403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.17.30.txt
 ## swap threshold exceeded
## server overview
2025-11-22.17.30 load[0] mem[60/65] mysql[3/9] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1320         196         100         847         767
Swap:          1999        1399         600
 17:30:01 up  6:27,  0 users,  load average: 0.17, 0.18, 0.22
## system overview
top - 17:30:01 up  6:27,  0 users,  load average: 0.17, 0.18, 0.22
Tasks: 210 total,   5 running, 204 sleeping,   0 stopped,   1 zombie
%Cpu(s): 78.1 us, 15.6 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   195260 free,  1357636 used,   867404 buff/cache
KiB Swap:  2047996 total,   614908 free,  1433088 used.   780508 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1477108 270008   4336 S 153.3 11.2   5:07.91 /usr/sbin+
 85687 nigeria   20   0  404052  16144  10384 S  20.0  0.7   0:00.05 /opt/cpan+
 85706 root      20   0  160224   2364   1636 S   6.7  0.1   0:00.01 top -n 2 +
     1 root      20   0   44508   3444   1576 S   0.0  0.1   0:31.97 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.29 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.96 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.50 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.95 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.70 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.93 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.40 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.85 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   8132   7828 S   0.0  0.3   0:14.66 /usr/lib/+
   384 root      20   0   45352    440    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    564    436 S   0.0  0.0   0:02.46 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    480    368 S   0.0  0.0   0:00.53 /usr/sbin+
   501 root      20   0   24704   1252    888 S   0.0  0.1   0:05.25 /usr/lib/+
   502 dbus      20   0   58720   1520    792 S   0.0  0.1   0:11.95 /usr/bin/+
   504 rpc       20   0   69256    112      4 S   0.0  0.0   0:00.03 /sbin/rpc+
   514 root      20   0  224148   5576    932 S   0.0  0.2   0:00.29 queueproc+
   515 polkitd   20   0  610540   3116    600 S   0.0  0.1   0:03.06 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   52852    468    360 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0  928956   1476    756 S   0.0  0.1   0:16.94 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208    104     84 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:00.63 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4116   1088 S   0.0  0.2   0:00.44 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.32 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     84     84 S   0.0  0.0   0:00.50 /usr/bin/+
   912 root      20   0 1277312  11080    140 S   0.0  0.5   0:24.63 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    920    332 S   0.0  0.0   0:02.04 /usr/bin/+
   915 root      20   0   51508    592    428 S   0.0  0.0   0:00.36 /usr/sbin+
   916 telegraf  20   0 5654304  38408   5844 S   0.0  1.6   0:12.51 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14408   2704 S   0.0  0.6   0:05.51 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:03.77 /usr/sbin+
   928 root      20   0 1276100   9428    104 S   0.0  0.4   0:25.36 /usr/bin/+
   930 root      20   0  445028   3312   3200 S   0.0  0.1   0:00.86 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:00.50 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   934 root      20   0  439788  11432  11224 S   0.0  0.5   0:00.67 php-fpm: +
   938 root      20   0  388892    780    568 S   0.0  0.0   0:00.59 php-fpm: +
   939 root      20   0 1763124 253980    600 S   0.0 10.5   0:13.69 /usr/loca+
   940 root      20   0  290128   9240   7180 S   0.0  0.4   0:06.98 /usr/sbin+
   949 named     20   0 1055800  37556   2052 S   0.0  1.6   0:10.63 /usr/sbin+
   958 root      20   0  400740   3020    720 S   0.0  0.1   0:02.82 php-fpm: +
   962 root      20   0  261032   7384   2392 S   0.0  0.3   0:03.33 cpsrvd (S+
   969 cpanelc+  20   0   10540   3664   2372 R   0.0  0.2   0:18.72 /usr/loca+
   979 root      20   0  396248    624    452 S   0.0  0.0   0:00.61 php-fpm: +
   985 root      20   0  389508    844    632 S   0.0  0.0   0:00.65 php-fpm: +
  1083 dovenull  20   0   46996   2860   2136 S   0.0  0.1   0:00.72 dovecot/p+
  1084 dovenull  20   0   47816   3700   2236 S   0.0  0.2   0:00.22 dovecot/i+
  1085 dovecot   20   0   10320    344    228 S   0.0  0.0   0:00.18 dovecot/a+
  1086 root      20   0   10452    544    368 S   0.0  0.0   0:00.44 dovecot/l+
  1087 dovenull  20   0   47172   3512   2596 S   0.0  0.1   0:00.84 dovecot/p+
  1088 dovenull  20   0   47980   3860   2272 S   0.0  0.2   0:00.25 dovecot/i+
  1093 root      20   0   24528   2572    592 S   0.0  0.1   0:00.16 dovecot/c+
  1101 dovecot   20   0   13568    628    412 S   0.0  0.0   0:00.05 dovecot/s+
  1142 root      20   0  247932 116988   1164 S   0.0  4.8   0:05.61 /usr/loca+
  1161 dovecot   20   0   41320   1780   1104 S   0.0  0.1   0:01.19 dovecot/a+
  1175 systuser  20   0  157708   3052   1004 S   0.0  0.1   0:00.11 SonarPush+
  1177 wp-tool+  20   0  387528   5056   1788 S   0.0  0.2   0:00.25 /usr/bin/+
  1178 wp-tool+  20   0  412368  28736   2000 S   0.0  1.2   0:07.36 /usr/bin/+
  1260 root      20   0  183900   6688   3460 S   0.0  0.3   0:01.75 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.36 dnsadmin +
  1264 root      20   0  209512  12312   2444 S   0.0  0.5   0:02.87 tailwatchd
  1800 root      20   0  299272    872    496 S   0.0  0.0   0:00.61 php-fpm: +
  1834 root      38  18  130416   1512    776 S   0.0  0.1   0:00.06 cpanellog+
  2048 root      20   0  267052   9072    744 S   0.0  0.4   0:01.71 /usr/sbin+
  2050 root      20   0   12772    428    320 S   0.0  0.0   0:02.46 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:02.18 /usr/loca+
  2052 root      20   0   12792    428    308 S   0.0  0.0   0:02.31 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  2138 root      20   0  184624  14100   1228 S   0.0  0.6   0:23.80 lfd - sle+
  5633 root      20   0  262296 128940   2988 S   0.0  5.3   0:02.90 spamd chi+
  5634 root      20   0  247932 116244    456 S   0.0  4.8   0:00.01 spamd chi+
 30062 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 42540 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.37 [kworker]
 49140 nobody    20   0  277904  21708   5120 S   0.0  0.9   0:04.48 /usr/sbin+
 52518 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 56607 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 59695 nobody    20   0  277620  21616   5124 S   0.0  0.9   0:03.20 /usr/sbin+
 63646 nobody    20   0  277908  21724   5044 S   0.0  0.9   0:02.54 /usr/sbin+
 66115 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68276 nobody    20   0  277624  21440   5100 S   0.0  0.9   0:02.20 /usr/sbin+
 69315 nobody    20   0  277908  21716   5136 S   0.0  0.9   0:01.91 /usr/sbin+
 70013 worencom  20   0   38472   3796   2980 S   0.0  0.2   0:00.00 dovecot/i+
 74780 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 75503 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76729 nobody    20   0  277908  20996   4696 S   0.0  0.9   0:01.03 /usr/sbin+
 76929 nobody    20   0  277780  21156   4768 S   0.0  0.9   0:01.00 /usr/sbin+
 76935 nobody    20   0  277780  21040   4720 S   0.0  0.9   0:01.21 /usr/sbin+
 76936 nobody    20   0  277916  20832   4636 S   0.0  0.9   0:00.98 /usr/sbin+
 78177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78538 nobody    20   0  277908  20640   4488 S   0.0  0.9   0:00.85 /usr/sbin+
 79015 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79024 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 82017 nobody    20   0  277860  20480   4364 S   0.0  0.8   0:00.49 /usr/sbin+
 82405 nobody    20   0  277560  20076   4156 S   0.0  0.8   0:00.47 /usr/sbin+
 84370 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84973 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85048 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 85260 nobody    20   0  277520  19560   3688 S   0.0  0.8   0:00.06 /usr/sbin+
 85263 root      20   0   41052   2772   2116 S   0.0  0.1   0:00.00 dovecot/a+
 85274 nobody    20   0  277712  19728   3684 S   0.0  0.8   0:00.06 /usr/sbin+
 85277 nobody    20   0  277928  19796   3680 S   0.0  0.8   0:00.03 /usr/sbin+
 85290 nobody    20   0  277920  19908   3876 S   0.0  0.8   0:00.01 /usr/sbin+
 85291 nobody    20   0  277520  19172   3320 S   0.0  0.8   0:00.04 /usr/sbin+
 85292 nobody    20   0  277520  19568   3696 S   0.0  0.8   0:00.01 /usr/sbin+
 85293 nobody    20   0  277528  19132   3268 S   0.0  0.8   0:00.05 /usr/sbin+
 85295 nobody    20   0  277520  19132   3276 S   0.0  0.8   0:00.05 /usr/sbin+
 85296 nobody    20   0  277520  19128   3276 S   0.0  0.8   0:00.03 /usr/sbin+
 85297 nobody    20   0  277536  19324   3416 S   0.0  0.8   0:00.05 /usr/sbin+
 85324 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 85454 nigeria   20   0  405276  12148   3920 S   0.0  0.5   0:00.18 php-fpm: +
 85545 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 85554 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 85581 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85582 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85584 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85585 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85586 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85587 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85588 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85589 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85590 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85591 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85592 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85593 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85594 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85595 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85596 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85598 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85644 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85645 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85646 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85647 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85648 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85649 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 85650 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85651 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85652 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85653 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85654 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85655 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85656 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85657 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 85659 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 85661 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 85666 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 85668 root      20   0  188220  11108   5148 S   0.0  0.5   0:00.02 /usr/loca+
 85671 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85673 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 85676 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 85682 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 85691 cloudw    20   0  353712  15968  10484 R   0.0  0.7   0:00.01 /opt/cpan+
 85729 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 85731 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85732 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 85733 cloudsms  20   0  403060  13784   9400 R   0.0  0.6   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    11:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    11:02   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    11:02   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    11:02   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   11:02   0:01  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   11:02   0:01  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root      30062  0.0  0.0      0     0 ?        S    16:13   0:00  \_ [kworker/1:4]
root      42540  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:1]
root      52518  0.0  0.0      0     0 ?        S    16:44   0:00  \_ [kworker/0:1]
root      56607  0.0  0.0      0     0 ?        S    16:49   0:00  \_ [kworker/u200:2]
root      66115  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/1:1]
root      74780  0.0  0.0      0     0 ?        S    17:14   0:00  \_ [kworker/0:2]
root      75503  0.0  0.0      0     0 ?        S    17:15   0:00  \_ [kworker/0:3]
root      78177  0.0  0.0      0     0 ?        D    17:19   0:00  \_ [kworker/1:2]
root      79015  0.0  0.0      0     0 ?        S    17:20   0:00  \_ [kworker/1:5]
root      79024  0.0  0.0      0     0 ?        S    17:20   0:00  \_ [kworker/0:0]
root      84370  0.0  0.0      0     0 ?        S    17:28   0:00  \_ [kworker/0:4]
root      84973  0.0  0.0      0     0 ?        S    17:29   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44508  3444 ?        Ss   11:02   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.3  40240  8132 ?        Ss   11:02   0:14 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   440 ?        Ss   11:02   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   564 ?        S<sl 11:02   0:02 /sbin/auditd
root        499  0.0  0.0  21540   480 ?        Ss   11:02   0:00 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1252 ?        Rs   11:02   0:05 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1520 ?        Ss   11:02   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256   112 ?        Ss   11:02   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5576 ?        Ss   11:02   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.1 610540  3116 ?        Ssl  11:02   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   11:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   468 ?        Ss   11:02   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 928956  1476 ?        Ssl  11:02   0:16 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  11:02   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   11:02   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208   104 ?        Ss   11:02   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   11:02   0:00 /usr/sbin/crond -n
root      85581  0.0  0.0 183044  2140 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85657  0.0  0.0 113284  1208 ?        Ss   17:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      85666  0.0  0.0 108052   360 ?        S    17:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      85673  0.0  0.0 113288  1512 ?        S    17:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      85734  0.0  0.0 153840  2096 ?        R    17:30   0:00  |               \_ ps auxf
root      85582  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85656  0.0  0.0  20164   808 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      85584  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85652  0.0  0.0  20164   804 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      85585  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85653  0.0  0.0  20164   804 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      85586  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85654  0.0  0.0  20164   804 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      85587  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85651  0.0  0.0  20164   808 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      85588  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85648  0.0  0.0  20164   808 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      85589  0.0  0.0 183040  2208 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85590  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85644  0.0  0.0  20164   804 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      85591  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85645  0.0  0.0  20164   804 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      85592  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85646  0.0  0.0  20164   804 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      85593  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85647  0.0  0.0  20164   804 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      85594  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85655  0.0  0.0  20164   808 ?        Ss   17:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      85595  0.0  0.0 183044  2140 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85650  0.0  0.0 113284  1212 ?        Ss   17:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      85668  0.0  0.4 188220 11108 ?        S    17:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      85706  0.0  0.0 160224  2364 ?        S    17:30   0:00  |           \_ top -n 2 -b -c
root      85596  0.0  0.0 183044  2144 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85661  0.0  0.0  20164   968 ?        Ss   17:30   0:00  |   \_ jailshell (pactpay) [85671] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85671  0.0  0.0  20164   260 ?        S    17:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85682  0.0  0.7 480124 17676 ?        S    17:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      85598  0.0  0.0 183044  2148 ?        S    17:30   0:00  \_ /usr/sbin/CROND -n
root      85659  0.0  0.0  20164   964 ?        Ss   17:30   0:00      \_ jailshell (nigeria) [85676] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85676  0.0  0.0  20164   256 ?        S    17:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85687  0.0  0.6 404052 16144 ?        S    17:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296   136 tty1     Ss+  11:02   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  11:02   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4116 ?        Ss   11:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    84 ?        Ssl  11:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.1  0.4 1277312 11080 ?       Ssl  11:02   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   920 ?        Ssl  11:02   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   592 ?        Ss   11:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  46996  2860 ?        S    11:03   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47816  3700 ?        S    11:03   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   344 ?        S    11:03   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   544 ?        S    11:03   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47172  3512 ?        R    11:03   0:00  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  47980  3860 ?        S    11:03   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2572 ?        S    11:03   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   628 ?        S    11:03   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1780 ?        S    11:03   0:01  \_ dovecot/auth
worencom  70013  0.0  0.1  38472  3796 ?        S    17:07   0:00  \_ dovecot/imap
root      85263  0.0  0.1  41052  2772 ?        S    17:29   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 38408 ?       SLsl 11:02   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 14408 ?        Ssl  11:02   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   11:02   0:03 /usr/sbin/sshd -D
root      85048  0.0  0.1 111304  4268 ?        Ss   17:29   0:00  \_ sshd: [accepted]
root      85324  0.0  0.1 111304  4268 ?        Ss   17:29   0:00  \_ sshd: [accepted]
root        928  0.1  0.3 1276100 9428 ?        Ssl  11:02   0:25 /usr/bin/cspdaemon
root        930  0.0  0.1 445028  3312 ?        Ss   11:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  85545  0.0  0.0 445028   324 ?        S    17:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   11:02   0:00 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.4 439788 11432 ?        Ss   11:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   780 ?        Ss   11:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0 10.4 1763124 253980 ?      Ssl  11:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.3 290128  9240 ?        Ssl  11:02   0:06 /usr/sbin/rsyslogd -n
named       949  0.0  1.5 1055800 37556 ?       Ssl  11:02   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3020 ?        Ss   11:03   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   85454  1.2  0.5 405276 12148 ?        S    17:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 261032  7384 ?        Ss   11:03   0:03 cpsrvd (SSL) - waiting for connections                   
root      85554  0.0  0.0      0     0 ?        Z    17:29   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10540  3664 ?        Ss   11:03   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   624 ?        Ss   11:03   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   844 ?        Ss   11:03   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  4.8 247932 116988 ?       Ss   11:03   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  5.3 262296 128940 ?       S    11:06   0:02  \_ spamd child
root       5634  0.0  4.8 247932 116244 ?       S    11:06   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3052 ?        S    11:03   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.2 387528  5056 ?        Ss   11:03   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412368 28736 ?        Ss   11:03   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6688 ?        Ss   11:03   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.0 167452  1404 ?        Ss   11:03   0:00 dnsadmin - dormant mode
root       1264  0.0  0.5 209512 12312 ?        Ss   11:03   0:02 tailwatchd
root       1800  0.0  0.0 299272   872 ?        Ss   11:03   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1512 ?        SN   11:03   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 11.1 1477108 270008 ?      Sl   11:03   5:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9072 ?        Ss   11:03   0:01 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12772   428 ?        S    11:03   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    11:03   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12792   428 ?        S    11:03   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    11:03   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    49140  0.1  0.8 277904 21708 ?        S    16:39   0:04  \_ /usr/sbin/httpd -k start
nobody    59695  0.1  0.8 277620 21616 ?        S    16:53   0:03  \_ /usr/sbin/httpd -k start
nobody    63646  0.1  0.8 277908 21724 ?        S    16:59   0:02  \_ /usr/sbin/httpd -k start
nobody    68276  0.1  0.8 277624 21440 ?        S    17:04   0:02  \_ /usr/sbin/httpd -k start
nobody    69315  0.1  0.8 277908 21716 ?        S    17:06   0:01  \_ /usr/sbin/httpd -k start
nobody    76729  0.1  0.8 277908 20996 ?        S    17:16   0:01  \_ /usr/sbin/httpd -k start
nobody    76929  0.1  0.8 277780 21156 ?        S    17:17   0:01  \_ /usr/sbin/httpd -k start
nobody    76935  0.1  0.8 277780 21040 ?        S    17:17   0:01  \_ /usr/sbin/httpd -k start
nobody    76936  0.1  0.8 277916 20832 ?        S    17:17   0:00  \_ /usr/sbin/httpd -k start
nobody    78538  0.1  0.8 277908 20640 ?        S    17:19   0:00  \_ /usr/sbin/httpd -k start
nobody    82017  0.1  0.8 277860 20480 ?        S    17:24   0:00  \_ /usr/sbin/httpd -k start
nobody    82405  0.1  0.8 277560 20076 ?        S    17:25   0:00  \_ /usr/sbin/httpd -k start
nobody    85260  0.1  0.8 277520 19560 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85274  0.1  0.8 277712 19728 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85277  0.0  0.8 277928 19796 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85290  0.0  0.8 277920 19908 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85291  0.1  0.7 277520 19172 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
cloudw    85691  0.0  0.6 353712 15968 ?        S    17:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    85292  0.0  0.8 277520 19568 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85293  0.1  0.7 277528 19132 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85295  0.1  0.7 277520 19132 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85296  0.0  0.7 277520 19128 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85297  0.1  0.7 277536 19324 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
root       2138  0.1  0.5 184624 14100 ?        Ss   11:03   0:23 lfd - sleeping
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   12:00   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    12:00   0:00  \_ [kworker]
## mysql stats
Uptime: 23215  Threads: 3  Questions: 1927609  Slow queries: 0  Opens: 5180  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.032
*************************** 1. row ***************************
     Id: 30248
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30249
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 30258
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 142.44.228.174 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 27.115.124.3 TIME_WAIT
      1 27.115.124.49 TIME_WAIT
      1 27.115.124.4 TIME_WAIT
      1 27.115.124.5 TIME_WAIT
      1 43.173.173.121 TIME_WAIT
      1 43.173.177.82 TIME_WAIT
      1 43.173.178.207 TIME_WAIT
      1 43.173.179.134 TIME_WAIT
      1 43.173.179.243 TIME_WAIT
      1 43.173.181.120 TIME_WAIT
      1 51.161.65.222 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 27.115.124.34 TIME_WAIT
      2 27.115.124.40 TIME_WAIT
      2 43.173.179.138 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 17:30:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 26 minutes 51 seconds
   Server load: 0.17 0.18 0.22
   Total accesses: 109486 - Total Traffic: 2.7 GB - Total Duration: 53672219
   CPU Usage: u15.22 s7.24 cu1359.09 cs1074.05 - 10.6% CPU load
   4.72 requests/sec - 121.0 kB/second - 25.6 kB/request - 490.22 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

_KK._.RKR_..K._.R__K.__KW_.K_K..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client     Protocol             VHost                              Request
   0-0  59695 0/534/5768 _ 13.30 2    1   2755420 0.0   13.99 139.61 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80         GET / HTTP/1.1
   1-0  82017 2/85/5527  K 2.06  4    15  2699807 5.5   2.26  136.21 27.115.124.5  http/1.1 oyaca.staging.cloudware.ng:80  GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   2-0  68276 1/365/5568 K 9.02  0    307 3102844 34.9  9.84  136.19 192.178.4.103 http/1.1 team.cloudware.ng:443          GET /?l=1094497162 HTTP/1.1
   3-0  -     0/0/5381   . 0.00  22   0   2635713 0.0   0.00  131.39 ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   4-0  69315 0/320/5360 _ 7.88  2    15  2656245 0.0   8.33  139.21 27.115.124.5  http/1.1 oyaca.staging.cloudware.ng:80  GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   5-0  -     0/0/5565   . 0.00  26   0   2800564 0.0   0.00  158.37 ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   6-0  76729 0/173/5242 R 4.29  70   1   2565116 0.0   4.56  139.98 27.115.124.33 http/1.1 oyaca.staging.cloudware.ng:443 GET / HTTP/1.1
   7-0  78538 9/143/5232 K 3.56  0    311 2658697 283.4 3.90  130.73 192.178.4.103 http/1.1 team.cloudware.ng:443          GET /?l=160232445 HTTP/1.1
   8-0  63646 0/427/5166 R 10.54 32   361 2438365 0.0   11.29 127.89 192.178.4.100 http/1.1 team.cloudware.ng:443          GET /?l=1788990710 HTTP/1.1
   9-0  82405 0/73/4906  _ 2.02  2    342 2388505 0.0   2.13  123.62 192.178.4.96  http/1.1 team.cloudware.ng:443          GET /?l=299856407 HTTP/1.1
   10-0 -     0/0/4480   . 0.00  14   0   2213557 0.0   0.00  108.67 ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   11-0 -     0/0/5064   . 0.00  21   0   2394356 0.0   0.00  124.51 ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   12-0 85260 4/9/5484   K 0.22  1    307 2631625 126.4 0.26  135.67 192.178.4.99  http/1.1 team.cloudware.ng:443          GET /?l=2949500274 HTTP/1.1
   13-0 -     0/0/4357   . 0.00  20   0   2130627 0.0   0.00  105.19 ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   14-0 85274 0/8/4435   _ 0.17  2    400 2131534 0.0   0.27  111.41 192.178.4.98  http/1.1 team.cloudware.ng:443          GET /?l=366297915 HTTP/1.1
   15-0 -     0/0/3507   . 0.00  23   0   1720948 0.0   0.00  91.64  ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   16-0 76929 0/222/3701 R 3.88  51   396 1755124 0.0   4.12  90.59  192.178.4.104 http/1.1 team.cloudware.ng:443          GET /c_thumb HTTP/1.1
   17-0 76935 0/201/3547 _ 5.16  1    396 1734034 0.0   7.91  89.44  192.178.4.104 http/1.1 team.cloudware.ng:443          GET /?l=2979385545 HTTP/1.1
   18-0 76936 0/166/2680 _ 4.02  0    0   1331816 0.0   4.32  67.84  ::1           http/1.1 chs1.nescrow.com.ng:80         GET //whm-server-status HTTP/1.0
   19-0 49140 1/765/3327 K 18.43 2    261 1596066 35.0  21.80 82.88  192.178.4.105 http/1.1 team.cloudware.ng:443          GET /?l=3518382127 HTTP/1.1
   20-0 -     0/0/1280   . 0.00  25   0   592760  0.0   0.00  32.29  ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   21-0 85277 0/7/2589   _ 0.09  0    15  1330744 0.0   0.12  64.49  27.115.124.3  http/1.1 oyaca.staging.cloudware.ng:80  GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   22-0 85290 0/6/1742   _ 0.04  0    0   868335  0.0   0.07  50.93  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80         GET /whm-server-status HTTP/1.0
   23-0 85291 2/7/650    K 0.18  0    431 371659  68.1  0.23  16.45  192.178.4.102 http/1.1 team.cloudware.ng:443          GET /?l=2388733832 HTTP/1.1
   24-0 85292 0/4/703    W 0.02  0    0   332133  0.0   0.09  16.89  ::1           http/1.1 chs1.nescrow.com.ng:80         GET //whm-server-status HTTP/1.0
   25-0 85293 0/9/1094   _ 0.22  2    1   455167  0.0   0.25  25.41  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80         GET / HTTP/1.1
   26-0 -     0/0/1186   . 0.00  18   0   593758  0.0   0.00  29.40  ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   27-0 85295 7/9/558    K 0.20  3    277 287565  217.4 0.25  22.07  192.178.4.97  http/1.1 team.cloudware.ng:443          GET /?l=2457482148 HTTP/1.1
   28-0 85296 0/5/949    _ 0.12  0    354 465174  0.0   0.16  22.01  192.178.4.100 http/1.1 team.cloudware.ng:443          GET /?l=226209663 HTTP/1.1
   29-0 85297 5/9/270    K 0.18  1    265 128478  160.8 0.23  6.06   192.178.4.98  http/1.1 team.cloudware.ng:443          GET /?l=67955167 HTTP/1.1
   30-0 -     0/0/853    . 0.00  24   0   461868  0.0   0.00  20.56  ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   31-0 -     0/0/369    . 0.00  8976 0   154277  0.0   0.00  6.89   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   32-0 -     0/0/470    . 0.00  7734 0   210299  0.0   0.00  9.42   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   33-0 -     0/0/4      . 0.00  9085 0   15      0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   34-0 -     0/0/540    . 0.00  7787 0   165040  0.0   0.00  7.79   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   35-0 -     0/0/464    . 0.00  9069 0   245442  0.0   0.00  10.79  ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   36-0 -     0/0/5      . 0.00  9088 0   702     0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00  9095 0   2625    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   38-0 -     0/0/610    . 0.00  7660 0   258099  0.0   0.00  11.85  ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   39-0 -     0/0/24     . 0.00  9047 0   9567    0.0   0.00  0.44   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   40-0 -     0/0/168    . 0.00  9079 0   87577   0.0   0.00  3.50   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   41-0 -     0/0/28     . 0.00  9078 0   13961   0.0   0.00  0.67   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   42-0 -     0/0/5      . 0.00  9096 0   1132    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  9094 0   10      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   44-0 -     0/0/224    . 0.00  9086 0   116229  0.0   0.00  5.10   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   45-0 -     0/0/105    . 0.00  9081 0   24649   0.0   0.00  1.03   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   46-0 -     0/0/4      . 0.00  9075 0   798     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   47-0 -     0/0/18     . 0.00  9051 0   8852    0.0   0.00  0.36   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   48-0 -     0/0/188    . 0.00  8417 0   96649   0.0   0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
   49-0 -     0/0/82     . 0.00  8817 0   47670   0.0   0.00  2.57   ::1           http/1.1 chs1.nescrow.com.ng:80         OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1013
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...64)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 81118
   total entries replaced since starting: 0
   total entries expired since starting: 80090
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 165 miss
   total removes since starting: 15 hit, 162 miss
Youez - 2016 - github.com/yon3zu
LinuXploit