403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.04.09.txt
 ## swap threshold exceeded
## server overview
2025-11-21.04.09 load[0] mem[74/44] mysql[1/6] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1719          79          54         564         430
Swap:          1999        1002         997
 04:09:01 up 34 min,  0 users,  load average: 1.10, 0.65, 0.46
## system overview
top - 04:09:01 up 34 min,  0 users,  load average: 1.10, 0.65, 0.46
Tasks: 212 total,   3 running, 208 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 28.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,    69736 free,  1773868 used,   576696 buff/cache
KiB Swap:  2047996 total,  1020156 free,  1027840 used.   427692 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457284 205032   3524 S  87.5  8.5   0:25.72 /usr/sbin+
 30965 root      20   0  169872  16852   2880 S  25.0  0.7   0:00.09 /usr/loca+
     1 root      20   0   44276   3312   1492 S   6.2  0.1   0:03.46 /usr/lib/+
    36 root      20   0       0      0      0 S   6.2  0.0   0:06.96 [kswapd0]
   270 root       0 -20       0      0      0 S   6.2  0.0   0:00.65 [kworker/+
   474 dbus      20   0   58748   1336    628 S   6.2  0.1   0:01.12 /usr/bin/+
 30996 nigeria   20   0  404052  16136  10380 S   6.2  0.7   0:00.03 /opt/cpan+
 31007 root      20   0  160220   2064   1584 R   6.2  0.1   0:00.01 top -bcn1
 31010 cloudw    20   0  288176  15952  10472 R   6.2  0.7   0:00.01 /opt/cpan+
 31015 cloudsms  20   0  404052  15872  10224 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:02.05 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.54 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   2740   2432 S   0.0  0.1   0:01.64 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    128     16 S   0.0  0.0   0:00.27 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5916    884 S   0.0  0.2   0:00.11 queueproc+
   478 nscd      20   0  926904   1344    704 S   0.0  0.1   0:01.72 /usr/sbin+
   483 rpc       20   0   69256    188     80 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
   505 polkitd   20   0  610540    900    452 S   0.0  0.0   0:00.30 /usr/lib/+
   507 root      20   0   24696   1156    812 S   0.0  0.0   0:00.50 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.04 /usr/sbin+
   514 root      20   0   52852    244    184 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.05 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89112   3840    884 S   0.0  0.2   0:00.06 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.68 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 642800   1012 S   0.0 26.6   0:14.63 /usr/loca+
   942 named     20   0  990260  29260   1324 S   0.0  1.2   0:01.62 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    504    340 S   0.0  0.0   0:00.05 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.85 /usr/bin/+
   955 telegraf  20   0 5654048  36124   3528 S   0.0  1.5   0:01.34 /usr/loca+
   956 root      20   0  445028   3232   3124 S   0.0  0.1   0:00.07 sw-engine+
   960 root      20   0  396248    540    364 S   0.0  0.0   0:00.12 php-fpm: +
   963 systuser  20   0  114016  12304   2288 S   0.0  0.5   0:00.60 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.04 pure-ftpd+
   965 cpanelc+  20   0    9948   2872   2316 S   0.0  0.1   0:01.66 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.41 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.53 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.04 /usr/bin/+
   979 root      20   0  261028   4768   1060 S   0.0  0.2   0:00.42 cpsrvd (S+
   980 root      20   0  572372    704    236 S   0.0  0.0   0:00.27 /usr/bin/+
   984 root      20   0  389508    264    176 S   0.0  0.0   0:00.10 php-fpm: +
   998 root      20   0  388892    576    480 S   0.0  0.0   0:00.14 php-fpm: +
  1001 root      20   0  400740   3076    640 S   0.0  0.1   0:00.39 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  224592   3268   1816 S   0.0  0.1   0:00.75 /usr/sbin+
  1010 root      20   0  439788  11416  11116 S   0.0  0.5   0:00.16 php-fpm: +
  1097 dovenull  20   0   46912   1764   1044 S   0.0  0.1   0:00.04 dovecot/p+
  1098 dovenull  20   0   47324   2856   2004 S   0.0  0.1   0:00.03 dovecot/i+
  1099 dovecot   20   0   10320    396    280 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    624    452 S   0.0  0.0   0:00.02 dovecot/l+
  1101 dovenull  20   0   47064   2356   1660 S   0.0  0.1   0:00.07 dovecot/p+
  1102 dovenull  20   0   47056   2772   1932 S   0.0  0.1   0:00.02 dovecot/i+
  1106 root      20   0   24528   2256    512 S   0.0  0.1   0:00.03 dovecot/c+
  1107 dovecot   20   0   13568    620    404 S   0.0  0.0   0:00.00 dovecot/s+
  1135 root      20   0  247868 117568   1092 S   0.0  4.9   0:03.07 /usr/loca+
  1157 dovecot   20   0   41056   1456   1028 S   0.0  0.1   0:00.06 dovecot/a+
  1197 systuser  20   0  157700   2900    856 S   0.0  0.1   0:00.02 SonarPush+
  1199 wp-tool+  20   0  387528  12972   1344 S   0.0  0.5   0:00.11 /usr/bin/+
  1200 wp-tool+  20   0  412368  32332   1548 S   0.0  1.3   0:00.89 /usr/bin/+
  1281 root      20   0  262228  22048   4184 S   0.0  0.9   0:00.17 cpdavd - +
  1283 root      20   0  167452   1348    748 S   0.0  0.1   0:00.07 dnsadmin +
  1285 root      20   0  209216  11708   2208 S   0.0  0.5   0:00.42 tailwatchd
  1709 root      20   0  299272    768    388 S   0.0  0.0   0:00.05 php-fpm: +
  1717 root      38  18  130416   1440    716 S   0.0  0.1   0:00.00 cpanellog+
  1930 root      20   0  267052   8100    716 S   0.0  0.3   0:00.32 /usr/sbin+
  1931 root      20   0   12768    384    268 S   0.0  0.0   0:00.22 /usr/loca+
  1932 root      20   0   12732    296    220 S   0.0  0.0   0:00.18 /usr/loca+
  1933 root      20   0   12772    352    228 S   0.0  0.0   0:00.20 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181260   9796   1180 S   0.0  0.4   0:02.08 lfd - sle+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
  7259 root      20   0  262276 129908   3864 S   0.0  5.4   0:00.70 spamd chi+
  7260 root      20   0  247868 116808    368 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  20536   4600 S   0.0  0.8   0:02.04 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12564 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 15852 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21298 nobody    20   0  277712  20180   4608 S   0.0  0.8   0:00.91 /usr/sbin+
 21299 nobody    20   0  278004  20304   4540 S   0.0  0.8   0:00.81 /usr/sbin+
 22186 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 23203 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.01 [kworker]
 24071 root      20   0  123364    640    412 S   0.0  0.0   0:00.00 /usr/sbin+
 25701 nobody    20   0  277584  19452   4268 S   0.0  0.8   0:00.47 /usr/sbin+
 25703 nobody    20   0  277656  19852   4448 S   0.0  0.8   0:00.54 /usr/sbin+
 25912 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26660 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27619 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28038 nobody    20   0  277616  19608   4284 S   0.0  0.8   0:00.26 /usr/sbin+
 28052 nobody    20   0  277592  19492   4240 S   0.0  0.8   0:00.23 /usr/sbin+
 28200 nobody    20   0  277908  19624   4212 S   0.0  0.8   0:00.30 /usr/sbin+
 28317 nobody    20   0  277908  19768   4216 S   0.0  0.8   0:00.24 /usr/sbin+
 28364 nobody    20   0  277616  19540   4272 S   0.0  0.8   0:00.30 /usr/sbin+
 28483 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 28634 cloudsms  20   0   61744   6240   4464 S   0.0  0.3   0:00.01 dovecot/l+
 29119 worencom  20   0   38492   3980   3064 S   0.0  0.2   0:00.00 dovecot/i+
 29294 nobody    20   0  277668  19472   4108 S   0.0  0.8   0:00.21 /usr/sbin+
 29308 nobody    20   0  277908  19424   4152 S   0.0  0.8   0:00.20 /usr/sbin+
 29309 nobody    20   0  277792  19496   4088 S   0.0  0.8   0:00.17 /usr/sbin+
 29346 nobody    20   0  277520  19204   4100 S   0.0  0.8   0:00.18 /usr/sbin+
 29476 nobody    20   0  277648  19432   4228 S   0.0  0.8   0:00.19 /usr/sbin+
 29673 nobody    20   0  277584  19332   4088 S   0.0  0.8   0:00.14 /usr/sbin+
 29692 nobody    20   0  277604  18996   3816 S   0.0  0.8   0:00.11 /usr/sbin+
 29800 nobody    20   0  277520  18604   3616 S   0.0  0.8   0:00.14 /usr/sbin+
 30045 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 30341 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 30485 nobody    20   0  277904  19092   3928 S   0.0  0.8   0:00.07 /usr/sbin+
 30558 nigeria   20   0  400460   5632   2400 S   0.0  0.2   0:00.01 php-fpm: +
 30671 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 30854 oyotech+  20   0  389236   6356   2972 S   0.0  0.3   0:00.01 php-fpm: +
 30859 worencom  20   0   38708   4240   3080 S   0.0  0.2   0:00.00 dovecot/i+
 30873 cloudw    20   0  551040  87716   7200 S   0.0  3.6   0:01.03 php-fpm: +
 30886 worencom  20   0   38672   3916   3008 S   0.0  0.2   0:00.00 dovecot/i+
 30908 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 30909 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 30912 worencom  20   0   38364   3672   2884 S   0.0  0.2   0:00.00 dovecot/i+
 30915 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 30922 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30923 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30924 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30925 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30926 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30928 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30929 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30930 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30931 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30932 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30933 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30935 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30938 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 30939 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 30940 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 30951 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30953 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 30954 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 30955 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30956 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30957 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30958 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30959 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 30960 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30961 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 30963 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 30967 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 30980 nobody    20   0  276968  15056    832 S   0.0  0.6   0:00.00 /usr/sbin+
 30983 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 30984 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 30987 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 30995 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 31008 root      20   0  113496   1424   1236 S   0.0  0.1   0:00.00 bash /usr+
 31011 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 31012 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 31014 root      20   0  177068   6176   2868 S   0.0  0.3   0:00.00 /usr/bin/+
 31016 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 31017 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    03:34   0:06  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      12564  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:1]
root      15852  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/0:2]
root      22186  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:0]
root      25912  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:0]
root      26660  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/0:4]
root      27619  0.0  0.0      0     0 ?        S    04:05   0:00  \_ [kworker/1:2]
root      28483  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44276  3312 ?        Ss   03:34   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  2740 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   128 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780   140 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5916 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1336 ?        Ss   03:34   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1352 ?        Ssl  03:34   0:01 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   188 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   900 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1156 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   244 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      30922  0.0  0.0 183044  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30938  0.0  0.0 113284  1212 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      30939  0.0  0.0 108052   360 ?        S    04:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      30940  0.0  0.0 113288  1520 ?        S    04:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      31020  0.0  0.0 153840  2092 ?        R    04:09   0:00  |               \_ ps auxf
root      30923  0.0  0.0 183044  2152 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30956  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      30924  0.0  0.0 183044  2152 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30958  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      30925  0.0  0.0 183044  2152 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30951  0.0  0.0  20164   804 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      30926  0.0  0.0 183044  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30955  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      30928  0.0  0.0 183044  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30961  0.0  0.0  20164   988 ?        Ss   04:09   0:00  |   \_ jailshell (cloudsms) [31011] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  31011  0.0  0.0      0     0 ?        D    04:09   0:00  |       \_ [jailshell]
root      30929  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30960  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      30930  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30957  0.0  0.0  20164   804 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      30931  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30959  0.0  0.0  20164   988 ?        Ss   04:09   0:00  |   \_ jailshell (cloudsms) [31016] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  31016  0.0  0.0  20164   260 ?        S    04:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  31017  0.0  0.0 113284  1208 ?        S    04:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  31021  0.0  0.4 399788 11488 ?        R    04:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      30932  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30954  0.0  0.0 113284  1212 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      30965  0.0  0.6 169872 16852 ?        S    04:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      31008  0.0  0.0 113496  1424 ?        S    04:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      31014  0.0  0.2 185196  6920 ?        R    04:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      30933  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30963  0.0  0.0  20164   968 ?        Ss   04:09   0:00  |   \_ jailshell (pactpay) [30984] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30984  0.0  0.0  20164   256 ?        S    04:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30987  0.0  0.7 480124 17672 ?        S    04:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      30935  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      30953  0.0  0.0  20164   968 ?        Ss   04:09   0:00      \_ jailshell (nigeria) [30995] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30995  0.0  0.0  20164   256 ?        S    04:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30996  0.0  0.6 404052 16136 ?        S    04:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  89112  3840 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.7 26.5 1763340 642800 ?      Ssl  03:34   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.2 990260 29260 ?        Ssl  03:34   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   504 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1764 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2856 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   396 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   624 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064  2356 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2772 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24528  2256 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   620 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056  1452 ?        S    03:34   0:00  \_ dovecot/auth
cloudsms  28634  0.0  0.2  61744  6240 ?        S    04:06   0:00  \_ dovecot/lmtp
worencom  29119  0.0  0.1  38492  3980 ?        S    04:06   0:00  \_ dovecot/imap
root      30045  0.0  0.0  28936  2372 ?        S    04:07   0:00  \_ dovecot/quota-status -p postfix
worencom  30859  0.0  0.1  38708  4240 ?        S    04:08   0:00  \_ dovecot/imap
worencom  30886  0.0  0.1  38672  3916 ?        S    04:08   0:00  \_ dovecot/imap
worencom  30912  0.0  0.1  38364  3672 ?        S    04:08   0:00  \_ dovecot/imap
root        954  1.0  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.4 5654048 36116 ?       SLsl 03:34   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  3232 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  30983  0.0  0.0 445028   316 ?        S    04:09   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   540 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.5 114016 12304 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9948  2872 ?        Ss   03:34   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      30341  0.0  0.1 111304  4276 ?        Ss   04:08   0:00  \_ sshd: [accepted]
root      30671  0.0  0.1 111304  4272 ?        Ss   04:08   0:00  \_ sshd: [accepted]
root      30908  0.0  0.2 157100  5072 ?        Ss   04:08   0:00  \_ sshd: unknown [priv]
sshd      30909  0.0  0.1 115644  2628 ?        S    04:08   0:00      \_ sshd: unknown [net]
root        967  1.4  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  4768 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      30915  0.0  0.0      0     0 ?        Z    04:08   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   704 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   264 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   576 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  30854  0.2  0.2 389236  6356 ?        S    04:08   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root       1001  0.0  0.1 400740  3076 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   30558  0.0  0.2 400460  5632 ?        S    04:08   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    30873 34.3  3.6 551040 87716 ?        S    04:08   0:01  \_ php-fpm: pool cloudware_ng
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 224592  3268 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11416 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.1  4.8 247868 117568 ?       Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  5.3 262276 129908 ?       S    03:40   0:00  \_ spamd child
root       7260  0.0  4.8 247868 116808 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2900 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.5 387528 12972 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.3 412368 32332 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.9 262228 22048 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1283  0.0  0.0 167452  1348 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.4 209216 11708 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   768 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1440 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.4 1457284 205024 ?      Sl   03:34   0:25 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8100 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12768   384 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   296 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12772   352 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9147  0.1  0.8 277904 20536 ?        S    03:42   0:02  \_ /usr/sbin/httpd -k start
nobody    21298  0.1  0.8 277712 20180 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
cloudw    30967  0.0  0.6 353712 15968 ?        R    04:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    21299  0.1  0.8 278004 20304 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    25701  0.1  0.8 277584 19452 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25703  0.1  0.8 277656 19852 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    28038  0.1  0.8 277616 19608 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28052  0.1  0.8 277592 19492 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28200  0.1  0.8 277908 19624 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28317  0.1  0.8 277908 19768 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28364  0.1  0.8 277616 19540 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29294  0.1  0.8 277668 19472 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29308  0.1  0.8 277908 19424 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29309  0.1  0.8 277792 19496 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29346  0.1  0.7 277520 19204 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    29476  0.1  0.8 277648 19432 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    29673  0.1  0.7 277584 19332 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    29692  0.1  0.7 277604 18996 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    29800  0.1  0.7 277520 18604 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    30485  0.1  0.7 277904 19092 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    31010  0.0  0.6 353712 15972 ?        S    04:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    30980  0.0  0.6 276968 15056 ?        S    04:09   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.1  0.4 181260  9796 ?        Ss   03:34   0:02 lfd - sleeping
oysipao+  23203  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152   424 ?        S    04:00   0:00  \_ [kworker]
root      24071  0.0  0.0 123364   640 ?        Ss   04:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 2085  Threads: 3  Questions: 131069  Slow queries: 0  Opens: 1638  Flush tables: 1  Open tables: 1540  Queries per second avg: 62.862
*************************** 1. row ***************************
     Id: 2203
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 2204
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2211
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.79 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 144.34.239.195 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.82.11.79 TIME_WAIT
      1 51.222.95.140 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      6 127.0.0.1 TIME_WAIT
      6 209.250.242.219 TIME_WAIT
     51 18.97.19.171 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:09:01 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 34 minutes 40 seconds
   Server load: 1.10 0.65 0.46
   Total accesses: 9808 - Total Traffic: 281.3 MB - Total Duration: 5099031
   CPU Usage: u5.54 s2.29 cu126.92 cs103.6 - 11.5% CPU load
   4.72 requests/sec - 138.5 kB/second - 29.4 kB/request - 519.885 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

KKWWK.KK_W.K..KKKKKKK.KK_.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req   Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  29294 2/36/336  K 0.87 3    347  147183 65.8  1.04  8.14  192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=1220074183 HTTP/1.1
   1-0  29308 6/35/539  K 0.79 3    256  250775 184.3 0.88  12.33 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=2093129922 HTTP/1.1
   2-0  30485 4/14/463  W 0.25 0    0    236956 126.4 0.31  12.54 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=3306312893 HTTP/1.1
   3-0  30980 0/0/455   W 0.00 0    0    205815 0.0   0.00  13.67 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=1984564953 HTTP/1.1
   4-0  29309 1/32/390  K 0.74 0    625  201706 14.1  0.67  13.46 66.249.64.226 http/1.1 cloudware.ng:443           GET /2019/06/17/how-to-use-dental-software-to-improve-dental-se
   5-0  -     0/0/300   . 0.00 79   0    130957 0.0   0.00  9.61  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  28038 2/43/377  K 1.04 3    255  189347 67.0  1.35  9.52  192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=2383206803 HTTP/1.1
   7-0  29346 3/31/412  K 0.71 2    370  224234 94.1  0.72  11.19 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=1673665830 HTTP/1.1
   8-0  29476 0/32/396  _ 0.77 0    3    218121 0.0   0.86  11.79 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   9-0  29673 0/31/352  W 0.50 0    0    192606 0.0   0.61  10.41 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-0 -     0/0/445   . 0.00 65   0    234184 0.0   0.00  12.81 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 28200 2/54/458  K 1.36 3    274  232156 66.0  2.13  12.56 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=2090109041 HTTP/1.1
   12-0 -     0/0/339   . 0.00 46   0    190760 0.0   0.00  8.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/301   . 0.00 27   0    168067 0.0   0.00  9.57  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 29692 3/20/233  K 0.39 3    267  215416 94.8  0.63  9.28  192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=3640477877 HTTP/1.1
   15-0 29800 2/24/246  K 0.64 1    337  118853 61.3  0.61  6.00  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2057714470 HTTP/1.1
   16-0 21298 7/159/336 K 3.96 0    421  140356 215.5 5.54  8.70  192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=3564673862 HTTP/1.1
   17-0 21299 6/144/270 K 3.38 3    267  123407 185.5 3.85  6.96  192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=1567217946 HTTP/1.1
   18-0 28052 1/44/206  K 0.91 0    346  100227 32.0  1.67  6.31  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=435556100 HTTP/1.1
   19-0 9147  1/357/392 K 8.72 2    1066 200925 20.8  9.80  10.67 66.249.64.224 http/1.1 cloudware.ng:443           GET /2019/06/17/how-to-use-dental-software-to-improve-dental-se
   20-0 25701 3/77/92   K 1.97 1    345  47471  95.2  2.29  2.54  192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=698416617 HTTP/1.1
   21-0 -     0/0/165   . 0.00 64   0    86228  0.0   0.00  6.87  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 25703 1/89/169  K 2.23 3    402  95170  35.4  3.66  6.48  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=1971705558 HTTP/1.1
   23-0 28317 1/49/133  K 1.09 1    350  77621  35.8  1.15  3.64  192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=2799632260 HTTP/1.1
   24-0 28364 0/48/246  _ 1.22 0    31   134716 0.0   1.77  7.05  66.249.70.7   http/1.1 test.cloudware.ng:443      GET /?2977194022?goodscode=2973292826 HTTP/1.1
   25-0 -     0/0/39    . 0.00 109  0    16225  0.0   0.00  0.83  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/30    . 0.00 78   0    13761  0.0   0.00  0.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 1443 0    3360   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/184   . 0.00 737  0    93070  0.0   0.00  4.64  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00 1487 0    9      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 1486 0    13     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 1466 0    2022   0.0   0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 1442 0    1566   0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 1457 0    1895   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 1468 0    57     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00 1408 0    11094  0.0   0.00  0.65  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00 1445 0    823    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00 1100 0    38300  0.0   0.00  1.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00 1403 0    6642   0.0   0.00  0.35  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 1462 0    40     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 1465 4    40     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 1483 0    34     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00 1436 0    4106   0.0   0.00  0.19  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00 1437 0    2657   0.0   0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00 1438 0    3864   0.0   0.00  0.22  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00 1416 0    3619   0.0   0.00  0.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00 1484 0    113    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 1447 0    38     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 1463 0    18     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00 1406 0    9315   0.0   0.00  0.49  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/335   . 0.00 172  0    176390 0.0   0.00  9.65  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/2     . 0.00 1482 0    23     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 1481 0    19     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00 1333 0    31192  0.0   0.00  3.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 1477 0    52     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 1460 0    73     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 1478 0    54     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 1476 0    40     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00 1102 0    43953  0.0   0.00  2.25  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00 1407 0    3369   0.0   0.00  0.22  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00 1480 0    51     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 1469 0    36     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 1440 0    1263   0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 1473 0    35     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00 1434 0    8103   0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 1479 0    46     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 1453 0    53     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 1470 0    145    0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00 1439 0    753    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/224   . 0.00 560  0    141502 0.0   0.00  5.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2     . 0.00 1472 0    52     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00 1404 0    9108   0.0   0.00  0.43  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00 926  0    86335  0.0   0.00  5.84  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00 1336 0    14353  0.0   0.00  0.77  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00 1274 0    23982  0.0   0.00  1.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/264   . 0.00 414  0    150949 0.0   0.00  7.38  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/2     . 0.00 1475 0    44     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 1467 0    58     0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 1446 0    1963   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 1471 0    34     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00 1273 0    25894  0.0   0.00  1.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00 1448 0    672    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00 1431 0    2458   0.0   0.00  0.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1336
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 1...16)
   index usage: 23%, cache usage: 31%
   total entries stored since starting: 6960
   total entries replaced since starting: 0
   total entries expired since starting: 5619
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 5 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit