403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.03.27.txt
 ## swap threshold exceeded
## server overview
2025-11-11.03.27 load[0] mem[50/77] mysql[2/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1142         461           3         759        1060
Swap:          1999        1686         313
 03:27:01 up  3:30,  0 users,  load average: 0.66, 0.82, 0.57
## system overview
top - 03:27:01 up  3:30,  0 users,  load average: 0.66, 0.82, 0.57
Tasks: 197 total,   6 running, 189 sleeping,   0 stopped,   2 zombie
%Cpu(s): 59.4 us, 15.6 sy,  0.0 ni, 15.6 id,  9.4 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   459824 free,  1181332 used,   779144 buff/cache
KiB Swap:  2047996 total,   322492 free,  1725504 used.  1074488 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 193700   4228 S 100.0  8.0   3:22.76 /usr/sbin+
 50867 nigeria   20   0  400652  15932  10216 R  12.5  0.7   0:00.03 /opt/cpan+
 50881 cloudw    20   0  350316  16620  10324 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44408   3260   1464 S   0.0  0.1   0:18.03 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.50 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:15.57 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.49 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.53 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.27 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:03.10 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.85 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39496   2756   2592 S   0.0  0.1   0:05.66 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    112      0 S   0.0  0.0   0:00.88 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    348    252 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1112    788 S   0.0  0.0   0:03.04 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.29 /usr/sbin+
   517 root      20   0  224148   3192    948 S   0.0  0.1   0:00.21 queueproc+
   518 root      20   0  152780      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1388    656 S   0.0  0.1   0:06.92 /usr/bin/+
   521 rpc       20   0   69256      8      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1092    472 S   0.0  0.0   0:09.48 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    928    568 S   0.0  0.0   0:01.83 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    420    288 S   0.0  0.0   0:00.36 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116    544    296 S   0.0  0.0   0:00.20 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.56 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016   8460   2636 S   0.0  0.3   0:03.11 /usr/loca+
   916 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.27 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.21 /usr/sbin+
   924 root      20   0   51508    452    292 S   0.0  0.0   0:00.17 /usr/sbin+
   925 root      20   0  572372    700    252 S   0.0  0.0   0:01.20 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  31876   2424 S   0.0  1.3   0:07.34 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.29 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  249168   1440   1124 S   0.0  0.1   0:02.97 /usr/sbin+
   946 root      20   0  261824   5924   1728 S   0.0  0.2   0:03.08 cpsrvd (S+
   954 named     20   0  784392  20064   1448 S   0.0  0.8   0:08.06 /usr/sbin+
   965 root      20   0  385496    184     96 S   0.0  0.0   0:00.52 php-fpm: +
   972 cpanelc+  20   0   10564   3496   2308 R   0.0  0.1   0:11.15 /usr/loca+
   973 root      20   0  397344   1860    580 S   0.0  0.1   0:02.12 php-fpm: +
   975 root      20   0  392856    332    252 S   0.0  0.0   0:00.46 php-fpm: +
   979 root      20   0  436392    296    216 S   0.0  0.0   0:00.57 php-fpm: +
   980 root      20   0 1901588 450332    168 S   0.0 18.6   0:50.75 /usr/loca+
   991 root      20   0  386112    168     84 S   0.0  0.0   0:00.44 php-fpm: +
  1070 dovenull  20   0   46912    768    312 S   0.0  0.0   0:00.21 dovecot/p+
  1071 dovenull  20   0   47648    176      4 S   0.0  0.0   0:00.21 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.04 dovecot/a+
  1073 root      20   0   10452    508    356 S   0.0  0.0   0:00.14 dovecot/l+
  1074 dovenull  20   0   46912    660    432 S   0.0  0.0   0:00.18 dovecot/p+
  1075 dovenull  20   0   47668    252      0 S   0.0  0.0   0:00.18 dovecot/i+
  1078 root      20   0   24396   1452    480 S   0.0  0.1   0:00.10 dovecot/c+
  1084 dovecot   20   0   13568    444    300 S   0.0  0.0   0:00.03 dovecot/s+
  1112 systuser  20   0  157704   2932    948 S   0.0  0.1   0:00.08 SonarPush+
  1127 root      20   0  248312   1964    520 S   0.0  0.1   0:04.35 /usr/loca+
  1152 dovecot   20   0   41180    892    592 S   0.0  0.0   0:00.29 dovecot/a+
  1157 wp-tool+  20   0  387556   2500   1228 S   0.0  0.1   0:00.19 /usr/bin/+
  1159 wp-tool+  20   0  410452   9380   1084 S   0.0  0.4   0:10.62 /usr/bin/+
  1210 root      20   0  209268   3444    768 S   0.0  0.1   0:01.18 tailwatchd
  1211 root      20   0  183900     16     16 S   0.0  0.0   0:01.39 cpdavd - +
  1213 root      20   0  167452    868    412 S   0.0  0.0   0:00.31 dnsadmin +
  1667 root      20   0  299272    328    184 S   0.0  0.0   0:00.34 php-fpm: +
  1700 root      38  18  130416   1348    684 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4764    512 S   0.0  0.2   0:01.04 /usr/sbin+
  1949 root      20   0   12808    332    180 S   0.0  0.0   0:01.46 /usr/loca+
  1950 root      20   0   12732    108     40 S   0.0  0.0   0:01.24 /usr/loca+
  1951 root      20   0   12844    252     96 S   0.0  0.0   0:01.34 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.26 [kworker]
  5071 root      20   0  181800   6504   1088 S   0.0  0.3   0:10.44 lfd - sle+
  7555 root      20   0  269756   1228    412 S   0.0  0.1   0:03.42 spamd chi+
  7556 root      20   0  248312   1216    340 S   0.0  0.1   0:00.00 spamd chi+
 18725 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 28672 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 31594 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kworker/+
 31614 root      20   0 1275844    308     24 S   0.0  0.0   0:00.07 /usr/bin/+
 31652 root      20   0 1277312   2172     24 S   0.0  0.1   0:00.06 /usr/bin/+
 32947 nobody    20   0  277960  11564   3700 S   0.0  0.5   0:02.10 /usr/sbin+
 33932 nobody    20   0  277800  11280   3584 S   0.0  0.5   0:02.17 /usr/sbin+
 38791 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 39472 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 39483 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 129+
 40431 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43062 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43857 nobody    20   0  277800  11192   3632 S   0.0  0.5   0:00.98 /usr/sbin+
 44563 nobody    20   0  277800  10276   3132 S   0.0  0.4   0:00.84 /usr/sbin+
 45387 nobody    20   0  277600  11096   3668 S   0.0  0.5   0:00.76 /usr/sbin+
 45400 nobody    20   0  277932  11312   3680 S   0.0  0.5   0:00.76 /usr/sbin+
 45402 nobody    20   0  277612  11108   3884 S   0.0  0.5   0:00.58 /usr/sbin+
 45403 nobody    20   0  277528  10740   3504 S   0.0  0.4   0:00.79 /usr/sbin+
 45587 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46358 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47029 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 48267 root      20   0  183052      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 48316 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 48341 nobody    20   0  277800  11076   3624 S   0.0  0.5   0:00.36 /usr/sbin+
 49197 nobody    20   0  277800  16772   3036 S   0.0  0.7   0:00.20 /usr/sbin+
 49202 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49250 nobody    20   0  277932  17648   3540 S   0.0  0.7   0:00.24 /usr/sbin+
 49311 nobody    20   0  277800  17664   3620 S   0.0  0.7   0:00.18 /usr/sbin+
 49575 nobody    20   0  277800  17644   3624 S   0.0  0.7   0:00.22 /usr/sbin+
 50344 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
 50391 nobody    20   0  277928  17032   3208 S   0.0  0.7   0:00.08 /usr/sbin+
 50398 nobody    20   0  277800  16904   3188 S   0.0  0.7   0:00.10 /usr/sbin+
 50411 nobody    20   0  277400  17228   3476 S   0.0  0.7   0:00.04 /usr/sbin+
 50412 nobody    20   0  277808  17548   3604 S   0.0  0.7   0:00.05 /usr/sbin+
 50413 nobody    20   0  277804  17468   3620 S   0.0  0.7   0:00.05 /usr/sbin+
 50414 nobody    20   0  277524  17136   3624 S   0.0  0.7   0:00.06 /usr/sbin+
 50696 nigeria   20   0  404248  15412   4060 S   0.0  0.6   0:00.38 php-fpm: +
 50777 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 50783 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 50784 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 50792 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50793 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50794 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50795 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50796 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50797 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50799 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50801 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50802 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50804 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50806 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 50809 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 50810 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 50818 cloudw    20   0  350316  17388  10336 S   0.0  0.7   0:00.01 /opt/cpan+
 50831 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 50833 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50834 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 50835 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 50837 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50839 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 50840 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50841 root      20   0   20164    984    784 R   0.0  0.0   0:00.00 /usr/loca+
 50842 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 50852 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 50855 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 50866 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 50869 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50880 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 50884 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 50885 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 50886 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [setupvir+
 50887 cloudsms  20   0  262604   6516   4544 R   0.0  0.3   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:15  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      18725  0.0  0.0      0     0 ?        S    02:45   0:00  \_ [kworker/0:3]
root      28672  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:3]
root      31594  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      38791  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:1]
root      40431  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:4]
root      43062  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/u200:2]
root      45587  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:2]
root      46358  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:4]
root      47029  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:0]
root      49202  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/u200:1]
root      50869  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44408  3260 ?        Ss   Nov10   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39496  2756 ?        Ss   Nov10   0:05 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   112 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   348 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1112 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3192 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780     4 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1388 ?        Ss   Nov10   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256     8 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1092 ?        Ssl  Nov10   0:09 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   928 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   420 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052     0 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      50792  0.0  0.0 183048  2152 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50806  0.0  0.0 113284  1212 ?        Ss   03:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      50809  0.0  0.0 108052   360 ?        S    03:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      50810  0.0  0.0 113288  1512 ?        S    03:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      50889  0.0  0.0 153840  2092 ?        R    03:27   0:00  |               \_ ps auxf
root      50793  0.0  0.0 183048  2152 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50840  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      50794  0.0  0.0 183048  2152 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50831  0.0  0.0  20164   988 ?        Ss   03:27   0:00  |   \_ jailshell (cloudsms) [50884] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  50884  0.0  0.0  20164   264 ?        S    03:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  50885  0.0  0.0 113284  1212 ?        S    03:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  50887  0.0  0.6 400652 15672 ?        S    03:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root      50795  0.0  0.0 183048  2152 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50839  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      50796  0.0  0.0 183048  2148 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50833  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      50797  0.0  0.0 183048  2148 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50842  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      50799  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50841  0.0  0.0  20164   984 ?        Ss   03:27   0:00  |   \_ jailshell (cloudsms) [50888] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  50888  0.0  0.0  20164   260 ?        S    03:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  50890  0.0  0.0 113284  1212 ?        S    03:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  50891  0.0  0.0      4     4 ?        R    03:27   0:00  |               \_ [php]
root      50801  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50837  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      50802  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50834  0.0  0.0  20164   968 ?        Ss   03:27   0:00  |   \_ jailshell (pactpay) [50852] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   50852  0.0  0.0  20164   264 ?        S    03:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   50855  0.0  0.7 476724 17480 ?        S    03:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      50804  0.0  0.0 183048  2140 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      50835  0.0  0.0  20164   968 ?        Ss   03:27   0:00      \_ jailshell (nigeria) [50866] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   50866  0.0  0.0  20164   260 ?        S    03:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   50867  0.0  0.6 400652 15932 ?        S    03:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.0  89116   544 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.3 114016  8460 ?        Ssl  Nov10   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root      50783  0.0  0.1 111304  4444 ?        Ss   03:26   0:00  \_ sshd: [accepted]
sshd      50784  0.0  0.1 115644  2628 ?        S    03:26   0:00      \_ sshd: [net]
root        924  0.0  0.0  51508   452 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912   768 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  47648   176 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   508 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912   660 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47668   252 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24396  1452 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   444 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180   892 ?        S    Nov10   0:00  \_ dovecot/auth
root      50344  0.0  0.1  41052  2732 ?        S    03:26   0:00  \_ dovecot/auth -w
root        925  0.0  0.0 572372   700 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 31876 ?       SLsl Nov10   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.0 249168  1440 ?        Ssl  Nov10   0:02 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261824  5924 ?        Ss   Nov10   0:03 cpsrvd (SSL) - waiting for connections                   
root      50777  0.0  0.0      0     0 ?        Z    03:26   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  0.8 784392 20064 ?        Ssl  Nov10   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   184 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3496 ?        Ss   Nov10   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1860 ?        Ss   Nov10   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   50696  4.2  0.6 404248 15412 ?        S    03:26   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   332 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   296 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.4 18.6 1901588 450332 ?      Ssl  Nov10   0:50 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   168 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.0 248312  1964 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  0.0 269756  1228 ?        S    00:03   0:03  \_ spamd child
root       7556  0.0  0.0 248312  1216 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  2500 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  0.3 410452  9380 ?        Ss   Nov10   0:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.1 209268  3444 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  0.0 183900    16 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452   868 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   328 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1348 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.6  8.0 1462284 193796 ?      Sl   Nov10   3:22 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4764 ?        Ss   Nov10   0:01 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12808   332 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   108 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12844   252 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32947  0.1  0.4 277960 11564 ?        S    03:02   0:02  \_ /usr/sbin/httpd -k start
nobody    33932  0.1  0.4 277800 11280 ?        S    03:03   0:02  \_ /usr/sbin/httpd -k start
nobody    43857  0.1  0.4 277800 11192 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    44563  0.1  0.4 277800 10276 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    45387  0.1  0.4 277600 11096 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    45400  0.1  0.4 277932 11312 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    45402  0.1  0.4 277612 11108 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    45403  0.1  0.4 277528 10740 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    48341  0.1  0.4 277800 11076 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    49197  0.1  0.6 277800 16772 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    49250  0.1  0.7 277932 17648 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    49311  0.1  0.7 277800 17664 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    49575  0.1  0.7 277800 17644 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    50881  0.0  0.6 350316 16620 ?        S    03:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    50391  0.1  0.7 277928 17032 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50398  0.2  0.6 277800 16904 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50411  0.1  0.7 277400 17228 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50412  0.1  0.7 277808 17548 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50413  0.1  0.7 277804 17468 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50414  0.1  0.7 277524 17136 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.2 181800  6504 ?        Ss   00:00   0:10 lfd - sleeping
root      31614  0.0  0.0 1275844  308 ?        Ssl  03:00   0:00 /usr/bin/cspdaemon
root      31652  0.0  0.0 1277312 2172 ?        Ssl  03:00   0:00 /usr/bin/checkstatus
root      39472  0.0  0.0 132964     4 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056     0 ?        SN   03:11   0:00  \_ sleep 12937
## mysql stats
Uptime: 12605  Threads: 5  Questions: 1333574  Slow queries: 0  Opens: 6205  Flush tables: 1  Open tables: 2000  Queries per second avg: 105.797
*************************** 1. row ***************************
     Id: 17044
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 17049
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 17051
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 17053
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.79 TIME_WAIT
      1 144.76.19.157 TIME_WAIT
      1 147.136.68.119 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.32.143.93 TIME_WAIT
      2 102.88.113.153 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 43.155.140.157 TIME_WAIT
      3 45.82.78.113 TIME_WAIT
      3 57.130.20.252 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 03:27:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 29 minutes 59 seconds
   Server load: 0.66 0.82 0.57
   Total accesses: 61187 - Total Traffic: 1.6 GB - Total Duration: 32446319
   CPU Usage: u7.55 s4.05 cu830.15 cs633.8 - 11.7% CPU load
   4.86 requests/sec - 134.8 kB/second - 27.8 kB/request - 530.281 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KK_._W__K_.KW.W__KC_KK..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client      Protocol          VHost                                       Request
   0-0  49197 2/43/3238   K 0.75 1    407 1601745 65.4  0.70  80.79  66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=2941562579 HTTP/1.1
   1-0  44563 9/141/3175  K 3.96 1    399 1621730 282.2 3.86  84.52  66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=1743197424 HTTP/1.1
   2-0  49250 0/41/3301   _ 1.03 0    117 1588515 0.0   1.02  74.72  217.113.194.123 http/1.1 team.cloudware.ng:80     GET /var/cache/dev/pools/AcsHjSlfaz/D/2/?C=N;O=D HTTP/1.1
   3-0  -     0/0/3072    . 0.00 3    0   1566003 0.0   0.00  71.50  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   4-0  50391 0/14/3200   _ 0.33 0    408 2441556 0.0   0.35  108.67 66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=4163455652 HTTP/1.1
   5-0  43857 0/173/3189  W 4.51 0    0   1679494 0.0   4.31  77.59  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   6-0  45387 0/143/3001  _ 3.28 1    155 1633693 0.0   3.79  90.17  216.244.66.229  http/1.1 team.cloudware.ng:80     GET /vendor/symfony/var-exporter/VarExporter.php HTTP/1.1
   7-0  32947 0/413/3281  _ 9.04 0    358 1521356 0.0   8.74  84.99  66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=2071579889 HTTP/1.1
   8-0  50398 4/16/2968   K 0.48 2    293 1552365 128.7 0.49  89.29  66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=3470969877 HTTP/1.1
   9-0  48341 0/58/2854   _ 2.20 1    1   1493833 0.0   1.40  67.79  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   10-0 -     0/0/2995    . 0.00 30   0   1476926 0.0   0.00  84.98  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   11-0 49311 2/27/2949   K 0.77 0    402 1539646 64.8  0.69  89.17  66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=870944715 HTTP/1.1
   12-0 49575 4/44/2360   W 1.03 0    0   1303248 124.3 1.14  61.02  66.249.70.37    http/1.1 support.cloudware.ng:443 GET /?c=2107087185 HTTP/1.1
   13-0 -     0/0/2037    . 0.00 13   0   1012983 0.0   0.00  55.96  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   14-0 50411 0/16/2257   W 0.04 0    0   1266385 0.0   0.20  55.44  51.222.95.251   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Ebonyi&lga=Ohaukwu&ward=Um
   15-0 45400 0/125/1670  _ 3.69 1    1   849575  0.0   3.26  39.31  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   16-0 50412 0/9/2602    _ 0.22 0    8   1392908 0.0   0.24  63.92  3.222.190.107   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/2019elections/images/blog/2019el
   17-0 50413 3/11/2444   K 0.21 0    362 1275278 100.3 0.25  65.49  66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=95972512 HTTP/1.1
   18-0 50414 1/11/1775   C 0.26 5    208 882059  11.3  0.28  44.52  38.154.143.28   http/1.1 nigeriadecide.org:443    GET /blog/apcs-claim-of-registered-100000-non-indigenes-is-fals
   19-0 45402 0/90/1486   _ 2.72 0    0   730581  0.0   10.17 42.84  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   20-0 45403 17/127/1044 K 3.61 0    391 523863  521.5 3.34  24.55  66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=2458325749 HTTP/1.1
   21-0 33932 2/372/1175  K 9.75 4    359 657972  65.0  9.29  28.41  66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=354727739 HTTP/1.1
   22-0 -     0/0/394     . 0.00 1850 0   194426  0.0   0.00  10.27  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/427     . 0.00 2729 0   218307  0.0   0.00  10.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/493     . 0.00 6288 0   234804  0.0   0.00  11.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/201     . 0.00 6367 0   83585   0.0   0.00  3.46   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/132     . 0.00 6361 0   63977   0.0   0.00  3.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/725     . 0.00 4587 0   427451  0.0   0.00  20.36  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/117     . 0.00 6150 0   78945   0.0   0.00  4.86   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/496     . 0.00 4992 0   299300  0.0   0.00  13.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/67      . 0.00 6151 0   36690   0.0   0.00  1.77   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/239     . 0.00 6328 0   99496   0.0   0.00  4.64   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/4       . 0.00 6364 0   178     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/2       . 0.00 6365 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/3       . 0.00 6366 0   4       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/3       . 0.00 6360 0   6       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/13      . 0.00 6321 0   5697    0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00 6359 0   236     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/281     . 0.00 5580 0   158846  0.0   0.00  19.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/4       . 0.00 6362 0   264     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/725     . 0.00 3947 0   450086  0.0   0.00  35.37  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00 6352 0   1003    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/63      . 0.00 6130 0   33019   0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/159     . 0.00 5758 0   93527   0.0   0.00  19.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/9       . 0.00 6347 0   4423    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/18      . 0.00 6291 0   7447    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/13      . 0.00 6317 0   5454    0.0   0.00  0.65   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/513     . 0.00 4913 0   335229  0.0   0.00  11.08  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/6       . 0.00 6354 0   2176    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 775
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...62)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 33800
   total entries replaced since starting: 0
   total entries expired since starting: 33001
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 150 miss
   total removes since starting: 27 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit