403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.22.15.txt
 ## swap threshold exceeded
## server overview
2025-11-22.22.15 load[0] mem[54/71] mysql[3/9] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1205         126         124        1030         858
Swap:          1999        1542         457
 22:15:01 up 11:12,  0 users,  load average: 0.57, 0.57, 0.54
## system overview
top - 22:15:01 up 11:12,  0 users,  load average: 0.57, 0.57, 0.54
Tasks: 209 total,   6 running, 201 sleeping,   0 stopped,   2 zombie
%Cpu(s): 82.4 us, 17.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   128272 free,  1236404 used,  1055624 buff/cache
KiB Swap:  2047996 total,   468048 free,  1579948 used.   877876 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1477108 292780   3664 S 129.4 12.1   8:32.76 /usr/sbin+
 77090 nigeria   20   0  404052  16140  10380 R  11.8  0.7   0:00.05 /opt/cpan+
 77139 cloudw    20   0  353712  15972  10484 S   5.9  0.7   0:00.01 /opt/cpan+
 77159 cloudsms  20   0       0      0      0 Z   5.9  0.0   0:00.01 [php-cgi]+
     1 root      20   0   44508   3440   1576 S   0.0  0.1   0:55.17 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.09 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.65 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:39.07 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.63 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.09 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.25 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:00.97 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.38 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.01 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   4636   4332 S   0.0  0.2   0:24.08 /usr/lib/+
   384 root      20   0   45352    368    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    552    424 S   0.0  0.0   0:03.95 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    456    368 S   0.0  0.0   0:00.91 /usr/sbin+
   501 root      20   0   24704   1260    888 S   0.0  0.1   0:09.13 /usr/lib/+
   502 dbus      20   0   58720   1520    792 S   0.0  0.1   0:20.85 /usr/bin/+
   504 rpc       20   0   69256     64      4 S   0.0  0.0   0:00.04 /sbin/rpc+
   514 root      20   0  224148   5696   1164 S   0.0  0.2   0:00.44 queueproc+
   515 polkitd   20   0  610540    996    600 S   0.0  0.0   0:05.29 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.02 /usr/sbin+
   523 root      20   0   52852    388    280 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0  994492   1472    756 S   0.0  0.1   0:28.73 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     40     20 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:01.12 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4080   1044 S   0.0  0.2   0:00.80 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.43 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     84     84 S   0.0  0.0   0:00.86 /usr/bin/+
   912 root      20   0 1277312   8792    140 S   0.0  0.4   0:24.69 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    920    332 S   0.0  0.0   0:03.45 /usr/bin/+
   915 root      20   0   51508    592    428 S   0.0  0.0   0:00.60 /usr/sbin+
   916 telegraf  20   0 5654304  38400   5672 S   0.0  1.6   0:21.37 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14508   2632 S   0.0  0.6   0:09.43 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:06.01 /usr/sbin+
   928 root      20   0 1276100   9096    104 S   0.0  0.4   0:25.53 /usr/bin/+
   930 root      20   0  445028   1408   1296 S   0.0  0.1   0:01.53 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:00.87 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   934 root      20   0  439788   1204    996 S   0.0  0.0   0:01.06 php-fpm: +
   938 root      20   0  388892    780    568 S   0.0  0.0   0:00.94 php-fpm: +
   939 root      20   0 1763124 129832    596 S   0.0  5.4   0:13.84 /usr/loca+
   940 root      20   0  331088   5736   4456 S   0.0  0.2   0:11.82 /usr/sbin+
   949 named     20   0 1055800  43196   2180 S   0.0  1.8   0:17.64 /usr/sbin+
   958 root      20   0  400740   3020    720 S   0.0  0.1   0:04.58 php-fpm: +
   962 root      20   0  261692   9824   2720 S   0.0  0.4   0:05.89 cpsrvd (S+
   969 cpanelc+  20   0   10564   3824   2420 R   0.0  0.2   0:32.07 /usr/loca+
   979 root      20   0  396248    732    556 S   0.0  0.0   0:00.99 php-fpm: +
   985 root      20   0  389508    840    628 S   0.0  0.0   0:01.05 php-fpm: +
  1083 dovenull  20   0   47116   3576   2636 S   0.0  0.1   0:01.27 dovecot/p+
  1084 dovenull  20   0   48236   4616   2760 S   0.0  0.2   0:00.42 dovecot/i+
  1085 dovecot   20   0   10320    344    228 S   0.0  0.0   0:00.30 dovecot/a+
  1086 root      20   0   10452    544    368 S   0.0  0.0   0:00.77 dovecot/l+
  1087 dovenull  20   0   47264   3684   2640 S   0.0  0.2   0:01.44 dovecot/p+
  1088 dovenull  20   0   48324   4672   2740 S   0.0  0.2   0:00.39 dovecot/i+
  1093 root      20   0   24528   2564    592 S   0.0  0.1   0:00.26 dovecot/c+
  1101 dovecot   20   0   13568    628    412 S   0.0  0.0   0:00.10 dovecot/s+
  1142 root      20   0  247932 116988   1164 S   0.0  4.8   0:07.60 /usr/loca+
  1161 dovecot   20   0   41320   1780   1104 S   0.0  0.1   0:01.97 dovecot/a+
  1175 systuser  20   0  157708   3052   1004 S   0.0  0.1   0:00.17 SonarPush+
  1177 wp-tool+  20   0  387528   5060   1792 S   0.0  0.2   0:00.36 /usr/bin/+
  1178 wp-tool+  20   0  412368  28740   2004 S   0.0  1.2   0:12.71 /usr/bin/+
  1260 root      20   0  183900   6112   2880 S   0.0  0.3   0:04.44 cpdavd - +
  1263 root      20   0  167452   1400    800 S   0.0  0.1   0:00.57 dnsadmin +
  1264 root      20   0  209648  12592   2468 S   0.0  0.5   0:04.91 tailwatchd
  1417 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
  1800 root      20   0  299272    872    496 S   0.0  0.0   0:01.05 php-fpm: +
  1834 root      38  18  130416   1512    776 S   0.0  0.1   0:00.10 cpanellog+
  2048 root      20   0  267052   9072    744 S   0.0  0.4   0:02.64 /usr/sbin+
  2050 root      20   0   12816    428    320 S   0.0  0.0   0:04.13 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:03.64 /usr/loca+
  2052 root      20   0   12836    428    308 S   0.0  0.0   0:03.86 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  2138 root      20   0  186564  15732   1228 S   0.0  0.7   0:41.27 lfd - sle+
  5633 root      20   0  271996 136380   3300 S   0.0  5.6   0:04.92 spamd chi+
  5634 root      20   0  247932 116244    456 S   0.0  4.8   0:00.02 spamd chi+
 33509 nobody    20   0  277704  21608   5100 S   0.0  0.9   0:05.51 /usr/sbin+
 37862 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kworker/+
 40847 nobody    20   0  277908  21788   5072 S   0.0  0.9   0:04.65 /usr/sbin+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.70 [kworker]
 53100 nobody    20   0  277668  21480   5072 S   0.0  0.9   0:02.76 /usr/sbin+
 55218 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55271 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60838 nobody    20   0  277644  21168   4904 S   0.0  0.9   0:02.01 /usr/sbin+
 61377 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62898 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67236 nobody    20   0  277604  20632   4524 S   0.0  0.9   0:01.11 /usr/sbin+
 67792 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 70164 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70235 nobody    20   0  277652  20672   4540 S   0.0  0.9   0:00.78 /usr/sbin+
 70578 nobody    20   0  277916  20560   4324 S   0.0  0.8   0:00.83 /usr/sbin+
 70587 nobody    20   0  277912  20956   4488 S   0.0  0.9   0:00.68 /usr/sbin+
 70588 nobody    20   0  277616  20816   4640 S   0.0  0.9   0:00.73 /usr/sbin+
 70912 nobody    20   0  277668  20720   4464 S   0.0  0.9   0:00.71 /usr/sbin+
 71042 nobody    20   0  277652  20692   4544 S   0.0  0.9   0:00.64 /usr/sbin+
 72110 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72186 nobody    20   0  277596  20260   4244 S   0.0  0.8   0:00.64 /usr/sbin+
 72901 nobody    20   0  277520  20276   4352 S   0.0  0.8   0:00.49 /usr/sbin+
 73628 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74504 nobody    20   0  277908  20216   4088 S   0.0  0.8   0:00.37 /usr/sbin+
 76291 root      20   0   41052   2808   2140 S   0.0  0.1   0:00.00 dovecot/a+
 76501 nobody    20   0  277780  19852   3720 S   0.0  0.8   0:00.09 /usr/sbin+
 76514 nobody    20   0  277520  19544   3672 S   0.0  0.8   0:00.10 /usr/sbin+
 76583 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 76636 root      20   0  111304   4436   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 76637 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 76761 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 76772 nigeria   20   0  400460   5496   2388 S   0.0  0.2   0:00.01 php-fpm: +
 76807 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 76808 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 76981 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 76990 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 76991 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 76992 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 77007 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 77016 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 77017 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 77018 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77020 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77021 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77022 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77023 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77024 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77025 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77026 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77027 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77029 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 77030 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77032 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77036 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 77038 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 77039 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 77040 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 77041 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 77042 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 77044 root      20   0  188208  11092   5148 S   0.0  0.5   0:00.01 /usr/loca+
 77045 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77047 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77048 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 77050 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 77052 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77053 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77054 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77055 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77056 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77057 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77061 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 77062 root      20   0  114252   2412   1268 S   0.0  0.1   0:00.00 bash /usr+
 77065 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 77087 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 77095 root      20   0  160224   2348   1632 S   0.0  0.1   0:00.00 top -n 2 +
 77113 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77115 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77120 cloudw    20   0  353712  15968  10484 R   0.0  0.7   0:00.01 /opt/cpan+
 77144 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 77155 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 77156 cloudsms  20   0  113284   1212   1036 R   0.0  0.1   0:00.00 /usr/loca+
 77161 root      20   0  114252   1144      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    11:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    11:02   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    11:02   0:39  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    11:02   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    11:02   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   11:02   0:01  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    11:02   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root       1417  0.0  0.0      0     0 ?        S    20:24   0:00  \_ [kworker/u200:1]
root      37862  0.0  0.0      0     0 ?        R    21:17   0:00  \_ [kworker/0:4]
root      55218  0.0  0.0      0     0 ?        S    21:44   0:00  \_ [kworker/1:3]
root      55271  0.0  0.0      0     0 ?        S    21:44   0:00  \_ [kworker/u200:2]
root      61377  0.0  0.0      0     0 ?        S    21:53   0:00  \_ [kworker/1:0]
root      62898  0.0  0.0      0     0 ?        S    21:55   0:00  \_ [kworker/1:1]
root      67792  0.0  0.0      0     0 ?        S    22:02   0:00  \_ [kworker/0:3]
root      70164  0.0  0.0      0     0 ?        S    22:05   0:00  \_ [kworker/1:2]
root      72110  0.0  0.0      0     0 ?        S    22:08   0:00  \_ [kworker/0:1]
root      73628  0.0  0.0      0     0 ?        S    22:10   0:00  \_ [kworker/1:4]
root      77113  0.0  0.0      0     0 ?        S    22:15   0:00  \_ [kworker/0:0]
root      77115  0.0  0.0      0     0 ?        S    22:15   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44508  3440 ?        Ss   11:02   0:55 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  4636 ?        Ss   11:02   0:24 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   368 ?        Ss   11:02   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   552 ?        S<sl 11:02   0:03 /sbin/auditd
root        499  0.0  0.0  21540   456 ?        Ss   11:02   0:00 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1260 ?        Ss   11:02   0:09 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1520 ?        Rs   11:02   0:20 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    64 ?        Ss   11:02   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5696 ?        Ss   11:02   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   996 ?        Ssl  11:02   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   11:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   388 ?        Ss   11:02   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 994492  1472 ?        Ssl  11:02   0:28 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  11:02   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   11:02   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    40 ?        Ss   11:02   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   11:02   0:01 /usr/sbin/crond -n
root      77016  0.0  0.0 183044  2136 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77048  0.0  0.0 113284  1212 ?        Ss   22:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      77062  0.0  0.0 114256  2412 ?        S    22:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      77163  0.0  0.0 114256  1148 ?        R    22:15   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      77017  0.0  0.0 183044  2136 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77041  0.0  0.0 113284  1212 ?        Ss   22:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      77061  0.0  0.0 108052   352 ?        S    22:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      77065  0.0  0.0 113288  1520 ?        S    22:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      77162  0.0  0.0 153840  2088 ?        R    22:15   0:00  |               \_ ps auxf
root      77018  0.0  0.0 183040  2204 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77020  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77045  0.0  0.0  20164   808 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      77021  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77052  0.0  0.0  20164   804 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      77022  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77057  0.0  0.0  20164   808 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      77023  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77055  0.0  0.0  20164   804 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      77024  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77047  0.0  0.0  20164   808 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      77025  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77054  0.0  0.0  20164   808 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      77026  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77053  0.0  0.0  20164   804 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      77027  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77056  0.0  0.0  20164   808 ?        Ss   22:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      77029  0.0  0.0 183044  2136 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77040  0.0  0.0 113284  1208 ?        Ss   22:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      77044  0.0  0.4 188208 11092 ?        S    22:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      77095  0.0  0.0 160224  2348 ?        S    22:15   0:00  |           \_ top -n 2 -b -c
root      77030  0.0  0.0 183044  2144 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77036  0.0  0.0  20164   964 ?        Ss   22:15   0:00  |   \_ jailshell (pactpay) [77038] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   77038  0.0  0.0  20164   260 ?        S    22:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   77039  0.0  0.7 480124 17672 ?        S    22:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      77032  0.0  0.0 183044  2140 ?        S    22:15   0:00  \_ /usr/sbin/CROND -n
root      77042  0.0  0.0  20164   964 ?        Ss   22:15   0:00      \_ jailshell (nigeria) [77087] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   77087  0.0  0.0  20164   260 ?        S    22:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   77090  0.0  0.6 404052 16140 ?        S    22:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296   136 tty1     Ss+  11:02   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  11:02   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4080 ?        Ss   11:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    84 ?        Ssl  11:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.3 1277312 8792 ?        Ssl  11:02   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   920 ?        Ssl  11:02   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   592 ?        Ss   11:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  47116  3576 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48236  4616 ?        S    11:03   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   344 ?        S    11:03   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   544 ?        S    11:03   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47264  3684 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  4672 ?        S    11:03   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2564 ?        S    11:03   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   628 ?        S    11:03   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1780 ?        S    11:03   0:01  \_ dovecot/auth
root      76291  0.0  0.1  41052  2808 ?        S    22:13   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 38400 ?       SLsl 11:02   0:21 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 14508 ?        Ssl  11:02   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   11:02   0:06 /usr/sbin/sshd -D
root      76583  0.0  0.1 111304  4268 ?        Ss   22:14   0:00  \_ sshd: [accepted]
root      76636  0.0  0.1 111304  4436 ?        Ss   22:14   0:00  \_ sshd: [accepted]
sshd      76637  0.0  0.1 115644  2628 ?        S    22:14   0:00  |   \_ sshd: [net]
root      76761  0.0  0.1 111304  4264 ?        Ss   22:14   0:00  \_ sshd: [accepted]
root      76807  0.0  0.1 111304  4448 ?        Ss   22:14   0:00  \_ sshd: [accepted]
sshd      76808  0.0  0.1 115644  2632 ?        S    22:14   0:00  |   \_ sshd: [net]
root      76981  0.0  0.1 111304  4264 ?        Ss   22:14   0:00  \_ sshd: [accepted]
root      76991  0.0  0.1 111304  4264 ?        Ss   22:14   0:00  \_ sshd: [accepted]
sshd      76992  0.0  0.1 115644  2628 ?        S    22:14   0:00      \_ sshd: [net]
root        928  0.0  0.3 1276100 9096 ?        Ssl  11:02   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028  1408 ?        Ss   11:02   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  77007  0.0  0.0 445028   320 ?        S    22:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   11:02   0:00 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788  1204 ?        Ss   11:02   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   780 ?        Ss   11:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  5.3 1763124 129832 ?      Ssl  11:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  5736 ?        Ssl  11:02   0:11 /usr/sbin/rsyslogd -n
named       949  0.0  1.7 1055800 43196 ?       Ssl  11:02   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3020 ?        Ss   11:03   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   76772  0.0  0.2 400460  5496 ?        S    22:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.4 261692  9824 ?        Ss   11:03   0:05 cpsrvd (SSL) - waiting for connections                   
root      76990  0.0  0.0      0     0 ?        Z    22:14   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3824 ?        Rs   11:03   0:32 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   732 ?        Ss   11:03   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   840 ?        Ss   11:03   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  4.8 247932 116988 ?       Ss   11:03   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  5.6 271996 136380 ?       S    11:06   0:04  \_ spamd child
root       5634  0.0  4.8 247932 116244 ?       S    11:06   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3052 ?        S    11:03   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.2 387528  5060 ?        Ss   11:03   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412368 28740 ?        Ss   11:03   0:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6112 ?        Ss   11:03   0:04 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.0 167452  1400 ?        Ss   11:03   0:00 dnsadmin - dormant mode
root       1264  0.0  0.5 209648 12592 ?        Ss   11:03   0:04 tailwatchd
root       1800  0.0  0.0 299272   872 ?        Ss   11:03   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1512 ?        SN   11:03   0:00 cpanellogd - sleeping for logs
mysql      1916  1.2 12.0 1477108 292780 ?      Sl   11:03   8:32 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9072 ?        Ss   11:03   0:02 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12816   428 ?        S    11:03   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    11:03   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12836   428 ?        S    11:03   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    11:03   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    33509  0.1  0.8 277704 21608 ?        S    21:10   0:05  \_ /usr/sbin/httpd -k start
nobody    40847  0.1  0.9 277908 21788 ?        S    21:21   0:04  \_ /usr/sbin/httpd -k start
nobody    53100  0.1  0.8 277668 21480 ?        S    21:40   0:02  \_ /usr/sbin/httpd -k start
nobody    60838  0.1  0.8 277644 21168 ?        S    21:52   0:02  \_ /usr/sbin/httpd -k start
nobody    67236  0.1  0.8 277604 20632 ?        S    22:01   0:01  \_ /usr/sbin/httpd -k start
nobody    70235  0.1  0.8 277652 20672 ?        S    22:05   0:00  \_ /usr/sbin/httpd -k start
nobody    70578  0.1  0.8 277916 20560 ?        S    22:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    77139  0.0  0.6 353712 15972 ?        S    22:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70587  0.1  0.8 277912 20956 ?        S    22:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    77120  0.0  0.6 353712 15968 ?        S    22:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70588  0.1  0.8 277616 20816 ?        S    22:05   0:00  \_ /usr/sbin/httpd -k start
nobody    70912  0.1  0.8 277668 20720 ?        S    22:06   0:00  \_ /usr/sbin/httpd -k start
nobody    71042  0.1  0.8 277652 20692 ?        S    22:06   0:00  \_ /usr/sbin/httpd -k start
nobody    72186  0.1  0.8 277596 20260 ?        S    22:08   0:00  \_ /usr/sbin/httpd -k start
nobody    72901  0.1  0.8 277520 20276 ?        S    22:09   0:00  \_ /usr/sbin/httpd -k start
nobody    74504  0.1  0.8 277908 20216 ?        S    22:11   0:00  \_ /usr/sbin/httpd -k start
nobody    76501  0.1  0.8 277780 19852 ?        S    22:14   0:00  \_ /usr/sbin/httpd -k start
nobody    76514  0.1  0.8 277520 19544 ?        S    22:14   0:00  \_ /usr/sbin/httpd -k start
root       2138  0.1  0.6 186564 15732 ?        Ss   11:03   0:41 lfd - sleeping
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   12:00   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    12:00   0:00  \_ [kworker]
## mysql stats
Uptime: 40315  Threads: 3  Questions: 3149518  Slow queries: 0  Opens: 8384  Flush tables: 1  Open tables: 2000  Queries per second avg: 78.122
*************************** 1. row ***************************
     Id: 49501
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 49506
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 49511
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 101.33.81.73 TIME_WAIT
      1 104.210.140.131 TIME_WAIT
      1 104.210.140.143 TIME_WAIT
      1 114.119.128.143 TIME_WAIT
      1 167.114.139.58 TIME_WAIT
      1 172.192.40.201 TIME_WAIT
      1 185.191.171.17 TIME_WAIT
      1 185.191.171.9 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 192.200.100.74 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 74.7.175.187 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.98 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 22:15:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 11 minutes 51 seconds
   Server load: 0.57 0.57 0.54
   Total accesses: 183131 - Total Traffic: 4.4 GB - Total Duration: 88435835
   CPU Usage: u16.18 s8.56 cu2300.9 cs1808.37 - 10.3% CPU load
   4.54 requests/sec - 115.3 kB/second - 25.4 kB/request - 482.91 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_KW_KW.._KK_K_..KKK._...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  72186 0/105/9775 _ 2.74  0     0   4764117 0.0   3.36  240.08 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   1-0  70912 2/126/9578 K 3.45  4     363 4747735 64.2  3.51  236.25 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1864018261 HTTP/1.1
   2-0  70578 1/142/9460 W 3.46  0     0   4919008 37.9  4.52  228.35 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=2210797728 HTTP/1.1
   3-0  67236 0/218/9437 _ 4.84  2     2   4638151 0.0   5.53  238.77 44.217.177.142 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/blog/images/images/2019el
   4-0  76501 2/16/9372  K 0.39  2     392 4629646 64.9  0.42  237.39 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=3669562788 HTTP/1.1
   5-0  71042 0/121/9517 W 2.60  0     0   4697973 0.0   2.90  258.13 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   6-0  -     0/0/9127   . 0.00  5     0   4331026 0.0   0.00  230.57 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  -     0/0/9300   . 0.00  44    0   4508760 0.0   0.00  227.82 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  60838 0/350/9100 _ 9.08  1     354 4328776 0.0   8.79  221.57 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3462045638 HTTP/1.1
   9-0  53100 4/481/8360 K 11.97 0     308 4114790 123.8 12.19 211.98 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=1871509247 HTTP/1.1
   10-0 72901 7/76/8265  K 2.08  2     400 3933167 217.0 2.14  199.54 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=864917897 HTTP/1.1
   11-0 74504 0/64/8393  _ 1.79  1     392 3992897 0.0   1.60  207.12 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=41580562 HTTP/1.1
   12-0 76514 2/15/8693  K 0.40  3     350 4266199 67.5  0.45  221.69 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1354927090 HTTP/1.1
   13-0 70235 0/145/7334 _ 3.05  0     0   3574340 0.0   5.12  179.36 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   14-0 -     0/0/7067   . 0.00  547   0   3417881 0.0   0.00  174.97 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/5509   . 0.00  196   0   2573284 0.0   0.00  147.53 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 40847 1/852/6210 K 19.55 2     348 2880532 33.4  20.14 147.30 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=4280143263 HTTP/1.1
   17-0 70587 2/122/6068 K 3.28  0     314 2906774 65.1  3.24  151.33 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=3256573389 HTTP/1.1
   18-0 70588 1/170/5053 K 3.12  0     267 2397126 34.3  4.01  124.33 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=3895819685 HTTP/1.1
   19-0 -     0/0/5490   . 0.00  3088  0   2464545 0.0   0.00  127.95 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 33509 0/995/4083 _ 23.21 1     2   1929910 0.0   24.19 99.28  52.205.222.214 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/blog/images/blog/images/201
   21-0 -     0/0/3188   . 0.00  3827  0   1659708 0.0   0.00  79.86  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2206   . 0.00  3144  0   1104930 0.0   0.00  63.21  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/1392   . 0.00  3859  0   596747  0.0   0.00  28.89  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/818    . 0.00  13231 0   378992  0.0   0.00  19.55  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1966   . 0.00  13455 0   781369  0.0   0.00  44.81  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1194   . 0.00  13415 0   597677  0.0   0.00  29.57  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/786    . 0.00  13453 0   386891  0.0   0.00  27.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/1311   . 0.00  13456 0   605264  0.0   0.00  30.18  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/825    . 0.00  12172 0   350753  0.0   0.00  17.74  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/856    . 0.00  13446 0   461883  0.0   0.00  20.57  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/450    . 0.00  13168 0   205102  0.0   0.00  9.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/472    . 0.00  13452 0   210844  0.0   0.00  9.45   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/4      . 0.00  26185 0   15      0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/540    . 0.00  24887 0   165040  0.0   0.00  7.79   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/464    . 0.00  26169 0   245442  0.0   0.00  10.79  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/5      . 0.00  26188 0   702     0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00  26195 0   2625    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/610    . 0.00  24760 0   258099  0.0   0.00  11.85  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/24     . 0.00  26147 0   9567    0.0   0.00  0.44   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/168    . 0.00  26179 0   87577   0.0   0.00  3.50   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/28     . 0.00  26178 0   13961   0.0   0.00  0.67   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/5      . 0.00  26196 0   1132    0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  26194 0   10      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/224    . 0.00  26186 0   116229  0.0   0.00  5.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/105    . 0.00  26181 0   24649   0.0   0.00  1.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/4      . 0.00  26175 0   798     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/18     . 0.00  26151 0   8852    0.0   0.00  0.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/188    . 0.00  25517 0   96649   0.0   0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/82     . 0.00  25917 0   47670   0.0   0.00  2.57   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 923
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...51)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 133190
   total entries replaced since starting: 0
   total entries expired since starting: 132238
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 325 miss
   total removes since starting: 29 hit, 177 miss
Youez - 2016 - github.com/yon3zu
LinuXploit