403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.11.21.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-20.11.21 load[1] mem[90/49] mysql[1/7] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        2046          81          36         235         119
Swap:          1999        1369         630
 11:21:02 up  1:40,  0 users,  load average: 1.21, 0.74, 0.50
## system overview
top - 11:21:02 up  1:40,  0 users,  load average: 1.21, 0.74, 0.50
Tasks: 215 total,   4 running, 210 sleeping,   0 stopped,   1 zombie
%Cpu(s): 23.5 us, 58.8 sy,  0.0 ni,  0.0 id, 11.8 wa,  0.0 hi,  5.9 si,  0.0 st
KiB Mem :  2420300 total,    73516 free,  2104920 used,   241864 buff/cache
KiB Swap:  2047996 total,   637180 free,  1410816 used.   117652 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
    36 root      20   0       0      0      0 S  43.8  0.0   0:15.54 [kswapd0]
  1793 mysql     20   0 1462348 222468    912 S  25.0  9.2   1:20.41 /usr/sbin+
 81315 cloudw    20   0  353712  15948  10468 S  18.8  0.7   0:00.03 /opt/cpan+
 81323 saboakin  20   0  404052  15572  10112 S  12.5  0.6   0:00.02 /opt/cpan+
 81325 nigeria   20   0  404052  16088  10332 S  12.5  0.7   0:00.02 /opt/cpan+
   950 root      20   0  261028   5800    948 S   6.2  0.2   0:01.56 cpsrvd (S+
 81324 pactpay   20   0  480124  16740  11044 S   6.2  0.7   0:00.01 /opt/cpan+
 81338 root      20   0  160220   2048   1572 R   6.2  0.1   0:00.01 top -bcn1
 81343 cloudsms  20   0  378052  10248   7200 R   6.2  0.4   0:00.01 /opt/cpan+
     1 root      20   0   44268   2972   1080 S   0.0  0.1   0:09.59 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.30 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:05.91 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.32 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.50 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   5100   4808 S   0.0  0.2   0:03.49 /usr/lib/+
   387 root      20   0   45352    344    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    312    184 S   0.0  0.0   0:00.56 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1092    736 S   0.0  0.0   0:01.50 /usr/lib/+
   471 root      20   0   52852    160     84 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58736   1376    660 R   0.0  0.1   0:03.38 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240    784    400 S   0.0  0.0   0:00.93 /usr/lib/+
   487 root      20   0   21540    376    288 S   0.0  0.0   0:00.13 /usr/sbin+
   492 root      20   0  152780    188    144 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   4516    104 S   0.0  0.2   0:00.23 queueproc+
   507 nscd      20   0  928956   1016    344 S   0.0  0.0   0:05.00 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    512    380 S   0.0  0.0   0:00.19 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89120   3184    256 S   0.0  0.1   0:00.17 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.48 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    308    228 S   0.0  0.0   0:00.12 pure-ftpd+
   932 root      20   0  572372    840    264 S   0.0  0.0   0:00.62 /usr/bin/+
   933 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  12708      0 S   0.0  0.5   0:01.74 /usr/loca+
   936 root      20   0 1277056   7348    164 S   0.0  0.3   0:21.11 /usr/bin/+
   937 root      20   0  445028   1128   1016 S   0.0  0.0   0:00.26 sw-engine+
   938 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    336    228 S   0.0  0.0   0:00.76 /usr/sbin+
   943 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8816    128 S   0.0  0.4   0:28.06 /usr/bin/+
   945 root      20   0   51508    428    248 S   0.0  0.0   0:00.11 /usr/sbin+
   946 telegraf  20   0 5654304  33960      0 S   0.0  1.4   0:03.77 /usr/loca+
   947 memcach+  20   0  342400     72     72 S   0.0  0.0   0:00.12 /usr/bin/+
   948 root      20   0 1763312 603380     44 S   0.0 24.9   0:14.87 /usr/loca+
   949 root      20   0  389508    580    376 S   0.0  0.0   0:00.24 php-fpm: +
   953 root      20   0  388892    216    132 S   0.0  0.0   0:00.21 php-fpm: +
   958 root      20   0  232784   4688   4024 S   0.0  0.2   0:01.74 /usr/sbin+
   986 root      20   0  396248    372    196 S   0.0  0.0   0:00.22 php-fpm: +
   990 root      20   0  439788   1028    836 S   0.0  0.0   0:00.31 php-fpm: +
   994 root      20   0  400740   2924    544 S   0.0  0.1   0:00.87 php-fpm: +
   996 named     20   0  785456  33524    204 S   0.0  1.4   0:04.33 /usr/sbin+
  1013 cpanelc+  20   0    9844   2892   2284 S   0.0  0.1   0:04.80 /usr/loca+
  1093 dovenull  20   0   46912   1024    420 S   0.0  0.0   0:00.10 dovecot/p+
  1094 dovenull  20   0   47888   1532    288 S   0.0  0.1   0:00.10 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.02 dovecot/a+
  1096 root      20   0   10452    480    296 S   0.0  0.0   0:00.07 dovecot/l+
  1097 dovenull  20   0   46916    760    140 S   0.0  0.0   0:00.09 dovecot/p+
  1098 dovenull  20   0   47764   1636    320 S   0.0  0.1   0:00.10 dovecot/i+
  1104 root      20   0   24528   2020    208 S   0.0  0.1   0:00.06 dovecot/c+
  1110 dovecot   20   0   13568    408    196 S   0.0  0.0   0:00.01 dovecot/s+
  1145 systuser  20   0  157704   1988      0 S   0.0  0.1   0:00.05 SonarPush+
  1170 dovecot   20   0   41192    804    308 S   0.0  0.0   0:00.24 dovecot/a+
  1175 wp-tool+  20   0  412368  32216   1424 S   0.0  1.3   0:02.13 /usr/bin/+
  1176 wp-tool+  20   0  387528  11896    268 S   0.0  0.5   0:00.14 /usr/bin/+
  1234 root      20   0  167452   1204    604 S   0.0  0.0   0:00.13 dnsadmin +
  1235 root      20   0  262228  18308    448 S   0.0  0.8   0:00.49 cpdavd - +
  1237 root      20   0  209308  18352   1024 S   0.0  0.8   0:00.97 tailwatchd
  1669 root      20   0  299272    644    264 S   0.0  0.0   0:00.16 php-fpm: +
  1701 root      38  18  130416    900    168 S   0.0  0.0   0:00.01 cpanellog+
  1959 root      20   0  266992   8172    608 S   0.0  0.3   0:00.57 /usr/sbin+
  1962 root      20   0   12840    472    256 S   0.0  0.0   0:00.71 /usr/loca+
  1963 root      20   0   12732    196    124 S   0.0  0.0   0:00.60 /usr/loca+
  1964 root      20   0   12880    488    216 S   0.0  0.0   0:00.66 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  181692   8264    808 S   0.0  0.3   0:05.60 lfd - sle+
 18294 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152    528     36 S   0.0  0.0   0:00.09 [kworker]
 25497 root      20   0       0      0      0 D   0.0  0.0   0:00.25 [kworker/+
 41201 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 51368 nobody    20   0  277580  19248   3680 S   0.0  0.8   0:03.31 /usr/sbin+
 54032 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 54542 nobody    20   0  277784  19380   3632 S   0.0  0.8   0:02.93 /usr/sbin+
 56404 root      20   0  248036 117364    768 S   0.0  4.8   0:02.99 /usr/loca+
 59837 nobody    20   0  277544  17552   1944 S   0.0  0.7   0:02.32 /usr/sbin+
 63192 nobody    20   0  277896  19400   3620 S   0.0  0.8   0:02.24 /usr/sbin+
 64310 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 64340 root      20   0  249300 117860    124 S   0.0  4.9   0:00.13 spamd chi+
 64341 root      20   0  248036 116772    212 S   0.0  4.8   0:00.00 spamd chi+
 64814 nobody    20   0  277760  19248   3664 S   0.0  0.8   0:02.12 /usr/sbin+
 66078 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67652 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 72419 nobody    20   0  277900  16968   1480 S   0.0  0.7   0:01.12 /usr/sbin+
 75102 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75783 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75919 nobody    20   0  277760  18600   3224 S   0.0  0.8   0:00.60 /usr/sbin+
 76591 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 77167 nobody    20   0  277892  18616   3076 S   0.0  0.8   0:00.54 /usr/sbin+
 77366 nobody    20   0  277484  16324   1220 S   0.0  0.7   0:00.56 /usr/sbin+
 77872 nobody    20   0  277760  17460   2080 S   0.0  0.7   0:00.32 /usr/sbin+
 78245 nobody    20   0  277760  18556   3188 S   0.0  0.8   0:00.34 /usr/sbin+
 78256 nobody    20   0  277904  16816   1384 S   0.0  0.7   0:00.27 /usr/sbin+
 78258 nobody    20   0  277760  16820   1356 S   0.0  0.7   0:00.35 /usr/sbin+
 79976 worencom  20   0   38480   1352    336 S   0.0  0.1   0:00.00 dovecot/i+
 80005 nobody    20   0  277484  17352   2244 S   0.0  0.7   0:00.19 /usr/sbin+
 80021 nobody    20   0  277900  15952    624 S   0.0  0.7   0:00.05 /usr/sbin+
 80022 nobody    20   0  277492  17864   2732 S   0.0  0.7   0:00.12 /usr/sbin+
 80747 root      20   0   60820   1308    324 S   0.0  0.1   0:00.00 dovecot/l+
 81014 wp-tool+  20   0  445028    132      4 S   0.0  0.0   0:00.00 sw-engine+
 81131 cloudw    20   0  567560  97952   1640 S   0.0  4.0   0:02.58 php-fpm: +
 81132 nigeria   20   0  401500   6724   1016 S   0.0  0.3   0:00.26 php-fpm: +
 81140 nobody    20   0  277736  15948    692 S   0.0  0.7   0:00.01 /usr/sbin+
 81171 cloudw    20   0  564676  95356   2112 S   0.0  3.9   0:02.18 php-fpm: +
 81172 cloudw    20   0  562628  92764   1636 S   0.0  3.8   0:01.75 php-fpm: +
 81173 cloudw    20   0  556484  86552   1640 S   0.0  3.6   0:01.34 php-fpm: +
 81174 nobody    20   0  277360  17500   2672 S   0.0  0.7   0:00.01 /usr/sbin+
 81176 cloudw    20   0  556484  86552   1640 S   0.0  3.6   0:01.34 php-fpm: +
 81190 nobody    20   0  277348  17448   2668 S   0.0  0.7   0:00.00 /usr/sbin+
 81191 nobody    20   0  277616  17752   2692 S   0.0  0.7   0:00.01 /usr/sbin+
 81200 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.01 [httpd] <+
 81201 nobody    20   0  277192  15448    848 S   0.0  0.6   0:00.00 /usr/sbin+
 81202 nobody    20   0  277320  15528    792 S   0.0  0.6   0:00.00 /usr/sbin+
 81203 nobody    20   0  277192  15448    848 S   0.0  0.6   0:00.00 /usr/sbin+
 81204 nigeria   20   0  400460   4008    724 S   0.0  0.2   0:00.01 php-fpm: +
 81212 nobody    20   0  277616  15528    476 S   0.0  0.6   0:00.00 /usr/sbin+
 81213 nobody    20   0  277616  16248   1196 S   0.0  0.7   0:00.01 /usr/sbin+
 81214 nobody    20   0  277320  16892   2160 S   0.0  0.7   0:00.00 /usr/sbin+
 81215 nobody    20   0  277616  16200   1148 S   0.0  0.7   0:00.00 /usr/sbin+
 81216 nobody    20   0  277348  16060   1296 S   0.0  0.7   0:00.00 /usr/sbin+
 81217 nobody    20   0  277736  17988   2740 S   0.0  0.7   0:00.01 /usr/sbin+
 81218 nobody    20   0  277760  16452   1180 S   0.0  0.7   0:00.02 /usr/sbin+
 81222 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81241 root      20   0  162436   3100   1604 S   0.0  0.1   0:00.02 sshd: roo+
 81242 sshd      20   0  115644   1840    768 S   0.0  0.1   0:00.00 sshd: roo+
 81267 root      20   0  183048   1808   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81268 root      20   0  183048   1808   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81269 root      20   0  183048   1808   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81270 root      20   0  183048   1804   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81271 root      20   0  183048   1804   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81272 root      20   0  183048   1804   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81273 root      20   0  183048   1804   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81275 root      20   0  183048   1800   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81276 root      20   0  183048   1800   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81277 root      20   0  183048   1800   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81279 root      20   0  183048   1800   1240 S   0.0  0.1   0:00.00 /usr/sbin+
 81280 root      20   0  183048   1804   1244 S   0.0  0.1   0:00.00 /usr/sbin+
 81281 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 81282 root      20   0   20164    780    608 S   0.0  0.0   0:00.00 /usr/loca+
 81283 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 81284 root      20   0   20164    960    760 S   0.0  0.0   0:00.00 jailshell+
 81286 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 81287 root      20   0   20164    780    608 S   0.0  0.0   0:00.00 /usr/loca+
 81288 root      20   0   20164    940    740 S   0.0  0.0   0:00.00 jailshell+
 81290 root      20   0   20164    780    608 S   0.0  0.0   0:00.00 /usr/loca+
 81291 root      20   0   20164    944    740 S   0.0  0.0   0:00.00 jailshell+
 81292 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 81293 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 81294 root      20   0   20164    940    740 S   0.0  0.0   0:00.00 jailshell+
 81296 root      20   0  108052    344    272 S   0.0  0.0   0:00.00 /usr/bin/+
 81302 root      20   0  113288   1500   1280 S   0.0  0.1   0:00.00 /bin/bash+
 81317 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81319 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81320 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 81341 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81342 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 81344 root      20   0  261028   5344    372 R   0.0  0.2   0:00.00 cpsrvd (S+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:40   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:40   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      25497  0.0  0.0      0     0 ?        S    10:10   0:00  \_ [kworker/1:2]
root      41201  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root      54032  0.0  0.0      0     0 ?        S    10:47   0:00  \_ [kworker/0:3]
root      64310  0.0  0.0      0     0 ?        S    11:00   0:00  \_ [kworker/u200:2]
root      66078  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kworker/0:2]
root      67652  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/1:1]
root      75102  0.0  0.0      0     0 ?        S    11:13   0:00  \_ [kworker/0:0]
root      75783  0.0  0.0      0     0 ?        S    11:14   0:00  \_ [kworker/0:1]
root      76591  0.0  0.0      0     0 ?        S    11:15   0:00  \_ [kworker/1:3]
root      81222  0.0  0.0      0     0 ?        S    11:20   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44268  3216 ?        Ss   09:40   0:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5108 ?        Ss   09:40   0:03 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   344 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   312 ?        S<sl 09:40   0:00 /sbin/auditd
root        470  0.0  0.0  24712  1164 ?        Ss   09:40   0:01 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   160 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58736  1376 ?        Ss   09:40   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   780 ?        Ssl  09:40   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   376 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   188 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.1 224280  4516 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1012 ?        Ssl  09:40   0:05 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208     0 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   512 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      81267  0.0  0.0 183048  1780 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81283  0.0  0.0 113284  1212 ?        Ss   11:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      81296  0.0  0.0 108052   340 ?        S    11:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      81302  0.0  0.0 113288  1500 ?        S    11:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      81348  0.0  0.0 153840  2092 ?        R    11:21   0:00  |               \_ ps auxf
root      81268  0.0  0.0 183048  1780 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81287  0.0  0.0  20164   780 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      81269  0.0  0.0 183048  1780 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81290  0.0  0.0  20164   780 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      81270  0.0  0.0 183048  1776 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81293  0.0  0.0  20164   784 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      81271  0.0  0.0 183048  1776 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81284  0.0  0.0  20164   960 ?        Ss   11:21   0:00  |   \_ jailshell (cloudsms) [81341] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  81341  0.0  0.0  20164   260 ?        S    11:21   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  81342  0.0  0.0 113284  1212 ?        S    11:21   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  81343  0.0  0.6 404052 15608 ?        S    11:21   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      81272  0.0  0.0 183048  1776 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81292  0.0  0.0  20164   784 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      81273  0.0  0.0 183048  1776 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81281  0.0  0.0  20164   784 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      81275  0.0  0.0 183048  1772 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81286  0.0  0.0  20164   784 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      81276  0.0  0.0 183048  1772 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81282  0.0  0.0  20164   780 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      81277  0.0  0.0 183048  1772 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81288  0.0  0.0  20164   940 ?        Ss   11:21   0:00  |   \_ jailshell (pactpay) [81319] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81319  0.0  0.0  20164   260 ?        S    11:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81324  1.0  0.7 480124 17260 ?        S    11:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      81279  0.0  0.0 183048  1772 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81291  0.0  0.0  20164   944 ?        Ss   11:21   0:00  |   \_ jailshell (nigeria) [81320] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81320  0.0  0.0  20164   264 ?        S    11:21   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81325  2.0  0.6 404052 16088 ?        S    11:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      81280  0.0  0.0 183048  1776 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      81294  0.0  0.0  20164   940 ?        Ss   11:21   0:00      \_ jailshell (saboakin) [81317] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  81317  0.0  0.0      0     0 ?        R    11:21   0:00          \_ [jailshell]
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89120  3184 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   308 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372   840 ?        Ssl  09:40   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    72 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 12708 ?        Ssl  09:40   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.3  0.3 1277056 7348 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1128 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  81014  0.0  0.0 445028   132 ?        S    11:20   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    44 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    76 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   336 ?        Ss   09:40   0:00 /usr/sbin/sshd -D
root      81241  0.6  0.1 162436  3096 ?        Ss   11:20   0:00  \_ sshd: root [priv]
sshd      81242  0.0  0.0 115644  1816 ?        S    11:20   0:00      \_ sshd: root [net]
systuser    943  0.0  0.0  11348    36 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.4  0.3 1349832 8816 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   428 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.0  46912  1024 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.0  47888  1532 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   480 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.0  46916   760 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.0  47764  1636 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24528  2020 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   408 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192   804 ?        S    09:40   0:00  \_ dovecot/auth
worencom  79976  0.0  0.0  38480  1352 ?        S    11:19   0:00  \_ dovecot/imap
root      80747  0.0  0.0  60820  1308 ?        S    11:20   0:00  \_ dovecot/lmtp
telegraf    946  0.0  1.4 5654304 33960 ?       SLsl 09:40   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400    16 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.2 24.9 1763312 603380 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   580 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261028  5800 ?        Ss   09:40   0:01 cpsrvd (SSL) - waiting for connections                   
root      81344  0.0  0.2 261028  5588 ?        R    11:21   0:00  \_ cpsrvd (SSL) - waiting for connections                   
root        953  0.0  0.0 388892   216 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 232784  4688 ?        Ssl  09:40   0:01 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   372 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1028 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  2920 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    81131 21.5  4.0 567560 97660 ?        S    11:20   0:02  \_ php-fpm: pool cloudware_ng
nigeria   81132  2.1  0.2 401500  6576 ?        S    11:20   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    81171 27.2  3.9 564676 95064 ?        S    11:20   0:02  \_ php-fpm: pool cloudware_ng
cloudw    81172 21.8  3.8 562628 92472 ?        S    11:20   0:01  \_ php-fpm: pool cloudware_ng
cloudw    81173 16.7  3.5 556484 86260 ?        S    11:20   0:01  \_ php-fpm: pool cloudware_ng
cloudw    81176 16.7  3.5 556484 86260 ?        S    11:20   0:01  \_ php-fpm: pool cloudware_ng
nigeria   81204  0.1  0.1 400460  3860 ?        S    11:20   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.3 785456 33320 ?        Ssl  09:40   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1   9844  2892 ?        Ss   09:40   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.0 157704  1988 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.3 412368 32208 ?        Ss   09:40   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.4 387528 11896 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1204 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.7 262228 18308 ?        Ss   09:40   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.7 209308 18352 ?        Ss   09:40   0:00 tailwatchd
root       1669  0.0  0.0 299272   644 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416   900 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.1 1462348 222304 ?      Sl   09:40   1:20 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  8164 ?        Ss   09:40   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12840   472 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   196 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12880   488 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    51368  0.1  0.7 277580 19116 ?        S    10:44   0:03  \_ /usr/sbin/httpd -k start
nobody    54542  0.1  0.7 277784 19240 ?        S    10:48   0:02  \_ /usr/sbin/httpd -k start
nobody    59837  0.1  0.7 277544 17536 ?        S    10:54   0:02  \_ /usr/sbin/httpd -k start
nobody    63192  0.1  0.7 277896 19260 ?        S    10:58   0:02  \_ /usr/sbin/httpd -k start
nobody    64814  0.1  0.7 277760 19108 ?        S    11:00   0:02  \_ /usr/sbin/httpd -k start
nobody    72419  0.1  0.6 277900 16924 ?        S    11:09   0:01  \_ /usr/sbin/httpd -k start
nobody    75919  0.1  0.7 277760 18468 ?        S    11:14   0:00  \_ /usr/sbin/httpd -k start
nobody    77167  0.1  0.7 277892 18508 ?        S    11:15   0:00  \_ /usr/sbin/httpd -k start
nobody    77366  0.1  0.6 277484 16280 ?        S    11:16   0:00  \_ /usr/sbin/httpd -k start
nobody    77872  0.1  0.7 277760 17444 ?        S    11:16   0:00  \_ /usr/sbin/httpd -k start
nobody    78245  0.1  0.7 277760 18424 ?        S    11:17   0:00  \_ /usr/sbin/httpd -k start
nobody    78256  0.1  0.6 277904 16800 ?        S    11:17   0:00  \_ /usr/sbin/httpd -k start
nobody    78258  0.1  0.6 277760 16804 ?        S    11:17   0:00  \_ /usr/sbin/httpd -k start
nobody    80005  0.2  0.7 277484 17296 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    80021  0.0  0.6 277900 15948 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    80022  0.1  0.7 277492 17728 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    81315  3.0  0.6 353712 15948 ?        S    11:21   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    81140  0.0  0.6 277736 15904 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81174  0.1  0.7 277360 17368 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81190  0.0  0.7 277348 17316 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81191  0.1  0.7 277616 17612 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81200  0.1  0.0      0     0 ?        Z    11:20   0:00  \_ [httpd] <defunct>
nobody    81201  0.0  0.6 277192 15436 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81202  0.0  0.6 277320 15512 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81203  0.0  0.6 277192 15436 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81212  0.0  0.6 277616 15524 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81213  0.2  0.6 277616 16204 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81214  0.0  0.6 277320 16888 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81215  0.0  0.6 277616 16148 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81216  0.0  0.6 277348 16032 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81217  0.2  0.7 277736 17848 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81218  0.4  0.6 277760 16400 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.3 181692  8264 ?        Ss   09:40   0:05 lfd - sleeping
oysipao+  18294  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152   492 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.1  4.8 248036 117364 ?       Ss   10:49   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.8 249300 117860 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116772 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 27746  Threads: 5  Questions: 389503  Slow queries: 0  Opens: 3252  Flush tables: 1  Open tables: 2000  Queries per second avg: 14.038
*************************** 1. row ***************************
     Id: 6800
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 6802
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 3. row ***************************
     Id: 6804
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 6805
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 6807
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 148.113.130.69 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 4.151.241.253 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.18.9.165 TIME_WAIT
     16 167.99.50.39 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 11:21:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 42 minutes 21 seconds
   Server load: 1.21 0.74 0.50
   Total accesses: 29509 - Total Traffic: 778.7 MB - Total Duration: 57831137
   CPU Usage: u12.5 s5.51 cu379.68 cs304.79 - 2.53% CPU load
   1.06 requests/sec - 28.7 kB/second - 27.0 kB/request - 1959.78 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 16 idle workers

K____.KRWK.K______K_CK___WKK_K_KK...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req    Dur    Conn Child  Slot     Client     Protocol         VHost                                      Request
   0-0  54542 1/507/1502 K 12.86 2     293  767246   34.4 13.41 41.37 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2754349106 HTTP/1.1
   1-0  75919 0/104/1524 _ 2.55  1     41   44127558 0.0  2.69  39.75 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue2.php HTTP/1.1
   2-0  77167 0/96/1476  _ 2.30  0     33   776710   0.0  2.44  40.04 75.119.155.172 http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   3-0  51368 0/656/1683 _ 14.02 1     115  783700   0.0  14.49 40.62 116.203.134.67 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue4.php HTTP/1.1
   4-0  59837 0/424/1498 _ 9.60  3     2318 779227   0.0  10.33 37.08 167.99.50.39   http/1.1 cloudware.ng:80        GET //cloudware.ng/wp-content/plugins/contact-form-7/includes/s
   5-0  -     0/0/1212   . 0.00  2     0    618486   0.0  0.00  31.99 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  80005 36/61/1297 K 0.67  0     10   653144   25.1 0.69  32.72 20.18.9.165    http/1.1 nigeriadecide.org:443  GET /9.php HTTP/1.1
   7-0  80021 0/10/1542  R 0.15  48    5    701093   0.0  0.19  44.36 177.76.10.26   http/1.1 nigeriadecide.org:443
   8-0  80022 0/25/1265  W 0.36  0     0    667607   0.0  0.45  47.74 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1617393787 HTTP/1.1
   9-0  77872 36/85/1528 K 1.50  0     2    721788   30.1 1.25  36.88 20.18.9.165    http/1.1 nigeriadecide.org:80   GET /9.php HTTP/1.1
   10-0 -     0/0/1309   . 0.00  0     0    685572   0.0  0.00  33.69 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 64814 1/536/1467 K 11.65 1     272  672029   34.1 7.31  32.78 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=1905864548 HTTP/1.1
   12-0 77366 0/93/1110  _ 2.43  1     460  566150   0.0  2.56  31.51 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1157235297 HTTP/1.1
   13-0 72419 0/272/1062 _ 4.78  1     502  569021   0.0  4.64  25.63 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=346621777 HTTP/1.1
   14-0 81140 0/3/900    _ 0.05  2     685  471242   0.0  0.09  23.63 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=2298637183 HTTP/1.1
   15-0 81174 0/4/798    _ 0.01  1     124  367010   0.0  0.02  20.56 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue5.php HTTP/1.1
   16-0 78245 0/63/768   _ 1.39  0     44   388255   0.0  1.44  23.52 128.140.8.200  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   17-0 81190 0/3/926    _ 0.02  1     124  506555   0.0  0.04  25.48 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue1.php HTTP/1.1
   18-0 81191 1/2/1061   K 0.01  1     335  435207   36.0 0.04  21.42 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3234319105 HTTP/1.1
   19-0 78256 0/55/907   _ 1.07  3     2487 394356   0.0  1.15  27.76 167.99.50.39   http/1.1 cloudware.ng:80        GET //cloudware.ng/wp-content/themes/consulting/assets/js/selec
   20-0 81200 1/2/1108   C 0.00  0     0    525729   0.2  0.01  28.98 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 63192 1/466/625  K 9.93  0     270  236872   33.8 9.79  12.33 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=1770501348 HTTP/1.1
   22-0 81201 0/1/936    _ 0.00  3     2796 400535   0.0  0.00  24.53 167.99.50.39   http/1.1 cloudware.ng:80        GET //cloudware.ng/wp-includes/js/jquery/jquery-migrate.min.js
   23-0 78258 0/61/189   _ 1.50  3     2220 99018    0.0  1.61  5.24  167.99.50.39   http/1.1 cloudware.ng:80        GET //cloudware.ng/wp-content/themes/consulting/inc/megamenu/as
   24-0 81202 0/2/361    _ 0.00  2     2968 186855   0.0  0.01  9.48  167.99.50.39   http/1.1 cloudware.ng:80        GET //cloudware.ng/wp-includes/js/dist/i18n.min.js HTTP/1.1
   25-0 81203 0/1/391    W 0.00  0     0    200577   0.0  0.00  9.94  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   26-0 81212 1/1/5      K 0.00  3     1031 3554     35.0 0.03  0.10  192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=566833315 HTTP/1.1
   27-0 81213 1/1/377    K 0.01  3     633  177948   34.4 0.03  10.42 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2255061561 HTTP/1.1
   28-0 81214 0/2/14     _ 0.00  0     4    5639     0.0  0.03  0.31  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   29-0 81215 1/1/198    K 0.00  2     685  103284   34.2 0.03  6.52  192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=809804567 HTTP/1.1
   30-0 81216 0/1/5      _ 0.00  2     322  3034     0.0  0.01  0.10  75.119.155.172 http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   31-0 81217 2/2/4      K 0.02  1     274  2046     65.6 0.06  0.10  192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=3480600129 HTTP/1.1
   32-0 81218 2/2/5      K 0.07  2     703  4169     64.1 0.06  0.11  192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1089238282 HTTP/1.1
   33-0 -     0/0/5      . 0.00  1     0    879      0.0  0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/19     . 0.00  27457 0    9074     0.0  0.00  0.45  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/4      . 0.00  27507 0    2048     0.0  0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/2      . 0.00  27524 0    738      0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/8      . 0.00  27514 0    3463     0.0  0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00  27508 0    1877     0.0  0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  27519 0    599      0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00  27513 0    3057     0.0  0.00  0.15  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00  27509 0    840      0.0  0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00  26615 0    110452   0.0  0.00  5.70  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00  27512 0    4927     0.0  0.00  0.24  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00  26990 0    84969    0.0  0.00  4.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00  27479 0    6975     0.0  0.00  0.32  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1107
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...32)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 19452
   total entries replaced since starting: 0
   total entries expired since starting: 18333
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 12 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit