403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.22.36.txt
 ## swap threshold exceeded
## server overview
2025-11-23.22.36 load[0] mem[53/69] mysql[2/11] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1174         257         136         931         878
Swap:          1999        1491         508
 22:36:01 up  7:55,  0 users,  load average: 0.04, 0.25, 0.35
## system overview
top - 22:36:01 up  7:55,  0 users,  load average: 0.04, 0.25, 0.35
Tasks: 202 total,   5 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.1 us, 22.6 sy,  0.0 ni, 19.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   243344 free,  1222728 used,   954228 buff/cache
KiB Swap:  2047996 total,   520700 free,  1527296 used.   879708 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1744 mysql     20   0 1458608 285088   3468 S  86.7 11.8   6:26.59 /usr/sbin+
  5914 nigeria   20   0  404052  16136  10384 S  20.0  0.7   0:00.06 /opt/cpan+
  5929 pactpay   20   0  480124  17308  11572 R   6.7  0.7   0:00.01 /opt/cpan+
  5949 cloudsms  20   0  404184  16060  10300 S   6.7  0.7   0:00.01 /opt/cpan+
  5953 cloudsms  20   0  404052  15612  10164 S   6.7  0.6   0:00.01 /opt/cpan+
 91295 nobody    20   0  277784  21288   5024 S   6.7  0.9   0:02.01 /usr/sbin+
     1 root      20   0   44400   3528   1656 S   0.0  0.1   0:40.76 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.59 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.98 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:26.03 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.96 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.01 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.48 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:00.74 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.69 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   4748   4436 S   0.0  0.2   0:18.04 /usr/lib/+
   383 root      20   0   45352    656    532 S   0.0  0.0   0:00.44 /usr/lib/+
   412 root      16  -4   55532    644    512 S   0.0  0.0   0:02.92 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    644    532 S   0.0  0.0   0:00.65 /usr/sbin+
   489 root      20   0   24704   1392   1032 S   0.0  0.1   0:06.73 /usr/lib/+
   494 polkitd   20   0  610540   1244    800 S   0.0  0.1   0:03.90 /usr/lib/+
   495 root      20   0  224144   6040   1312 S   0.0  0.2   0:00.35 queueproc+
   496 root      20   0   52852    564    452 S   0.0  0.0   0:00.01 /usr/sbin+
   497 root      20   0  152780    480    436 S   0.0  0.0   0:00.01 /usr/sbin+
   503 dbus      20   0   58716   1604    900 S   0.0  0.1   0:15.19 /usr/bin/+
   506 nscd      20   0 1336536   2104    956 S   0.0  0.1   0:17.05 /usr/sbin+
   511 rpc       20   0   69256    368    264 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388    288    284 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208    300    300 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208    324    300 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0  124476    736    608 S   0.0  0.0   0:00.80 /usr/sbin+
   576 root      20   0  108296    416    412 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704    448    448 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89112   4420   1352 S   0.0  0.2   0:00.55 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51508    892    728 S   0.0  0.0   0:00.41 /usr/sbin+
   928 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0   12756     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   931 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   932 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  153404    712    628 S   0.0  0.0   0:00.64 pure-ftpd+
   934 root      20   0  445028   3532   3416 S   0.0  0.1   0:01.18 sw-engine+
   935 root      20   0  572372   1320    744 S   0.0  0.1   0:02.45 /usr/bin/+
   936 telegraf  20   0 5654304  42164   5936 S   0.0  1.7   0:15.43 /usr/loca+
   937 root      20   0  111304    824    716 S   0.0  0.0   0:04.63 /usr/sbin+
   939 root      20   0 1350088   9772    384 S   0.0  0.4   0:24.91 /usr/bin/+
   941 root      20   0  400740   3480   1024 S   0.0  0.1   0:03.38 php-fpm: +
   946 root      20   0  396248    888    708 S   0.0  0.0   0:00.75 php-fpm: +
   951 root      20   0  439788  11744  11536 S   0.0  0.5   0:00.80 php-fpm: +
   952 root      20   0  261164   7280   2072 S   0.0  0.3   0:04.04 cpsrvd (S+
   953 root      20   0  314704   5948   4480 S   0.0  0.2   0:08.87 /usr/sbin+
   959 root      20   0  389508   1072    864 S   0.0  0.0   0:00.74 php-fpm: +
   960 root      20   0 1763224 155736   1216 S   0.0  6.4   0:13.90 /usr/loca+
   969 cpanelc+  20   0   10484   3552   2416 R   0.0  0.1   0:22.18 /usr/loca+
   970 named     20   0  990264  36816   2432 S   0.0  1.5   0:12.17 /usr/sbin+
   972 memcach+  20   0  342400    392    392 S   0.0  0.0   0:00.62 /usr/bin/+
   974 root      20   0 1277312  11508    384 S   0.0  0.5   0:22.98 /usr/bin/+
   980 systuser  20   0  114016  15424   2928 S   0.0  0.6   0:06.80 /usr/loca+
   995 root      20   0  388892   1092    884 S   0.0  0.0   0:00.69 php-fpm: +
  1053 dovenull  20   0   46984   3508   2620 S   0.0  0.1   0:00.99 dovecot/p+
  1054 dovenull  20   0   47960   3896   2296 S   0.0  0.2   0:00.26 dovecot/i+
  1055 dovecot   20   0   10320    592    472 S   0.0  0.0   0:00.19 dovecot/a+
  1056 root      20   0   10452    648    452 S   0.0  0.0   0:00.48 dovecot/l+
  1057 dovenull  20   0   47052   2812   2108 S   0.0  0.1   0:00.74 dovecot/p+
  1058 dovenull  20   0   47308   3296   2224 S   0.0  0.1   0:00.18 dovecot/i+
  1064 root      20   0   24528   2616    736 S   0.0  0.1   0:00.19 dovecot/c+
  1065 dovecot   20   0   13568    672    440 S   0.0  0.0   0:00.06 dovecot/s+
  1091 nobody    20   0  277584  20316   4404 S   0.0  0.8   0:00.55 /usr/sbin+
  1122 dovecot   20   0   41188   1776   1248 S   0.0  0.1   0:01.21 dovecot/a+
  1144 systuser  20   0  157704   3156   1156 S   0.0  0.1   0:00.14 SonarPush+
  1146 wp-tool+  20   0  412368  32692   1968 S   0.0  1.4   0:09.09 /usr/bin/+
  1147 wp-tool+  20   0  387528  13492   1880 S   0.0  0.6   0:00.29 /usr/bin/+
  1174 root      20   0  248224 118964   2420 S   0.0  4.9   0:06.17 /usr/loca+
  1239 root      20   0  167452   1556    984 S   0.0  0.1   0:00.44 dnsadmin +
  1243 root      20   0  209344  12260   2572 S   0.0  0.5   0:02.89 tailwatchd
  1244 root      20   0  262224  24500   6768 S   0.0  1.0   0:02.24 cpdavd - +
  1676 root      38  18  130416   1624    884 S   0.0  0.1   0:00.06 cpanellog+
  1868 nobody    20   0  277780  20272   4312 S   0.0  0.8   0:00.54 /usr/sbin+
  2037 root      20   0  267052   8896    928 S   0.0  0.4   0:01.75 /usr/sbin+
  2039 root      20   0   12788    616    504 S   0.0  0.0   0:02.64 /usr/loca+
  2040 root      20   0   12732    572    500 S   0.0  0.0   0:02.24 /usr/loca+
  2041 root      20   0   12804    628    504 S   0.0  0.0   0:02.43 /usr/loca+
  2045 root      20   0   53256    432    432 S   0.0  0.0   0:00.05 /usr/loca+
  2122 root      20   0  184968  14480   1348 S   0.0  0.6   0:27.61 lfd - sle+
  2152 root      20   0  299272    892    728 S   0.0  0.0   0:00.81 php-fpm: +
  2415 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2556 nobody    20   0  277780  20044   4128 S   0.0  0.8   0:00.32 /usr/sbin+
  3680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3706 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4193 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4878 nobody    20   0  277520  19396   3868 S   0.0  0.8   0:00.14 /usr/sbin+
  5474 nobody    20   0  277520  19156   3628 S   0.0  0.8   0:00.04 /usr/sbin+
  5569 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  5640 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  5687 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
  5694 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  5695 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  5704 nigeria   20   0  400460   5644   2412 S   0.0  0.2   0:00.03 php-fpm: +
  5845 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  5846 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  5853 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  5862 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  5863 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  5864 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5865 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5866 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5867 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5868 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5869 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5870 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5871 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5872 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5873 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5874 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5876 root      20   0  183044   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5878 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5880 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  5881 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  5882 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  5891 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5893 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  5894 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5895 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5896 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  5897 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5898 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
  5899 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5901 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5902 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5903 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5905 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  5912 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5923 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5943 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  5944 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.00 /opt/cpan+
  5947 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  5948 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  5951 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5952 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  5954 nobody    20   0  277784  16264      0 R   0.0  0.7   0:00.00 /usr/sbin+
  6714 root      20   0  264184 129060   3440 S   0.0  5.3   0:02.81 spamd chi+
  6715 root      20   0  248224 117008    484 S   0.0  4.8   0:00.02 spamd chi+
 15361 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.51 [kworker]
 73101 nobody    20   0  277592  21012   4992 S   0.0  0.9   0:03.64 /usr/sbin+
 73221 worencom  20   0   38488   2612   1604 S   0.0  0.1   0:00.08 dovecot/i+
 80836 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 80868 nobody    20   0  277584  20808   4916 S   0.0  0.9   0:02.80 /usr/sbin+
 85547 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 87734 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93185 nobody    20   0  277904  21052   4904 S   0.0  0.9   0:01.52 /usr/sbin+
 93888 nobody    20   0  277888  20816   4780 S   0.0  0.9   0:01.86 /usr/sbin+
 95539 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 97421 nobody    20   0  277584  20536   4768 S   0.0  0.8   0:01.48 /usr/sbin+
 99208 nobody    20   0  277584  20476   4588 S   0.0  0.8   0:01.00 /usr/sbin+
100288 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
100302 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100718 nobody    20   0  277920  20496   4596 S   0.0  0.8   0:00.89 /usr/sbin+
100895 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
102049 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    14:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    14:40   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    14:40   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    14:40   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    14:40   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   14:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   14:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   14:40   0:02  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   14:40   0:02  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    14:40   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   14:40   0:02  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    14:40   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   14:40   0:00  \_ [ext4-rsv-conver]
root      80836  0.0  0.0      0     0 ?        S    21:51   0:00  \_ [kworker/0:2]
root      85547  0.0  0.0      0     0 ?        S    21:59   0:00  \_ [kworker/u200:2]
root      87734  0.0  0.0      0     0 ?        S    22:02   0:00  \_ [kworker/1:0]
root      95539  0.0  0.0      0     0 ?        S    22:15   0:00  \_ [kworker/0:3]
root     100288  0.0  0.0      0     0 ?        S    22:23   0:00  \_ [kworker/u200:1]
root     100302  0.0  0.0      0     0 ?        S    22:23   0:00  \_ [kworker/1:1]
root     100895  0.0  0.0      0     0 ?        S    22:24   0:00  \_ [kworker/1:4]
root     102049  0.0  0.0      0     0 ?        S    22:26   0:00  \_ [kworker/0:0]
root       2415  0.0  0.0      0     0 ?        S    22:30   0:00  \_ [kworker/1:2]
root       3680  0.0  0.0      0     0 ?        S    22:32   0:00  \_ [kworker/0:1]
root       3706  0.0  0.0      0     0 ?        S    22:32   0:00  \_ [kworker/1:3]
root       4193  0.0  0.0      0     0 ?        S    22:33   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44400  3528 ?        Ss   14:40   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  4748 ?        Ss   14:40   0:18 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   656 ?        Ss   14:40   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   644 ?        S<sl 14:40   0:02 /sbin/auditd
root        487  0.0  0.0  21540   644 ?        Ss   14:40   0:00 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24704  1392 ?        Ss   14:40   0:06 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610540  1244 ?        Ssl  14:40   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.2 224144  6040 ?        Ss   14:40   0:00 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852   564 ?        Ss   14:40   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780   480 ?        Ss   14:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58716  1604 ?        Ss   14:40   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.0  0.0 1336536 2104 ?        Ssl  14:40   0:17 /usr/sbin/nscd
rpc         511  0.0  0.0  69256   368 ?        Ss   14:40   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   288 ?        Ss   14:40   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208   300 ?        Ssl  14:40   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208   324 ?        Ss   14:40   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124476   736 ?        Ss   14:40   0:00 /usr/sbin/crond -n
root       5864  0.0  0.0 183044  2144 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5880  0.0  0.0 113284  1208 ?        Ss   22:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       5881  0.0  0.0 108052   356 ?        S    22:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       5882  0.0  0.0 113288  1516 ?        S    22:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       5955  0.0  0.0 153840  2096 ?        R    22:36   0:00  |               \_ ps auxf
root       5865  0.0  0.0 183044  2144 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5901  0.0  0.0  20164   804 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       5866  0.0  0.0 183044  2144 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5902  0.0  0.0  20164   804 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       5867  0.0  0.0 183044  2144 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5894  0.0  0.0  20164   808 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       5868  0.0  0.0 183044  2144 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5898  0.0  0.0  20164   992 ?        Ss   22:36   0:00  |   \_ jailshell (cloudsms) [5947] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms   5947  0.0  0.0      0     0 ?        D    22:36   0:00  |       \_ [jailshell]
root       5869  0.0  0.0 183044  2140 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5897  0.0  0.0  20164   804 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       5870  0.0  0.0 183044  2140 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5896  0.0  0.0  20164   988 ?        Ss   22:36   0:00  |   \_ jailshell (cloudsms) [5951] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   5951  0.0  0.0  20164   260 ?        S    22:36   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   5952  0.0  0.0 113284  1212 ?        S    22:36   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   5953  0.0  0.6 404052 15612 ?        S    22:36   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       5871  0.0  0.0 183044  2140 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5903  0.0  0.0  20164   804 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       5872  0.0  0.0 183044  2140 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5899  0.0  0.0  20164   808 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       5873  0.0  0.0 183044  2136 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5891  0.0  0.0  20164   808 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       5874  0.0  0.0 183044  2136 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5895  0.0  0.0  20164   804 ?        Ss   22:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       5876  0.0  0.0 183044  2144 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5905  0.0  0.0  20164   972 ?        Ss   22:36   0:00  |   \_ jailshell (pactpay) [5923] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5923  0.0  0.0  20164   260 ?        S    22:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5929  0.0  0.7 480124 17672 ?        S    22:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       5878  0.0  0.0 183044  2136 ?        S    22:36   0:00  \_ /usr/sbin/CROND -n
root       5893  0.0  0.0  20164   968 ?        Ss   22:36   0:00      \_ jailshell (nigeria) [5912] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5912  0.0  0.0  20164   260 ?        S    22:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5914  0.0  0.6 404052 16136 ?        S    22:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296   416 tty1     Ss+  14:40   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704   448 ttyS0    Ss+  14:40   0:00 /bin/bash
mailnull    621  0.0  0.1  89112  4420 ?        Ss   14:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51508   892 ?        Ss   14:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1053  0.0  0.1  46984  3508 ?        S    14:40   0:00  \_ dovecot/pop3-login
dovenull   1054  0.0  0.1  47960  3896 ?        S    14:40   0:00  \_ dovecot/imap-login
dovecot    1055  0.0  0.0  10320   592 ?        S    14:40   0:00  \_ dovecot/anvil
root       1056  0.0  0.0  10452   648 ?        S    14:40   0:00  \_ dovecot/log
dovenull   1057  0.0  0.1  47052  2812 ?        S    14:40   0:00  \_ dovecot/pop3-login
dovenull   1058  0.0  0.1  47308  3296 ?        S    14:40   0:00  \_ dovecot/imap-login
root       1064  0.0  0.1  24528  2616 ?        S    14:40   0:00  \_ dovecot/config
dovecot    1065  0.0  0.0  13568   672 ?        S    14:40   0:00  \_ dovecot/stats
dovecot    1122  0.0  0.0  41188  1776 ?        S    14:40   0:01  \_ dovecot/auth
worencom  73221  0.0  0.1  38488  2612 ?        S    16:24   0:00  \_ dovecot/imap
systuser    928  0.0  0.0  11540    56 ?        Ssl  14:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    64 ?        Ssl  14:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    72 ?        Ssl  14:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    72 ?        Ssl  14:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   712 ?        Ss   14:40   0:00 pure-ftpd (SERVER)
root        934  0.0  0.1 445028  3532 ?        Ss   14:40   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   5687  0.0  0.0 445028   328 ?        S    22:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        935  0.0  0.0 572372  1320 ?        Ssl  14:40   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    936  0.0  1.7 5654304 42164 ?       SLsl 14:40   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        937  0.0  0.0 111304   824 ?        Ss   14:40   0:04 /usr/sbin/sshd -D
root       5569  0.0  0.1 111304  4272 ?        Ss   22:35   0:00  \_ sshd: [accepted]
root       5640  0.0  0.1 111304  4272 ?        Ss   22:35   0:00  \_ sshd: [accepted]
root       5694  0.0  0.1 111304  4276 ?        Ss   22:35   0:00  \_ sshd: [accepted]
sshd       5695  0.0  0.1 115644  2632 ?        S    22:35   0:00  |   \_ sshd: [net]
root       5845  0.0  0.1 111304  4268 ?        Ss   22:35   0:00  \_ sshd: [accepted]
sshd       5846  0.0  0.1 115644  2628 ?        S    22:35   0:00  |   \_ sshd: [net]
root       5862  0.0  0.1 111304  4448 ?        Ss   22:36   0:00  \_ sshd: [accepted]
sshd       5863  0.0  0.1 115644  2632 ?        S    22:36   0:00      \_ sshd: [net]
root        939  0.0  0.4 1350088 9772 ?        Ssl  14:40   0:24 /usr/bin/cspdaemon
root        941  0.0  0.1 400740  3480 ?        Ss   14:40   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    5704  0.1  0.2 400460  5644 ?        S    22:35   0:00  \_ php-fpm: pool nigeriadecide_org
root        946  0.0  0.0 396248   888 ?        Ss   14:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        951  0.0  0.4 439788 11744 ?        Ss   14:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        952  0.0  0.3 261164  7280 ?        Ss   14:40   0:04 cpsrvd (SSL) - waiting for connections                   
root       5853  0.0  0.0      0     0 ?        Z    22:35   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 314704  5948 ?        Ssl  14:40   0:08 /usr/sbin/rsyslogd -n
root        959  0.0  0.0 389508  1072 ?        Ss   14:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        960  0.0  6.4 1763224 155736 ?      Ssl  14:40   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
cpanelc+    969  0.0  0.1  10484  3552 ?        Ss   14:40   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
named       970  0.0  1.5 990264 36816 ?        Ssl  14:40   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    972  0.0  0.0 342400   392 ?        Ssl  14:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.4 1277312 11508 ?       Ssl  14:40   0:22 /usr/bin/checkstatus
systuser    980  0.0  0.6 114016 15424 ?        Ssl  14:40   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        995  0.0  0.0 388892  1092 ?        Ss   14:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1144  0.0  0.1 157704  3156 ?        S    14:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  1.3 412368 32692 ?        Ss   14:40   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1147  0.0  0.5 387528 13492 ?        Ss   14:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1174  0.0  4.9 248224 118964 ?       Ss   14:40   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6714  0.0  5.3 264184 129060 ?       S    14:47   0:02  \_ spamd child
root       6715  0.0  4.8 248224 117008 ?       S    14:47   0:00  \_ spamd child
root       1239  0.0  0.0 167452  1556 ?        Ss   14:40   0:00 dnsadmin - dormant mode
root       1243  0.0  0.5 209344 12260 ?        Ss   14:40   0:02 tailwatchd
root       1244  0.0  1.0 262224 24500 ?        Ss   14:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416  1624 ?        SN   14:40   0:00 cpanellogd - sleeping for logs
mysql      1744  1.3 11.7 1458608 285088 ?      Sl   14:40   6:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2037  0.0  0.3 267052  8896 ?        Ss   14:41   0:01 /usr/sbin/httpd -k start
root       2039  0.0  0.0  12788   616 ?        S    14:41   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2040  0.0  0.0  12732   572 ?        S    14:41   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2041  0.0  0.0  12804   628 ?        S    14:41   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2045  0.0  0.0  53256   432 ?        S    14:41   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    73101  0.1  0.8 277592 21012 ?        S    21:39   0:03  \_ /usr/sbin/httpd -k start
nobody    80868  0.1  0.8 277584 20808 ?        S    21:51   0:02  \_ /usr/sbin/httpd -k start
nobody    91295  0.1  0.8 277784 21288 ?        S    22:07   0:02  \_ /usr/sbin/httpd -k start
cloudw     5954  0.0  0.0   4348   608 ?        R    22:36   0:00  |   \_ ea-php72
nobody    93185  0.1  0.8 277904 21052 ?        S    22:11   0:01  \_ /usr/sbin/httpd -k start
nobody    93888  0.1  0.8 277888 20816 ?        S    22:12   0:01  \_ /usr/sbin/httpd -k start
nobody    97421  0.1  0.8 277584 20536 ?        S    22:18   0:01  \_ /usr/sbin/httpd -k start
cloudw     5944  0.0  0.6 353712 15968 ?        S    22:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    99208  0.1  0.8 277584 20476 ?        S    22:21   0:01  \_ /usr/sbin/httpd -k start
nobody   100718  0.1  0.8 277920 20496 ?        S    22:23   0:00  \_ /usr/sbin/httpd -k start
nobody     1091  0.1  0.8 277584 20316 ?        S    22:27   0:00  \_ /usr/sbin/httpd -k start
nobody     1868  0.1  0.8 277780 20272 ?        S    22:29   0:00  \_ /usr/sbin/httpd -k start
nobody     2556  0.0  0.8 277780 20044 ?        R    22:30   0:00  \_ /usr/sbin/httpd -k start
nobody     4878  0.1  0.8 277520 19396 ?        S    22:34   0:00  \_ /usr/sbin/httpd -k start
nobody     5474  0.0  0.7 277520 19156 ?        S    22:35   0:00  \_ /usr/sbin/httpd -k start
root       2122  0.0  0.5 184968 14480 ?        Ss   14:41   0:27 lfd - sleeping
root       2152  0.0  0.0 299272   892 ?        Ss   14:41   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+  15361  0.0  0.0   3148   416 ?        Ss   15:00   0:00 [kworker]
oysipao+  15368  0.0  0.0   3152   428 ?        S    15:00   0:00  \_ [kworker]
## mysql stats
Uptime: 28501  Threads: 5  Questions: 2449489  Slow queries: 0  Opens: 6020  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.943
*************************** 1. row ***************************
     Id: 40918
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 40923
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-23' LIMIT 1
*************************** 3. row ***************************
     Id: 40924
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 40928
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.225.93 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 18.234.56.109 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.121.171.245 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 22:36:02 WAT
   Restart Time: Sunday, 23-Nov-2025 14:41:06 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 54 minutes 55 seconds
   Server load: 0.04 0.25 0.35
   Total accesses: 115455 - Total Traffic: 2.8 GB - Total Duration: 54860749
   CPU Usage: u12.64 s5.89 cu1344.86 cs1040.41 - 8.44% CPU load
   4.05 requests/sec - 103.7 kB/second - 25.6 kB/request - 475.17 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_W.K_KKW_W_KWK..................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn Child  Slot      Client      Protocol         VHost                      Request
   0-0  80868  0/711/7293 _ 9.95  0    272 3271830 0.0  11.01 176.87 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=3902144241 HTTP/1.1
   1-0  91295  0/413/6491 W 8.16  0    0   3086219 0.0  8.09  146.36 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=2956254159 HTTP/1.1
   2-0  -      0/0/6813   . 0.00  24   0   3162923 0.0  0.00  168.00 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  1091   2/111/6117 K 2.48  1    351 2727633 63.4 2.29  144.51 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=2174634005 HTTP/1.1
   4-0  100718 0/167/5946 _ 3.65  0    0   2765343 0.0  3.62  151.66 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   5-0  93185  1/394/6511 K 5.35  4    270 3374652 35.7 6.24  158.81 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3112840941 HTTP/1.1
   6-0  4878   1/26/5791  K 0.48  2    261 2792688 35.5 0.57  151.78 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=3679289662 HTTP/1.1
   7-0  97421  1/351/6108 W 5.23  0    0   2901497 36.0 6.40  159.32 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=302543078 HTTP/1.1
   8-0  93888  0/455/5748 _ 7.84  0    146 2805497 0.0  15.37 158.28 192.121.171.245 http/1.1 nigeriadecide.org:443  GET / HTTP/1.0
   9-0  1868   0/102/5650 W 2.37  0    0   2684595 0.0  2.31  138.42 192.121.171.245 http/1.1 nigeriadecide.org:443  GET /blog/ HTTP/1.0
   10-0 2556   0/60/6090  _ 1.25  0    308 2883860 0.0  1.40  138.01 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=709033343 HTTP/1.1
   11-0 99208  2/202/5362 K 3.62  4    261 2480030 66.1 4.08  131.09 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=85819088 HTTP/1.1
   12-0 73101  0/873/4893 W 13.99 0    0   2282058 0.0  17.05 130.70 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 5474   2/9/4564   K 0.15  3    397 2288335 68.3 0.22  124.28 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=234727302 HTTP/1.1
   14-0 -      0/0/5188   . 0.00  18   0   2364018 0.0  0.00  132.33 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -      0/0/4784   . 0.00  1299 0   2212200 0.0  0.00  109.88 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -      0/0/4816   . 0.00  98   0   2084675 0.0  0.00  115.77 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -      0/0/3363   . 0.00  1535 0   1664564 0.0  0.00  94.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -      0/0/2449   . 0.00  3286 0   1033205 0.0  0.00  64.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -      0/0/1858   . 0.00  3052 0   964188  0.0  0.00  51.90  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -      0/0/1847   . 0.00  3219 0   1056654 0.0  0.00  58.68  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -      0/0/2391   . 0.00  456  0   1143148 0.0  0.00  54.46  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -      0/0/2274   . 0.00  5435 0   1197231 0.0  0.00  55.39  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -      0/0/1131   . 0.00  5875 0   708999  0.0  0.00  25.83  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -      0/0/205    . 0.00  5854 0   157047  0.0  0.00  3.81   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -      0/0/204    . 0.00  5878 0   190090  0.0  0.00  7.87   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -      0/0/3      . 0.00  5862 0   10      0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -      0/0/2      . 0.00  5870 0   2       0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -      0/0/2      . 0.00  5872 0   2       0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -      0/0/233    . 0.00  4778 0   99912   0.0  0.00  5.20   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -      0/0/4      . 0.00  5860 0   10      0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -      0/0/108    . 0.00  5377 0   41963   0.0  0.00  2.28   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/4      . 0.00  5868 0   4       0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -      0/0/6      . 0.00  5847 0   1792    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -      0/0/141    . 0.00  5245 0   63875   0.0  0.00  4.19   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -      0/0/4      . 0.00  5857 0   1506    0.0  0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/4      . 0.00  5856 0   1048    0.0  0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -      0/0/145    . 0.00  5389 0   46844   0.0  0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -      0/0/4      . 0.00  5859 0   1586    0.0  0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -      0/0/239    . 0.00  4865 0   99717   0.0  0.00  5.36   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -      0/0/100    . 0.00  5391 0   44743   0.0  0.00  2.34   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -      0/0/6      . 0.00  5844 0   1659    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/5      . 0.00  5853 0   15      0.0  0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -      0/0/12     . 0.00  5834 0   5452    0.0  0.00  0.27   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -      0/0/334    . 0.00  4524 0   119583  0.0  0.00  6.28   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/199    . 0.00  5423 0   42433   0.0  0.00  2.31   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -      0/0/13     . 0.00  5813 0   5391    0.0  0.00  0.31   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 733
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...47)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 83616
   total entries replaced since starting: 0
   total entries expired since starting: 82865
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 20 hit, 166 miss
   total removes since starting: 18 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit