403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.11.45.txt
 ## swap threshold exceeded
## server overview
2025-11-21.11.45 load[0] mem[64/61] mysql[4/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1411         115          39         836         736
Swap:          1999        1382         617
 11:45:01 up  2:09,  0 users,  load average: 0.14, 0.31, 0.71
## system overview
top - 11:45:01 up  2:09,  0 users,  load average: 0.69, 0.42, 0.74
Tasks: 200 total,   2 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.0 us, 20.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   131776 free,  1431700 used,   856824 buff/cache
KiB Swap:  2047996 total,   632300 free,  1415696 used.   767756 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1464576 236740   5004 S 129.4  9.8   1:40.35 /usr/sbin+
 41013 nigeria   20   0  404052  16140  10384 S  11.8  0.7   0:00.05 /opt/cpan+
 39545 nobody    20   0  277928  17568   3804 S   5.9  0.7   0:00.20 /usr/sbin+
 41089 cloudsms  20   0  404052  15612  10164 S   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44276   3412   1516 S   0.0  0.1   0:11.54 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.37 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:07.36 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.34 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.74 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:01.99 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   4716   4460 S   0.0  0.2   0:04.96 /usr/lib/+
   385 root      20   0   45356     32     28 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    460    328 S   0.0  0.0   0:00.85 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    100     56 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5164   1348 S   0.0  0.2   0:00.24 queueproc+
   474 dbus      20   0   58748   1412    684 S   0.0  0.1   0:04.21 /usr/bin/+
   478 nscd      20   0  926904   1372    796 S   0.0  0.1   0:06.37 /usr/sbin+
   483 rpc       20   0   69256    100     40 S   0.0  0.0   0:00.01 /sbin/rpc+
   505 polkitd   20   0  610540    764    428 S   0.0  0.0   0:01.12 /usr/lib/+
   507 root      20   0   24696   1128    796 S   0.0  0.0   0:01.87 /usr/lib/+
   509 root      20   0   21540    344    260 S   0.0  0.0   0:00.16 /usr/sbin+
   514 root      20   0   52852    404    304 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208     56     32 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    432    300 S   0.0  0.0   0:00.22 /usr/sbin+
   580 root      20   0  108296     24     20 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89108   3884    884 S   0.0  0.2   0:00.14 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1902216 379876    528 S   0.0 15.7   0:38.51 /usr/loca+
   942 named     20   0  990260  29460   1868 S   0.0  1.2   0:05.31 /usr/sbin+
   947 root      20   0  247992 121468   4884 S   0.0  5.0   0:03.05 /usr/loca+
   949 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0   11540     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   953 root      20   0   51508    644    456 S   0.0  0.0   0:00.13 /usr/sbin+
   954 root      20   0 1277056   2128     16 S   0.0  0.1   0:21.89 /usr/bin/+
   955 telegraf  20   0 5654048  37100   6032 S   0.0  1.5   0:04.58 /usr/loca+
   956 root      20   0  445028    592    484 S   0.0  0.0   0:00.31 sw-engine+
   960 root      20   0  396248    412    328 S   0.0  0.0   0:00.29 php-fpm: +
   963 systuser  20   0  114016   9944   2772 S   0.0  0.4   0:02.02 /usr/loca+
   964 root      20   0  153404    240    160 S   0.0  0.0   0:00.15 pure-ftpd+
   965 cpanelc+  20   0   10320   3500   2448 S   0.0  0.1   0:06.73 /usr/loca+
   966 root      20   0  111304    368    264 S   0.0  0.0   0:01.22 /usr/sbin+
   967 root      20   0 1276356   6236      0 S   0.0  0.3   0:30.60 /usr/bin/+
   970 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   978 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.16 /usr/bin/+
   979 root      20   0  261028   7520   2172 S   0.0  0.3   0:32.55 cpsrvd (S+
   980 root      20   0  572372    892    312 S   0.0  0.0   0:00.74 /usr/bin/+
   984 root      20   0  389508    536    332 S   0.0  0.0   0:00.29 php-fpm: +
   998 root      20   0  388892    380    288 S   0.0  0.0   0:00.39 php-fpm: +
  1001 root      20   0  400740   2404    608 S   0.0  0.1   0:01.05 php-fpm: +
  1002 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.00 /usr/loca+
  1003 root      20   0  240976   4432   3868 S   0.0  0.2   0:02.33 /usr/sbin+
  1010 root      20   0  439788    420    328 S   0.0  0.0   0:00.35 php-fpm: +
  1097 dovenull  20   0   46912   1528    992 S   0.0  0.1   0:00.11 dovecot/p+
  1098 dovenull  20   0   47324   2600   1656 S   0.0  0.1   0:00.11 dovecot/i+
  1099 dovecot   20   0   10320    272    168 S   0.0  0.0   0:00.02 dovecot/a+
  1100 root      20   0   10452    548    396 S   0.0  0.0   0:00.10 dovecot/l+
  1101 dovenull  20   0   47064   2084   1532 S   0.0  0.1   0:00.17 dovecot/p+
  1102 dovenull  20   0   47192   2596   1756 S   0.0  0.1   0:00.12 dovecot/i+
  1106 root      20   0   24564   2056    496 S   0.0  0.1   0:00.08 dovecot/c+
  1107 dovecot   20   0   13568    592    376 S   0.0  0.0   0:00.02 dovecot/s+
  1157 dovecot   20   0   41152   1480   1020 S   0.0  0.1   0:00.20 dovecot/a+
  1197 systuser  20   0  157700   2876    836 S   0.0  0.1   0:00.05 SonarPush+
  1199 wp-tool+  20   0  387528   3820   1628 S   0.0  0.2   0:00.16 /usr/bin/+
  1200 wp-tool+  20   0  412368  13684   1572 S   0.0  0.6   0:02.69 /usr/bin/+
  1281 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.59 cpdavd - +
  1283 root      20   0  167452   1212    664 S   0.0  0.1   0:00.16 dnsadmin +
  1285 root      20   0  209340  21348   3888 S   0.0  0.9   0:01.17 tailwatchd
  1671 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  1709 root      20   0  299272    496    332 S   0.0  0.0   0:00.20 php-fpm: +
  1717 root      38  18  130416   1376    700 S   0.0  0.1   0:00.02 cpanellog+
  1930 root      20   0  267052   5540    536 R   0.0  0.2   0:00.77 /usr/sbin+
  1931 root      20   0   12832    332    216 S   0.0  0.0   0:00.83 /usr/loca+
  1932 root      20   0   12732    288    212 S   0.0  0.0   0:00.72 /usr/loca+
  1933 root      20   0   12872    344    220 S   0.0  0.0   0:00.79 /usr/loca+
  1934 root      20   0   53340     24     24 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181992   8408   1112 S   0.0  0.3   0:06.75 lfd - sle+
  4601 nobody    20   0  277648  20672   5036 S   0.0  0.9   0:04.60 /usr/sbin+
 12732 root      20   0  258872 125548   3000 S   0.0  5.2   0:00.58 spamd chi+
 12733 root      20   0  247992 118012   1464 S   0.0  4.9   0:00.00 spamd chi+
 19550 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23203 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.12 [kworker]
 27863 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 29801 nobody    20   0  277584  19412   4820 S   0.0  0.8   0:01.47 /usr/sbin+
 31674 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32398 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34533 nobody    20   0  277908  18984   4312 S   0.0  0.8   0:00.73 /usr/sbin+
 34790 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35168 nobody    20   0  277520  18140   4204 S   0.0  0.7   0:00.76 /usr/sbin+
 35190 nobody    20   0  277520  18696   4268 S   0.0  0.8   0:00.70 /usr/sbin+
 35193 nobody    20   0  277908  18516   4228 S   0.0  0.8   0:00.67 /usr/sbin+
 35337 nobody    20   0  277920  18968   4288 S   0.0  0.8   0:00.63 /usr/sbin+
 36193 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37673 nobody    20   0  277900  18608   4176 S   0.0  0.8   0:00.36 /usr/sbin+
 37805 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37928 nobody    20   0  277520  18432   4088 S   0.0  0.8   0:00.37 /usr/sbin+
 38195 nobody    20   0  277908  17684   3940 S   0.0  0.7   0:00.28 /usr/sbin+
 38476 nobody    20   0  277900  18732   4184 S   0.0  0.8   0:00.23 /usr/sbin+
 38558 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38778 nobody    20   0  277580  17856   3976 S   0.0  0.7   0:00.26 /usr/sbin+
 39040 nobody    20   0  277392  17052   3580 S   0.0  0.7   0:00.28 /usr/sbin+
 39049 nobody    20   0  277520  17632   3932 S   0.0  0.7   0:00.20 /usr/sbin+
 39050 nobody    20   0  277528  17812   3932 S   0.0  0.7   0:00.22 /usr/sbin+
 39564 nobody    20   0  277908  17676   3856 S   0.0  0.7   0:00.15 /usr/sbin+
 40029 nobody    20   0  277520  17492   3780 S   0.0  0.7   0:00.05 /usr/sbin+
 40418 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 40484 root      20   0   41052   2784   2128 S   0.0  0.1   0:00.00 dovecot/a+
 40636 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 40702 mailnull  20   0   89296   5024   1840 S   0.0  0.2   0:00.00 /usr/sbin+
 40797 nigeria   20   0  400460   5256   2408 S   0.0  0.2   0:00.00 php-fpm: +
 40857 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 40900 mailnull  20   0   89116   3996    932 S   0.0  0.2   0:00.00 /usr/sbin+
 40910 nobody    20   0  277236  16364   3108 S   0.0  0.7   0:00.00 /usr/sbin+
 40938 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40939 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40941 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40942 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40943 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40944 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40945 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40946 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40947 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40948 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40949 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40950 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40952 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40959 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 40960 root      20   0  188212  11096   5148 S   0.0  0.5   0:00.01 /usr/loca+
 40968 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 40970 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40971 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40973 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40974 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 40976 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40978 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 40979 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40981 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40982 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40983 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40984 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 40986 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 40995 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 41004 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 41005 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 41009 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 41011 root      20   0  160224   2352   1636 S   0.0  0.1   0:00.00 top -n 2 +
 41031 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 41084 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 41086 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 41087 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 51246 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 78966 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:36   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:36   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:36   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:36   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   09:36   0:01  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root      51246  0.0  0.0      0     0 ?        S    10:35   0:00  \_ [kworker/1:0]
root      78966  0.0  0.0      0     0 ?        S    10:50   0:00  \_ [kworker/u200:2]
root       1671  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:2]
root      19550  0.0  0.0      0     0 ?        S    11:17   0:00  \_ [kworker/0:0]
root      27863  0.0  0.0      0     0 ?        S    11:28   0:00  \_ [kworker/1:4]
root      31674  0.0  0.0      0     0 ?        S    11:33   0:00  \_ [kworker/u200:1]
root      32398  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:4]
root      34790  0.0  0.0      0     0 ?        S    11:37   0:00  \_ [kworker/1:3]
root      36193  0.0  0.0      0     0 ?        S    11:39   0:00  \_ [kworker/0:1]
root      37805  0.0  0.0      0     0 ?        S    11:41   0:00  \_ [kworker/0:3]
root      38558  0.0  0.0      0     0 ?        S    11:42   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44276  3412 ?        Ss   09:36   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  4716 ?        Ss   09:36   0:04 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356    32 ?        Ss   09:36   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   460 ?        S<sl 09:36   0:00 /sbin/auditd
root        470  0.0  0.0 152780   100 ?        Ss   09:36   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5164 ?        Ss   09:36   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1412 ?        Ss   09:36   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1372 ?        Ssl  09:36   0:06 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   100 ?        Ss   09:36   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   764 ?        Ssl  09:36   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1128 ?        Ss   09:36   0:01 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   344 ?        Ss   09:36   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   404 ?        Ss   09:36   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  09:36   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    16 ?        Ss   09:36   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208    56 ?        Ss   09:36   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   432 ?        Ss   09:36   0:00 /usr/sbin/crond -n
root      40938  0.0  0.0 183044  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40978  0.0  0.0 113284  1212 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      40986  0.0  0.0 108052   360 ?        S    11:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      40995  0.0  0.0 113288  1520 ?        S    11:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      41091  0.0  0.0 153840  2096 ?        R    11:45   0:00  |               \_ ps auxf
root      40939  0.0  0.0 183044  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40981  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      40941  0.0  0.0 183044  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40983  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      40942  0.0  0.0 183044  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40974  0.0  0.0  20164   984 ?        Ss   11:45   0:00  |   \_ jailshell (cloudsms) [41086] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  41086  0.0  0.0  20164   260 ?        S    11:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  41087  0.0  0.0 113284  1212 ?        R    11:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  41089  0.0  0.0      0     0 ?        Z    11:45   0:00  |               \_ [php-cgi] <defunct>
root      40943  0.0  0.0 183044  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40982  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      40944  0.0  0.0 183044  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40979  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      40945  0.0  0.0 183044  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40976  0.0  0.0  20164   804 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      40946  0.0  0.0 183044  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40973  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      40947  0.0  0.0 183044  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40970  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      40948  0.0  0.0 183044  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40971  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      40949  0.0  0.0 183044  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40959  0.0  0.0 113284  1212 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      40960  0.0  0.4 188212 11096 ?        S    11:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      41011  0.0  0.0 160224  2352 ?        S    11:45   0:00  |           \_ top -n 2 -b -c
root      40950  0.0  0.0 183044  2140 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40984  0.0  0.0  20164   968 ?        Ss   11:45   0:00  |   \_ jailshell (pactpay) [41004] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   41004  0.0  0.0  20164   260 ?        S    11:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   41009  0.0  0.7 480124 17672 ?        S    11:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      40952  0.0  0.0 183044  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      40968  0.0  0.0  20164   964 ?        Ss   11:45   0:00      \_ jailshell (nigeria) [41005] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   41005  0.0  0.0  20164   256 ?        S    11:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   41013  0.0  0.6 404052 16140 ?        S    11:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    24 tty1     Ss+  09:36   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704     0 ttyS0    Ss+  09:36   0:00 /bin/bash
mailnull    612  0.0  0.1  89108  3884 ?        Ss   09:36   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  40702  0.0  0.2  89296  5024 ?        S    11:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  40900  0.0  0.1  89116  3996 ?        S    11:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.4 15.6 1902216 379876 ?      Ssl  09:36   0:38 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.2 990260 29460 ?        Ssl  09:36   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608    60 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    44 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   644 ?        Ss   09:36   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1528 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2600 ?        S    09:36   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   272 ?        S    09:36   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   548 ?        S    09:36   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064  2084 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47192  2596 ?        S    09:36   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24564  2056 ?        S    09:36   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   592 ?        S    09:36   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41152  1480 ?        S    09:36   0:00  \_ dovecot/auth
root      40418  0.0  0.1  60820  4512 ?        S    11:44   0:00  \_ dovecot/lmtp
root      40484  0.0  0.1  41052  2784 ?        S    11:44   0:00  \_ dovecot/auth -w
root        954  0.2  0.0 1277056 2128 ?        Ssl  09:36   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 37100 ?       SLsl 09:36   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.0 445028   592 ?        Ss   09:36   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  40636  0.0  0.0 445028   316 ?        S    11:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   412 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.4 114016  9944 ?        Ssl  09:36   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   240 ?        Ss   09:36   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1  10320  3500 ?        Ss   09:36   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   368 ?        Ss   09:36   0:01 /usr/sbin/sshd -D
root        967  0.3  0.2 1276356 6236 ?        Ssl  09:36   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    36 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400    32 ?        Ssl  09:36   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.4  0.3 261028  7520 ?        Ss   09:36   0:32 cpsrvd (SSL) - waiting for connections                   
root      40857  0.0  0.0      0     0 ?        Z    11:44   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   892 ?        Ssl  09:36   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   536 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   380 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.0 400740  2404 ?        Ss   09:36   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   40797  0.0  0.2 400460  5256 ?        S    11:44   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524    68 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 240976  4432 ?        Ssl  09:36   0:02 /usr/sbin/rsyslogd -n
root       1010  0.0  0.0 439788   420 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1197  0.0  0.1 157700  2876 ?        S    09:36   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.1 387528  3820 ?        Ss   09:36   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  0.5 412368 13684 ?        Ss   09:36   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.2 183900  6692 ?        Ss   09:36   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1212 ?        Ss   09:36   0:00 dnsadmin - dormant mode
root       1285  0.0  0.8 209340 21348 ?        Ss   09:36   0:01 tailwatchd
root       1709  0.0  0.0 299272   496 ?        Ss   09:36   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1376 ?        SN   09:36   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  9.7 1464576 236740 ?      Sl   09:36   1:40 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.2 267052  5540 ?        Ss   09:36   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12832   332 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   288 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12872   344 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340    24 ?        S    09:36   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     4601  0.1  0.8 277648 20672 ?        S    10:57   0:04  \_ /usr/sbin/httpd -k start
nobody    29801  0.1  0.8 277584 19412 ?        S    11:30   0:01  \_ /usr/sbin/httpd -k start
nobody    34533  0.1  0.7 277908 18984 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    35168  0.1  0.7 277520 18140 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35190  0.1  0.7 277520 18696 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    35193  0.1  0.7 277908 18516 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
cloudw    41031  0.0  0.6 353712 15972 ?        S    11:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    35337  0.1  0.7 277920 18968 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    37673  0.1  0.7 277900 18608 ?        S    11:40   0:00  \_ /usr/sbin/httpd -k start
nobody    37928  0.1  0.7 277520 18432 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38195  0.1  0.7 277908 17684 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38476  0.1  0.7 277900 18732 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38778  0.1  0.7 277580 17856 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    39040  0.1  0.7 277392 17052 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    39049  0.1  0.7 277520 17632 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    39050  0.1  0.7 277528 17812 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    39545  0.1  0.7 277928 17568 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    39564  0.1  0.7 277908 17676 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    40029  0.0  0.7 277520 17492 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    40910  0.0  0.6 277236 16364 ?        S    11:44   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.0  0.3 181992  8408 ?        Ss   09:36   0:06 lfd - sleeping
oysipao+  23203  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root        947  0.0  5.0 247992 121468 ?       Ss   10:53   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      12732  0.0  5.1 258872 125548 ?       S    11:08   0:00  \_ spamd child
root      12733  0.0  4.8 247992 118012 ?       S    11:08   0:00  \_ spamd child
## mysql stats
Uptime: 29445  Threads: 3  Questions: 533728  Slow queries: 0  Opens: 4952  Flush tables: 1  Open tables: 2000  Queries per second avg: 18.126
*************************** 1. row ***************************
     Id: 9075
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 9078
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 9086
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.27.167 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.98.142.181 TIME_WAIT
      1 40.77.167.44 TIME_WAIT
      1 52.167.144.23 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 11:45:01 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 10 minutes 40 seconds
   Server load: 0.69 0.42 0.74
   Total accesses: 37464 - Total Traffic: 1.0 GB - Total Duration: 150845248
   CPU Usage: u8.81 s4.13 cu537.22 cs411.02 - 3.26% CPU load
   1.27 requests/sec - 35.6 kB/second - 28.0 kB/request - 4026.41 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_WKRKKW____KK.WKWKK..K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                         Request
   0-0  35168 0/127/1793 _ 3.34  0     0   926274   0.0   3.42  45.79 ::1             http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   1-0  34533 0/123/1858 W 3.17  0     0   986461   0.0   3.84  47.39 52.34.29.136    http/1.1 ourprojects.cloudware.ng:443 GET /.env.production HTTP/1.1
   2-0  39545 3/34/1876  K 0.85  0     374 1089875  95.4  0.90  52.40 192.178.4.100   http/1.1 team.cloudware.ng:443        GET /?l=2598205958 HTTP/1.1
   3-0  4601  0/776/1943 R 19.76 20    346 1033354  0.0   20.26 51.35 105.112.113.239 http/1.1
   4-0  38476 9/44/1707  K 1.21  3     343 44337150 278.2 1.04  48.68 192.178.4.97    http/1.1 team.cloudware.ng:443        GET /?l=4282368862 HTTP/1.1
   5-0  38195 1/48/1682  K 1.14  2     401 874114   37.0  1.29  45.51 192.178.4.104   http/1.1 team.cloudware.ng:443        GET /?l=2640659524 HTTP/1.1
   6-0  35337 0/110/1801 W 2.70  0     0   961472   0.0   2.91  48.65 192.178.4.100   http/1.1 team.cloudware.ng:443        GET /?l=830581339 HTTP/1.1
   7-0  40029 0/13/1688  _ 0.13  0     23  954033   0.0   0.18  43.93 116.203.129.16  http/1.1 cloudsms.com.ng:443          GET /cron/process_queue5.php HTTP/1.1
   8-0  29801 0/299/1805 _ 7.50  0     356 933884   0.0   5.72  47.25 192.178.4.96    http/1.1 team.cloudware.ng:443        GET /?l=4240960827 HTTP/1.1
   9-0  39564 0/28/1771  _ 0.63  0     0   894746   0.0   0.68  46.44 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80       GET /whm-server-status HTTP/1.0
   10-0 40910 0/1/1574   _ 0.00  0     186 914160   0.0   0.00  47.36 52.34.29.136    http/1.1 ourprojects.cloudware.ng:443 GET /.env.development HTTP/1.1
   11-0 39040 94/96/1949 K 2.47  0     92  1001882  630.5 0.63  47.87 145.239.69.106  http/1.1 cloudsms.com.ng:443          GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   12-0 37673 4/67/1393  K 1.45  3     355 772807   126.2 1.57  35.22 192.178.4.103   http/1.1 team.cloudware.ng:443        GET /?l=2568906628 HTTP/1.1
   13-0 -     0/0/1482   . 0.00  18    0   44305396 0.0   0.00  48.46 ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   14-0 35190 1/117/1408 W 2.98  0     0   828570   35.9  3.10  39.14 192.178.4.97    http/1.1 team.cloudware.ng:443        GET /?l=2113927126 HTTP/1.1
   15-0 38778 7/44/1485  K 1.09  3     345 892354   215.2 1.16  45.20 192.178.4.104   http/1.1 team.cloudware.ng:443        GET /?l=3611597123 HTTP/1.1
   16-0 37928 0/66/1585  W 1.60  0     0   839156   0.0   1.70  46.94 ::1             http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   17-0 39049 1/39/1341  K 0.78  0     357 744555   35.3  0.87  33.30 192.178.4.96    http/1.1 team.cloudware.ng:443        GET /?l=1982831733 HTTP/1.1
   18-0 39050 4/37/961   K 0.93  0     313 620038   123.4 0.99  25.28 192.178.4.102   http/1.1 team.cloudware.ng:443        GET /?l=859349301 HTTP/1.1
   19-0 -     0/0/1399   . 0.00  153   4   748799   0.0   0.00  36.42 ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   20-0 -     0/0/1075   . 0.00  179   0   44066595 0.0   0.00  28.18 ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   21-0 35193 2/121/840  K 2.81  0     373 449168   65.9  3.54  26.32 192.178.4.104   http/1.1 team.cloudware.ng:443        GET /?l=3165181266 HTTP/1.1
   22-0 -     0/0/551    . 0.00  1299  0   338585   0.0   0.00  16.40 ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   23-0 -     0/0/280    . 0.00  25609 0   156923   0.0   0.00  7.55  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   24-0 -     0/0/437    . 0.00  25622 0   229576   0.0   0.00  11.87 ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   25-0 -     0/0/62     . 0.00  25707 0   25776    0.0   0.00  1.43  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   26-0 -     0/0/30     . 0.00  27438 0   13761    0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   27-0 -     0/0/6      . 0.00  28803 0   3360     0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   28-0 -     0/0/184    . 0.00  28097 0   93070    0.0   0.00  4.64  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   29-0 -     0/0/2      . 0.00  28847 0   9        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   30-0 -     0/0/2      . 0.00  28846 0   13       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   31-0 -     0/0/4      . 0.00  28826 0   2022     0.0   0.00  0.09  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   32-0 -     0/0/5      . 0.00  28802 0   1566     0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00  28817 0   1895     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   34-0 -     0/0/3      . 0.00  28828 0   57       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   35-0 -     0/0/22     . 0.00  28768 0   11094    0.0   0.00  0.65  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00  28805 0   823      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   37-0 -     0/0/80     . 0.00  28460 0   38300    0.0   0.00  1.90  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   38-0 -     0/0/14     . 0.00  28763 0   6642     0.0   0.00  0.35  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  28822 0   40       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   40-0 -     0/0/2      . 0.00  28825 4   40       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   41-0 -     0/0/2      . 0.00  28843 0   34       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00  28796 0   4106     0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   43-0 -     0/0/6      . 0.00  28797 0   2657     0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   44-0 -     0/0/9      . 0.00  28798 0   3864     0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   45-0 -     0/0/10     . 0.00  28776 0   3619     0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  28844 0   113      0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  28807 0   38       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  28823 0   18       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   49-0 -     0/0/19     . 0.00  28766 0   9315     0.0   0.00  0.49  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   50-0 -     0/0/335    . 0.00  27532 0   176390   0.0   0.00  9.65  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   51-0 -     0/0/2      . 0.00  28842 0   23       0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  28841 0   19       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   53-0 -     0/0/28     . 0.00  28693 0   31192    0.0   0.00  3.71  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  28837 0   52       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   55-0 -     0/0/3      . 0.00  28820 0   73       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00  28838 0   54       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00  28836 0   40       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   58-0 -     0/0/86     . 0.00  28462 0   43953    0.0   0.00  2.25  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   59-0 -     0/0/9      . 0.00  28767 0   3369     0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00  28840 0   51       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00  28829 0   36       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   62-0 -     0/0/5      . 0.00  28800 0   1263     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   63-0 -     0/0/2      . 0.00  28833 0   35       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   64-0 -     0/0/14     . 0.00  28794 0   8103     0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   65-0 -     0/0/2      . 0.00  28839 0   46       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   66-0 -     0/0/3      . 0.00  28813 0   53       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  28830 0   145      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   68-0 -     0/0/4      . 0.00  28799 0   753      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   69-0 -     0/0/224    . 0.00  27920 0   141502   0.0   0.00  5.80  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00  28832 0   52       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   71-0 -     0/0/17     . 0.00  28764 0   9108     0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   72-0 -     0/0/138    . 0.00  28286 0   86335    0.0   0.00  5.84  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   73-0 -     0/0/28     . 0.00  28696 0   14353    0.0   0.00  0.77  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   74-0 -     0/0/41     . 0.00  28635 0   23982    0.0   0.00  1.17  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   75-0 -     0/0/264    . 0.00  27774 0   150949   0.0   0.00  7.38  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   76-0 -     0/0/2      . 0.00  28835 0   44       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   77-0 -     0/0/3      . 0.00  28827 0   58       0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   78-0 -     0/0/5      . 0.00  28806 0   1963     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   79-0 -     0/0/2      . 0.00  28831 0   34       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   80-0 -     0/0/48     . 0.00  28634 0   25894    0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00  28808 0   672      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   82-0 -     0/0/8      . 0.00  28791 0   2458     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 946
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...40)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 27575
   total entries replaced since starting: 0
   total entries expired since starting: 26617
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 46 miss
   total removes since starting: 14 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit