403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.11.39.txt
 ## swap threshold exceeded
## server overview
2025-11-21.11.39 load[0] mem[64/61] mysql[3/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1420          82          39         859         723
Swap:          1999        1382         617
 11:39:01 up  2:03,  0 users,  load average: 0.92, 0.52, 0.94
## system overview
top - 11:39:01 up  2:03,  0 users,  load average: 0.92, 0.52, 0.94
Tasks: 201 total,   3 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 18.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    84792 free,  1460268 used,   875240 buff/cache
KiB Swap:  2047996 total,   632044 free,  1415952 used.   736084 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1464576 236468   5076 S 125.0  9.8   1:35.90 /usr/sbin+
 36145 root      20   0  319324  17752   6832 R  25.0  0.7   0:00.06 /usr/bin/+
    36 root      20   0       0      0      0 S   6.2  0.0   0:21.59 [kswapd0]
 31360 nobody    20   0  277600  18928   4268 S   6.2  0.8   0:00.59 /usr/sbin+
 35168 nobody    20   0  277520  17500   3744 S   6.2  0.7   0:00.18 /usr/sbin+
 36115 nigeria   20   0  404052  16144  10384 S   6.2  0.7   0:00.05 /opt/cpan+
 36150 cloudsms  20   0  404052  15612  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44276   3400   1504 S   0.0  0.1   0:11.00 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.51 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.35 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:07.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.33 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.39 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:01.98 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.22 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   3536   3280 S   0.0  0.1   0:04.72 /usr/lib/+
   385 root      20   0   45356     32     28 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    460    328 S   0.0  0.0   0:00.81 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    100     56 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5172   1356 S   0.0  0.2   0:00.24 queueproc+
   474 dbus      20   0   58748   1412    684 S   0.0  0.1   0:04.02 /usr/bin/+
   478 nscd      20   0  926904   1372    796 S   0.0  0.1   0:06.06 /usr/sbin+
   483 rpc       20   0   69256    100     40 S   0.0  0.0   0:00.01 /sbin/rpc+
   505 polkitd   20   0  610540    764    428 S   0.0  0.0   0:01.07 /usr/lib/+
   507 root      20   0   24696   1128    796 S   0.0  0.0   0:01.79 /usr/lib/+
   509 root      20   0   21540    344    260 S   0.0  0.0   0:00.16 /usr/sbin+
   514 root      20   0   52852    404    304 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208     56     32 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    432    300 S   0.0  0.0   0:00.21 /usr/sbin+
   580 root      20   0  108296     24     20 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89108   3884    884 S   0.0  0.2   0:00.14 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1902216 380260    912 S   0.0 15.7   0:38.51 /usr/loca+
   942 named     20   0  990260  29272   1896 S   0.0  1.2   0:05.09 /usr/sbin+
   947 root      20   0  247992 121504   4920 S   0.0  5.0   0:03.00 /usr/loca+
   949 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0   11540     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   953 root      20   0   51508    644    456 S   0.0  0.0   0:00.13 /usr/sbin+
   954 root      20   0 1277056   2128     16 S   0.0  0.1   0:21.88 /usr/bin/+
   955 telegraf  20   0 5654048  37004   6176 S   0.0  1.5   0:04.38 /usr/loca+
   956 root      20   0  445028    592    484 S   0.0  0.0   0:00.30 sw-engine+
   960 root      20   0  396248    412    328 S   0.0  0.0   0:00.28 php-fpm: +
   963 systuser  20   0  114016   9888   2732 S   0.0  0.4   0:01.93 /usr/loca+
   964 root      20   0  153404    240    160 S   0.0  0.0   0:00.15 pure-ftpd+
   965 cpanelc+  20   0   10320   3500   2448 R   0.0  0.1   0:06.45 /usr/loca+
   966 root      20   0  111304    368    264 S   0.0  0.0   0:01.16 /usr/sbin+
   967 root      20   0 1276356   6236      0 S   0.0  0.3   0:30.59 /usr/bin/+
   970 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   978 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.16 /usr/bin/+
   979 root      20   0  261028   7532   2184 S   0.0  0.3   0:32.52 cpsrvd (S+
   980 root      20   0  572372    892    312 S   0.0  0.0   0:00.72 /usr/bin/+
   984 root      20   0  389508    536    332 S   0.0  0.0   0:00.28 php-fpm: +
   998 root      20   0  388892    380    288 S   0.0  0.0   0:00.38 php-fpm: +
  1001 root      20   0  400740   2404    608 S   0.0  0.1   0:01.02 php-fpm: +
  1002 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.00 /usr/loca+
  1003 root      20   0  240976   3420   2868 S   0.0  0.1   0:02.22 /usr/sbin+
  1010 root      20   0  439788    420    328 S   0.0  0.0   0:00.34 php-fpm: +
  1097 dovenull  20   0   46912   1528    992 S   0.0  0.1   0:00.11 dovecot/p+
  1098 dovenull  20   0   47324   2600   1656 S   0.0  0.1   0:00.11 dovecot/i+
  1099 dovecot   20   0   10320    272    168 S   0.0  0.0   0:00.02 dovecot/a+
  1100 root      20   0   10452    548    396 S   0.0  0.0   0:00.09 dovecot/l+
  1101 dovenull  20   0   47064   2084   1532 S   0.0  0.1   0:00.17 dovecot/p+
  1102 dovenull  20   0   47192   2600   1760 S   0.0  0.1   0:00.12 dovecot/i+
  1106 root      20   0   24564   2056    496 S   0.0  0.1   0:00.07 dovecot/c+
  1107 dovecot   20   0   13568    592    376 S   0.0  0.0   0:00.02 dovecot/s+
  1157 dovecot   20   0   41152   1480   1020 S   0.0  0.1   0:00.19 dovecot/a+
  1197 systuser  20   0  157700   2876    836 S   0.0  0.1   0:00.05 SonarPush+
  1199 wp-tool+  20   0  387528   3820   1628 S   0.0  0.2   0:00.15 /usr/bin/+
  1200 wp-tool+  20   0  412368  13684   1572 S   0.0  0.6   0:02.59 /usr/bin/+
  1281 root      20   0  262224  23160   5296 S   0.0  1.0   0:00.58 cpdavd - +
  1283 root      20   0  167452   1212    664 S   0.0  0.1   0:00.15 dnsadmin +
  1285 root      20   0  209340  21552   4096 S   0.0  0.9   0:01.12 tailwatchd
  1671 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  1709 root      20   0  299272    496    332 S   0.0  0.0   0:00.19 php-fpm: +
  1717 root      38  18  130416   1376    700 S   0.0  0.1   0:00.02 cpanellog+
  1930 root      20   0  267052   5540    536 S   0.0  0.2   0:00.74 /usr/sbin+
  1931 root      20   0   12808    332    216 S   0.0  0.0   0:00.80 /usr/loca+
  1932 root      20   0   12732    288    212 S   0.0  0.0   0:00.68 /usr/loca+
  1933 root      20   0   12832    344    220 S   0.0  0.0   0:00.75 /usr/loca+
  1934 root      20   0   53340     24     24 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181992   8264   1112 S   0.0  0.3   0:06.43 lfd - sle+
  4601 nobody    20   0  277648  20688   5052 S   0.0  0.9   0:04.06 /usr/sbin+
 12732 root      20   0  258872 125768   3220 S   0.0  5.2   0:00.53 spamd chi+
 12733 root      20   0  247992 118012   1464 S   0.0  4.9   0:00.00 spamd chi+
 14810 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 19550 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23203 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.12 [kworker]
 23274 nobody    20   0  277900  19844   4892 S   0.0  0.8   0:01.45 /usr/sbin+
 23961 nobody    20   0  277584  19872   4760 S   0.0  0.8   0:01.27 /usr/sbin+
 27863 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 28207 nobody    20   0  277724  18804   4416 S   0.0  0.8   0:00.98 /usr/sbin+
 28759 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29801 nobody    20   0  277520  18516   4480 S   0.0  0.8   0:00.83 /usr/sbin+
 31340 nobody    20   0  277928  18608   4172 S   0.0  0.8   0:00.60 /usr/sbin+
 31372 nobody    20   0  277520  18284   4196 S   0.0  0.8   0:00.61 /usr/sbin+
 31373 nobody    20   0  277520  18212   4192 S   0.0  0.8   0:00.52 /usr/sbin+
 31674 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32398 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33997 root      20   0   84396   6388   3580 S   0.0  0.3   0:00.02 /usr/sbin+
 34533 nobody    20   0  277908  17980   3916 S   0.0  0.7   0:00.11 /usr/sbin+
 34776 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34790 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35185 nobody    20   0  277536  17580   3768 S   0.0  0.7   0:00.10 /usr/sbin+
 35190 nobody    20   0  277520  17508   3752 S   0.0  0.7   0:00.12 /usr/sbin+
 35191 nobody    20   0  277908  17612   3772 S   0.0  0.7   0:00.11 /usr/sbin+
 35192 nobody    20   0  277520  17504   3648 S   0.0  0.7   0:00.10 /usr/sbin+
 35193 nobody    20   0  277908  17632   3720 S   0.0  0.7   0:00.14 /usr/sbin+
 35337 nobody    20   0  277920  17928   3844 S   0.0  0.7   0:00.10 /usr/sbin+
 35557 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 35603 root      20   0   88340  10372   3592 S   0.0  0.4   0:00.02 /usr/sbin+
 35605 mailnull  20   0   88552   8012   1168 S   0.0  0.3   0:00.00 /usr/sbin+
 35702 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 35974 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 36029 nigeria   20   0  400460   5000   2208 S   0.0  0.2   0:00.00 php-fpm: +
 36035 root      20   0  162436   5840   4344 S   0.0  0.2   0:00.02 sshd: roo+
 36036 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 36042 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 36055 nobody    20   0  277504  16536   3152 S   0.0  0.7   0:00.00 /usr/sbin+
 36063 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36064 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36065 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36066 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36067 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36068 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36070 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36071 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36072 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36073 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36074 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36076 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 36080 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 36081 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36082 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 36084 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 36085 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 36086 root      20   0  169872  16848   2880 S   0.0  0.7   0:00.08 /usr/loca+
 36088 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 36089 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36090 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36091 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 36092 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 36093 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 36094 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36097 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 36103 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 36105 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 36107 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 36110 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 36143 root      20   0  113496   1428   1236 S   0.0  0.1   0:00.00 bash /usr+
 36147 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 36148 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 36149 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
 51246 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 78966 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:36   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:36   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:36   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:36   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   09:36   0:01  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root      51246  0.0  0.0      0     0 ?        S    10:35   0:00  \_ [kworker/1:0]
root      78966  0.0  0.0      0     0 ?        S    10:50   0:00  \_ [kworker/u200:2]
root       1671  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:2]
root      14810  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/0:1]
root      18677  0.0  0.0      0     0 ?        S    11:16   0:00  \_ [kworker/1:2]
root      19550  0.0  0.0      0     0 ?        S    11:17   0:00  \_ [kworker/0:0]
root      27863  0.0  0.0      0     0 ?        S    11:28   0:00  \_ [kworker/1:4]
root      28759  0.0  0.0      0     0 ?        S    11:29   0:00  \_ [kworker/0:3]
root      31674  0.0  0.0      0     0 ?        S    11:33   0:00  \_ [kworker/u200:1]
root      32398  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:4]
root      34776  0.0  0.0      0     0 ?        S    11:37   0:00  \_ [kworker/1:1]
root      34790  0.0  0.0      0     0 ?        S    11:37   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44276  3400 ?        Ss   09:36   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  3536 ?        Ss   09:36   0:04 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356    32 ?        Ss   09:36   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   460 ?        S<sl 09:36   0:00 /sbin/auditd
root        470  0.0  0.0 152780   100 ?        Ss   09:36   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5172 ?        Ss   09:36   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1412 ?        Ss   09:36   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1372 ?        Ssl  09:36   0:06 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   100 ?        Ss   09:36   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   764 ?        Ssl  09:36   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1128 ?        Ss   09:36   0:01 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   344 ?        Ss   09:36   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   404 ?        Ss   09:36   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  09:36   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    16 ?        Ss   09:36   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208    56 ?        Ss   09:36   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   432 ?        Ss   09:36   0:00 /usr/sbin/crond -n
root      36063  0.0  0.0 183044  2152 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36091  0.0  0.0 113284  1212 ?        Ss   11:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      36097  0.0  0.0 108052   360 ?        S    11:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      36103  0.0  0.0 113288  1512 ?        S    11:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      36151  0.0  0.0 153840  2092 ?        R    11:39   0:00  |               \_ ps auxf
root      36064  0.0  0.0 183044  2152 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36081  0.0  0.0  20164   984 ?        Ss   11:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      36152  0.0  0.0  20164   260 ?        R    11:39   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      36065  0.0  0.0 183044  2152 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36094  0.0  0.0  20164   808 ?        Ss   11:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      36066  0.0  0.0 183044  2152 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36088  0.0  0.0  20164   804 ?        Ss   11:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      36067  0.0  0.0 183044  2152 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36080  0.0  0.0  20164   988 ?        Ss   11:39   0:00  |   \_ jailshell (cloudsms) [36147] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  36147  0.0  0.0      0     0 ?        D    11:39   0:00  |       \_ [jailshell]
root      36068  0.0  0.0 183044  2152 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36092  0.0  0.0  20164   804 ?        Ss   11:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      36070  0.0  0.0 183044  2144 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36084  0.0  0.0  20164   804 ?        Ss   11:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      36071  0.0  0.0 183044  2144 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36090  0.0  0.0  20164   808 ?        Ss   11:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      36072  0.0  0.0 183044  2144 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36089  0.0  0.0  20164   808 ?        Ss   11:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      36073  0.0  0.0 183044  2144 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36082  0.0  0.0 113284  1212 ?        Ss   11:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      36086  0.0  0.6 169872 16848 ?        S    11:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      36143  0.0  0.0 113496  1428 ?        S    11:39   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      36145  0.0  0.8 335476 19496 ?        R    11:39   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      36074  0.0  0.0 183044  2144 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36093  0.0  0.0  20164   972 ?        Ss   11:39   0:00  |   \_ jailshell (pactpay) [36105] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   36105  0.0  0.0  20164   264 ?        S    11:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   36107  0.0  0.7 480124 17672 ?        S    11:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      36076  0.0  0.0 183044  2144 ?        S    11:39   0:00  \_ /usr/sbin/CROND -n
root      36085  0.0  0.0  20164   968 ?        Ss   11:39   0:00      \_ jailshell (nigeria) [36110] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   36110  0.0  0.0  20164   260 ?        S    11:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   36115  0.0  0.6 404052 16144 ?        S    11:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    24 tty1     Ss+  09:36   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704     0 ttyS0    Ss+  09:36   0:00 /bin/bash
mailnull    612  0.0  0.1  89108  3884 ?        Ss   09:36   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      33997  0.0  0.2  84396  6388 ?        S    11:36   0:00  \_ /usr/sbin/exim -q
root      35603  0.0  0.4  88340 10372 ?        S    11:38   0:00      \_ /usr/sbin/exim -q
mailnull  35605  0.0  0.3  88552  8012 ?        S    11:38   0:00          \_ /usr/sbin/exim -q
root        939  0.5 15.7 1902216 380260 ?      Ssl  09:36   0:38 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.2 990260 29272 ?        Ssl  09:36   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608    60 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    44 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   644 ?        Ss   09:36   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1528 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2600 ?        S    09:36   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   272 ?        S    09:36   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   548 ?        S    09:36   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064  2084 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47192  2600 ?        S    09:36   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24564  2056 ?        S    09:36   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   592 ?        S    09:36   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41152  1480 ?        S    09:36   0:00  \_ dovecot/auth
root      35702  0.0  0.1  41052  2724 ?        S    11:38   0:00  \_ dovecot/auth -w
root        954  0.2  0.0 1277056 2128 ?        Ssl  09:36   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 37004 ?       SLsl 09:36   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.0 445028   592 ?        Ss   09:36   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  35974  0.0  0.0 445028   316 ?        S    11:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   412 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.4 114016  9888 ?        Ssl  09:36   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   240 ?        Ss   09:36   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1  10320  3500 ?        Ss   09:36   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   368 ?        Ss   09:36   0:01 /usr/sbin/sshd -D
root      35557  0.0  0.1 111304  4264 ?        Ss   11:38   0:00  \_ sshd: [accepted]
root      36035  1.0  0.2 162436  5840 ?        Ss   11:38   0:00  \_ sshd: root [priv]
sshd      36036  0.0  0.1 115644  2632 ?        S    11:38   0:00      \_ sshd: root [net]
root        967  0.4  0.2 1276356 6236 ?        Ssl  09:36   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    36 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400    32 ?        Ssl  09:36   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.4  0.3 261028  7532 ?        Ss   09:36   0:32 cpsrvd (SSL) - waiting for connections                   
root      36042  0.0  0.0      0     0 ?        Z    11:38   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        980  0.0  0.0 572372   892 ?        Ssl  09:36   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   536 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   380 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.0 400740  2404 ?        Ss   09:36   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   36029  0.0  0.2 400460  5000 ?        S    11:38   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524    68 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 240976  3420 ?        Ssl  09:36   0:02 /usr/sbin/rsyslogd -n
root       1010  0.0  0.0 439788   420 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1197  0.0  0.1 157700  2876 ?        S    09:36   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.1 387528  3820 ?        Ss   09:36   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  0.5 412368 13684 ?        Ss   09:36   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.9 262224 23160 ?        Ss   09:36   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1283  0.0  0.0 167452  1212 ?        Ss   09:36   0:00 dnsadmin - dormant mode
root       1285  0.0  0.8 209340 21552 ?        Ss   09:36   0:01 tailwatchd
root       1709  0.0  0.0 299272   496 ?        Ss   09:36   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1376 ?        SN   09:36   0:00 cpanellogd - sleeping for logs
mysql      1764  1.3  9.7 1464576 236468 ?      Sl   09:36   1:35 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.2 267052  5540 ?        Ss   09:36   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12808   332 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   288 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12832   344 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340    24 ?        S    09:36   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     4601  0.1  0.8 277648 20688 ?        S    10:57   0:04  \_ /usr/sbin/httpd -k start
nobody    23274  0.1  0.8 277900 19844 ?        S    11:21   0:01  \_ /usr/sbin/httpd -k start
nobody    23961  0.1  0.8 277584 19872 ?        S    11:22   0:01  \_ /usr/sbin/httpd -k start
nobody    28207  0.1  0.7 277724 18804 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    29801  0.1  0.7 277520 18516 ?        S    11:30   0:00  \_ /usr/sbin/httpd -k start
nobody    31340  0.1  0.7 277928 18608 ?        S    11:32   0:00  \_ /usr/sbin/httpd -k start
nobody    31360  0.1  0.7 277600 18928 ?        S    11:32   0:00  \_ /usr/sbin/httpd -k start
nobody    31372  0.1  0.7 277520 18284 ?        S    11:32   0:00  \_ /usr/sbin/httpd -k start
nobody    31373  0.1  0.7 277520 18212 ?        S    11:32   0:00  \_ /usr/sbin/httpd -k start
nobody    34533  0.0  0.7 277908 17980 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    35168  0.2  0.7 277520 17500 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35185  0.1  0.7 277536 17580 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35190  0.1  0.7 277520 17508 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35191  0.1  0.7 277908 17612 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35192  0.1  0.7 277520 17504 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35193  0.1  0.7 277908 17632 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35337  0.1  0.7 277920 17928 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    36055  0.0  0.6 277504 16536 ?        S    11:39   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.0  0.3 181992  8264 ?        Ss   09:36   0:06 lfd - sleeping
oysipao+  23203  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root        947  0.1  5.0 247992 121504 ?       Ss   10:53   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      12732  0.0  5.1 258872 125768 ?       S    11:08   0:00  \_ spamd child
root      12733  0.0  4.8 247992 118012 ?       S    11:08   0:00  \_ spamd child
## mysql stats
Uptime: 29086  Threads: 3  Questions: 505535  Slow queries: 0  Opens: 4878  Flush tables: 1  Open tables: 2000  Queries per second avg: 17.380
*************************** 1. row ***************************
     Id: 8461
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 8464
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 8471
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 148.113.130.21 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.234.200.207 TIME_WAIT
      1 35.203.211.37 TIME_WAIT
      1 43.130.141.193 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 74.7.244.61 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 11:39:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 4 minutes 40 seconds
   Server load: 0.92 0.52 0.94
   Total accesses: 35621 - Total Traffic: 966.2 MB - Total Duration: 149794269
   CPU Usage: u8.78 s3.83 cu512.79 cs390.82 - 3.15% CPU load
   1.22 requests/sec - 34.0 kB/second - 27.8 kB/request - 4205.22 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KKWWKKKK_..KK__.._K___..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client     Protocol         VHost                         Request
   0-0  35168 1/28/1694  K 0.79  0     419 875920   34.5  0.79  43.16 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=249295570 HTTP/1.1
   1-0  34533 3/23/1758  K 0.38  1     343 928176   93.8  0.82  44.37 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2878279078 HTTP/1.1
   2-0  23961 8/223/1772 W 5.48  0     0   1030381  250.3 8.25  49.46 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=3585134105 HTTP/1.1
   3-0  4601  0/681/1848 W 17.53 0     0   986869   0.0   17.84 48.93 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   4-0  31340 7/113/1620 K 2.40  1     362 44294706 217.8 5.33  46.62 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=4111656432 HTTP/1.1
   5-0  23274 9/255/1591 K 6.20  2     295 825279   278.7 7.07  43.09 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=663848147 HTTP/1.1
   6-0  35337 2/19/1710  K 0.38  1     336 910929   64.6  0.42  46.16 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2421221512 HTTP/1.1
   7-0  36055 1/1/1588   K 0.00  1     352 918121   34.7  0.03  42.00 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=2251538813 HTTP/1.1
   8-0  29801 0/144/1650 _ 3.54  0     0   901899   0.0   3.70  45.24 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   9-0  -     0/0/1713   . 0.00  71    0   866720   0.0   0.00  45.07 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 -     0/0/1544   . 0.00  70    0   827685   0.0   0.00  42.16 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 31360 4/104/1803 K 2.45  0     388 976103   121.6 2.83  46.17 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=268047378 HTTP/1.1
   12-0 35185 2/20/1321  K 0.36  3     399 737719   65.4  0.45  33.52 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=974803244 HTTP/1.1
   13-0 28207 0/170/1405 _ 4.25  1     39  44202412 0.0   7.02  41.82 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue5.php HTTP/1.1
   14-0 35190 0/20/1311  _ 0.50  0     343 776718   0.0   0.52  36.56 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=130456453 HTTP/1.1
   15-0 -     0/0/1438   . 0.00  69    0   796706   0.0   0.00  39.09 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/1519   . 0.00  76    0   804548   0.0   0.00  45.24 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 31372 0/107/1301 _ 2.83  0     389 727716   0.0   2.69  32.43 66.249.69.172  http/1.1 team.cloudware.ng:443  GET /?l=4127953583 HTTP/1.1
   18-0 31373 4/99/878   K 2.12  3     342 574093   122.2 2.74  23.05 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=969073043 HTTP/1.1
   19-0 35191 0/20/1330  _ 0.45  0     341 709487   0.0   0.53  34.55 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1890424403 HTTP/1.1
   20-0 35192 0/18/1035  _ 0.37  0     394 44047501 0.0   1.02  27.12 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=2242959392 HTTP/1.1
   21-0 35193 0/25/744   _ 0.62  1     27  404173   0.0   0.67  23.45 128.140.8.200  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   22-0 -     0/0/551    . 0.00  939   0   338585   0.0   0.00  16.40 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/280    . 0.00  25249 0   156923   0.0   0.00  7.55  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/437    . 0.00  25262 0   229576   0.0   0.00  11.87 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/62     . 0.00  25348 0   25776    0.0   0.00  1.43  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/30     . 0.00  27079 0   13761    0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6      . 0.00  28443 0   3360     0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/184    . 0.00  27737 0   93070    0.0   0.00  4.64  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/2      . 0.00  28487 0   9        0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2      . 0.00  28486 0   13       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4      . 0.00  28466 0   2022     0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5      . 0.00  28442 0   1566     0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00  28457 0   1895     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3      . 0.00  28468 0   57       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22     . 0.00  28408 0   11094    0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00  28445 0   823      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/80     . 0.00  28101 0   38300    0.0   0.00  1.90  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/14     . 0.00  28403 0   6642     0.0   0.00  0.35  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  28462 0   40       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2      . 0.00  28465 4   40       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2      . 0.00  28483 0   34       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00  28436 0   4106     0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6      . 0.00  28437 0   2657     0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9      . 0.00  28438 0   3864     0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10     . 0.00  28416 0   3619     0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  28484 0   113      0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  28447 0   38       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  28463 0   18       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19     . 0.00  28406 0   9315     0.0   0.00  0.49  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/335    . 0.00  27173 0   176390   0.0   0.00  9.65  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/2      . 0.00  28482 0   23       0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  28481 0   19       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28     . 0.00  28333 0   31192    0.0   0.00  3.71  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  28477 0   52       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3      . 0.00  28460 0   73       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00  28478 0   54       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00  28476 0   40       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/86     . 0.00  28103 0   43953    0.0   0.00  2.25  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9      . 0.00  28407 0   3369     0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00  28480 0   51       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00  28469 0   36       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5      . 0.00  28440 0   1263     0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2      . 0.00  28473 0   35       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14     . 0.00  28434 0   8103     0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2      . 0.00  28479 0   46       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3      . 0.00  28453 0   53       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  28470 0   145      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4      . 0.00  28439 0   753      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/224    . 0.00  27560 0   141502   0.0   0.00  5.80  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00  28472 0   52       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17     . 0.00  28404 0   9108     0.0   0.00  0.43  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/138    . 0.00  27926 0   86335    0.0   0.00  5.84  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/28     . 0.00  28336 0   14353    0.0   0.00  0.77  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41     . 0.00  28275 0   23982    0.0   0.00  1.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/264    . 0.00  27414 0   150949   0.0   0.00  7.38  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/2      . 0.00  28475 0   44       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3      . 0.00  28467 0   58       0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5      . 0.00  28446 0   1963     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2      . 0.00  28471 0   34       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48     . 0.00  28274 0   25894    0.0   0.00  1.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00  28448 0   672      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8      . 0.00  28431 0   2458     0.0   0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 910
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...47)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 26479
   total entries replaced since starting: 0
   total entries expired since starting: 25557
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 46 miss
   total removes since starting: 12 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit