403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.57.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.57 load[1] mem[67/72] mysql[2/8] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1523          66          30         773         633
Swap:          1999        1649         350
 02:57:01 up  6:54,  0 users,  load average: 1.07, 0.58, 0.50
## system overview
top - 02:57:01 up  6:54,  0 users,  load average: 1.07, 0.58, 0.50
Tasks: 199 total,   4 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 82.9 us, 17.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    92488 free,  1570184 used,   757628 buff/cache
KiB Swap:  2047996 total,   358620 free,  1689376 used.   638872 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 234656   3760 S  64.7  9.7   5:57.86 /usr/sbin+
 36504 healtho+  20   0  479396  89128   4324 R  52.9  3.7   0:06.21 php-fpm: +
 37132 cloudw    20   0  568828 107364   6740 R  23.5  4.4   0:00.91 php-fpm: +
 37245 nigeria   20   0  400652  15932  10216 S  17.6  0.7   0:00.04 /opt/cpan+
 37247 pactpay   20   0  476724  17116  11408 S  11.8  0.7   0:00.02 /opt/cpan+
   514 dbus      20   0   58596   1308    612 S   5.9  0.1   0:13.03 /usr/bin/+
 34189 nobody    20   0  277592  17840   3768 S   5.9  0.7   0:00.31 /usr/sbin+
     1 root      20   0   44428   3440   1516 S   0.0  0.1   0:34.62 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.79 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.18 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.05 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:27.33 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.54 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.81 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.60 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.31 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   5816   5568 S   0.0  0.2   0:14.16 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    452    324 S   0.0  0.0   0:02.25 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.73 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.54 /usr/sbin+
   501 polkitd   20   0  612240    840    456 S   0.0  0.0   0:03.41 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3128    868 S   0.0  0.1   0:00.33 queueproc+
   507 root      20   0   52852    160     72 S   0.0  0.0   0:00.01 /usr/sbin+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:21.84 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    848    412 S   0.0  0.0   0:00.70 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3740    804 S   0.0  0.2   0:00.91 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.97 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13908   2660 S   0.0  0.6   0:06.03 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.51 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.35 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.19 /usr/bin/+
   933 telegraf  20   0 5654048  34172   5836 S   0.0  1.4   0:13.85 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.55 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:03.19 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    352    260 S   0.0  0.0   0:00.73 php-fpm: +
   961 named     20   0  636988  36456   1748 S   0.0  1.5   0:14.66 /usr/sbin+
   964 root      20   0  290128   5764   5148 S   0.0  0.2   0:06.69 /usr/sbin+
   981 root      20   0  436392    384    296 S   0.0  0.0   0:00.83 php-fpm: +
   984 root      20   0  385496    464    368 S   0.0  0.0   0:00.71 php-fpm: +
   985 root      20   0  261420   6572   1744 S   0.0  0.3   0:03.96 cpsrvd (S+
   989 root      20   0  392856    432    348 S   0.0  0.0   0:00.70 php-fpm: +
   992 root      20   0 1901916 234328    644 S   0.0  9.7   0:32.41 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.45 php-fpm: +
  1006 cpanelc+  20   0   10656   3672   2280 S   0.0  0.2   0:20.66 /usr/loca+
  1075 dovenull  20   0   47264   1960   1172 S   0.0  0.1   0:00.48 dovecot/p+
  1076 dovenull  20   0   48460   2860   1588 S   0.0  0.1   0:00.44 dovecot/i+
  1077 dovecot   20   0   10320    256    148 S   0.0  0.0   0:00.13 dovecot/a+
  1078 root      20   0   10452    548    356 S   0.0  0.0   0:00.29 dovecot/l+
  1079 dovenull  20   0   47112   2184   1436 S   0.0  0.1   0:00.38 dovecot/p+
  1080 dovenull  20   0   48112   2896   1784 S   0.0  0.1   0:00.29 dovecot/i+
  1084 root      20   0   24572   2248    476 S   0.0  0.1   0:00.17 dovecot/c+
  1088 dovecot   20   0   13568    572    368 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1488    948 S   0.0  0.1   0:00.93 dovecot/a+
  1172 root      20   0  248152   5864   1112 S   0.0  0.2   0:05.81 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.27 /usr/bin/+
  1174 wp-tool+  20   0  410616  17956   1400 S   0.0  0.7   0:20.63 /usr/bin/+
  1232 root      20   0  209372   9656   1820 S   0.0  0.4   0:03.29 tailwatchd
  1234 root      20   0  167452   3400   2028 S   0.0  0.1   0:00.47 dnsadmin +
  1237 root      20   0  183900   5280   2044 S   0.0  0.2   0:01.15 cpdavd - +
  1642 root      20   0  299272    456    292 S   0.0  0.0   0:00.67 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:03.30 /usr/sbin+
  2063 root      20   0   12836    380    212 S   0.0  0.0   0:03.13 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.66 /usr/loca+
  2065 root      20   0   12876    392    216 S   0.0  0.0   0:02.95 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106360   2244 S   0.0  4.4   0:05.53 spamd chi+
  7886 root      20   0  261428  91916   1960 S   0.0  3.8   0:00.32 spamd chi+
  8440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10311 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 14740 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21197 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22937 nobody    20   0  277780  19036   4088 S   0.0  0.8   0:01.51 /usr/sbin+
 23292 root      20   0  183048   1376    848 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    616    436 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 28537 nobody    20   0  277608  18664   3888 S   0.0  0.8   0:00.86 /usr/sbin+
 28810 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30670 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34170 nobody    20   0  277784  17988   3724 S   0.0  0.7   0:00.34 /usr/sbin+
 34190 nobody    20   0  277960  18168   3824 S   0.0  0.8   0:00.35 /usr/sbin+
 34417 nobody    20   0  277568  17840   3724 S   0.0  0.7   0:00.23 /usr/sbin+
 34778 nobody    20   0  277568  17960   3740 S   0.0  0.7   0:00.32 /usr/sbin+
 35056 nobody    20   0  277568  17372   3640 S   0.0  0.7   0:00.29 /usr/sbin+
 35057 nobody    20   0  277572  17744   3744 S   0.0  0.7   0:00.23 /usr/sbin+
 35058 nobody    20   0  277948  18200   3852 S   0.0  0.8   0:00.17 /usr/sbin+
 35059 nobody    20   0  277968  17848   3668 S   0.0  0.7   0:00.23 /usr/sbin+
 35165 nobody    20   0  277824  17900   3704 S   0.0  0.7   0:00.23 /usr/sbin+
 35202 nobody    20   0  277568  17812   3768 S   0.0  0.7   0:00.21 /usr/sbin+
 35414 root      20   0   41052   2808   2144 S   0.0  0.1   0:00.00 dovecot/a+
 35844 nobody    20   0  277932  17720   3736 S   0.0  0.7   0:00.22 /usr/sbin+
 35862 nobody    20   0  277592  17844   3764 S   0.0  0.7   0:00.09 /usr/sbin+
 35882 nobody    20   0  277984  17948   3760 S   0.0  0.7   0:00.10 /usr/sbin+
 35883 nobody    20   0  277828  18128   3916 S   0.0  0.7   0:00.12 /usr/sbin+
 35885 nobody    20   0  277968  17656   3564 S   0.0  0.7   0:00.14 /usr/sbin+
 36216 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36285 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36289 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 36315 nobody    20   0  277832  17592   3624 S   0.0  0.7   0:00.17 /usr/sbin+
 36749 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 36824 healtho+  20   0  478976  89608   4136 S   0.0  3.7   0:02.54 php-fpm: +
 37035 nobody    20   0  277820  17104   3212 S   0.0  0.7   0:00.01 /usr/sbin+
 37144 nigeria   20   0  397064   1960    560 S   0.0  0.1   0:00.00 php-fpm: +
 37177 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 37180 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 37181 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37182 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37184 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37185 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37186 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37187 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37188 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37189 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37190 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37192 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37194 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 37195 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 37196 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 37215 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37216 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 37217 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37218 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 37219 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37220 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37221 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37223 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37224 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 37226 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37235 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 37244 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 37248 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 37255 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 37256 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 37257 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.40 [kworker]
 76167 root      20   0  182648   9820   1104 S   0.0  0.4   0:10.15 lfd - sle+
 82830 root      20   0 1276100  10496    596 S   0.0  0.4   0:00.09 /usr/bin/+
 82872 root      20   0 1277312  11672    596 S   0.0  0.5   0:00.07 /usr/bin/+
 83762 root      20   0  123364    644    420 S   0.0  0.0   0:00.00 /usr/sbin+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:27  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root        658  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root       8440  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:1]
root      10311  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:4]
root      14740  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/0:0]
root      21197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      28810  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:2]
root      30670  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:4]
root      31590  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:1]
root      36216  0.0  0.0      0     0 ?        S    02:56   0:00  \_ [kworker/0:3]
root      36285  0.0  0.0      0     0 ?        S    02:56   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  5816 ?        Ss   Nov12   0:14 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   452 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3128 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   160 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:21 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   848 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1376 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   616 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      37180  0.0  0.1 183080  2424 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37194  0.0  0.0 113284  1212 ?        Ss   02:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      37195  0.0  0.0 108052   360 ?        S    02:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      37196  0.0  0.0 113288  1516 ?        S    02:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      37258  0.0  0.0 153840  2092 ?        R    02:57   0:00  |               \_ ps auxf
root      37181  0.0  0.1 183080  2428 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37220  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      37182  0.0  0.1 183080  2428 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37221  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      37184  0.0  0.1 183080  2428 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37219  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      37185  0.0  0.1 183080  2424 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37226  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      37186  0.0  0.1 183080  2424 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37217  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      37187  0.0  0.0 183080  2420 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37215  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      37188  0.0  0.0 183080  2420 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37216  0.0  0.0  20164   988 ?        Ss   02:57   0:00  |   \_ jailshell (cloudsms) [37255] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  37255  0.0  0.0  20164   264 ?        S    02:57   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  37256  0.0  0.0 113284  1212 ?        S    02:57   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  37257  0.0  0.0  51892  1280 ?        R    02:57   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue3.php
root      37189  0.0  0.0 183080  2420 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37223  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      37190  0.0  0.0 183080  2420 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37224  0.0  0.0  20164   964 ?        Ss   02:57   0:00  |   \_ jailshell (pactpay) [37235] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37235  0.0  0.0  20164   256 ?        S    02:57   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37247  0.0  0.7 476724 17116 ?        S    02:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      37192  0.0  0.0 183080  2420 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      37218  0.0  0.0  20164   968 ?        Ss   02:57   0:00      \_ jailshell (nigeria) [37244] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37244  0.0  0.0  20164   264 ?        S    02:57   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37245  0.0  0.6 400652 15932 ?        S    02:57   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3740 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13908 ?        Ssl  Nov12   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1960 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2860 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   256 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   548 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2184 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48112  2896 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2248 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   572 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1488 ?        S    Nov12   0:00  \_ dovecot/auth
root      35414  0.0  0.1  41052  2808 ?        S    02:55   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34172 ?       SLsl Nov12   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:03 /usr/sbin/sshd -D
root      36289  0.0  0.1 111304  4264 ?        Ss   02:56   0:00  \_ sshd: [accepted]
root      36749  0.0  0.1 111304  4264 ?        Ss   02:56   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   352 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.5 636988 36456 ?        Ssl  Nov12   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 290128  5764 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   384 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   464 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261420  6572 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      37177  0.0  0.0      0     0 ?        Z    02:57   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   432 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 234328 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  36504 14.1  3.6 479396 89392 ?        R    02:56   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  36824 10.5  3.7 478976 89608 ?        S    02:56   0:02  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    37132 22.7  4.4 568960 107364 ?       S    02:56   0:00  \_ php-fpm: pool cloudware_ng
nigeria   37144  0.0  0.0 397064  1960 ?        S    02:56   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3672 ?        Ss   Nov12   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5864 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.3 294720 106360 ?       S    Nov12   0:05  \_ spamd child
root       7886  0.0  3.7 261428 91916 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17956 ?        Ss   Nov12   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  9656 ?        Ss   Nov12   0:03 tailwatchd
root       1234  0.0  0.1 167452  3400 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  5280 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   456 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  9.6 1457796 234656 ?      Sl   Nov12   5:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:03 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12836   380 ?        S    Nov12   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12876   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    22937  0.1  0.7 277780 19036 ?        S    02:44   0:01  \_ /usr/sbin/httpd -k start
nobody    28537  0.1  0.7 277608 18664 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    34170  0.1  0.7 277784 17988 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34189  0.1  0.7 277592 17840 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34190  0.1  0.7 277960 18168 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34417  0.1  0.7 277568 17840 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    34778  0.2  0.7 277568 17960 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    35056  0.2  0.7 277568 17372 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    35057  0.1  0.7 277572 17744 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    35058  0.1  0.7 277948 18200 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    35059  0.1  0.7 277968 17848 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    35165  0.1  0.7 277824 17900 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    35202  0.1  0.7 277568 17812 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    35844  0.2  0.7 277932 17720 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    35862  0.1  0.7 277592 17844 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    35882  0.1  0.7 277984 17948 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    35883  0.1  0.7 277828 18128 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    35885  0.1  0.7 277968 17656 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    36315  0.3  0.7 277832 17592 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
nobody    37035  0.1  0.7 277820 17104 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.4 182648  9820 ?        Ss   00:00   0:10 lfd - sleeping
root      82830  0.0  0.4 1276100 10496 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11672 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   644 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 24842  Threads: 6  Questions: 2138156  Slow queries: 0  Opens: 8043  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.070
*************************** 1. row ***************************
     Id: 30881
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30884
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30887
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 30889
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 5. row ***************************
     Id: 30892
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 148.113.128.231 TIME_WAIT
      1 167.114.139.243 TIME_WAIT
      1 173.236.212.185 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.222.232.51 TIME_WAIT
      1 202.79.161.74 TIME_WAIT
      1 40.77.167.77 TIME_WAIT
      1 5.255.231.103 TIME_WAIT
      1 66.249.64.38 TIME_WAIT
      1 66.249.70.164 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 162.216.150.34 TIME_WAIT
     16 77.83.36.161 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:57:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 53 minutes 58 seconds
   Server load: 1.07 0.58 0.50
   Total accesses: 140813 - Total Traffic: 3.7 GB - Total Duration: 72906377
   CPU Usage: u4.44 s5 cu1813.92 cs1476.58 - 13.3% CPU load
   5.67 requests/sec - 155.1 kB/second - 27.4 kB/request - 517.753 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KCKKKKKW._KCK.W..KK..K...W.R..K.K...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  28537 1/143/6201 K 3.92  0    837 3223282 0.9   4.14  158.39 45.147.234.24  http/1.1 cloudware.ng:80            GET /wp-json/wp/v2/users HTTP/1.1
   1-0  35844 54/73/6204 C 2.93  6    51  2965874 237.9 0.82  157.50 20.222.232.51  http/1.1 tasks.cloudware.ng:80      GET /n3.php HTTP/1.1
   2-0  35862 1/20/6156  K 0.33  3    362 3306028 30.2  0.46  175.76 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2407228
   3-0  34170 10/65/6241 K 1.47  1    272 3284817 304.1 1.51  176.37 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1703181
   4-0  34778 1/54/6014  K 1.34  4    681 3043618 20.2  1.43  158.18 66.249.64.225  http/1.1 cloudware.ng:443           GET /online-calendar-system-setup/ HTTP/1.1
   5-0  37035 1/3/6020   K 0.03  1    3   3161393 9.9   0.04  182.98 66.249.64.225  http/1.1 cloudware.ng:443           GET /wp-content/themes/consulting/assets/js/custom.js?ver=4.3 H
   6-0  35882 4/20/5945  K 0.34  2    266 3007684 123.4 0.43  155.85 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2583886
   7-0  35883 0/27/6689  W 0.42  0    0   3322342 0.0   0.68  178.67 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  -     0/0/5287   . 0.00  16   0   2743496 0.0   0.00  136.15 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  36315 0/30/5538  _ 0.78  0    305 2893369 0.0   0.82  146.81 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2320984
   10-0 34189 1/54/5602  K 1.24  0    398 2852263 31.0  1.41  152.81 66.249.70.141  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2281502
   11-0 35885 1/24/5856  C 0.62  0    9   3018901 9.3   0.75  182.98 3.93.98.99     http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/assets/css/blog/blog
   12-0 34190 8/62/5632  K 1.56  3    257 2786186 239.4 1.69  137.91 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2608566
   13-0 -     0/0/4654   . 0.00  86   0   2244758 0.0   0.00  110.55 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 22937 0/319/5030 W 10.41 0    0   2659007 0.0   6.11  144.79 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3812908176 HTTP/1.1
   15-0 -     0/0/4221   . 0.00  13   0   2208096 0.0   0.00  111.03 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/5945   . 0.00  72   0   2876072 0.0   0.00  154.10 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 35056 1/48/6010  K 1.19  1    10  3173879 55.2  1.29  173.58 66.249.64.224  http/1.1 cloudware.ng:443           GET /wp-content/uploads/stm_uploads/skin-custom.css?ver=1316239
   18-0 35057 7/40/3353  K 1.00  2    296 1866051 212.4 1.07  89.73  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2583664
   19-0 -     0/0/3955   . 0.00  111  0   2166971 0.0   0.00  104.93 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/2764   . 0.00  97   0   1441186 0.0   0.00  68.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 35058 3/35/2791  K 0.65  1    272 1512308 92.2  0.67  75.08  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=169215
   22-0 -     0/0/2834   . 0.00  90   0   1557322 0.0   0.00  85.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/2188   . 0.00  88   0   1194989 0.0   0.00  51.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/3045   . 0.00  96   0   1388944 0.0   0.00  70.64  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 35059 0/44/2235  W 0.98  0    0   1101990 0.0   1.09  58.33  173.244.42.160 http/1.1 health.oyostate.gov.ng:443 GET /?author=19 HTTP/1.1
   26-0 -     0/0/1300   . 0.00  110  0   719202  0.0   0.00  33.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 34417 0/44/1330  R 0.96  1    351 748240  0.0   1.03  34.77  114.119.155.44 http/1.1 nigeriadecide.org:443
   28-0 -     0/0/2342   . 0.00  74   0   1097438 0.0   0.00  57.74  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/929    . 0.00  98   0   516716  0.0   0.00  24.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 35165 4/42/1578  K 0.98  0    364 813881  119.3 1.16  36.62  66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=836165
   31-0 -     0/0/1063   . 0.00  89   0   598725  0.0   0.00  28.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 35202 8/39/823   K 0.88  4    287 502348  240.7 0.98  20.45  66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1208901
   33-0 -     0/0/963    . 0.00  112  0   560871  0.0   0.00  24.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/715    . 0.00  107  0   416587  0.0   0.00  18.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/428    . 0.00  104  0   179905  0.0   0.00  8.88   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/284    . 0.00  73   0   157197  0.0   0.00  7.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/315    . 0.00  1791 0   299040  0.0   0.00  8.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/237    . 0.00  1729 0   142498  0.0   0.00  5.82   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/106    . 0.00  1929 0   54836   0.0   0.00  2.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1131   . 0.00  1906 0   659515  0.0   0.00  32.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/89     . 0.00  1826 0   44408   0.0   0.00  2.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00  1927 0   6280    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/62     . 0.00  1893 0   32429   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/83     . 0.00  1847 0   37187   0.0   0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00  1933 0   2241    0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/7      . 0.00  1932 0   2520    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/292    . 0.00  1824 0   155098  0.0   0.00  7.19   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/36     . 0.00  1795 0   23094   0.0   0.00  0.88   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/5      . 0.00  1928 0   2208    0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00  1902 0   32174   0.0   0.00  3.76   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00  1923 0   3966    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00  1827 0   18976   0.0   0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/35     . 0.00  1901 0   18367   0.0   0.00  0.71   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/58     . 0.00  1908 0   25317   0.0   0.00  1.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/21     . 0.00  1849 0   7335    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/11     . 0.00  1920 0   3060    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00  5400 0   23864   0.0   0.00  0.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 452
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 2...51)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 35779
   total entries replaced since starting: 0
   total entries expired since starting: 35304
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 183 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit