403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.02.12.txt
 ## swap threshold exceeded
## server overview
2025-11-23.02.12 load[0] mem[57/75] mysql[2/12] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1295         202          43         865         860
Swap:          1999        1654         345
 02:12:01 up 15:09,  0 users,  load average: 0.46, 0.62, 0.56
## system overview
top - 02:12:02 up 15:09,  0 users,  load average: 0.46, 0.62, 0.56
Tasks: 205 total,   3 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 66.7 us, 24.2 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   193428 free,  1340436 used,   886436 buff/cache
KiB Swap:  2047996 total,   353968 free,  1694028 used.   868168 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 225992   3548 S 100.0  9.3  12:18.68 /usr/sbin+
 29640 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.05 /opt/cpan+
 29619 pactpay   20   0  480124  17668  11880 S   6.2  0.7   0:00.02 /opt/cpan+
 29665 cloudw    20   0  353712  15968  10484 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44508   3284   1464 S   0.0  0.1   1:13.99 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.03 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.15 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:53.41 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.12 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.36 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:32.43 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.23 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.27 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.87 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.83 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   4668   4424 S   0.0  0.2   0:31.29 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    460    340 S   0.0  0.0   0:05.09 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.24 /usr/sbin+
   501 root      20   0   24704   1168    808 S   0.0  0.0   0:12.38 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:28.36 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3016    788 S   0.0  0.1   0:00.58 queueproc+
   515 polkitd   20   0  610540    840    464 S   0.0  0.0   0:07.19 /usr/lib/+
   521 root      20   0  152780     80     36 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    184     96 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1828    636 S   0.0  0.1   0:38.28 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.51 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3784    856 S   0.0  0.2   0:01.06 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.17 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.75 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.66 /usr/bin/+
   915 root      20   0   51508    460    292 S   0.0  0.0   0:00.81 /usr/sbin+
   916 telegraf  20   0 5654304  36188   5632 S   0.0  1.5   0:29.04 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12384   2460 S   0.0  0.5   0:12.69 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.67 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.69 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.13 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.19 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.43 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.35 php-fpm: +
   939 root      20   0 1828368 335552    588 S   0.0 13.9   0:30.06 /usr/loca+
   940 root      20   0  331088   5056   4464 S   0.0  0.2   0:15.57 /usr/sbin+
   949 named     20   0 1054796  34196   2028 S   0.0  1.4   0:24.55 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:06.87 php-fpm: +
   962 root      20   0  261692   6332   1668 S   0.0  0.3   0:08.56 cpsrvd (S+
   969 cpanelc+  20   0   10564   3456   2292 S   0.0  0.1   0:43.37 /usr/loca+
   979 root      20   0  396248    296    216 S   0.0  0.0   0:01.37 php-fpm: +
   985 root      20   0  389508    512    416 S   0.0  0.0   0:01.43 php-fpm: +
  1083 dovenull  20   0   47116   2008   1388 S   0.0  0.1   0:01.71 dovecot/p+
  1084 dovenull  20   0   48232   2500   1500 S   0.0  0.1   0:00.61 dovecot/i+
  1085 dovecot   20   0   10320    428    312 S   0.0  0.0   0:00.40 dovecot/a+
  1086 root      20   0   10452    536    348 S   0.0  0.0   0:01.04 dovecot/l+
  1087 dovenull  20   0   47264   2056   1428 S   0.0  0.1   0:01.96 dovecot/p+
  1088 dovenull  20   0   48324   2548   1592 S   0.0  0.1   0:00.58 dovecot/i+
  1093 root      20   0   24528   1844    436 S   0.0  0.1   0:00.35 dovecot/c+
  1101 dovecot   20   0   13568    532    316 S   0.0  0.0   0:00.14 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:09.30 /usr/loca+
  1161 dovecot   20   0   41320   1520   1012 S   0.0  0.1   0:02.62 dovecot/a+
  1175 systuser  20   0  157708   2856    808 S   0.0  0.1   0:00.24 SonarPush+
  1177 wp-tool+  20   0  387556   3584   1652 S   0.0  0.1   0:00.47 /usr/bin/+
  1178 wp-tool+  20   0  412396   9728   1664 S   0.0  0.4   0:17.19 /usr/bin/+
  1260 root      20   0  183900   6696   3460 S   0.0  0.3   0:05.68 cpdavd - +
  1263 root      20   0  167452   4160   2792 S   0.0  0.2   0:00.87 dnsadmin +
  1264 root      20   0  209648   9656   1912 S   0.0  0.4   0:06.38 tailwatchd
  1800 root      20   0  299272    492    332 S   0.0  0.0   0:01.44 php-fpm: +
  1834 root      38  18  130416   1372    692 S   0.0  0.1   0:00.14 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.80 /usr/sbin+
  2050 root      20   0   12812    332    212 S   0.0  0.0   0:05.69 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.04 /usr/loca+
  2052 root      20   0   12840    344    216 S   0.0  0.0   0:05.35 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996  88924   2416 S   0.0  3.7   0:06.50 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.75 [kworker/+
  9092 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13081 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 18278 nobody    20   0  277560  19948   4672 S   0.0  0.8   0:01.09 /usr/sbin+
 18283 nobody    20   0  277536  19996   4748 S   0.0  0.8   0:01.39 /usr/sbin+
 18284 nobody    20   0  277912  20264   4584 S   0.0  0.8   0:01.37 /usr/sbin+
 19301 nobody    20   0  277704  20308   4840 S   0.0  0.8   0:01.37 /usr/sbin+
 20734 nobody    20   0  277700  20280   4644 S   0.0  0.8   0:01.18 /usr/sbin+
 21598 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21651 nobody    20   0  277616  19916   4664 S   0.0  0.8   0:01.21 /usr/sbin+
 22000 nobody    20   0  277668  20288   4784 S   0.0  0.8   0:01.11 /usr/sbin+
 22224 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22801 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23684 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 23995 nobody    20   0  277784  19784   4328 S   0.0  0.8   0:00.83 /usr/sbin+
 24033 nobody    20   0  277660  19816   4428 S   0.0  0.8   0:00.64 /usr/sbin+
 24034 nobody    20   0  277552  19596   4352 S   0.0  0.8   0:00.75 /usr/sbin+
 25558 nobody    20   0  277704  20056   4492 S   0.0  0.8   0:00.54 /usr/sbin+
 26141 nobody    20   0  277584  19464   4172 S   0.0  0.8   0:00.48 /usr/sbin+
 26954 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26981 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27019 nobody    20   0  277672  19700   4292 S   0.0  0.8   0:00.36 /usr/sbin+
 27773 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 27806 nobody    20   0  277912  19448   4060 S   0.0  0.8   0:00.26 /usr/sbin+
 27998 nobody    20   0  277552  19040   3908 S   0.0  0.8   0:00.15 /usr/sbin+
 28219 nobody    20   0  277520  19028   3928 S   0.0  0.8   0:00.17 /usr/sbin+
 28243 nobody    20   0  277520  18944   3932 S   0.0  0.8   0:00.20 /usr/sbin+
 29074 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29087 nobody    20   0  277520  18640   3660 S   0.0  0.8   0:00.10 /usr/sbin+
 29135 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 29152 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 29417 oyotech+  20   0  389236   6332   2936 S   0.0  0.3   0:00.09 php-fpm: +
 29518 mailnull  20   0   91016   4368   1228 S   0.0  0.2   0:00.00 /usr/sbin+
 29524 nigeria   20   0  400460   5032   2368 S   0.0  0.2   0:00.00 php-fpm: +
 29529 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 29538 healtho+  20   0  463748  71164   4096 S   0.0  2.9   0:00.78 php-fpm: +
 29557 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 29564 nobody    20   0  277236  17480   3000 S   0.0  0.7   0:00.00 /usr/sbin+
 29565 oyocovi+  20   0  400460   3248   1180 S   0.0  0.1   0:00.00 php-fpm: +
 29568 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 29569 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 29571 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29573 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29575 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29576 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29577 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29578 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29579 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29580 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29581 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29583 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 29590 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 29592 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 29593 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 29601 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 29607 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 29608 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29609 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 29610 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 29611 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29612 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29613 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29614 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 29615 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29620 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 29636 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 29659 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 29663 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.00 /opt/cpan+
 29668 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 29669 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 29671 cloudsms  20   0  250848   6280   4368 R   0.0  0.3   0:00.00 /opt/cpan+
 29672 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 44973 root      20   0  181772   8612   1100 S   0.0  0.4   0:06.89 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     80     40 S   0.0  0.0   0:00.98 [kworker]
 81298 worencom  20   0   38488   2572   1604 S   0.0  0.1   0:00.02 dovecot/i+
 83419 root      20   0  183044   1664   1108 S   0.0  0.1   0:00.00 /usr/sbin+
 83465 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 83479 root      20   0  113284    736    556 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 2h +
 98122 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    Nov22   0:53  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:32  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      83465  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:1]
root      98122  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/1:1]
root       9092  0.0  0.0      0     0 ?        S    01:42   0:00  \_ [kworker/1:4]
root      13081  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:4]
root      21598  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/u200:2]
root      22224  0.0  0.0      0     0 ?        S    02:01   0:00  \_ [kworker/1:2]
root      22801  0.0  0.0      0     0 ?        S    02:02   0:00  \_ [kworker/1:3]
root      23684  0.0  0.0      0     0 ?        S    02:03   0:00  \_ [kworker/0:3]
root      26954  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:0]
root      26981  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:5]
root      27773  0.0  0.0      0     0 ?        S    02:09   0:00  \_ [kworker/0:0]
root      29074  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44508  3284 ?        Ss   Nov22   1:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  4668 ?        Ss   Nov22   0:31 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   460 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1168 ?        Ss   Nov22   0:12 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:28 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3016 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   840 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    80 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   184 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1828 ?        Ssl  Nov22   0:38 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1664 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   736 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      29569  0.0  0.0 183076  2416 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29590  0.0  0.0 113284  1212 ?        Ss   02:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      29592  0.0  0.0 108052   356 ?        S    02:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      29593  0.0  0.0 113288  1520 ?        S    02:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      29673  0.0  0.0 153840  2100 ?        R    02:12   0:00  |               \_ ps auxf
root      29571  0.0  0.0 183076  2420 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29620  0.0  0.0  20164   988 ?        Ss   02:12   0:00  |   \_ jailshell (cloudsms) [29672] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  29672  0.0  0.0  20164   260 ?        S    02:12   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  29674  0.0  0.0 113284  1212 ?        S    02:12   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  29675  0.0  0.1 131852  3324 ?        R    02:12   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php
root      29573  0.0  0.0 183076  2420 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29608  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      29575  0.0  0.0 183076  2416 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29609  0.0  0.0  20164   812 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      29576  0.0  0.0 183076  2416 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29610  0.0  0.0  20164   992 ?        Ss   02:12   0:00  |   \_ jailshell (cloudsms) [29668] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  29668  0.0  0.0      0     0 ?        D    02:12   0:00  |       \_ [jailshell]
root      29577  0.0  0.0 183076  2416 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29611  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      29578  0.0  0.0 183076  2412 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29613  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      29579  0.0  0.0 183076  2412 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29615  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      29580  0.0  0.0 183076  2412 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29612  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      29581  0.0  0.0 183076  2412 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29601  0.0  0.0  20164   968 ?        Ss   02:12   0:00  |   \_ jailshell (pactpay) [29607] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   29607  0.0  0.0  20164   260 ?        S    02:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   29619  2.0  0.7 480124 17668 ?        S    02:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      29583  0.0  0.0 183076  2408 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      29614  0.0  0.0  20164   972 ?        Ss   02:12   0:00      \_ jailshell (nigeria) [29636] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   29636  0.0  0.0  20164   260 ?        S    02:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   29640  5.0  0.6 404052 16140 ?        S    02:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3784 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  29518  0.0  0.1  91016  4368 ?        S    02:11   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   460 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  2008 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2500 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   428 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   536 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2056 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2548 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1844 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   532 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1520 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2572 ?        S    00:56   0:00  \_ dovecot/imap
telegraf    916  0.0  1.4 5654304 36188 ?       SLsl Nov22   0:29 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12384 ?        Ssl  Nov22   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      29135  0.0  0.1 111304  4276 ?        Ss   02:11   0:00  \_ sshd: [accepted]
root      29152  0.0  0.1 111304  4272 ?        Ss   02:11   0:00  \_ sshd: [accepted]
root      29568  0.0  0.1 111304  4272 ?        Ss   02:12   0:00  \_ sshd: [accepted]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  29529  0.0  0.0 445028   324 ?        S    02:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  29417  0.5  0.2 389236  6332 ?        S    02:11   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 13.8 1828368 335552 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  5056 ?        Ssl  Nov22   0:15 /usr/sbin/rsyslogd -n
named       949  0.0  1.4 1054796 34196 ?       Ssl  Nov22   0:24 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   29524  0.0  0.2 400460  5032 ?        S    02:11   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  29538 15.6  2.9 463748 71164 ?        S    02:11   0:00  \_ php-fpm: pool health_oyostate_gov_ng
oyocovi+  29565  0.0  0.1 400460  3248 ?        S    02:12   0:00  \_ php-fpm: pool covid19_oyostate_gov_ng
root        962  0.0  0.2 261692  6332 ?        Ss   Nov22   0:08 cpsrvd (SSL) - waiting for connections                   
root      29557  0.0  0.0      0     0 ?        Z    02:11   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3456 ?        Ss   Nov22   0:43 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   296 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   512 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  3.6 271996 88924 ?        S    Nov22   0:06  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2856 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3584 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.4 412396  9728 ?        Ss   Nov22   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6696 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.1 167452  4160 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.3 209648  9656 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   492 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1372 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.3 1478544 225992 ?      Sl   Nov22  12:18 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12812   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12840   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    18278  0.1  0.8 277560 19948 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
nobody    18283  0.1  0.8 277536 19996 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
nobody    18284  0.1  0.8 277912 20264 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
cloudw    29663  0.0  0.6 353712 15968 ?        S    02:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    19301  0.1  0.8 277704 20308 ?        S    01:57   0:01  \_ /usr/sbin/httpd -k start
nobody    20734  0.1  0.8 277700 20280 ?        S    01:59   0:01  \_ /usr/sbin/httpd -k start
nobody    21651  0.1  0.8 277616 19916 ?        S    02:00   0:01  \_ /usr/sbin/httpd -k start
nobody    22000  0.1  0.8 277668 20288 ?        S    02:00   0:01  \_ /usr/sbin/httpd -k start
nobody    23995  0.1  0.8 277784 19784 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    24033  0.1  0.8 277660 19816 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    24034  0.1  0.8 277552 19596 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    25558  0.1  0.8 277704 20056 ?        S    02:05   0:00  \_ /usr/sbin/httpd -k start
nobody    26141  0.1  0.8 277584 19464 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    27019  0.1  0.8 277672 19700 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    27806  0.1  0.8 277912 19448 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    27998  0.0  0.7 277552 19040 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    28219  0.1  0.7 277520 19028 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    28243  0.1  0.7 277520 18944 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
cloudw    29665  1.0  0.6 353712 15968 ?        S    02:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    29087  0.1  0.7 277520 18640 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    29564  0.0  0.7 277236 17480 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    80 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  0.3 181772  8612 ?        Ss   00:00   0:06 lfd - sleeping
## mysql stats
Uptime: 54536  Threads: 3  Questions: 4764992  Slow queries: 0  Opens: 10865  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.373
*************************** 1. row ***************************
     Id: 74176
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 74182
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 74188
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 142.44.233.168 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 180.93.137.9 TIME_WAIT
      1 185.16.39.16 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 35.153.67.250 TIME_WAIT
      1 54.39.210.220 TIME_WAIT
      1 87.250.224.102 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      9 85.204.70.100 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 02:12:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 hours 8 minutes 51 seconds
   Server load: 0.46 0.62 0.56
   Total accesses: 253212 - Total Traffic: 6.0 GB - Total Duration: 135989969
   CPU Usage: u9.98 s7.02 cu3092.09 cs2417.1 - 10.1% CPU load
   4.64 requests/sec - 114.5 kB/second - 24.7 kB/request - 537.06 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_KWK_KK_.R..KKK_KKKKKK..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU   SS    Req    Dur    Conn  Child  Slot     Client     Protocol            VHost                                        Request
   0-0  29564 0/1/13559    _ 0.00 0     1     6981212 0.0    0.01  322.74 69.63.184.114 http/1.1 nigeriadecide.org:443       GET /robots.txt HTTP/1.1
   1-0  27019 1/76/13230   K 1.39 2     2     7228951 12.8   2.36  326.80 66.249.66.40  http/1.1 health.oyostate.gov.ng:443  GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1
   2-0  25558 0/160/13035  W 2.05 0     0     7092435 0.0    2.18  309.14 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   3-0  20734 12/252/12537 K 4.56 2     269   6579516 372.0  4.94  308.34 192.178.4.97  http/1.1 team.cloudware.ng:443       GET /?l=1089564560 HTTP/1.1
   4-0  22000 0/233/12805  _ 4.23 0     0     6575934 0.0    5.20  310.33 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   5-0  27806 3/53/13150   K 0.95 2     263   6825941 93.4   2.35  342.09 192.178.4.98  http/1.1 team.cloudware.ng:443       GET /?l=322901651 HTTP/1.1
   6-0  29087 1/20/12106   K 0.42 0     2     6092367 5.1    0.45  300.48 58.97.220.33  http/1.1 covid19.oyostate.gov.ng:443 GET /alexus.php HTTP/1.1
   7-0  19301 0/395/12552  _ 5.28 0     0     6443662 0.0    4.82  301.11 69.63.184.2   http/1.1 nigeriadecide.org:443       GET /robots.txt HTTP/1.1
   8-0  -     0/0/12033    . 0.00 123   0     6120413 0.0    0.00  287.77 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   9-0  27998 0/34/11072   R 0.54 41    6     5870019 0.0    0.60  273.09 85.204.70.100 http/1.1
   10-0 -     0/0/11170    . 0.00 84    0     5838621 0.0    0.00  262.56 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   11-0 -     0/0/11362    . 0.00 91    0     5889367 0.0    0.00  279.26 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   12-0 18278 96/317/11113 K 3.09 0     403   5840021 9402.9 12.98 284.14 154.90.49.92  http/1.1 health.oyostate.gov.ng:443  GET /wp-content/themes/twentytwentythree/assets/fonts/source-se
   13-0 21651 3/245/10721  K 4.86 3     346   5524996 95.9   5.67  254.12 192.178.4.103 http/1.1 team.cloudware.ng:443       GET /?l=794612388 HTTP/1.1
   14-0 23995 1/262/9689   K 2.84 1     266   4966646 33.6   3.54  228.57 192.178.4.105 http/1.1 team.cloudware.ng:443       GET /?l=427530476 HTTP/1.1
   15-0 18283 0/313/7952   _ 5.03 0     7     4080525 0.0    5.42  198.96 58.97.220.33  http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-includes/pomo/about.php HTTP/1.1
   16-0 28219 1/39/8165    K 0.57 1     260   4181318 34.0   0.66  189.10 192.178.4.99  http/1.1 team.cloudware.ng:443       GET /?l=3960757832 HTTP/1.1
   17-0 26141 1/103/7260   K 1.74 2     263   3807933 34.7   2.03  178.77 192.178.4.104 http/1.1 team.cloudware.ng:443       GET /?l=4172887727 HTTP/1.1
   18-0 28243 4/44/6345    K 0.74 0     303   3463397 125.9  0.84  151.49 192.178.4.102 http/1.1 team.cloudware.ng:443       GET /?l=2782551020 HTTP/1.1
   19-0 18284 6/398/7101   K 4.44 0     278   3583475 181.4  14.58 173.71 192.178.4.101 http/1.1 team.cloudware.ng:443       GET /?l=3353391136 HTTP/1.1
   20-0 24033 1/155/5524   K 2.18 3     63    3042334 124.5  2.67  127.75 66.249.66.9   http/1.1 theforge.com.ng:80          GET /theforgeapp/uploads/fraising/onye@gmail.com/Holutek/Second
   21-0 24034 2/157/4218   K 3.06 3     343   2516753 64.1   2.94  98.53  192.178.4.96  http/1.1 team.cloudware.ng:443       GET /?l=3617783245 HTTP/1.1
   22-0 -     0/0/3214     . 0.00 295   0     1902704 0.0    0.00  84.89  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/2854     . 0.00 1366  0     1555805 0.0    0.00  58.97  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/1636     . 0.00 975   0     1282876 0.0    0.00  39.63  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/2570     . 0.00 1470  0     1163271 0.0    0.00  57.91  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1903     . 0.00 984   0     1185213 0.0    0.00  47.42  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1301     . 0.00 1433  0     843370  0.0    0.00  38.82  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/1528     . 0.00 1426  0     741140  0.0    0.00  34.17  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/1651     . 0.00 967   0     952853  0.0    0.00  34.23  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1294     . 0.00 2735  0     796559  0.0    0.00  30.37  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/535      . 0.00 2728  0     418251  0.0    0.00  9.62   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/521      . 0.00 2741  0     501649  0.0    0.00  10.47  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/226      . 0.00 2695  0     242996  0.0    0.00  4.32   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/723      . 0.00 2147  0     452012  0.0    0.00  11.57  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/645      . 0.00 2745  0     507090  0.0    0.00  14.62  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/89       . 0.00 2709  0     137985  0.0    0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/222      . 0.00 2614  0     187355  0.0    0.00  4.82   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/661      . 0.00 2734  0     330279  0.0    0.00  12.67  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/582      . 0.00 2575  0     506531  0.0    0.00  13.50  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/227      . 0.00 2737  0     280411  0.0    0.00  4.37   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/416      . 0.00 2731  0     308037  0.0    0.00  9.50   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/144      . 0.00 2708  0     280413  0.0    0.00  1.55   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/290      . 0.00 1895  0     344154  0.0    0.00  5.96   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/292      . 0.00 2744  0     301816  0.0    0.00  6.10   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/198      . 0.00 2707  0     141072  0.0    0.00  1.57   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/60       . 0.00 11459 0     180509  0.0    0.00  0.80   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/67       . 0.00 11481 0     226531  0.0    0.00  1.33   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/203      . 0.00 11472 0     142085  0.0    0.00  4.09   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/284      . 0.00 11123 0     181603  0.0    0.00  4.73   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/82       . 0.00 11485 0     44788   0.0    0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/8        . 0.00 11445 0     43835   0.0    0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/9        . 0.00 11454 0     45747   0.0    0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/29       . 0.00 11452 0     44492   0.0    0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/536      . 0.00 9569  0     268842  0.0    0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4        . 0.00 11489 0     23627   0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/9        . 0.00 11448 0     47344   0.0    0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7        . 0.00 11450 0     44159   0.0    0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/43       . 0.00 11491 11655 23366   0.0    0.00  0.07   45.94.58.4    http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141      . 0.00 10852 0     113874  0.0    0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/132      . 0.00 11482 0     76946   0.0    0.00  2.87   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/6        . 0.00 11480 0     3701    0.0    0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/204      . 0.00 11039 0     97395   0.0    0.00  2.67   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/66       . 0.00 11464 0     27806   0.0    0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/11       . 0.00 11457 0     25454   0.0    0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/9        . 0.00 11477 0     28822   0.0    0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/27       . 0.00 13003 0     28      0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/42       . 0.00 13008 0     46      0.0    0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3        . 0.00 13046 0     1240    0.0    0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/2        . 0.00 13045 0     703     0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/5        . 0.00 13038 0     1790    0.0    0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/47       . 0.00 12986 0     737     0.0    0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1        . 0.00 13057 0     0       0.0    0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/458      . 0.00 11592 0     263682  0.0    0.00  8.36   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9        . 0.00 13034 0     4803    0.0    0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1        . 0.00 13056 0     0       0.0    0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/23       . 0.00 12998 0     2942    0.0    0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/200      . 0.00 12354 0     87870   0.0    0.00  4.44   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/63       . 0.00 12858 0     25484   0.0    0.00  1.24   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1154
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...39)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 180715
   total entries replaced since starting: 0
   total entries expired since starting: 179491
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 480 miss
   total removes since starting: 70 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit