876 17556 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71188  0.1  0.7 277596 17380 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71189  0.0  0.7 277744 17684 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71501  0.1  0.6 277752 16916 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 10.8 1468028 263024 ?      Sl   05:21   6:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148     8 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    40 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183548 11100 ?        Ss   06:01   0:23 lfd - sleeping
root      10515  0.0  0.0 132964     4 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056     0 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.0  4.8 248096 117668 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.0  5.3 263024 129776 ?       S    10:55   0:02  \_ spamd child
root      98394  0.0  4.9 249240 119028 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 47248  Threads: 5  Questions: 2144063  Slow queries: 0  Opens: 11352  Flush tables: 1  Open tables: 2000  Queries per second avg: 45.378
*************************** 1. row ***************************
     Id: 30801
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `14` WHERE `phone`='2348100807938' LIMIT 1
*************************** 2. row ***************************
     Id: 30803
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-17' LIMIT 1
*************************** 3. row ***************************
     Id: 30807
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 108.162.245.187 TIME_WAIT
      1 114.119.136.120 TIME_WAIT
      1 114.119.155.236 TIME_WAIT
      1 142.44.220.120 TIME_WAIT
      1 148.113.130.169 TIME_WAIT
      1 162.158.42.112 TIME_WAIT
      1 162.158.88.160 TIME_WAIT
      1 172.68.211.25 TIME_WAIT
      1 172.68.211.93 TIME_WAIT
      1 172.71.215.144 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.203.103 TIME_WAIT
      1 54.39.6.158 TIME_WAIT
      1 66.240.236.13 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 212.56.36.122 TIME_WAIT
      3 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 12:27:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 8 minutes 12 seconds
   Server load: 0.79 1.05 1.28
   Total accesses: 152186 - Total Traffic: 3.7 GB - Total Duration: 122979468
   CPU Usage: u6.06 s5.61 cu2064.52 cs1697.03 - 7.98% CPU load
   3.22 requests/sec - 83.1 kB/second - 25.8 kB/request - 808.087 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KKKKK_K_W__K..WRKK.K___KK..................._...................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  57781 1/335/6585 K 7.39 1    299 3498837  34.5  8.47  166.10 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1420124407 HTTP/1.1
   1-0  71501 1/2/5997   K 0.02 0    310 3241469  34.7  0.07  168.89 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=4006976771 HTTP/1.1
   2-0  65929 3/104/6385 K 2.87 2    23  3194935  7.4   2.79  156.87 66.249.70.7     http/1.1 test.cloudware.ng:443      GET /1014423342?goodscode=1013094586 HTTP/1.1
   3-0  68323 1/60/6269  K 1.44 1    256 3189162  11.8  1.22  157.73 66.249.70.108   http/1.1 nigeriadecide.org:80       GET /blog/author/admin/page/3/ HTTP/1.1
   4-0  71160 2/10/6154  K 0.27 0    315 3117817  68.2  0.32  157.86 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=747060498 HTTP/1.1
   5-0  65196 0/121/5957 _ 3.36 0    260 3060756  0.0   3.23  151.92 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=710494439 HTTP/1.1
   6-0  70345 1/24/6137  K 0.67 0    272 3133174  34.1  0.86  157.34 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1805601987 HTTP/1.1
   7-0  70569 0/29/5867  _ 0.82 1    34  3087045  0.0   0.84  148.83 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   8-0  68324 0/63/5756  W 1.83 0    0   2886204  0.0   2.00  138.86 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=471774327 HTTP/1.1
   9-0  69525 0/45/5724  _ 1.12 1    26  2904531  0.0   1.04  142.55 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue5.php HTTP/1.1
   10-0 70580 0/26/5542  _ 0.55 1    2   2859518  0.0   0.61  142.06 173.199.190.175 http/1.1 nigeriadecide.org:80       POST /blog/wp-cron.php?doing_wp_cron=1763378821.093455076217651
   11-0 65205 5/100/5373 K 2.48 0    272 2848428  152.2 2.62  134.67 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=1041923009 HTTP/1.1
   12-0 -     0/0/5373   . 0.00 16   0   2838265  0.0   0.00  135.70 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/5352   . 0.00 14   0   2832006  0.0   0.00  137.63 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 71000 0/14/5261  W 0.39 0    0   46142150 0.0   0.38  130.83 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 67447 0/44/4657  R 0.96 77   363 2471666  0.0   1.01  118.09 197.211.52.176  http/1.1
   16-0 69546 4/45/5600  K 1.20 3    350 2865883  125.7 1.27  140.20 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=2667654680 HTTP/1.1
   17-0 69547 1/45/4934  K 1.11 1    297 2631720  31.6  1.19  127.76 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3438728239 HTTP/1.1
   18-0 -     0/0/4548   . 0.00 31   0   2404863  0.0   0.00  115.25 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 71171 4/14/4158  K 0.38 0    265 2119559  129.6 0.41  105.26 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=87864862 HTTP/1.1
   20-0 71172 0/9/4177   _ 0.09 1    29  2191981  0.0   0.15  100.66 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue1.php HTTP/1.1
   21-0 71187 0/6/3904   _ 0.11 0    0   2150931  0.0   0.16  102.67 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   22-0 65947 0/199/3588 _ 4.59 1    33  1984829  0.0   3.65  86.43  128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   23-0 71188 6/8/3643   K 0.18 3    298 1757919  189.0 0.23  91.88  192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=2532294858 HTTP/1.1
   24-0 71189 1/6/3304   K 0.09 2    23  1707859  5.8   0.12  82.77  66.249.70.7     http/1.1 test.cloudware.ng:443      GET /195938206?goodscode=0195682170 HTTP/1.1
   25-0 -     0/0/2648   . 0.00 33   0   1532929  0.0   0.00  70.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/2345   . 0.00 1028 0   1134081  0.0   0.00  55.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/2182   . 0.00 267  0   1426858  0.0   0.00  51.66  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1818   . 0.00 1221 0   941909   0.0   0.00  46.30  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/951    . 0.00 1223 0   491364   0.0   0.00  24.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1916   . 0.00 1202 0   971304   0.0   0.00  46.94  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/965    . 0.00 1199 0   457075   0.0   0.00  22.25  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/563    . 0.00 1220 0   253177   0.0   0.00  12.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/842    . 0.00 1082 0   390668   0.0   0.00  20.81  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/661    . 0.00 1103 0   325336   0.0   0.00  16.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/712    . 0.00 1217 0   388555   0.0   0.00  19.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/537    . 0.00 662  0   315926   0.0   0.00  12.93  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/721    . 0.00 142  0   446847   0.0   0.00  16.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/278    . 0.00 1076 0   152754   0.0   0.00  7.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/775    . 0.00 546  0   463839   0.0   0.00  19.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/247    . 0.00 802  0   107453   0.0   0.00  5.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/99     . 0.00 1215 0   53225    0.0   0.00  2.61   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/51     . 0.00 1219 0   22520    0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/136    . 0.00 1209 0   59109    0.0   0.00  2.78   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 55415 0/261/978  _ 5.19 0    23  595021   0.0   4.85  23.83  192.178.4.97    http/1.1 team.cloudware.ng:443      GET /q=75/201048/IMG20250117164612.jpg HTTP/1.1
   45-0 -     0/0/78     . 0.00 1231 0   37750    0.0   0.00  1.72   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/44     . 0.00 1230 0   17058    0.0   0.00  0.78   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/130    . 0.00 1232 0   57560    0.0   0.00  3.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/232    . 0.00 1206 0   114638   0.0   0.00  6.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/166    . 0.00 1693 0   88095    0.0   0.00  4.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/16     . 0.00 1691 0   5693     0.0   0.00  0.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/16     . 0.00 1717 0   5645     0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/116    . 0.00 1207 0   72477    0.0   0.00  3.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/156    . 0.00 1318 0   83798    0.0   0.00  3.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/233    . 0.00 1542 0   124221   0.0   0.00  6.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/80     . 0.00 1677 0   38998    0.0   0.00  1.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/192    . 0.00 1718 0   98836    0.0   0.00  5.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/56     . 0.00 1690 0   26444    0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/9      . 0.00 1673 0   3402     0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/11     . 0.00 1675 0   5288     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00 1713 0   1        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/147    . 0.00 1674 0   85312    0.0   0.00  3.84   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/12     . 0.00 1688 0   9904     0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/118    . 0.00 1225 0   58161    0.0   0.00  3.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/41     . 0.00 1663 0   22612    0.0   0.00  1.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/116    . 0.00 1218 0   58413    0.0   0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/33     . 0.00 1676 0   18482    0.0   0.00  0.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/55     . 0.00 1712 0   33511    0.0   0.00  1.51   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/2      . 0.00 1715 0   1        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/152    . 0.00 1159 0   95684    0.0   0.00  4.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 1711 0   1        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/22     . 0.00 1710 0   13455    0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/152    . 0.00 1157 0   82450    0.0   0.00  4.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/15     . 0.00 1667 0   6311     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/17     . 0.00 1661 0   8423     0.0   0.00  0.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/5      . 0.00 1672 0   4241     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/4      . 0.00 1716 0   2083     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/72     . 0.00 1689 0   42788    0.0   0.00  1.74   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/7      . 0.00 1683 0   2788     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/5      . 0.00 1714 0   1902     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 1694 0   1549     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1237
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...39)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 114090
   total entries replaced since starting: 0
   total entries expired since starting: 112830
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 23 hit, 383 miss
   total removes since starting: 23 hit, 29 miss
Youez - 2016 - github.com/yon3zu
LinuXploit