403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.04.45.txt
 ## swap threshold exceeded
## server overview
2025-11-21.04.45 load[1] mem[67/60] mysql[5/25] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1486          77          18         799         673
Swap:          1999        1447         552
 04:45:02 up  1:10,  0 users,  load average: 1.16, 0.88, 0.81
## system overview
top - 04:45:02 up  1:10,  0 users,  load average: 1.16, 0.88, 0.81
Tasks: 209 total,   5 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 59.4 us, 31.2 sy,  0.0 ni,  6.2 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    83768 free,  1517400 used,   819132 buff/cache
KiB Swap:  2047996 total,   566764 free,  1481232 used.   695124 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1463356 212384   4304 S  87.5  8.8   0:54.16 /usr/sbin+
   359 root      20   0   39500   1476   1252 S   6.2  0.1   0:02.91 /usr/lib/+
   474 dbus      20   0   58748   1412    692 S   6.2  0.1   0:02.25 /usr/bin/+
 52588 nobody    20   0  277908  19100   4704 S   6.2  0.8   0:00.91 /usr/sbin+
 59783 root      20   0  188220  11104   5148 S   6.2  0.5   0:00.01 /usr/loca+
 59803 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
 59809 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.02 /opt/cpan+
 59879 cloudw    20   0  353712  15968  10484 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44276   3232   1464 S   0.0  0.1   0:06.29 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:04.16 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.20 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.85 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.91 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:01.69 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.87 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   385 root      20   0   45356     32     28 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    208     96 S   0.0  0.0   0:00.50 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     64     40 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   2992    760 S   0.0  0.1   0:00.14 queueproc+
   478 nscd      20   0  926904   1344    776 S   0.0  0.1   0:03.51 /usr/sbin+
   483 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   505 polkitd   20   0  610540    884    596 S   0.0  0.0   0:00.61 /usr/lib/+
   507 root      20   0   24696   1100    792 S   0.0  0.0   0:01.00 /usr/lib/+
   509 root      20   0   21540    344    260 S   0.0  0.0   0:00.10 /usr/sbin+
   514 root      20   0   52852    240    168 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    428    296 S   0.0  0.0   0:00.12 /usr/sbin+
   580 root      20   0  108296     24     20 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89112    740    380 S   0.0  0.0   0:00.09 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1902216 493600    460 S   0.0 20.4   0:38.39 /usr/loca+
   942 named     20   0  990260  21480   1924 S   0.0  0.9   0:03.05 /usr/sbin+
   949 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0   11540     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   953 root      20   0   51508    464    300 S   0.0  0.0   0:00.09 /usr/sbin+
   954 root      20   0 1277056   2128     16 S   0.0  0.1   0:21.87 /usr/bin/+
   955 telegraf  20   0 5654048  37048   5960 S   0.0  1.5   0:02.67 /usr/loca+
   956 root      20   0  445028    592    484 S   0.0  0.0   0:00.17 sw-engine+
   960 root      20   0  396248    324    244 S   0.0  0.0   0:00.21 php-fpm: +
   963 systuser  20   0  114016   8772   2516 S   0.0  0.4   0:01.17 /usr/loca+
   964 root      20   0  153404    240    160 S   0.0  0.0   0:00.09 pure-ftpd+
   965 cpanelc+  20   0   10204   3132   2324 S   0.0  0.1   0:03.38 /usr/loca+
   966 root      20   0  111304    368    264 S   0.0  0.0   0:00.72 /usr/sbin+
   967 root      20   0 1276356   6236      0 S   0.0  0.3   0:30.56 /usr/bin/+
   970 systuser  20   0   11348      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   978 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.09 /usr/bin/+
   979 root      20   0  261028   6536   2156 S   0.0  0.3   0:00.72 cpsrvd (S+
   980 root      20   0  572372    892    312 S   0.0  0.0   0:00.46 /usr/bin/+
   984 root      20   0  389508    488    284 S   0.0  0.0   0:00.20 php-fpm: +
   998 root      20   0  388892    456    364 S   0.0  0.0   0:00.28 php-fpm: +
  1001 root      20   0  400740   2400    604 S   0.0  0.1   0:00.67 php-fpm: +
  1002 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.00 /usr/loca+
  1003 root      20   0  232784   1368    984 S   0.0  0.1   0:01.35 /usr/sbin+
  1010 root      20   0  439788    420    328 S   0.0  0.0   0:00.26 php-fpm: +
  1097 dovenull  20   0   46912    940    676 S   0.0  0.0   0:00.07 dovecot/p+
  1098 dovenull  20   0   47324   2752   1820 S   0.0  0.1   0:00.08 dovecot/i+
  1099 dovecot   20   0   10320    304    200 S   0.0  0.0   0:00.01 dovecot/a+
  1100 root      20   0   10452    556    404 S   0.0  0.0   0:00.05 dovecot/l+
  1101 dovenull  20   0   47064    884    604 S   0.0  0.0   0:00.11 dovecot/p+
  1102 dovenull  20   0   47192   2348   1696 S   0.0  0.1   0:00.08 dovecot/i+
  1106 root      20   0   24564   2032    492 S   0.0  0.1   0:00.05 dovecot/c+
  1107 dovecot   20   0   13568    524    380 S   0.0  0.0   0:00.01 dovecot/s+
  1135 root      20   0  247868   2744    732 S   0.0  0.1   0:03.35 /usr/loca+
  1157 dovecot   20   0   41152   1472   1016 S   0.0  0.1   0:00.13 dovecot/a+
  1197 systuser  20   0  157700   2884    960 S   0.0  0.1   0:00.04 SonarPush+
  1199 wp-tool+  20   0  387528   2472   1172 S   0.0  0.1   0:00.12 /usr/bin/+
  1200 wp-tool+  20   0  412368  12352   1188 S   0.0  0.5   0:01.61 /usr/bin/+
  1281 root      20   0  262224  24620   6760 S   0.0  1.0   0:00.35 cpdavd - +
  1283 root      20   0  167452   1212    664 S   0.0  0.1   0:00.11 dnsadmin +
  1285 root      20   0  209216   8076   1896 S   0.0  0.3   0:00.67 tailwatchd
  1709 root      20   0  299272    456    292 S   0.0  0.0   0:00.12 php-fpm: +
  1717 root      38  18  130416   1364    700 S   0.0  0.1   0:00.01 cpanellog+
  1930 root      20   0  267052   5536    532 S   0.0  0.2   0:00.52 /usr/sbin+
  1931 root      20   0   12792    332    216 S   0.0  0.0   0:00.46 /usr/loca+
  1932 root      20   0   12732    256    184 S   0.0  0.0   0:00.40 /usr/loca+
  1933 root      20   0   12816    344    220 S   0.0  0.0   0:00.45 /usr/loca+
  1934 root      20   0   53340     24     24 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181584   7108   1112 S   0.0  0.3   0:03.89 lfd - sle+
  7259 root      20   0  262628  90368   2160 S   0.0  3.7   0:01.69 spamd chi+
  7260 root      20   0  247868   1384    428 S   0.0  0.1   0:00.00 spamd chi+
 23203 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.06 [kworker]
 28483 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 33642 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34338 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 39283 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40901 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 47768 worencom  20   0   38472   3520   2592 S   0.0  0.1   0:00.00 dovecot/i+
 47913 nobody    20   0  277616  20068   4872 S   0.0  0.8   0:01.49 /usr/sbin+
 48308 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48761 nobody    20   0  277912  19992   4760 S   0.0  0.8   0:01.29 /usr/sbin+
 51246 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 51803 nobody    20   0  277920  19896   4912 S   0.0  0.8   0:00.93 /usr/sbin+
 54057 nobody    20   0  277584  19268   4484 S   0.0  0.8   0:00.71 /usr/sbin+
 54196 nobody    20   0  277584  19112   4548 S   0.0  0.8   0:00.72 /usr/sbin+
 54509 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55180 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55430 nobody    20   0  277908  19060   4412 S   0.0  0.8   0:00.57 /usr/sbin+
 55681 nobody    20   0  277584  18764   4364 S   0.0  0.8   0:00.44 /usr/sbin+
 55717 nobody    20   0  277648  18748   4368 S   0.0  0.8   0:00.56 /usr/sbin+
 56314 nobody    20   0  277908  18820   4328 S   0.0  0.8   0:00.47 /usr/sbin+
 57006 nobody    20   0  277588  18764   4216 S   0.0  0.8   0:00.31 /usr/sbin+
 57963 nobody    20   0  277912  18480   4060 S   0.0  0.8   0:00.28 /usr/sbin+
 57972 nobody    20   0  277556  18080   4100 S   0.0  0.7   0:00.29 /usr/sbin+
 57973 nobody    20   0  277520  17344   3600 S   0.0  0.7   0:00.29 /usr/sbin+
 58303 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58398 nobody    20   0  277536  17732   3812 S   0.0  0.7   0:00.28 /usr/sbin+
 58710 nobody    20   0  277584  18164   3808 S   0.0  0.8   0:00.13 /usr/sbin+
 58711 nobody    20   0  277692  17684   3920 S   0.0  0.7   0:00.10 /usr/sbin+
 59216 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 59220 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 59308 nobody    20   0  277916  17896   3852 S   0.0  0.7   0:00.05 /usr/sbin+
 59510 wp-tool+  20   0  445028    320    196 S   0.0  0.0   0:00.00 sw-engine+
 59671 nigeria   20   0  400460   5000   2208 S   0.0  0.2   0:00.00 php-fpm: +
 59678 cloudw    20   0  400460   3712   1540 S   0.0  0.2   0:00.00 php-fpm: +
 59681 healtho+  20   0  443264  50068   4096 S   0.0  2.1   0:00.40 php-fpm: +
 59710 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 59724 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59725 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 59726 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 59727 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 59728 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59729 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59730 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 59731 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59732 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59733 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59734 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 59735 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59736 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 59738 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59751 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 59754 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 59764 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 59765 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 59767 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 59768 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59769 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59770 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 59772 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59773 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 59774 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 59775 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 59776 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59778 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59780 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59788 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 59790 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 59793 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 59795 cloudsms  20   0  404052  15348  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 59798 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 59805 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 59806 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 59816 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 59836 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 59870 root      20   0  160220   2064   1580 S   0.0  0.1   0:00.00 top -n 2 +
 59882 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 59884 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 59885 cloudsms  20   0    4812      4      0 R   0.0  0.0   0:00.00 /opt/cpan+
 59886 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 59887 cloudsms  20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.4  0.0      0     0 ?        S    03:34   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root      28483  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:4]
root      33642  0.0  0.0      0     0 ?        S    04:12   0:00  \_ [kworker/0:1]
root      34338  0.0  0.0      0     0 ?        S    04:13   0:00  \_ [kworker/1:2]
root      39283  0.0  0.0      0     0 ?        S    04:19   0:00  \_ [kworker/0:5]
root      40901  0.0  0.0      0     0 ?        S    04:21   0:00  \_ [kworker/1:1]
root      48308  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/u200:0]
root      51246  0.0  0.0      0     0 ?        S    04:34   0:00  \_ [kworker/1:0]
root      54509  0.0  0.0      0     0 ?        S    04:38   0:00  \_ [kworker/0:2]
root      55180  0.0  0.0      0     0 ?        S    04:39   0:00  \_ [kworker/0:3]
root      58303  0.0  0.0      0     0 ?        S    04:43   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44276  3232 ?        Ss   03:34   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.0  39500  1476 ?        Ss   03:34   0:02 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356    32 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   208 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780    64 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.1 224144  2992 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1412 ?        Ss   03:34   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1344 ?        Ssl  03:34   0:03 /usr/sbin/nscd
rpc         483  0.0  0.0  69256     4 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   884 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1100 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   344 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   240 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    16 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   428 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      59724  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59751  0.0  0.0 113284  1212 ?        Ss   04:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      59754  0.0  0.0 108052   360 ?        S    04:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      59788  0.0  0.0 113288  1520 ?        S    04:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      59888  0.0  0.0 153840  2096 ?        R    04:45   0:00  |               \_ ps auxf
root      59725  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59768  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      59726  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59774  0.0  0.0  20164   992 ?        Ss   04:45   0:00  |   \_ jailshell (cloudsms) [59882] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  59882  0.0  0.0  20164   264 ?        S    04:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  59884  0.0  0.0 113284  1212 ?        S    04:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  59885  0.0  0.6 404184 15876 ?        R    04:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root      59727  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59770  0.0  0.0  20164   988 ?        Ss   04:45   0:00  |   \_ jailshell (cloudsms) [59886] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  59886  0.0  0.0  20164   256 ?        S    04:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  59887  0.0  0.0 113284  1208 ?        S    04:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  59889  0.0  0.0 113284   180 ?        R    04:45   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      59728  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59769  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      59729  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59772  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      59730  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59775  0.0  0.0  20164   972 ?        Ss   04:45   0:00  |   \_ jailshell (cloudsms) [59790] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  59790  0.0  0.0  20164   264 ?        S    04:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  59793  0.0  0.0 113284  1212 ?        S    04:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  59795  1.0  0.6 404052 15348 ?        S    04:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      59731  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59778  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      59732  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59776  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      59733  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59780  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      59734  0.0  0.0 183044  2136 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59773  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      59735  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59764  0.0  0.0 113284  1212 ?        Ss   04:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      59783  1.0  0.4 188220 11104 ?        S    04:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      59870  0.0  0.0 160220  2064 ?        R    04:45   0:00  |           \_ top -n 2 -b -c
root      59736  0.0  0.0 183044  2136 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59767  0.0  0.0  20164   964 ?        Ss   04:45   0:00  |   \_ jailshell (pactpay) [59798] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   59798  0.0  0.0  20164   260 ?        S    04:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   59803  2.0  0.7 480124 17672 ?        S    04:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      59738  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      59765  0.0  0.0  20164   964 ?        Ss   04:45   0:00      \_ jailshell (nigeria) [59806] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   59806  0.0  0.0  20164   256 ?        S    04:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   59809  0.0  0.6 404052 16140 ?        S    04:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    24 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704     0 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.0  89112   740 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.9 20.3 1902216 493600 ?      Ssl  03:34   0:38 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  0.8 990260 21480 ?        Ssl  03:34   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608    60 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    44 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   464 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912   940 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2752 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   304 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   556 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064   884 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.0  47192  2348 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24564  2032 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   524 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41152  1472 ?        S    03:34   0:00  \_ dovecot/auth
worencom  47768  0.0  0.1  38472  3520 ?        S    04:29   0:00  \_ dovecot/imap
root        954  0.5  0.0 1277056 2128 ?        Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 37048 ?       SLsl 03:34   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.0 445028   592 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  59510  0.0  0.0 445028   320 ?        S    04:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   324 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.3 114016  8772 ?        Ssl  03:34   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   240 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1  10204  3132 ?        Ss   03:34   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   368 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      59216  0.0  0.1 111304  4268 ?        Ss   04:44   0:00  \_ sshd: [accepted]
sshd      59220  0.0  0.1 115644  2624 ?        S    04:44   0:00  |   \_ sshd: [net]
root      59805  0.0  0.1 111304  4268 ?        Ss   04:45   0:00  \_ sshd: [accepted]
sshd      59816  0.0  0.1 115644  2628 ?        S    04:45   0:00      \_ sshd: [net]
root        967  0.7  0.2 1276356 6236 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348     0 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400    32 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.2 261028  6536 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      59710  0.0  0.0      0     0 ?        Z    04:44   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   892 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   488 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   456 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.0 400740  2400 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   59671  0.0  0.2 400460  5000 ?        S    04:44   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    59678  0.0  0.1 400460  3712 ?        S    04:44   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  59681 10.0  2.0 443264 50068 ?        S    04:44   0:00  \_ php-fpm: pool health_oyostate_gov_ng
systuser   1002  0.0  0.0 112524    68 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.0 232784  1368 ?        Ssl  03:34   0:01 /usr/sbin/rsyslogd -n
root       1010  0.0  0.0 439788   420 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.1 247868  2744 ?        Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  3.7 262628 90368 ?        S    03:40   0:01  \_ spamd child
root       7260  0.0  0.0 247868  1384 ?        S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2884 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.1 387528  2472 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  0.5 412368 12352 ?        Ss   03:34   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  1.0 262224 24620 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1283  0.0  0.0 167452  1212 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.3 209216  8076 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   456 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1364 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.7 1463356 212384 ?      Sl   03:34   0:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.2 267052  5536 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12792   332 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   256 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12816   344 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340    24 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47913  0.1  0.8 277616 20068 ?        S    04:29   0:01  \_ /usr/sbin/httpd -k start
nobody    48761  0.1  0.8 277912 19992 ?        S    04:30   0:01  \_ /usr/sbin/httpd -k start
nobody    51803  0.1  0.8 277920 19896 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
nobody    52588  0.1  0.7 277908 19100 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    59879  0.0  0.6 353712 15968 ?        S    04:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    54057  0.1  0.7 277584 19268 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    54196  0.1  0.7 277584 19112 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    55430  0.1  0.7 277908 19060 ?        S    04:39   0:00  \_ /usr/sbin/httpd -k start
nobody    55681  0.1  0.7 277584 18764 ?        S    04:39   0:00  \_ /usr/sbin/httpd -k start
nobody    55717  0.1  0.7 277648 18748 ?        S    04:39   0:00  \_ /usr/sbin/httpd -k start
nobody    56314  0.1  0.7 277908 18820 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
nobody    57006  0.1  0.7 277588 18764 ?        S    04:41   0:00  \_ /usr/sbin/httpd -k start
nobody    57963  0.1  0.7 277912 18480 ?        S    04:42   0:00  \_ /usr/sbin/httpd -k start
nobody    57972  0.1  0.7 277556 18080 ?        S    04:42   0:00  \_ /usr/sbin/httpd -k start
nobody    57973  0.1  0.7 277520 17344 ?        S    04:42   0:00  \_ /usr/sbin/httpd -k start
nobody    58398  0.2  0.7 277536 17732 ?        S    04:43   0:00  \_ /usr/sbin/httpd -k start
nobody    58710  0.1  0.7 277584 18164 ?        S    04:43   0:00  \_ /usr/sbin/httpd -k start
nobody    58711  0.1  0.7 277692 17684 ?        S    04:43   0:00  \_ /usr/sbin/httpd -k start
nobody    59308  0.1  0.7 277916 17896 ?        S    04:44   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.0  0.2 181584  7108 ?        Ss   03:34   0:03 lfd - sleeping
oysipao+  23203  0.0  0.0   3148     8 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152    36 ?        S    04:00   0:00  \_ [kworker]
## mysql stats
Uptime: 4246  Threads: 4  Questions: 271836  Slow queries: 0  Opens: 3671  Flush tables: 1  Open tables: 2000  Queries per second avg: 64.021
*************************** 1. row ***************************
     Id: 4743
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 4744
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `04` WHERE `phone`='2348067100383' LIMIT 1
*************************** 3. row ***************************
     Id: 4753
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.79 TIME_WAIT
      1 154.53.62.61 TIME_WAIT
      1 172.69.6.17 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.227.253.15 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     14 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:45:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 10 minutes 40 seconds
   Server load: 1.16 0.88 0.81
   Total accesses: 20834 - Total Traffic: 565.7 MB - Total Duration: 10775997
   CPU Usage: u7.22 s3.1 cu273.08 cs226.12 - 12% CPU load
   4.91 requests/sec - 136.6 kB/second - 27.8 kB/request - 517.231 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_K.KKK.W____._.WKK_K_K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  56314 0/77/913   _ 2.03 2    1   447449 0.0   2.19  22.99 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   1-0  58398 10/45/1086 K 1.21 0    322 549770 310.4 1.26  26.61 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=591715561 HTTP/1.1
   2-0  -     0/0/1004   . 0.00 34   0   535774 0.0   0.00  26.76 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  47913 1/276/1028 K 6.50 1    340 504366 33.4  6.59  27.64 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2447250775 HTTP/1.1
   4-0  59308 2/10/955   K 0.13 0    291 492250 65.6  0.22  27.52 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=1424472725 HTTP/1.1
   5-0  54057 2/116/795  K 2.99 1    400 376414 65.1  3.11  21.69 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1392245629 HTTP/1.1
   6-0  -     0/0/927    . 0.00 80   0   455253 0.0   0.00  24.32 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  52588 3/152/936  W 3.71 0    0   507885 96.8  4.34  24.99 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1413601748 HTTP/1.1
   8-0  57963 0/48/932   _ 1.46 0    0   495953 0.0   1.78  26.75 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   9-0  58710 0/23/905   _ 0.50 1    348 475723 0.0   0.53  26.15 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2529646854 HTTP/1.1
   10-0 58711 0/19/840   _ 0.38 2    297 425622 0.0   0.47  22.45 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=343132763 HTTP/1.1
   11-0 54196 0/126/983  _ 3.04 1    395 504675 0.0   3.19  25.50 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=3732060437 HTTP/1.1
   12-0 -     0/0/671    . 0.00 67   0   347381 0.0   0.00  16.53 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 48761 0/235/733  _ 5.28 0    0   373534 0.0   6.84  20.83 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   14-0 -     0/0/627    . 0.00 84   0   422457 0.0   0.00  19.18 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 57972 0/46/791   W 1.25 0    0   408288 0.0   1.32  19.91 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   16-0 55430 5/99/795   K 2.71 1    352 378900 157.9 2.65  20.61 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1351120779 HTTP/1.1
   17-0 51803 1/159/778  K 4.09 3    389 372114 36.0  4.54  19.94 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1296258369 HTTP/1.1
   18-0 57006 0/56/502   _ 1.28 2    8   246606 0.0   1.42  13.84 34.205.163.103 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/images/images/2019
   19-0 57973 3/45/961   K 1.27 2    346 484616 97.7  1.35  24.85 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=2459801372 HTTP/1.1
   20-0 55681 0/79/469   _ 1.91 2    1   261242 0.0   2.06  12.27 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   21-0 55717 3/91/338   K 2.65 2    342 176945 92.8  2.70  11.86 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=2747470856 HTTP/1.1
   22-0 -     0/0/368    . 0.00 214  0   200957 0.0   0.00  11.98 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/280    . 0.00 410  0   156923 0.0   0.00  7.55  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/437    . 0.00 423  0   229576 0.0   0.00  11.87 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/62     . 0.00 508  0   25776  0.0   0.00  1.43  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/30     . 0.00 2239 0   13761  0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6      . 0.00 3603 0   3360   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/184    . 0.00 2897 0   93070  0.0   0.00  4.64  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/2      . 0.00 3647 0   9      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2      . 0.00 3646 0   13     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4      . 0.00 3626 0   2022   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5      . 0.00 3602 0   1566   0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 3617 0   1895   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3      . 0.00 3628 0   57     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22     . 0.00 3568 0   11094  0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 3605 0   823    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/80     . 0.00 3261 0   38300  0.0   0.00  1.90  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/14     . 0.00 3563 0   6642   0.0   0.00  0.35  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 3622 0   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2      . 0.00 3625 4   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2      . 0.00 3643 0   34     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 3596 0   4106   0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6      . 0.00 3597 0   2657   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9      . 0.00 3598 0   3864   0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10     . 0.00 3576 0   3619   0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00 3644 0   113    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00 3607 0   38     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 3623 0   18     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19     . 0.00 3566 0   9315   0.0   0.00  0.49  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/335    . 0.00 2333 0   176390 0.0   0.00  9.65  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/2      . 0.00 3642 0   23     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 3641 0   19     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28     . 0.00 3493 0   31192  0.0   0.00  3.71  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 3637 0   52     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3      . 0.00 3620 0   73     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00 3638 0   54     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00 3636 0   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/86     . 0.00 3263 0   43953  0.0   0.00  2.25  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9      . 0.00 3567 0   3369   0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00 3640 0   51     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 3629 0   36     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5      . 0.00 3600 0   1263   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2      . 0.00 3633 0   35     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14     . 0.00 3594 0   8103   0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2      . 0.00 3639 0   46     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3      . 0.00 3613 0   53     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00 3630 0   145    0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4      . 0.00 3599 0   753    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/224    . 0.00 2720 0   141502 0.0   0.00  5.80  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 3632 0   52     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17     . 0.00 3564 0   9108   0.0   0.00  0.43  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/138    . 0.00 3087 0   86335  0.0   0.00  5.84  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/28     . 0.00 3496 0   14353  0.0   0.00  0.77  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41     . 0.00 3435 0   23982  0.0   0.00  1.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/264    . 0.00 2574 0   150949 0.0   0.00  7.38  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/2      . 0.00 3635 0   44     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3      . 0.00 3627 0   58     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5      . 0.00 3606 0   1963   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2      . 0.00 3631 0   34     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48     . 0.00 3434 0   25894  0.0   0.00  1.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 3608 0   672    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8      . 0.00 3591 0   2458   0.0   0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1158
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...32)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 15191
   total entries replaced since starting: 0
   total entries expired since starting: 14024
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 31 miss
   total removes since starting: 11 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit