403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.12.15.txt
 ## swap threshold exceeded
## server overview
2025-11-23.12.15 load[0] mem[62/60] mysql[4/7] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1406          94          58         862         730
Swap:          1999        1313         686
 12:15:02 up  2:14,  0 users,  load average: 0.26, 0.72, 0.79
## system overview
top - 12:15:02 up  2:14,  0 users,  load average: 0.26, 0.72, 0.79
Tasks: 210 total,   5 running, 204 sleeping,   0 stopped,   1 zombie
%Cpu(s): 69.7 us, 30.3 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    94192 free,  1438020 used,   888088 buff/cache
KiB Swap:  2047996 total,   702716 free,  1345280 used.   750212 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1838 mysql     20   0 1463560 228964   2900 S 100.0  9.5   2:05.41 /usr/sbin+
100402 root      20   0  158636  13144   2832 S  18.8  0.5   0:00.06 /usr/loca+
     1 root      20   0   44412   3556   1516 S   6.2  0.1   0:14.06 /usr/lib/+
100427 nigeria   20   0  404052  16140  10384 S   6.2  0.7   0:00.03 /opt/cpan+
100478 cloudw    20   0  353712  15972  10484 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.91 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.01 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.39 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.10 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.32 [kworker/+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.27 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   4448   4136 S   0.0  0.2   0:04.78 /usr/lib/+
   384 root      20   0   45352    244    104 S   0.0  0.0   0:00.37 /usr/lib/+
   409 root      16  -4   55532    488    356 S   0.0  0.0   0:00.74 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 polkitd   20   0  612240   2864    364 S   0.0  0.1   0:01.19 /usr/lib/+
   489 root      20   0   21540    380    268 S   0.0  0.0   0:00.18 /usr/sbin+
   493 nscd      20   0  994492   1284    576 S   0.0  0.1   0:05.57 /usr/sbin+
   494 root      20   0  152780    104     64 S   0.0  0.0   0:00.00 /usr/sbin+
   496 root      20   0   24704   1156    792 R   0.0  0.0   0:01.98 /usr/lib/+
   513 rpc       20   0   69256    156     52 S   0.0  0.0   0:00.01 /sbin/rpc+
   516 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   531 root      20   0   52852    316    220 S   0.0  0.0   0:00.01 /usr/sbin+
   535 dbus      20   0   57020   1332    620 S   0.0  0.1   0:04.43 /usr/bin/+
   552 root      20   0  224144   6360   1348 S   0.0  0.3   0:00.23 queueproc+
   553 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124480    424    292 S   0.0  0.0   0:00.23 /usr/sbin+
   566 root      20   0   24208     48     24 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     32     28 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   608 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   630 mailnull  20   0   89120   4488    856 S   0.0  0.2   0:00.25 /usr/sbin+
   658 root       0 -20       0      0      0 S   0.0  0.0   0:02.42 [loop0]
   673 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   932 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   934 root      20   0  445028   3200   3088 S   0.0  0.1   0:00.37 sw-engine+
   936 systuser  20   0  113676     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   937 systuser  20   0  114016  12652   2376 S   0.0  0.5   0:02.00 /usr/loca+
   939 root      20   0  111304    364    264 S   0.0  0.0   0:01.06 /usr/sbin+
   940 systuser  20   0   12660     64      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0 1763224 342984    836 S   0.0 14.2   0:13.92 /usr/loca+
   949 named     20   0  990264  32992   1884 S   0.0  1.4   0:04.11 /usr/sbin+
   951 root      20   0  400740   2972    612 S   0.0  0.1   0:01.36 php-fpm: +
   955 root      20   0  389508    592    376 S   0.0  0.0   0:00.27 php-fpm: +
   957 root      20   0   51508    644    456 S   0.0  0.0   0:00.15 /usr/sbin+
   958 root      20   0  153404    252    168 S   0.0  0.0   0:00.18 pure-ftpd+
   959 systuser  20   0  113272     76      0 S   0.0  0.0   0:00.00 /usr/loca+
   968 root      20   0  396248    660    480 S   0.0  0.0   0:00.28 php-fpm: +
   970 cpanelc+  20   0   11400   4756   2476 R   0.0  0.2   0:06.46 /usr/loca+
   972 root      20   0  240976   4748   3532 S   0.0  0.2   0:02.31 /usr/sbin+
   973 root      20   0 1350088   9588      0 S   0.0  0.4   0:25.97 /usr/bin/+
   974 root      20   0  261156   7060   2024 S   0.0  0.3   0:03.51 cpsrvd (S+
   975 telegraf  20   0 5654048  35992   5836 S   0.0  1.5   0:04.74 /usr/loca+
   976 root      20   0  572372    748    164 S   0.0  0.0   0:00.76 /usr/bin/+
   997 root      20   0  439788  11232  11028 S   0.0  0.5   0:00.29 php-fpm: +
   998 root      20   0 1277312  10388     28 S   0.0  0.4   0:21.07 /usr/bin/+
  1002 root      20   0  388892    452    360 S   0.0  0.0   0:00.24 php-fpm: +
  1006 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.17 /usr/bin/+
  1099 dovenull  20   0   47252   3300   2228 S   0.0  0.1   0:00.25 dovecot/p+
  1100 dovenull  20   0   47484   3564   2272 S   0.0  0.1   0:00.11 dovecot/i+
  1101 dovecot   20   0   10320    236    116 S   0.0  0.0   0:00.05 dovecot/a+
  1102 root      20   0   10452    472    280 S   0.0  0.0   0:00.15 dovecot/l+
  1103 dovenull  20   0   47316   3444   2336 S   0.0  0.1   0:00.32 dovecot/p+
  1104 dovenull  20   0   47440   3696   2476 S   0.0  0.2   0:00.10 dovecot/i+
  1109 root      20   0   24564   2500    500 S   0.0  0.1   0:00.07 dovecot/c+
  1110 dovecot   20   0   13568    536    328 S   0.0  0.0   0:00.02 dovecot/s+
  1135 systuser  20   0  157704   2976    948 S   0.0  0.1   0:00.04 SonarPush+
  1146 wp-tool+  20   0  387528  13060   1432 S   0.0  0.5   0:00.15 /usr/bin/+
  1147 wp-tool+  20   0  412368  32532   1844 S   0.0  1.3   0:02.75 /usr/bin/+
  1197 dovecot   20   0   41156   1488   1020 S   0.0  0.1   0:00.35 dovecot/a+
  1258 root      20   0  167452   1304    704 S   0.0  0.1   0:00.15 dnsadmin +
  1262 root      20   0  209340  21296   3732 S   0.0  0.9   0:01.35 tailwatchd
  1263 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.02 cpdavd - +
  1634 root      20   0  299272    704    328 S   0.0  0.0   0:00.21 php-fpm: +
  1673 root      38  18  130416   1432    700 S   0.0  0.1   0:00.02 cpanellog+
  2047 root      20   0  267052   8176    680 S   0.0  0.3   0:00.61 /usr/sbin+
  2068 root      20   0   12888    388    252 S   0.0  0.0   0:00.92 /usr/loca+
  2069 root      20   0   12732    360    248 S   0.0  0.0   0:00.80 /usr/loca+
  2070 root      20   0   12940    328    216 S   0.0  0.0   0:00.86 /usr/loca+
  2079 root      20   0   53256     40     40 S   0.0  0.0   0:00.05 /usr/loca+
  2194 root      20   0  182132  10848   1152 S   0.0  0.4   0:07.71 lfd - sle+
  2828 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  2835 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.15 [kworker]
 39734 root      20   0  247944 121080   4544 S   0.0  5.0   0:03.27 /usr/loca+
 48387 root      20   0  266280 131292   3568 S   0.0  5.4   0:02.85 spamd chi+
 48388 root      20   0  247944 117956   1456 S   0.0  4.9   0:00.00 spamd chi+
 75371 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 78334 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78365 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 82719 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86662 nobody    20   0  277920  20496   4744 S   0.0  0.8   0:01.76 /usr/sbin+
 86824 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 88253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91946 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 92784 nobody    20   0  277720  19824   4400 S   0.0  0.8   0:00.93 /usr/sbin+
 92785 nobody    20   0  277908  20096   4556 S   0.0  0.8   0:00.88 /usr/sbin+
 92807 nobody    20   0  277916  20072   4512 S   0.0  0.8   0:00.93 /usr/sbin+
 95259 nobody    20   0  277792  20012   4400 S   0.0  0.8   0:00.68 /usr/sbin+
 95732 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96001 nobody    20   0  277576  19892   4396 S   0.0  0.8   0:00.51 /usr/sbin+
 96979 root      20   0   41052   2812   2140 S   0.0  0.1   0:00.00 dovecot/a+
 97064 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97279 nobody    20   0  277780  19568   4248 S   0.0  0.8   0:00.44 /usr/sbin+
 97599 nobody    20   0  277924  19404   4100 S   0.0  0.8   0:00.18 /usr/sbin+
 97642 nobody    20   0  277528  19360   4112 S   0.0  0.8   0:00.35 /usr/sbin+
 98377 nobody    20   0  277536  19172   4064 S   0.0  0.8   0:00.26 /usr/sbin+
 98455 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98951 nobody    20   0  277520  19172   3916 S   0.0  0.8   0:00.16 /usr/sbin+
 98962 nobody    20   0  277520  19148   3988 S   0.0  0.8   0:00.18 /usr/sbin+
 98970 nobody    20   0  277520  19092   3812 S   0.0  0.8   0:00.20 /usr/sbin+
 98971 nobody    20   0  277520  18904   3860 S   0.0  0.8   0:00.28 /usr/sbin+
 98972 nobody    20   0  277536  18996   3852 S   0.0  0.8   0:00.18 /usr/sbin+
 98973 nobody    20   0  277536  19216   4124 S   0.0  0.8   0:00.21 /usr/sbin+
 99182 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100085 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
100220 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
100258 workflo+  20   0  497996  34256   6244 S   0.0  1.4   0:00.25 php-fpm: +
100263 workflo+  20   0  497704  31208   4736 S   0.0  1.3   0:00.22 php-fpm: +
100281 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
100298 nobody    20   0  277504  18044   3156 S   0.0  0.7   0:00.00 /usr/sbin+
100305 mailnull  20   0   89504   6148   2348 S   0.0  0.3   0:00.00 /usr/sbin+
100310 nigeria   20   0  400460   5300   2192 S   0.0  0.2   0:00.00 php-fpm: +
100342 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
100356 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100358 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100359 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100360 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100361 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100362 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100363 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100364 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100365 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100366 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100368 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100369 root      20   0  183044   2208   1636 S   0.0  0.1   0:00.00 /usr/sbin+
100370 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100371 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100372 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100374 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100385 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100388 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
100390 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
100391 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
100392 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100393 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
100395 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
100396 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
100397 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
100400 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
100401 root      20   0  113284   1476   1256 S   0.0  0.1   0:00.00 bash /usr+
100409 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100411 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100412 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
100413 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100414 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100416 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100418 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
100419 nigeria   20   0   20164    268      0 S   0.0  0.0   0:00.00 jailshell+
100421 root      20   0  188212  11100   5152 S   0.0  0.5   0:00.01 /usr/loca+
100428 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
100435 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
100465 root      20   0  160224   2344   1632 S   0.0  0.1   0:00.00 top -n 2 +
100477 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
100493 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
100496 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
100498 cloudsms  20   0  400112  11884   8292 R   0.0  0.5   0:00.00 /opt/cpan+
100499 root      20   0  113284    600    380 S   0.0  0.0   0:00.00 bash /usr+
100501 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:00   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    10:00   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    10:00   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    10:00   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/1:1H]
root        256  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ttm_swap]
root        266  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [xprtiod]
root        608  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kvm-irqfd-clean]
root        658  0.0  0.0      0     0 ?        S<   10:00   0:02  \_ [loop0]
root        673  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/loop0-8]
root        675  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root      75371  0.0  0.0      0     0 ?        S    11:39   0:00  \_ [kworker/u200:1]
root      78334  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/1:5]
root      78365  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:4]
root      82719  0.0  0.0      0     0 ?        S    11:50   0:00  \_ [kworker/1:1]
root      86824  0.0  0.0      0     0 ?        S    11:56   0:00  \_ [kworker/0:2]
root      88253  0.0  0.0      0     0 ?        S    11:58   0:00  \_ [kworker/1:0]
root      91946  0.0  0.0      0     0 ?        S    12:02   0:00  \_ [kworker/0:0]
root      95732  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/0:1]
root      97064  0.0  0.0      0     0 ?        S    12:10   0:00  \_ [kworker/1:2]
root      98455  0.0  0.0      0     0 ?        S    12:12   0:00  \_ [kworker/1:3]
root      99182  0.0  0.0      0     0 ?        S    12:13   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44412  3556 ?        Rs   10:00   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  39500  4448 ?        Ss   10:00   0:04 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   244 ?        Ss   10:00   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   488 ?        S<sl 10:00   0:00 /sbin/auditd
polkitd     487  0.0  0.1 612240  2864 ?        Ssl  10:00   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        489  0.0  0.0  21540   380 ?        Ss   10:00   0:00 /usr/sbin/irqbalance --foreground
nscd        493  0.0  0.0 994492  1284 ?        Ssl  10:00   0:05 /usr/sbin/nscd
root        494  0.0  0.0 152780   104 ?        Ss   10:00   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        496  0.0  0.0  24704  1156 ?        Ds   10:00   0:01 /usr/lib/systemd/systemd-logind
rpc         513  0.0  0.0  69256   156 ?        Ss   10:00   0:00 /sbin/rpcbind -w
root        516  0.0  0.0 195208     0 ?        Ssl  10:00   0:00 /usr/sbin/gssproxy -D
root        531  0.0  0.0  52852   316 ?        Ss   10:00   0:00 /usr/sbin/smartd -n -q never
dbus        535  0.0  0.0  57020  1332 ?        Ss   10:00   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        552  0.0  0.2 224144  6360 ?        Ss   10:00   0:00 queueprocd - waiting up to 60s to process a task
root        553  0.0  0.0   4388    24 ?        Ss   10:00   0:00 /usr/sbin/acpid
root        564  0.0  0.0 124480   424 ?        Ss   10:00   0:00 /usr/sbin/crond -n
root     100356  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100390  0.0  0.0 113284  1208 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root     100401  0.0  0.0 113284  1476 ?        R    12:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root     100499  0.0  0.0      0     0 ?        Z    12:15   0:00  |           \_ [bash] <defunct>
root     100358  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100388  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     100400  0.0  0.0 108052   356 ?        S    12:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     100418  0.0  0.0 113288  1516 ?        S    12:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     100502  0.0  0.0 153840  2092 ?        R    12:15   0:00  |               \_ ps auxf
root     100359  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100385  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root     100360  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100416  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root     100361  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100391  0.0  0.0  20164   812 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root     100362  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100414  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root     100363  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100392  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root     100364  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100413  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root     100365  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100395  0.0  0.0  20164   988 ?        Ss   12:15   0:00  |   \_ jailshell (cloudsms) [100493] l -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms 100493  0.0  0.0  20164   264 ?        S    12:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms 100496  0.0  0.0 113284  1212 ?        S    12:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms 100498  0.0  0.6 404052 15872 ?        R    12:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root     100366  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100409  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root     100368  0.0  0.0 183048  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100411  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root     100369  0.0  0.0 183044  2208 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100370  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100412  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root     100421  0.0  0.4 188212 11100 ?        S    12:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root     100465  0.0  0.0 160224  2344 ?        S    12:15   0:00  |           \_ top -n 2 -b -c
root     100371  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100393  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
root     100402  0.0  0.5 158636 13144 ?        S    12:15   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/autorepair recoverymgmt
root     100372  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100396  0.0  0.0  20164   968 ?        Ss   12:15   0:00  |   \_ jailshell (pactpay) [100428] ll -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100428  0.0  0.0  20164   264 ?        S    12:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100435  0.0  0.7 480124 17672 ?        S    12:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root     100374  0.0  0.0 183048  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root     100397  0.0  0.0  20164   968 ?        Ss   12:15   0:00      \_ jailshell (nigeria) [100419] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100419  0.0  0.0  20164   268 ?        S    12:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100427  0.0  0.6 404052 16140 ?        S    12:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        566  0.0  0.0  24208    48 ?        Ss   10:00   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    32 tty1     Ss+  10:00   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704     0 ttyS0    Ss+  10:00   0:00 /bin/bash
mailnull    630  0.0  0.1  89120  4488 ?        Ss   10:00   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull 100305  0.0  0.2  89504  6148 ?        S    12:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    932  0.0  0.0  10388    48 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.1 445028  3200 ?        Ss   10:00   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+ 100220  0.0  0.0 445028   320 ?        S    12:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    936  0.0  0.0 113676    72 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    937  0.0  0.5 114016 12652 ?        Ssl  10:00   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.0 111304   364 ?        Ss   10:00   0:01 /usr/sbin/sshd -D
root     100085  0.0  0.1 111304  4264 ?        Ss   12:14   0:00  \_ sshd: [accepted]
root     100342  0.0  0.1 111304  4272 ?        Ss   12:15   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  12660    64 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.1 14.1 1763224 342984 ?      Ssl  10:00   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       949  0.0  1.3 990264 32992 ?        Ssl  10:00   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        951  0.0  0.1 400740  2972 ?        Ss   10:00   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
workflo+ 100258  2.7  1.4 497996 34256 ?        S    12:14   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+ 100263  2.4  1.2 497704 31208 ?        S    12:14   0:00  \_ php-fpm: pool blog_workflow-management-software_com
nigeria  100310  0.0  0.2 400460  5300 ?        S    12:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        955  0.0  0.0 389508   592 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        957  0.0  0.0  51508   644 ?        Ss   10:00   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1099  0.0  0.1  47252  3300 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1100  0.0  0.1  47484  3564 ?        S    10:00   0:00  \_ dovecot/imap-login
dovecot    1101  0.0  0.0  10320   236 ?        S    10:00   0:00  \_ dovecot/anvil
root       1102  0.0  0.0  10452   472 ?        S    10:00   0:00  \_ dovecot/log
dovenull   1103  0.0  0.1  47316  3444 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1104  0.0  0.1  47440  3696 ?        S    10:00   0:00  \_ dovecot/imap-login
root       1109  0.0  0.1  24564  2500 ?        S    10:00   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   536 ?        S    10:00   0:00  \_ dovecot/stats
dovecot    1197  0.0  0.0  41156  1488 ?        S    10:00   0:00  \_ dovecot/auth
root      96979  0.0  0.1  41052  2812 ?        S    12:10   0:00  \_ dovecot/auth -w
root        958  0.0  0.0 153404   252 ?        Ss   10:00   0:00 pure-ftpd (SERVER)
systuser    959  0.0  0.0 113272    76 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        968  0.0  0.0 396248   660 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
cpanelc+    970  0.0  0.1  11400  4756 ?        Ss   10:00   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        972  0.0  0.1 240976  4748 ?        Ssl  10:00   0:02 /usr/sbin/rsyslogd -n
root        973  0.3  0.3 1350088 9588 ?        Ssl  10:00   0:25 /usr/bin/cspdaemon
root        974  0.0  0.2 261156  7060 ?        Ss   10:00   0:03 cpsrvd (SSL) - waiting for connections                   
root     100281  0.0  0.0      0     0 ?        Z    12:14   0:00  \_ [cpaneld - servi] <defunct>
telegraf    975  0.0  1.4 5654048 35992 ?       SLsl 10:00   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        976  0.0  0.0 572372   748 ?        Ssl  10:00   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        997  0.0  0.4 439788 11232 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.2  0.4 1277312 10388 ?       Ssl  10:00   0:21 /usr/bin/checkstatus
root       1002  0.0  0.0 388892   452 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
memcach+   1006  0.0  0.0 342400     0 ?        Ssl  10:00   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser   1135  0.0  0.1 157704  2976 ?        S    10:00   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  0.5 387528 13060 ?        Ss   10:00   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1147  0.0  1.3 412368 32532 ?        Ss   10:00   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1258  0.0  0.0 167452  1304 ?        Ss   10:00   0:00 dnsadmin - dormant mode
root       1262  0.0  0.8 209340 21296 ?        Ss   10:00   0:01 tailwatchd
root       1263  0.0  0.2 183900  6692 ?        Ss   10:00   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1634  0.0  0.0 299272   704 ?        Ss   10:00   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1432 ?        SN   10:00   0:00 cpanellogd - sleeping for logs
mysql      1838  1.5  9.4 1463560 228964 ?      Sl   10:00   2:05 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2047  0.0  0.3 267052  8176 ?        Ss   10:00   0:00 /usr/sbin/httpd -k start
root       2068  0.0  0.0  12888   388 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2069  0.0  0.0  12732   360 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2070  0.0  0.0  12940   328 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2079  0.0  0.0  53256    40 ?        S    10:00   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    86662  0.1  0.8 277920 20496 ?        S    11:55   0:01  \_ /usr/sbin/httpd -k start
cloudw   100478  0.0  0.6 353712 15972 ?        S    12:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    92784  0.1  0.8 277720 19824 ?        S    12:03   0:00  \_ /usr/sbin/httpd -k start
nobody    92785  0.1  0.8 277908 20096 ?        S    12:03   0:00  \_ /usr/sbin/httpd -k start
nobody    92807  0.1  0.8 277916 20072 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    95259  0.1  0.8 277792 20012 ?        S    12:07   0:00  \_ /usr/sbin/httpd -k start
nobody    96001  0.1  0.8 277576 19892 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody    97279  0.1  0.8 277780 19568 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    97599  0.0  0.8 277924 19404 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    97642  0.1  0.7 277528 19360 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    98377  0.1  0.7 277536 19172 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    98951  0.1  0.7 277520 19172 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    98962  0.1  0.7 277520 19148 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    98970  0.1  0.7 277520 19092 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    98971  0.2  0.7 277520 18904 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    98972  0.1  0.7 277536 18996 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    98973  0.1  0.7 277536 19216 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody   100298  0.0  0.7 277504 18044 ?        S    12:14   0:00  \_ /usr/sbin/httpd -k start
root       2194  0.0  0.4 182132 10848 ?        Ss   10:01   0:07 lfd - sleeping
oysipao+   2828  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   2835  0.0  0.0   3152   492 ?        S    10:01   0:00  \_ [kworker]
root      39734  0.0  5.0 247944 121080 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      48387  0.0  5.4 266280 131292 ?       S    11:02   0:02  \_ spamd child
root      48388  0.0  4.8 247944 117956 ?       S    11:02   0:00  \_ spamd child
## mysql stats
Uptime: 29761  Threads: 4  Questions: 866688  Slow queries: 0  Opens: 3084  Flush tables: 1  Open tables: 2000  Queries per second avg: 29.121
*************************** 1. row ***************************
     Id: 12448
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `25` WHERE `phone`='2348067100383' LIMIT 1
*************************** 2. row ***************************
     Id: 12449
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 12458
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.138 TIME_WAIT
      1 114.119.136.120 TIME_WAIT
      1 142.44.225.78 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.42 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 51.195.244.183 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 203.75.213.2 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 12:15:02 WAT
   Restart Time: Sunday, 23-Nov-2025 03:59:04 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 15 minutes 58 seconds
   Server load: 0.26 0.72 0.79
   Total accesses: 43497 - Total Traffic: 905.0 MB - Total Duration: 63204790
   CPU Usage: u6.02 s2.71 cu477.36 cs353.25 - 2.82% CPU load
   1.46 requests/sec - 31.1 kB/second - 21.3 kB/request - 1453.08 ms/request
   7 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

_K.W.K_K.K___._K__W._._.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur    Conn Child  Slot     Client     Protocol         VHost                         Request
   0-0  98951  0/29/2346  _ 0.67 1    23  1085690  0.0  0.67  57.09 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue2.php HTTP/1.1
   1-0  100298 1/1/2175   K 0.00 3    302 1049068  35.8 0.03  45.36 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=738314698 HTTP/1.1
   2-0  -      0/0/2266   . 0.00 54   0   963278   0.0  0.00  46.12 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  86662  3/333/2552 W 6.90 0    0   1080911  98.0 10.64 50.94 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1787486521 HTTP/1.1
   4-0  -      0/0/2129   . 0.00 122  0   910763   0.0  0.00  48.34 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  97279  3/75/2315  K 1.83 1    277 1161698  97.3 1.96  52.05 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1940045178 HTTP/1.1
   6-0  98377  0/42/2380  _ 1.04 1    28  44419775 0.0  1.10  46.18 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue1.php HTTP/1.1
   7-0  98962  2/28/2155  K 0.71 0    323 942762   66.7 0.76  42.91 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1870394017 HTTP/1.1
   8-0  -      0/0/1988   . 0.00 93   0   831505   0.0  0.00  37.21 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-0  95259  1/117/1583 K 2.76 0    349 776055   33.9 2.85  33.75 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2916367240 HTTP/1.1
   10-0 98970  0/33/1742  _ 0.83 0    24  762865   0.0  0.88  35.02 128.140.8.200  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   11-0 97599  0/33/2274  _ 0.70 2    260 987461   0.0  0.79  43.29 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2439122137 HTTP/1.1
   12-0 98971  0/43/1551  _ 1.14 0    300 696985   0.0  1.21  34.47 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2609050476 HTTP/1.1
   13-0 -      0/0/1804   . 0.00 91   0   1026259  0.0  0.00  45.31 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 96001  0/103/1556 _ 2.22 1    28  594211   0.0  3.77  26.58 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue5.php HTTP/1.1
   15-0 92784  1/167/1595 K 4.20 1    300 764554   36.0 4.62  36.43 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=2746785324 HTTP/1.1
   16-0 92785  0/185/1087 _ 3.61 1    25  542162   0.0  4.06  23.70 116.203.134.67 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue4.php HTTP/1.1
   17-0 92807  0/179/1490 _ 3.71 0    0   642388   0.0  4.94  28.13 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   18-0 98972  0/30/1382  W 0.78 0    0   681033   0.0  0.84  31.43 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   19-0 -      0/0/789    . 0.00 130  0   433312   0.0  0.00  15.10 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 98973  0/34/875   _ 0.91 0    0   264346   0.0  0.92  11.65 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   21-0 -      0/0/984    . 0.00 66   0   525832   0.0  0.00  19.84 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 97642  0/60/1158  _ 1.42 1    267 406284   0.0  1.49  17.75 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1795624080 HTTP/1.1
   23-0 -      0/0/471    . 0.00 147  0   196186   0.0  0.00  9.71  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -      0/0/268    . 0.00 431  0   139780   0.0  0.00  5.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -      0/0/914    . 0.00 447  0   463213   0.0  0.00  21.02 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -      0/0/958    . 0.00 1647 0   491724   0.0  0.00  23.43 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -      0/0/180    . 0.00 3146 0   102991   0.0  0.00  4.33  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -      0/0/436    . 0.00 2248 0   210989   0.0  0.00  10.75 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -      0/0/89     . 0.00 3543 0   45248    0.0  0.00  2.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -      0/0/5      . 0.00 3531 0   5446     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 888
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...67)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 23326
   total entries replaced since starting: 0
   total entries expired since starting: 22433
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 81 miss
   total removes since starting: 5 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit