403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.04.03.txt
 ## swap threshold exceeded
## server overview
2025-11-21.04.03 load[0] mem[76/42] mysql[1/6] httpd[20]
              total        used        free      shared  buff/cache   available
Mem:           2363        1742          71          45         550         407
Swap:          1999         963        1036
 04:03:01 up 28 min,  0 users,  load average: 0.53, 0.27, 0.29
## system overview
top - 04:03:01 up 28 min,  0 users,  load average: 0.53, 0.27, 0.29
Tasks: 209 total,   1 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.8 us, 25.8 sy,  0.0 ni, 19.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78956 free,  1783472 used,   557872 buff/cache
KiB Swap:  2047996 total,  1060860 free,   987136 used.   417676 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457284 202292   4112 S  81.2  8.4   0:21.11 /usr/sbin+
 25869 nigeria   20   0  404052  16136  10380 S  18.8  0.7   0:00.04 /opt/cpan+
    14 root      20   0       0      0      0 S   6.2  0.0   0:00.31 [ksoftirq+
   474 dbus      20   0   58748   1336    628 S   6.2  0.1   0:00.94 /usr/bin/+
   505 polkitd   20   0  610540    904    456 S   6.2  0.0   0:00.26 /usr/lib/+
 21601 nobody    20   0  277520  19464   4356 S   6.2  0.8   0:00.42 /usr/sbin+
 25885 cloudw    20   0  353712  17572  10492 S   6.2  0.7   0:00.01 /opt/cpan+
 25887 cloudw    20   0  353712  15972  10484 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44276   3324   1504 S   0.0  0.1   0:03.01 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:01.68 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:06.44 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.49 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.60 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   8556   8244 S   0.0  0.4   0:01.38 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    128     16 S   0.0  0.0   0:00.22 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    148    104 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   6000    968 S   0.0  0.2   0:00.10 queueproc+
   478 nscd      20   0  861368   1304    668 S   0.0  0.1   0:01.39 /usr/sbin+
   483 rpc       20   0   69256    204     96 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
   507 root      20   0   24696   1156    812 S   0.0  0.0   0:00.42 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.03 /usr/sbin+
   514 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.05 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89112   4000   1044 S   0.0  0.2   0:00.05 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.67 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 682260    300 S   0.0 28.2   0:14.58 /usr/loca+
   942 named     20   0  990260  28776   1576 S   0.0  1.2   0:01.37 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    500    340 S   0.0  0.0   0:00.05 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.85 /usr/bin/+
   955 telegraf  20   0 5654048  34528   2100 S   0.0  1.4   0:01.13 /usr/loca+
   956 root      20   0  445028   3156   3052 S   0.0  0.1   0:00.06 sw-engine+
   960 root      20   0  396248    540    364 S   0.0  0.0   0:00.11 php-fpm: +
   963 systuser  20   0  114016  12412   2632 S   0.0  0.5   0:00.50 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.03 pure-ftpd+
   965 cpanelc+  20   0    9820   2748   2312 S   0.0  0.1   0:01.35 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.34 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.53 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.03 /usr/bin/+
   979 root      20   0  261028   4724   1040 S   0.0  0.2   0:00.38 cpsrvd (S+
   980 root      20   0  572372    704    236 S   0.0  0.0   0:00.24 /usr/bin/+
   984 root      20   0  389508    264    176 S   0.0  0.0   0:00.10 php-fpm: +
   998 root      20   0  388892    576    480 S   0.0  0.0   0:00.12 php-fpm: +
  1001 root      20   0  400740   3072    636 S   0.0  0.1   0:00.34 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  216400   8156   6740 S   0.0  0.3   0:00.62 /usr/sbin+
  1010 root      20   0  439788  11452  11152 S   0.0  0.5   0:00.15 php-fpm: +
  1097 dovenull  20   0   46912   1780   1060 S   0.0  0.1   0:00.02 dovecot/p+
  1098 dovenull  20   0   47056   2848   1996 S   0.0  0.1   0:00.01 dovecot/i+
  1099 dovecot   20   0   10320    396    280 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    624    452 S   0.0  0.0   0:00.02 dovecot/l+
  1101 dovenull  20   0   47064   2484   1788 S   0.0  0.1   0:00.06 dovecot/p+
  1102 dovenull  20   0   47056   2832   2036 S   0.0  0.1   0:00.02 dovecot/i+
  1106 root      20   0   24528   2032    496 S   0.0  0.1   0:00.03 dovecot/c+
  1107 dovecot   20   0   13568    636    420 S   0.0  0.0   0:00.00 dovecot/s+
  1135 root      20   0  247868 117596   1120 S   0.0  4.9   0:03.03 /usr/loca+
  1157 dovecot   20   0   41056   1436   1028 S   0.0  0.1   0:00.04 dovecot/a+
  1197 systuser  20   0  157700   2964    920 S   0.0  0.1   0:00.01 SonarPush+
  1199 wp-tool+  20   0  387528  13848   2260 S   0.0  0.6   0:00.10 /usr/bin/+
  1200 wp-tool+  20   0  412368  34056   3272 S   0.0  1.4   0:00.78 /usr/bin/+
  1281 root      20   0  183900     80     80 S   0.0  0.0   0:00.08 cpdavd - +
  1283 root      20   0  167452   1348    748 S   0.0  0.1   0:00.07 dnsadmin +
  1285 root      20   0  209216  11696   2204 S   0.0  0.5   0:00.36 tailwatchd
  1709 root      20   0  299272    720    340 S   0.0  0.0   0:00.04 php-fpm: +
  1717 root      38  18  130416   1432    708 S   0.0  0.1   0:00.00 cpanellog+
  1930 root      20   0  267052   8100    716 S   0.0  0.3   0:00.28 /usr/sbin+
  1931 root      20   0   12792    384    268 S   0.0  0.0   0:00.18 /usr/loca+
  1932 root      20   0   12732    296    220 S   0.0  0.0   0:00.14 /usr/loca+
  1933 root      20   0   12804    352    228 S   0.0  0.0   0:00.17 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181160  12276   1180 S   0.0  0.5   0:01.75 lfd - sle+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  3076 nobody    20   0  277928  20768   4620 S   0.0  0.9   0:02.16 /usr/sbin+
  7259 root      20   0  249128 118876   1232 S   0.0  4.9   0:00.13 spamd chi+
  7260 root      20   0  247868 116808    368 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  20148   4536 S   0.0  0.8   0:01.47 /usr/sbin+
 10126 nobody    20   0  277908  20616   4668 S   0.0  0.9   0:01.63 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12564 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 14224 nobody    20   0  277928  20428   4628 S   0.0  0.8   0:01.27 /usr/sbin+
 15852 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18439 nobody    20   0  277584  19760   4344 S   0.0  0.8   0:00.65 /usr/sbin+
 20310 nobody    20   0  277784  19816   4424 S   0.0  0.8   0:00.51 /usr/sbin+
 20708 nobody    20   0  277924  19604   4240 S   0.0  0.8   0:00.59 /usr/sbin+
 21281 nobody    20   0  277584  19436   4240 S   0.0  0.8   0:00.53 /usr/sbin+
 21298 nobody    20   0  277600  19568   4320 S   0.0  0.8   0:00.36 /usr/sbin+
 21299 nobody    20   0  278004  19728   4264 S   0.0  0.8   0:00.38 /usr/sbin+
 22186 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23203 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152    632    208 S   0.0  0.0   0:00.00 [kworker]
 23657 nobody    20   0  277520  18804   3856 S   0.0  0.8   0:00.20 /usr/sbin+
 23677 nobody    20   0  277852  19304   4004 S   0.0  0.8   0:00.24 /usr/sbin+
 24071 root      20   0  123364    760    532 S   0.0  0.0   0:00.00 /usr/sbin+
 24285 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 24579 nobody    20   0  277600  19044   3980 S   0.0  0.8   0:00.18 /usr/sbin+
 24595 nobody    20   0  277520  18772   3824 S   0.0  0.8   0:00.14 /usr/sbin+
 24727 nobody    20   0  277520  18896   3864 S   0.0  0.8   0:00.13 /usr/sbin+
 24799 nobody    20   0  277520  18280   3368 S   0.0  0.8   0:00.14 /usr/sbin+
 25087 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 25088 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 25175 mailnull  20   0   89284   4444   1336 S   0.0  0.2   0:00.00 /usr/sbin+
 25385 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 25386 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 25437 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 25629 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 25635 nigeria   20   0  401180   9132   3908 S   0.0  0.4   0:00.19 php-fpm: +
 25674 nobody    20   0  277520  18132   3224 S   0.0  0.7   0:00.01 /usr/sbin+
 25689 nobody    20   0  277536  18320   3376 S   0.0  0.8   0:00.02 /usr/sbin+
 25690 nobody    20   0  277784  18692   3500 S   0.0  0.8   0:00.01 /usr/sbin+
 25693 healtho+  20   0  474048  81216   4104 S   0.0  3.4   0:01.14 php-fpm: +
 25700 nobody    20   0  277376  18284   3584 S   0.0  0.8   0:00.00 /usr/sbin+
 25701 nobody    20   0  277520  18068   3164 S   0.0  0.7   0:00.01 /usr/sbin+
 25702 nobody    20   0  277520  18072   3168 S   0.0  0.7   0:00.01 /usr/sbin+
 25703 nobody    20   0  277344  18016   3344 S   0.0  0.7   0:00.00 /usr/sbin+
 25750 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 25751 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 25754 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 25755 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 25756 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 25757 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 25766 robocal+  20   0  409488  17504   4472 S   0.0  0.7   0:00.08 php-fpm: +
 25793 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 25794 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 25801 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 25809 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25810 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25811 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25812 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25813 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25815 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25816 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25817 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25818 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25819 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25821 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25823 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 25825 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 25826 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 25842 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 25845 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 25846 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25847 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25848 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25849 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25850 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25851 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25852 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 25854 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25865 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 25866 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 25868 pactpay   20   0  480124  19284  11880 S   0.0  0.8   0:00.01 /opt/cpan+
 25880 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    03:34   0:06  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      10955  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/0:1]
root      12564  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:1]
root      15852  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/0:2]
root      17350  0.0  0.0      0     0 ?        S    03:53   0:00  \_ [kworker/1:4]
root      22186  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44276  3324 ?        Ss   03:34   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.3  40240  8556 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   128 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780   148 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  6000 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1336 ?        Ss   03:34   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 861368  1304 ?        Ssl  03:34   0:01 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   204 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   904 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1156 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   104 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      25809  0.0  0.0 183044  2148 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25823  0.0  0.0 113284  1212 ?        Ss   04:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      25825  0.0  0.0 108052   360 ?        S    04:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      25826  0.0  0.0 113288  1516 ?        S    04:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      25893  0.0  0.0 153840  2100 ?        R    04:03   0:00  |               \_ ps auxf
root      25810  0.0  0.0 183044  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25854  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      25811  0.0  0.0 183044  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25846  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      25812  0.0  0.0 183044  2148 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25851  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      25813  0.0  0.0 183044  2148 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25848  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      25815  0.0  0.0 183044  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25849  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      25816  0.0  0.0 183044  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25847  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      25817  0.0  0.0 183044  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25845  0.0  0.0  20164   984 ?        Ss   04:03   0:00  |   \_ jailshell (cloudsms) [25890] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  25890  0.0  0.0      0     0 ?        D    04:03   0:00  |       \_ [jailshell]
root      25818  0.0  0.0 183044  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25850  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      25819  0.0  0.0 183044  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25852  0.0  0.0  20164   964 ?        Ss   04:03   0:00  |   \_ jailshell (pactpay) [25865] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25865  0.0  0.0  20164   260 ?        S    04:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25868  0.0  0.7 480124 19284 ?        S    04:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      25821  0.0  0.0 183044  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      25842  0.0  0.0  20164   968 ?        Ss   04:03   0:00      \_ jailshell (nigeria) [25866] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25866  0.0  0.0  20164   260 ?        S    04:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25869  0.0  0.6 404052 16136 ?        S    04:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  89112  4000 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  25175  0.0  0.1  89284  4444 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.8 28.1 1763340 682260 ?      Ssl  03:34   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.1 990260 28776 ?        Ssl  03:34   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   500 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1780 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47056  2848 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   396 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   624 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47064  2484 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2832 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24528  2032 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   636 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056  1436 ?        S    03:34   0:00  \_ dovecot/auth
root      24285  0.0  0.1  60820  4508 ?        S    04:01   0:00  \_ dovecot/lmtp
root        954  1.2  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.4 5654048 34528 ?       SLsl 03:34   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  3156 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  25629  0.0  0.0 445028   316 ?        S    04:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   540 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.5 114016 12412 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9820  2748 ?        Ss   03:34   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      25087  0.0  0.1 111304  4268 ?        Ss   04:02   0:00  \_ sshd: [accepted]
sshd      25088  0.0  0.1 115644  2624 ?        S    04:02   0:00  |   \_ sshd: [net]
root      25385  0.0  0.1 111304  4264 ?        Ss   04:02   0:00  \_ sshd: [accepted]
sshd      25386  0.0  0.1 115644  2628 ?        S    04:02   0:00  |   \_ sshd: [net]
root      25437  0.0  0.1 111304  4268 ?        Ss   04:02   0:00  \_ sshd: [accepted]
root      25750  0.3  0.2 162436  5832 ?        Ss   04:02   0:00  \_ sshd: root [priv]
sshd      25751  0.0  0.1 115644  2628 ?        S    04:02   0:00  |   \_ sshd: root [net]
root      25754  0.0  0.2 157100  5080 ?        Ss   04:02   0:00  \_ sshd: unknown [priv]
sshd      25755  0.0  0.1 115644  2632 ?        S    04:02   0:00  |   \_ sshd: unknown [net]
root      25756  0.3  0.2 162436  5836 ?        Ss   04:02   0:00  \_ sshd: root [priv]
sshd      25757  0.0  0.1 115644  2632 ?        S    04:02   0:00  |   \_ sshd: root [net]
root      25793  0.0  0.2 157100  5080 ?        Ss   04:02   0:00  \_ sshd: unknown [priv]
sshd      25794  0.0  0.1 115644  2628 ?        S    04:02   0:00      \_ sshd: unknown [net]
root        967  1.7  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  4724 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      25801  0.0  0.0      0     0 ?        Z    04:02   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   704 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   264 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   576 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.1 400740  3072 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   25635  1.5  0.3 401180  9132 ?        S    04:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  25693 14.2  3.3 474048 81216 ?        S    04:02   0:01  \_ php-fpm: pool health_oyostate_gov_ng
robocal+  25766  4.0  0.7 409488 17504 ?        S    04:02   0:00  \_ php-fpm: pool robocalls_cloudsms_com_ng
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.3 216400  8156 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11452 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.1  4.8 247868 117596 ?       Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  4.9 249128 118876 ?       S    03:40   0:00  \_ spamd child
root       7260  0.0  4.8 247868 116808 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2964 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.5 387528 13848 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.4 412368 34056 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.0 183900    80 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1348 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.4 209216 11696 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   720 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1432 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.3 1457284 202292 ?      Sl   03:34   0:21 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8100 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12792   384 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   296 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12804   352 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3076  0.1  0.8 277928 20768 ?        S    03:36   0:02  \_ /usr/sbin/httpd -k start
nobody     9147  0.1  0.8 277904 20148 ?        S    03:42   0:01  \_ /usr/sbin/httpd -k start
cloudw    25885  0.0  0.7 353712 17572 ?        S    04:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    10126  0.1  0.8 277908 20616 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody    14224  0.1  0.8 277928 20428 ?        S    03:49   0:01  \_ /usr/sbin/httpd -k start
nobody    18439  0.1  0.8 277584 19760 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody    20310  0.1  0.8 277784 19816 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20708  0.1  0.8 277924 19604 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21281  0.1  0.8 277584 19436 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21298  0.1  0.8 277600 19568 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21299  0.1  0.8 278004 19728 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21601  0.1  0.8 277520 19464 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    25887  0.0  0.6 353712 15972 ?        S    04:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    23657  0.1  0.7 277520 18804 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    23677  0.1  0.7 277852 19304 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    24579  0.1  0.7 277600 19044 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    24595  0.1  0.7 277520 18772 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    24727  0.1  0.7 277520 18896 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    24799  0.2  0.7 277520 18280 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    25674  0.1  0.7 277520 18132 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25689  0.2  0.7 277536 18320 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25690  0.1  0.7 277784 18692 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25700  0.0  0.7 277376 18284 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25701  0.1  0.7 277520 18068 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25702  0.1  0.7 277520 18072 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25703  0.0  0.7 277344 18016 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.1  0.5 181160 12276 ?        Ss   03:34   0:01 lfd - sleeping
oysipao+  23203  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152   632 ?        S    04:00   0:00  \_ [kworker]
root      24071  0.0  0.0 123364   760 ?        Ss   04:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 1725  Threads: 3  Questions: 108178  Slow queries: 0  Opens: 1510  Flush tables: 1  Open tables: 1416  Queries per second avg: 62.711
*************************** 1. row ***************************
     Id: 1777
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-21' LIMIT 1
*************************** 2. row ***************************
     Id: 1778
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 1784
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.157.111 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.151 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 216.180.246.29 TIME_WAIT
      2 39.98.32.172 TIME_WAIT
      5 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:03:01 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 28 minutes 39 seconds
   Server load: 0.53 0.27 0.29
   Total accesses: 7852 - Total Traffic: 221.1 MB - Total Duration: 4155282
   CPU Usage: u8.27 s3.05 cu98.06 cs81.24 - 11.1% CPU load
   4.57 requests/sec - 131.7 kB/second - 28.8 kB/request - 529.2 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

RW_KKWKKKKKRKKKKKRKWKKK..........................._.............
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn  Child  Slot     Client     Protocol             VHost                                   Request
   0-0  23657 0/32/270  R 0.85 37   282 121415 0.0   0.92  6.07  182.11.153.50  http/1.1
   1-0  21601 0/68/453  W 1.78 0    0   206295 0.0   1.92  10.10 192.178.4.98   http/1.1 team.cloudware.ng:443         GET /?l=1700369247 HTTP/1.1
   2-0  24579 0/32/378  _ 0.77 1    1   197766 0.0   0.84  9.79  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80        GET / HTTP/1.1
   3-0  20708 4/102/372 K 2.49 2    358 176631 126.6 2.64  12.09 192.178.4.97   http/1.1 team.cloudware.ng:443         GET /?l=3920569349 HTTP/1.1
   4-0  24595 7/24/305  K 0.62 0    396 159375 217.9 0.70  11.24 192.178.4.105  http/1.1 team.cloudware.ng:443         GET /?l=4268732375 HTTP/1.1
   5-0  25674 0/3/237   W 0.05 0    0   100671 0.0   0.06  7.12  ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   6-0  20310 1/90/307  K 2.18 2    29  156720 4.9   2.38  7.61  192.178.4.103  http/1.1 team.cloudware.ng:443         GET /c_fill/Y1A228_YQZ7A_80001_B_SS2025.jpg HTTP/1.1
   7-0  14224 3/209/335 K 5.43 0    0   194503 210.7 6.08  9.55  102.88.115.109 http/1.1 robocalls.cloudsms.com.ng:443 GET /storage/images/icons/9-mobile.png HTTP/1.1
   8-0  24727 3/22/324  K 0.54 0    0   186815 43.6  0.62  10.03 102.88.115.109 http/1.1 robocalls.cloudsms.com.ng:443 GET /storage/images/icons/smile.png HTTP/1.1
   9-0  24799 2/23/293  K 0.62 1    346 168304 67.3  0.69  9.11  192.178.4.99   http/1.1 team.cloudware.ng:443         GET /?l=502600244 HTTP/1.1
   10-0 21281 3/91/359  K 2.23 0    0   186377 32.8  2.39  10.45 102.88.115.109 http/1.1 robocalls.cloudsms.com.ng:443 GET /storage/images/icons/spectranet.png HTTP/1.1
   11-0 3076  0/373/373 R 8.91 13   392 194870 0.0   9.73  9.73  102.90.99.240  http/1.1
   12-0 25689 4/5/256   K 0.08 1    342 147768 126.0 0.13  6.68  192.178.4.103  http/1.1 team.cloudware.ng:443         GET /?l=1191277171 HTTP/1.1
   13-0 25690 2/4/210   K 0.02 2    402 122707 66.6  0.24  5.84  192.178.4.101  http/1.1 team.cloudware.ng:443         GET /?l=3295957798 HTTP/1.1
   14-0 18439 5/111/176 K 2.67 2    302 186479 163.8 3.32  7.78  192.178.4.104  http/1.1 team.cloudware.ng:443         GET /?l=3375063303 HTTP/1.1
   15-0 23677 2/42/179  K 0.91 0    1   94085  45.6  1.16  4.73  102.88.115.109 http/1.1 robocalls.cloudsms.com.ng:443 GET /storage/images/icons/glo.png HTTP/1.1
   16-0 21298 1/60/237  K 1.41 3    259 88333  33.5  1.58  4.74  192.178.4.100  http/1.1 team.cloudware.ng:443         GET /?l=2072898388 HTTP/1.1
   17-0 21299 0/65/191  R 1.37 13   5   83997  0.0   1.72  4.82  102.90.99.240  http/1.1
   18-0 25700 4/5/155   K 0.00 0    0   78936  48.6  0.06  4.42  102.88.115.109 http/1.1 robocalls.cloudsms.com.ng:443 GET /storage/images/icons/airtel.png HTTP/1.1
   19-0 9147  0/262/297 W 5.98 0    0   149601 0.0   6.82  7.68  192.178.4.98   http/1.1 team.cloudware.ng:443         GET /?l=3135980564 HTTP/1.1
   20-0 25701 2/2/17    K 0.03 2    411 6743   69.8  0.07  0.31  192.178.4.100  http/1.1 team.cloudware.ng:443         GET /?l=3438729914 HTTP/1.1
   21-0 25702 2/2/96    K 0.02 1    347 48361  64.2  0.06  3.40  192.178.4.102  http/1.1 team.cloudware.ng:443         GET /?l=2248728130 HTTP/1.1
   22-0 25703 2/3/83    K 0.00 0    0   44466  13.8  0.12  2.94  102.88.115.109 http/1.1 robocalls.cloudsms.com.ng:443 GET /storage/images/icons/sms.png HTTP/1.1
   23-0 -     0/0/84    . 0.00 1092 0   58879  0.0   0.00  2.50  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   24-0 -     0/0/198   . 0.00 347  0   107264 0.0   0.00  5.28  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   25-0 -     0/0/27    . 0.00 1009 0   9251   0.0   0.00  0.49  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 -     0/0/3     . 0.00 1125 0   67     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 1083 0   3360   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/184   . 0.00 377  0   93070  0.0   0.00  4.64  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00 1127 0   9      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 1126 0   13     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 1106 0   2022   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 1082 0   1566   0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 1097 0   1895   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 1108 0   57     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00 1047 0   11094  0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00 1085 0   823    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00 740  0   38300  0.0   0.00  1.90  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00 1042 0   6642   0.0   0.00  0.35  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 1102 0   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 1105 4   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 1123 0   34     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00 1076 0   4106   0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00 1077 0   2657   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00 1078 0   3864   0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00 1056 0   3619   0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00 1124 0   113    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 1087 0   38     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 1103 0   18     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00 1045 0   9315   0.0   0.00  0.49  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 10126 0/284/284 _ 7.87 0    0   149207 0.0   7.44  7.44  ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   51-0 -     0/0/2     . 0.00 1122 0   23     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 1121 0   19     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00 972  0   31192  0.0   0.00  3.71  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 1117 0   52     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 1100 0   73     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 1118 0   54     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 1116 0   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00 742  0   43953  0.0   0.00  2.25  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00 1046 0   3369   0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00 1120 0   51     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 1109 0   36     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 1080 0   1263   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 1113 0   35     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00 1074 0   8103   0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 1119 0   46     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 1093 0   53     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 1110 0   145    0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00 1079 0   753    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   69-0 -     0/0/224   . 0.00 200  0   141502 0.0   0.00  5.80  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   70-0 -     0/0/2     . 0.00 1112 0   52     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00 1043 0   9108   0.0   0.00  0.43  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00 566  0   86335  0.0   0.00  5.84  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00 975  0   14353  0.0   0.00  0.77  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00 914  0   23982  0.0   0.00  1.17  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   75-0 -     0/0/264   . 0.00 53   0   150949 0.0   0.00  7.38  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   76-0 -     0/0/2     . 0.00 1115 0   44     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 1107 0   58     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 1086 0   1963   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 1111 0   34     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00 913  0   25894  0.0   0.00  1.23  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00 1088 0   672    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00 1071 0   2458   0.0   0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1019
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...39)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 5414
   total entries replaced since starting: 0
   total entries expired since starting: 4392
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 20 miss
   total removes since starting: 5 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit