403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.10.57.txt
 ## swap threshold exceeded
## server overview
2025-11-22.10.57 load[0] mem[70/62] mysql[3/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1546          88          39         728         591
Swap:          1999        1372         627
 10:57:01 up  3:58,  0 users,  load average: 0.59, 0.81, 0.77
## system overview
top - 10:57:01 up  3:58,  0 users,  load average: 0.86, 0.86, 0.78
Tasks: 208 total,   2 running, 206 sleeping,   0 stopped,   0 zombie
%Cpu(s): 71.0 us, 19.4 sy,  0.0 ni,  9.7 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    75748 free,  1596772 used,   747780 buff/cache
KiB Swap:  2047996 total,   642960 free,  1405036 used.   593000 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464484 258000   3136 S 112.5 10.7   3:05.74 /usr/sbin+
 69350 nigeria   20   0  404052  16136  10380 S  12.5  0.7   0:00.05 /opt/cpan+
 69377 cloudw    20   0  353712  15968  10484 S   6.2  0.7   0:00.01 /opt/cpan+
 69382 cloudsms  20   0  404052  15608  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44396   3364   1504 S   0.0  0.1   0:19.03 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.86 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:14.27 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.32 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:28.02 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.84 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.36 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.86 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   5632   5388 S   0.0  0.2   0:07.84 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    456    336 S   0.0  0.0   0:01.22 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.31 /usr/sbin+
   485 root      20   0   24712   1152    792 S   0.0  0.0   0:03.39 /usr/lib/+
   486 root      20   0  152780    100     60 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224280   6196   1756 S   0.0  0.3   0:00.29 queueproc+
   488 root      20   0   52852    180    112 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    932    548 S   0.0  0.0   0:02.04 /usr/lib/+
   498 dbus      20   0   58748   1360    604 S   0.0  0.1   0:07.82 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1228    584 S   0.0  0.1   0:10.55 /usr/sbin+
   554 root      20   0   24208     12      8 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    544    392 S   0.0  0.0   0:00.41 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3496    568 S   0.0  0.1   0:00.38 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.26 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    744    276 S   0.0  0.0   0:01.31 /usr/bin/+
   920 root      20   0  257360   5228   4660 S   0.0  0.2   0:03.91 /usr/sbin+
   926 root      20   0 1902000 394496    832 S   0.0 16.3   0:37.21 /usr/loca+
   927 named     20   0 1185864  36816   2096 S   0.0  1.5   0:07.81 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.32 /usr/bin/+
   931 root      20   0  389508    412    320 S   0.0  0.0   0:00.47 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.65 sw-engine+
   939 root      20   0  439788    336    244 S   0.0  0.0   0:00.50 php-fpm: +
   941 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    304    216 S   0.0  0.0   0:00.44 php-fpm: +
   944 cpanelc+  20   0   10132   3460   2456 S   0.0  0.1   0:11.45 /usr/loca+
   946 systuser  20   0  114016   9660   2312 S   0.0  0.4   0:03.60 /usr/loca+
   949 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    272    188 S   0.0  0.0   0:00.47 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.64 /usr/sbin+
   960 root      20   0   51508    652    464 S   0.0  0.0   0:00.24 /usr/sbin+
   962 root      20   0  261156   6020   1544 S   0.0  0.2   0:02.10 cpsrvd (S+
   965 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1484    612 S   0.0  0.1   0:01.76 php-fpm: +
   973 root      20   0  153404    260    176 S   0.0  0.0   0:00.30 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.04 /usr/bin/+
   975 root      20   0 1276356   6256      0 S   0.0  0.3   0:25.56 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  35432   5540 S   0.0  1.5   0:08.21 /usr/loca+
  1079 dovenull  20   0   47136   1732   1032 S   0.0  0.1   0:00.46 dovecot/p+
  1080 dovenull  20   0   47392   2240   1452 S   0.0  0.1   0:00.22 dovecot/i+
  1081 dovecot   20   0   10320    272    164 S   0.0  0.0   0:00.13 dovecot/a+
  1082 root      20   0   10452    548    344 S   0.0  0.0   0:00.29 dovecot/l+
  1083 dovenull  20   0   47300   2300   1692 S   0.0  0.1   0:00.57 dovecot/p+
  1084 dovenull  20   0   47424   2332   1496 S   0.0  0.1   0:00.24 dovecot/i+
  1090 root      20   0   24572   1984    420 S   0.0  0.1   0:00.12 dovecot/c+
  1091 dovecot   20   0   13568    636    436 S   0.0  0.0   0:00.04 dovecot/s+
  1153 dovecot   20   0   41156   1504    988 S   0.0  0.1   0:00.80 dovecot/a+
  1158 systuser  20   0  157704   2824    844 S   0.0  0.1   0:00.09 SonarPush+
  1177 wp-tool+  20   0  387528   3272   1368 S   0.0  0.1   0:00.20 /usr/bin/+
  1178 wp-tool+  20   0  412368  23204   1364 S   0.0  1.0   0:04.72 /usr/bin/+
  1261 root      20   0  183900   5728   2496 S   0.0  0.2   0:00.92 cpdavd - +
  1262 root      20   0  208764  20940   4020 S   0.0  0.9   0:01.96 tailwatchd
  1263 root      20   0  167452   3828   2456 S   0.0  0.2   0:00.32 dnsadmin +
  1662 root      38  18  130416   1372    700 S   0.0  0.1   0:00.04 cpanellog+
  1690 root      20   0  299272    496    336 S   0.0  0.0   0:00.39 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:01.22 /usr/sbin+
  1929 root      20   0   12792    316    216 S   0.0  0.0   0:01.46 /usr/loca+
  1930 root      20   0   12732    288    212 S   0.0  0.0   0:01.30 /usr/loca+
  1931 root      20   0   12804    328    220 S   0.0  0.0   0:01.34 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182800   9460   1116 S   0.0  0.4   0:12.27 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.28 [kworker]
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
 32544 nobody    20   0  277612  20336   4780 S   0.0  0.8   0:04.69 /usr/sbin+
 37541 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 41477 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 46894 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 49155 nobody    20   0  277716  20304   4856 S   0.0  0.8   0:02.25 /usr/sbin+
 49528 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 49545 nobody    20   0  277716  19400   4716 S   0.0  0.8   0:02.47 /usr/sbin+
 50287 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 50707 nobody    20   0  277908  20188   4808 S   0.0  0.8   0:02.31 /usr/sbin+
 52844 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 53541 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54737 nobody    20   0  277584  19260   4612 S   0.0  0.8   0:01.70 /usr/sbin+
 54752 nobody    20   0  277780  19480   4664 S   0.0  0.8   0:01.65 /usr/sbin+
 55379 nobody    20   0  277648  18904   4560 S   0.0  0.8   0:01.57 /usr/sbin+
 55395 nobody    20   0  277908  19456   4704 S   0.0  0.8   0:01.56 /usr/sbin+
 57442 nobody    20   0  277536  18440   4416 S   0.0  0.8   0:01.18 /usr/sbin+
 59858 nobody    20   0  277912  18572   4264 S   0.0  0.8   0:01.06 /usr/sbin+
 59928 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 61134 nobody    20   0  277528  18332   4304 S   0.0  0.8   0:00.85 /usr/sbin+
 61397 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62111 nobody    20   0  277676  18408   4024 S   0.0  0.8   0:00.73 /usr/sbin+
 64275 root      20   0  248028 121632   5032 S   0.0  5.0   0:02.80 /usr/loca+
 65134 nobody    20   0  277908  18456   4244 S   0.0  0.8   0:00.51 /usr/sbin+
 65167 nobody    20   0  277908  18420   4248 S   0.0  0.8   0:00.52 /usr/sbin+
 65349 root      20   0  258800 125648   3108 S   0.0  5.2   0:00.38 spamd chi+
 65350 root      20   0  248028 118048   1484 S   0.0  4.9   0:00.00 spamd chi+
 66238 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66363 nobody    20   0  277520  17796   4020 S   0.0  0.7   0:00.41 /usr/sbin+
 66875 nobody    20   0  277780  18252   4084 S   0.0  0.8   0:00.27 /usr/sbin+
 67601 nobody    20   0  277912  18068   3948 S   0.0  0.7   0:00.18 /usr/sbin+
 67624 root      20   0   41052   2804   2132 S   0.0  0.1   0:00.00 dovecot/a+
 68091 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 68753 root      20   0  111304   4276   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 68799 healtho+  20   0  462688  69468   4220 S   0.0  2.9   0:05.64 php-fpm: +
 68844 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 68910 nobody    20   0  277780  17360   3548 S   0.0  0.7   0:00.03 /usr/sbin+
 69033 wp-tool+  20   0  445028    316    184 S   0.0  0.0   0:00.00 sw-engine+
 69055 healtho+  20   0  462688  69484   4232 S   0.0  2.9   0:03.01 php-fpm: +
 69146 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.00 php-fpm: +
 69216 root      20   0  111304   4280   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 69221 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 69232 root      20   0  111304   4276   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 69245 root      20   0  261156   7184   1344 S   0.0  0.3   0:00.00 cpsrvd (S+
 69267 mailnull  20   0   90992   4244   1132 S   0.0  0.2   0:00.00 /usr/sbin+
 69291 mailnull  20   0   90992   4244   1132 S   0.0  0.2   0:00.00 /usr/sbin+
 69294 nobody    20   0  277504  16496   3156 S   0.0  0.7   0:00.00 /usr/sbin+
 69305 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69306 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69307 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69308 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69309 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69310 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69312 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69313 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69314 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69315 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69317 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69319 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 69320 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 69321 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69322 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 69323 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 69324 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 69326 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 69327 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69328 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 69330 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69331 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69332 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69334 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69339 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69341 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69347 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 69376 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 69380 cloudsms  20   0   20164    252      0 S   0.0  0.0   0:00.00 jailshell+
 69381 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 69384 cloudsms  20   0   20164    252      0 S   0.0  0.0   0:00.00 jailshell+
 69385 cloudsms  20   0   20164    252      0 R   0.0  0.0   0:00.00 /usr/loca+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:01.07 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    06:58   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    06:58   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    06:58   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    06:58   0:28  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   06:58   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   06:58   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   06:58   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   06:58   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   06:58   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    08:37   0:01  \_ [kworker/u200:0]
root      37541  0.0  0.0      0     0 ?        S    10:12   0:00  \_ [kworker/0:0]
root      41477  0.0  0.0      0     0 ?        S    10:18   0:00  \_ [kworker/1:5]
root      46894  0.0  0.0      0     0 ?        S    10:26   0:00  \_ [kworker/1:4]
root      49528  0.0  0.0      0     0 ?        S    10:30   0:00  \_ [kworker/0:3]
root      50287  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:2]
root      52844  0.0  0.0      0     0 ?        S    10:35   0:00  \_ [kworker/1:1]
root      53541  0.0  0.0      0     0 ?        S    10:36   0:00  \_ [kworker/0:2]
root      59928  0.0  0.0      0     0 ?        S    10:45   0:00  \_ [kworker/1:0]
root      61397  0.0  0.0      0     0 ?        S    10:47   0:00  \_ [kworker/0:4]
root      66238  0.0  0.0      0     0 ?        S    10:53   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44396  3364 ?        Ss   06:58   0:19 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  39500  5632 ?        Ss   06:58   0:07 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   06:58   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   456 ?        S<sl 06:58   0:01 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   06:58   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1152 ?        Ss   06:58   0:03 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   100 ?        Ss   06:58   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224280  6196 ?        Ss   06:58   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   180 ?        Ss   06:58   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   932 ?        Ssl  06:58   0:02 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1360 ?        Ss   06:58   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   06:58   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   06:58   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  06:58   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1228 ?        Ssl  06:58   0:10 /usr/sbin/nscd
root        554  0.0  0.0  24208    12 ?        Ss   06:58   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   544 ?        Ss   06:58   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    07:01   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   07:01   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    07:01   0:00  |       \_ sleep 4h 19m
root      69305  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69319  0.0  0.0 113284  1212 ?        Ss   10:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      69320  0.0  0.0 108052   360 ?        S    10:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      69328  0.0  0.0 113288  1520 ?        S    10:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      69386  0.0  0.0 153840  2092 ?        R    10:57   0:00  |               \_ ps auxf
root      69306  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69334  0.0  0.0  20164   804 ?        Ss   10:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      69307  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69322  0.0  0.0  20164   988 ?        Ss   10:57   0:00  |   \_ jailshell (cloudsms) [69384] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  69384  0.0  0.0  20164   252 ?        S    10:57   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  69385  0.0  0.0 113284  1212 ?        S    10:57   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  69387  0.0  0.0 113284   184 ?        R    10:57   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      69308  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69332  0.0  0.0  20164   808 ?        Ss   10:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      69309  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69324  0.0  0.0  20164   984 ?        Ss   10:57   0:00  |   \_ jailshell (cloudsms) [69380] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  69380  0.0  0.0  20164   252 ?        S    10:57   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  69381  0.0  0.0 113284  1212 ?        S    10:57   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  69382  0.0  0.6 404052 15608 ?        S    10:57   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      69310  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69330  0.0  0.0  20164   804 ?        Ss   10:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      69312  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69321  0.0  0.0  20164   808 ?        Ss   10:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      69313  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69327  0.0  0.0  20164   804 ?        Ss   10:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      69314  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69331  0.0  0.0  20164   808 ?        Ss   10:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      69315  0.0  0.0 183044  2148 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69323  0.0  0.0  20164   972 ?        Ss   10:57   0:00  |   \_ jailshell (pactpay) [69341] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69341  0.0  0.0  20164   260 ?        S    10:57   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69347  0.0  0.7 480124 17672 ?        S    10:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      69317  0.0  0.0 183044  2144 ?        S    10:57   0:00  \_ /usr/sbin/CROND -n
root      69326  0.0  0.0  20164   968 ?        Ss   10:57   0:00      \_ jailshell (nigeria) [69339] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69339  0.0  0.0  20164   260 ?        S    10:57   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69350  0.0  0.6 404052 16136 ?        S    10:57   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  06:58   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  06:58   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3496 ?        Ss   06:58   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  69267  0.0  0.1  90992  4244 ?        S    10:56   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  69291  0.0  0.1  90992  4244 ?        S    10:56   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   744 ?        Ssl  06:58   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.2 257360  5228 ?        Ssl  06:58   0:03 /usr/sbin/rsyslogd -n
root        926  0.2 16.2 1902000 394496 ?      Ssl  06:58   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.5 1185864 36816 ?       Ssl  06:58   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  06:58   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   412 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   06:58   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  69033  0.0  0.0 445028   316 ?        S    10:56   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   336 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932    68 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   304 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10132  3460 ?        Ss   06:58   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.3 114016  9660 ?        Ssl  06:58   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    68 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   272 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   06:58   0:01 /usr/sbin/sshd -D
root      68753  0.0  0.1 111304  4276 ?        Ss   10:56   0:00  \_ sshd: [accepted]
root      68844  0.0  0.1 111304  4272 ?        Ss   10:56   0:00  \_ sshd: [accepted]
root      69216  0.0  0.1 111304  4280 ?        Ss   10:56   0:00  \_ sshd: [accepted]
sshd      69221  0.0  0.1 115644  2632 ?        S    10:56   0:00  |   \_ sshd: [net]
root      69232  0.0  0.1 111304  4276 ?        Ss   10:56   0:00  \_ sshd: [accepted]
root        960  0.0  0.0  51508   652 ?        Ss   06:58   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136  1732 ?        S    06:58   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392  2240 ?        S    06:58   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   272 ?        S    06:58   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   548 ?        S    06:58   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300  2300 ?        S    06:58   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  47424  2332 ?        S    06:58   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24572  1984 ?        S    06:58   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   636 ?        S    06:58   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1504 ?        S    06:58   0:00  \_ dovecot/auth
root      67624  0.0  0.1  41052  2804 ?        S    10:54   0:00  \_ dovecot/auth -w
root      68091  0.0  0.1  60820  4508 ?        S    10:55   0:00  \_ dovecot/lmtp
root        962  0.0  0.2 261156  6020 ?        Ss   06:58   0:02 cpsrvd (SSL) - waiting for connections                   
root      69245  0.0  0.2 261156  7184 ?        S    10:56   0:00  \_ cpsrvd (SSL) - waiting for connections                   
systuser    965  0.0  0.0  14068    44 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1484 ?        Ss   06:58   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  68799 12.0  2.8 462688 69468 ?        S    10:56   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  69055 12.5  2.8 462688 69484 ?        S    10:56   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   69146  0.0  0.1 400460  4336 ?        S    10:56   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   260 ?        Ss   06:58   0:00 pure-ftpd (SERVER)
root        974  0.1  0.1 1277312 4164 ?        Ssl  06:58   0:28 /usr/bin/checkstatus
root        975  0.1  0.2 1276356 6256 ?        Ssl  06:58   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 35432 ?       SLsl 06:58   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1158  0.0  0.1 157704  2824 ?        S    06:58   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  3272 ?        Ss   06:58   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 23204 ?        Ss   06:58   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  5728 ?        Ss   06:58   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.8 208764 20940 ?        Ss   06:58   0:01 tailwatchd
root       1263  0.0  0.1 167452  3828 ?        Ss   06:58   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1372 ?        SN   06:58   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   496 ?        Ss   06:58   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2 10.6 1464484 258000 ?      Sl   06:58   3:05 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   06:58   0:01 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12792   316 ?        S    06:58   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   288 ?        S    06:58   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12804   328 ?        S    06:58   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    06:58   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32544  0.1  0.8 277612 20336 ?        S    10:05   0:04  \_ /usr/sbin/httpd -k start
nobody    49155  0.1  0.8 277716 20304 ?        S    10:30   0:02  \_ /usr/sbin/httpd -k start
nobody    49545  0.1  0.8 277716 19400 ?        S    10:30   0:02  \_ /usr/sbin/httpd -k start
nobody    50707  0.1  0.8 277908 20188 ?        S    10:32   0:02  \_ /usr/sbin/httpd -k start
nobody    54737  0.1  0.7 277584 19260 ?        S    10:38   0:01  \_ /usr/sbin/httpd -k start
nobody    54752  0.1  0.8 277780 19480 ?        S    10:38   0:01  \_ /usr/sbin/httpd -k start
nobody    55379  0.1  0.7 277648 18904 ?        S    10:39   0:01  \_ /usr/sbin/httpd -k start
nobody    55395  0.1  0.8 277908 19456 ?        S    10:39   0:01  \_ /usr/sbin/httpd -k start
nobody    57442  0.1  0.7 277536 18440 ?        S    10:42   0:01  \_ /usr/sbin/httpd -k start
nobody    59858  0.1  0.7 277912 18572 ?        S    10:45   0:01  \_ /usr/sbin/httpd -k start
nobody    61134  0.1  0.7 277528 18332 ?        S    10:47   0:00  \_ /usr/sbin/httpd -k start
nobody    62111  0.1  0.7 277676 18408 ?        S    10:48   0:00  \_ /usr/sbin/httpd -k start
nobody    65134  0.1  0.7 277908 18456 ?        S    10:51   0:00  \_ /usr/sbin/httpd -k start
nobody    65167  0.1  0.7 277908 18420 ?        S    10:51   0:00  \_ /usr/sbin/httpd -k start
nobody    66363  0.1  0.7 277520 17796 ?        S    10:53   0:00  \_ /usr/sbin/httpd -k start
nobody    66875  0.1  0.7 277780 18252 ?        S    10:53   0:00  \_ /usr/sbin/httpd -k start
nobody    67601  0.1  0.7 277912 18068 ?        S    10:54   0:00  \_ /usr/sbin/httpd -k start
nobody    68910  0.0  0.7 277780 17360 ?        S    10:56   0:00  \_ /usr/sbin/httpd -k start
nobody    69294  0.0  0.6 277504 16496 ?        S    10:56   0:00  \_ /usr/sbin/httpd -k start
cloudw    69377  0.0  0.6 353712 15968 ?        S    10:57   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
root       2021  0.0  0.3 182800  9460 ?        Ss   06:58   0:12 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   07:01   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    36 ?        S    07:01   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   09:30   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   09:30   0:00  \_ sleep 15214
root      64275  0.7  5.0 248028 121632 ?       Ss   10:50   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      65349  0.1  5.1 258800 125648 ?       S    10:51   0:00  \_ spamd child
root      65350  0.0  4.8 248028 118048 ?       S    10:51   0:00  \_ spamd child
## mysql stats
Uptime: 36010  Threads: 5  Questions: 1061652  Slow queries: 0  Opens: 5491  Flush tables: 1  Open tables: 2000  Queries per second avg: 29.482
*************************** 1. row ***************************
     Id: 18947
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-22' LIMIT 1
*************************** 2. row ***************************
     Id: 18948
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `24` WHERE `phone`='2348179092255' LIMIT 1
*************************** 3. row ***************************
     Id: 18954
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 18955
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 18957
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 27.115.124.114 TIME_WAIT
      1 52.167.144.174 TIME_WAIT
      1 74.7.230.11 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.97 TIME_WAIT
      2 27.115.124.104 TIME_WAIT
      2 43.153.47.201 TIME_WAIT
     43 159.65.137.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 10:57:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 6 seconds
   Server load: 0.86 0.86 0.78
   Total accesses: 65052 - Total Traffic: 1.6 GB - Total Duration: 163167154
   CPU Usage: u17.63 s7.53 cu826.37 cs661.32 - 4.2% CPU load
   1.81 requests/sec - 47.2 kB/second - 26.1 kB/request - 2508.26 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KR___KWK_RKK_KW_K._....K........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol             VHost                                         Request
   0-0  49545 3/456/3310  K 10.66 0     276 1692851  96.1  10.80 81.41 192.178.4.103   http/1.1 team.cloudware.ng:443         GET /?l=1447352350 HTTP/1.1
   1-0  55379 0/355/3393  R 6.21  0     30  1644639  0.0   7.84  90.54 116.203.129.16  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue5.php HTTP/1.1
   2-0  55395 0/300/3300  _ 6.18  0     439 1678316  0.0   6.86  85.75 159.65.137.58   http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   3-0  59858 0/198/3168  _ 4.30  0     24  1785626  0.0   4.46  82.50 128.140.8.200   http/1.1 cloudsms.com.ng:443           GET /cron/process_queue3.php HTTP/1.1
   4-0  66363 0/72/3304   _ 1.93  0     0   45107230 0.0   1.80  81.37 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   5-0  50707 1/418/3076  K 9.76  4     268 1485787  33.8  10.35 72.29 192.178.4.100   http/1.1 team.cloudware.ng:443         GET /?l=2904173967 HTTP/1.1
   6-0  67601 0/39/3333   W 0.72  0     0   1548934  0.0   0.77  78.83 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   7-0  57442 5/224/3079  K 4.71  3     268 1474998  157.6 5.49  72.69 192.178.4.99    http/1.1 team.cloudware.ng:443         GET /?l=686963030 HTTP/1.1
   8-0  66875 0/54/3176   _ 1.25  0     296 1511543  0.0   1.16  80.83 192.178.4.98    http/1.1 team.cloudware.ng:443         GET /?l=4264221318 HTTP/1.1
   9-0  68910 0/6/2857    R 0.11  21    367 44882583 0.0   0.13  69.56 159.65.137.58   http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   10-0 61134 1/197/2313  K 4.68  2     264 1103734  34.4  2.85  53.99 192.178.4.104   http/1.1 team.cloudware.ng:443         GET /?l=2024239389 HTTP/1.1
   11-0 54737 1/331/2941  K 6.96  3     41  1541371  0.5   9.56  90.86 102.90.98.177   http/1.1 developers.cloudsms.com.ng:80 GET /api.php?&userid=42366540&password=P%40ssw0rd&type=5&destin
   12-0 62111 0/148/2256  _ 2.74  0     311 1079552  0.0   3.02  53.52 192.178.4.99    http/1.1 team.cloudware.ng:443         GET /?l=2756419285 HTTP/1.1
   13-0 65134 1/99/3022   K 2.09  1     305 1602480  34.2  2.83  77.08 192.178.4.96    http/1.1 team.cloudware.ng:443         GET /?l=4226119228 HTTP/1.1
   14-0 69294 1/1/2294    W 0.00  0     0   1454127  35.7  0.03  58.00 192.178.4.101   http/1.1 team.cloudware.ng:443         GET /?l=2237493008 HTTP/1.1
   15-0 65167 0/97/1981   _ 2.33  0     23  1021959  0.0   2.19  65.42 116.203.134.67  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue4.php HTTP/1.1
   16-0 54752 3/308/1913  K 6.97  2     274 960900   94.4  7.04  46.66 192.178.4.105   http/1.1 team.cloudware.ng:443         GET /?l=796427517 HTTP/1.1
   17-0 -     0/0/1387    . 0.00  23183 0   718864   0.0   0.00  34.98 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   18-0 49155 0/450/2514  _ 8.57  0     22  1085618  0.0   10.41 71.85 116.203.129.16  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue2.php HTTP/1.1
   19-0 -     0/0/1105    . 0.00  269   0   585406   0.0   0.00  27.45 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   20-0 -     0/0/851     . 0.00  22882 0   412146   0.0   0.00  19.54 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   21-0 -     0/0/1451    . 0.00  23306 0   793961   0.0   0.00  37.29 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   22-0 -     0/0/1812    . 0.00  23729 0   915125   0.0   0.00  44.11 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   23-0 32544 67/904/1753 K 20.71 1     27  44452999 452.5 20.29 40.87 217.182.195.225 http/1.1 cloudsms.com.ng:443           GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   24-0 -     0/0/438     . 0.00  23686 0   245547   0.0   0.00  11.59 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   25-0 -     0/0/181     . 0.00  23307 0   106820   0.0   0.00  4.71  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 -     0/0/302     . 0.00  23726 0   163792   0.0   0.00  10.38 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/184     . 0.00  23731 0   70902    0.0   0.00  3.16  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/179     . 0.00  23495 0   121763   0.0   0.00  4.13  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/765     . 0.00  23730 0   452473   0.0   0.00  35.26 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/519     . 0.00  23737 0   266267   0.0   0.00  11.90 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/609     . 0.00  27026 0   309233   0.0   0.00  15.78 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/11      . 0.00  27016 0   3774     0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00  27028 0   1828     0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/117     . 0.00  26602 0   46396    0.0   0.00  2.24  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/146     . 0.00  27040 0   57340    0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/240     . 0.00  27012 0   105059   0.0   0.00  5.69  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00  27039 0   4588     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/102     . 0.00  26604 0   37924    0.0   0.00  1.98  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/196     . 0.00  26555 3   51541    0.0   0.00  2.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/203     . 0.00  26312 0   91622    0.0   0.00  4.31  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00  27019 0   2066     0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/12      . 0.00  27015 0   5210     0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00  27038 0   13       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/158     . 0.00  26558 0   66237    0.0   0.00  3.12  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/522     . 0.00  26923 0   184884   0.0   0.00  9.85  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/2       . 0.00  33829 0   4        0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/3       . 0.00  33796 0   766      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00  33823 0   48       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00  33794 0   10       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00  33779 0   695      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00  33772 0   3150     0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00  33775 0   538      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/13      . 0.00  33773 0   8196     0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00  33786 0   519      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/1       . 0.00  33810 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/110     . 0.00  33381 0   48080    0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00  33664 0   13507    0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 -     0/0/12      . 0.00  33782 0   7269     0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   59-0 -     0/0/6       . 0.00  33766 0   1848     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00  33819 0   1        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/48      . 0.00  33657 0   10684    0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00  33791 0   7        0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   63-0 -     0/0/1       . 0.00  33817 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   64-0 -     0/0/5       . 0.00  33778 0   1750     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00  33815 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00  33816 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  33793 0   6        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00  33767 0   859      0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   69-0 -     0/0/74      . 0.00  33535 0   36843    0.0   0.00  1.92  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   70-0 -     0/0/149     . 0.00  33172 0   74918    0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00  33811 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00  33814 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   73-0 -     0/0/6       . 0.00  33770 0   3305     0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   74-0 -     0/0/6       . 0.00  33765 0   2230     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  33813 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   76-0 -     0/0/1       . 0.00  33812 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   77-0 -     0/0/40      . 0.00  33674 0   15854    0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   78-0 -     0/0/1       . 0.00  33818 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00  33809 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 936
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...25)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 47654
   total entries replaced since starting: 0
   total entries expired since starting: 46705
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 125 miss
   total removes since starting: 13 hit, 12 miss
Youez - 2016 - github.com/yon3zu
LinuXploit