403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.03.42.txt
 ## swap threshold exceeded
## server overview
2025-11-16.03.42 load[3] mem[54/82] mysql[1/25] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1121         178           8        1063        1048
Swap:          1999        1736         263
 03:42:02 up 13:17,  0 users,  load average: 3.17, 1.19, 0.63
## system overview
top - 03:42:02 up 13:17,  0 users,  load average: 3.17, 1.19, 0.63
Tasks: 197 total,   1 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 25.8 us, 25.8 sy,  0.0 ni,  3.2 id, 38.7 wa,  0.0 hi,  6.5 si,  0.0 st
KiB Mem :  2420300 total,   137936 free,  1166972 used,  1115392 buff/cache
KiB Swap:  2047996 total,   288320 free,  1759676 used.  1054664 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1462292 150276   1716 S  66.7  6.2  11:14.79 /usr/sbin+
   343 root       0 -20       0      0      0 S   6.7  0.0   0:03.71 [kworker/+
 83796 pactpay   20   0  480124  17684  11892 S   6.7  0.7   0:00.02 /opt/cpan+
 83797 nigeria   20   0  404052  16136  10380 S   6.7  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44412   3036   1388 S   0.0  0.1   1:05.12 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.90 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.25 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:47.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.11 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.30 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:35.79 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.83 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.69 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:03.15 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   3500   3324 S   0.0  0.1   0:23.73 /usr/lib/+
   385 root      20   0   45444     72     68 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    184     88 S   0.0  0.0   0:03.51 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    348    260 S   0.0  0.0   0:01.08 /usr/sbin+
   516 root      20   0  152780     52     48 S   0.0  0.0   0:00.03 /usr/sbin+
   521 root      20   0   24708   1056    788 S   0.0  0.0   0:11.11 /usr/lib/+
   523 nscd      20   0 1264844    660    268 S   0.0  0.0   0:38.39 /usr/sbin+
   524 root      20   0   52852      4      0 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240    924    628 S   0.0  0.0   0:06.54 /usr/lib/+
   529 root      20   0  224148   2292    128 S   0.0  0.1   0:00.53 queueproc+
   531 dbus      20   0   58740   1244    600 S   0.0  0.1   0:25.30 /usr/bin/+
   539 rpc       20   0   69256     48     44 S   0.0  0.0   0:00.05 /sbin/rpc+
   541 root      20   0    4388     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    424    288 S   0.0  0.0   0:01.36 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704     12     12 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   88988   2048     68 S   0.0  0.1   0:00.96 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:05.96 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    376    276 S   0.0  0.0   0:04.87 /usr/sbin+
   919 root      20   0 1350088   6272     12 S   0.0  0.3   0:20.16 /usr/bin/+
   920 systuser  20   0  111864      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  16860    292 S   0.0  0.7   0:26.15 /usr/loca+
   922 memcach+  20   0  342400      0      0 S   0.0  0.0   0:01.05 /usr/bin/+
   924 root      20   0  153404    192    112 S   0.0  0.0   0:00.99 pure-ftpd+
   926 root      20   0  572372    796    336 S   0.0  0.0   0:04.15 /usr/bin/+
   927 systuser  20   0  114016   9788   2504 S   0.0  0.4   0:11.36 /usr/loca+
   928 systuser  20   0   12756     20      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508     92      0 S   0.0  0.0   0:00.56 /usr/sbin+
   932 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   5880     32 S   0.0  0.2   0:24.35 /usr/bin/+
   946 root      20   0  396248    236    144 S   0.0  0.0   0:01.22 php-fpm: +
   954 named     20   0 1185864  13052    944 S   0.0  0.5   0:24.49 /usr/sbin+
   957 root      20   0  331088   1452   1140 S   0.0  0.1   0:12.21 /usr/sbin+
   973 root      20   0  400740   1732    516 S   0.0  0.1   0:07.30 php-fpm: +
   975 root      20   0  439788    220    132 S   0.0  0.0   0:01.45 php-fpm: +
   978 cpanelc+  20   0   10456   3276   2316 S   0.0  0.1   0:38.03 /usr/loca+
   980 root      20   0  388892    196    108 S   0.0  0.0   0:01.46 php-fpm: +
   991 root      20   0  389508    228    140 S   0.0  0.0   0:01.34 php-fpm: +
   992 root      20   0 1901868 573464   1224 S   0.0 23.7   0:37.54 /usr/loca+
   993 root      20   0  261288   3328    788 S   0.0  0.1   0:09.62 cpsrvd (S+
  1065 dovenull  20   0   47524    748    432 S   0.0  0.0   0:00.92 dovecot/p+
  1066 dovenull  20   0   47948    108     68 S   0.0  0.0   0:00.53 dovecot/i+
  1067 dovecot   20   0   10320      4      0 S   0.0  0.0   0:00.14 dovecot/a+
  1068 root      20   0   10452    440    292 S   0.0  0.0   0:00.54 dovecot/l+
  1069 dovenull  20   0   47600    268     24 S   0.0  0.0   0:00.72 dovecot/p+
  1070 dovenull  20   0   47848    132     40 S   0.0  0.0   0:00.46 dovecot/i+
  1077 root      20   0   24528     68     64 S   0.0  0.0   0:00.28 dovecot/c+
  1078 dovecot   20   0   13568     64     36 S   0.0  0.0   0:00.10 dovecot/s+
  1150 root      20   0  248140   1848    344 S   0.0  0.1   0:08.54 /usr/loca+
  1151 systuser  20   0  157704      4      0 S   0.0  0.0   0:00.22 SonarPush+
  1152 dovecot   20   0   41180    204      0 S   0.0  0.0   0:01.10 dovecot/a+
  1153 wp-tool+  20   0  387556   1328     60 S   0.0  0.1   0:00.43 /usr/bin/+
  1154 wp-tool+  20   0  410480   7972    972 S   0.0  0.3   0:40.50 /usr/bin/+
  1229 root      20   0  183900   2188     40 S   0.0  0.1   0:02.58 cpdavd - +
  1231 root      20   0  210204   3696    552 S   0.0  0.2   0:06.18 tailwatchd
  1232 root      20   0  167452    976    516 S   0.0  0.0   0:00.77 dnsadmin +
  1638 root      20   0  299272    272    128 S   0.0  0.0   0:01.29 php-fpm: +
  1681 root      38  18  130416    112     60 S   0.0  0.0   0:00.12 cpanellog+
  1909 root      20   0  266984   5452    372 S   0.0  0.2   0:04.76 /usr/sbin+
  8198 root      20   0  268280  11180     88 S   0.0  0.5   0:07.79 spamd chi+
  8199 root      20   0  249268    884     24 S   0.0  0.0   0:00.07 spamd chi+
 31033 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152     48     12 S   0.0  0.0   0:00.89 [kworker]
 46331 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 47250 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
 48777 root      20   0  182324   6028    872 S   0.0  0.2   0:14.73 lfd - sle+
 56521 root      20   0  123576    328    116 S   0.0  0.0   0:00.00 /usr/sbin+
 64252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66208 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 68134 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70611 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 78155 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 79438 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79492 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81139 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81206 root      30  10  132964    716     16 S   0.0  0.0   0:00.00 ConfigSer+
 81217 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 208+
 81352 root      20   0  183052     20     20 S   0.0  0.0   0:00.00 /usr/sbin+
 81404 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 3h +
 81530 root      20   0   12772    148     24 S   0.0  0.0   0:00.01 /usr/loca+
 81531 root      20   0   12732     72      0 S   0.0  0.0   0:00.01 /usr/loca+
 81532 root      20   0   12784    180     48 S   0.0  0.0   0:00.01 /usr/loca+
 81548 root      20   0   53256   5152     64 S   0.0  0.2   0:00.04 /usr/loca+
 81549 nobody    20   0  277776   9220   2760 S   0.0  0.4   0:00.36 /usr/sbin+
 81550 nobody    20   0  277636   9052   2780 S   0.0  0.4   0:00.44 /usr/sbin+
 81551 nobody    20   0  277908   9788   3324 S   0.0  0.4   0:00.30 /usr/sbin+
 81552 nobody    20   0  277572   8744   2080 S   0.0  0.4   0:00.56 /usr/sbin+
 81553 nobody    20   0  277712  11256   3188 S   0.0  0.5   0:00.23 /usr/sbin+
 81597 nobody    20   0  277672  15772   3232 S   0.0  0.7   0:00.24 /usr/sbin+
 81614 nobody    20   0  277776  14720   1992 S   0.0  0.6   0:00.79 /usr/sbin+
 81693 nobody    20   0  277500  14400   2772 S   0.0  0.6   0:00.19 /usr/sbin+
 81703 nobody    20   0  277776  12072   3052 S   0.0  0.5   0:00.35 /usr/sbin+
 81761 nobody    20   0  277788  15204   2764 S   0.0  0.6   0:00.20 /usr/sbin+
 82245 nobody    20   0  277924  12260   3192 S   0.0  0.5   0:00.31 /usr/sbin+
 83092 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 83280 nobody    20   0  277776  13396   3172 S   0.0  0.6   0:00.08 /usr/sbin+
 83470 root      20   0  111304   1184    168 S   0.0  0.0   0:00.00 sshd: [ac+
 83722 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 83725 nigeria   20   0  400460   4412   2300 S   0.0  0.2   0:00.00 php-fpm: +
 83731 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 83732 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 83734 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 83735 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 83736 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 83737 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 83738 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 83739 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 83740 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 83741 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 83742 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 83743 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 83745 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 83746 root      20   0  183048   2160   1596 S   0.0  0.1   0:00.00 /usr/sbin+
 83748 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 83750 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 83751 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83752 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83753 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83754 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83755 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 83756 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83757 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83758 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83759 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83760 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 83761 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83762 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 83767 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 83770 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 83788 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 83789 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 83790 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 83791 saboakin  20   0  404052  15612  10156 S   0.0  0.6   0:00.01 /opt/cpan+
 83793 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 83794 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 83798 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.01 /opt/cpan+
 83810 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov15   0:47  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:35  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:04  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:03  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:05  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root      46331  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:2]
root      47250  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/1:3]
root      64252  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/0:4]
root      66208  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/u200:1]
root      68134  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:2]
root      70611  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/1:0]
root      78155  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:1]
root      79438  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/0:0]
root      79492  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/0:3]
root      81139  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/1:4]
root      83092  0.1  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44412  3036 ?        Ss   Nov15   1:05 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39500  3500 ?        Ss   Nov15   0:23 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444    72 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   184 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   348 ?        Ss   Nov15   0:01 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780    52 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1056 ?        Ss   Nov15   0:11 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844  660 ?        Ssl  Nov15   0:38 /usr/sbin/nscd
root        524  0.0  0.0  52852     4 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240   924 ?        Ssl  Nov15   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.0 224148  2292 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1244 ?        Ss   Nov15   0:25 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256    48 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    32 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   424 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052    20 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root      83731  0.0  0.0 183048  2160 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83760  0.0  0.0 113284  1212 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      83767  0.0  0.0 108052   356 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      83770  0.0  0.0 113288  1520 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      83816  0.0  0.0 153840  2092 ?        R    03:42   0:00  |               \_ ps auxf
root      83732  0.0  0.0 183048  2164 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83754  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      83734  0.0  0.0 183048  2164 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83758  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      83735  0.0  0.0 183048  2164 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83757  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      83736  0.0  0.0 183048  2160 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83752  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      83737  0.0  0.0 183048  2160 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83762  0.0  0.0  20164   968 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [83788] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  83788  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  83789  0.0  0.0 113284  1212 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  83798  1.0  0.6 404052 15612 ?        S    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      83738  0.0  0.0 183048  2156 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83761  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      83739  0.0  0.0 183048  2156 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83751  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      83740  0.0  0.0 183048  2156 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83753  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      83741  0.0  0.0 183048  2156 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83759  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      83742  0.0  0.0 183048  2156 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83756  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      83743  0.0  0.0 183048  2152 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83755  0.0  0.0  20164   960 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [83794] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83794  0.0  0.0  20164   256 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83796  2.0  0.7 480124 17684 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      83745  0.0  0.0 183048  2152 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83750  0.0  0.0  20164   972 ?        Ss   03:42   0:00  |   \_ jailshell (nigeria) [83793] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83793  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83797  2.0  0.6 404052 16136 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      83746  0.0  0.0 183048  2160 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      83748  0.0  0.0  20164   968 ?        Ss   03:42   0:00      \_ jailshell (saboakin) [83790] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  83790  0.0  0.0  20164   260 ?        S    03:42   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  83791  1.0  0.6 404052 15612 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296    44 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704    12 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.0  88988  2048 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   376 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root      83470  0.0  0.0 111304  1184 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root        919  0.0  0.2 1350088 6272 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864     0 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  0.6 5654304 16860 ?       SLsl Nov15   0:26 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400     0 ?        Ssl  Nov15   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   192 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372   796 ?        Ssl  Nov15   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.4 114016  9788 ?        Ssl  Nov15   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    20 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132     0 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508    92 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.0  47524   748 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.0  47948   108 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320     4 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   440 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.0  47600   268 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.0  47848   132 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.0  24528    68 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568    64 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180   204 ?        S    Nov15   0:01  \_ dovecot/auth
systuser    932  0.0  0.0 113932     4 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028     0 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 5880 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   236 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  0.5 1185864 13052 ?       Ssl  Nov15   0:24 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.0 331088  1452 ?        Ssl  Nov15   0:12 /usr/sbin/rsyslogd -n
root        973  0.0  0.0 400740  1732 ?        Ss   Nov15   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   83725  0.0  0.1 400460  4412 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788   220 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3276 ?        Ss   Nov15   0:38 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   196 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   228 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0 23.6 1901868 573464 ?      Ssl  Nov15   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.1 261288  3328 ?        Ss   Nov15   0:09 cpsrvd (SSL) - waiting for connections                   
root      83722  0.0  0.0      0     0 ?        Z    03:41   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.0 248140  1848 ?        Ss   Nov15   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  0.4 268280 11180 ?        S    Nov15   0:07  \_ spamd child
root       8199  0.0  0.0 249268   884 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.0 157704     4 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.0 387556  1328 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  0.3 410480  7972 ?        Ss   Nov15   0:40 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.0 183900  2188 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.1 210204  3696 ?        Ss   Nov15   0:06 tailwatchd
root       1232  0.0  0.0 167452   976 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   272 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416   112 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4  6.2 1462292 151492 ?      Sl   Nov15  11:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.2 266984  5452 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root      81530  0.0  0.0  12772   148 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      81531  0.0  0.0  12732    72 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      81532  0.0  0.0  12784   180 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      81548  0.0  0.2  53256  5152 ?        S    03:39   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    81549  0.2  0.3 277776  9220 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81550  0.2  0.3 277636  9052 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81551  0.1  0.4 277908  9788 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81552  0.3  0.3 277572  8744 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81553  0.1  0.4 277712 11256 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81597  0.1  0.6 277672 15772 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81614  0.4  0.6 277776 14720 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81693  0.1  0.5 277500 14400 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81703  0.2  0.4 277776 12072 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81761  0.1  0.6 277788 15204 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    82245  0.2  0.5 277924 12260 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody    83280  0.1  0.5 277776 13396 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148     8 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152    48 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  0.2 182324  6028 ?        Ss   00:00   0:14 lfd - sleeping
root      56521  0.0  0.0 123576   328 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      81206  0.0  0.0 132964   716 ?        SN   03:39   0:00 ConfigServer Version Check
root      81217  0.0  0.0 108056     0 ?        SN   03:39   0:00  \_ sleep 20878
## mysql stats
Uptime: 47856  Threads: 7  Questions: 4232606  Slow queries: 0  Opens: 14242  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.444
*************************** 1. row ***************************
     Id: 59669
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-16' LIMIT 1
*************************** 2. row ***************************
     Id: 59670
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 3. row ***************************
     Id: 59671
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 59672
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 5. row ***************************
     Id: 59673
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 59674
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 59677
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.138 TIME_WAIT
      1 114.119.144.127 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 68.221.75.30 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      7 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 03:42:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 13 hours 17 minutes 31 seconds
   Server load: 3.17 1.19 0.63
   Total accesses: 247916 - Total Traffic: 5.1 GB - Total Duration: 123665458
   CPU Usage: u2.68 s6.12 cu3019.88 cs2563.41 - 11.7% CPU load
   5.18 requests/sec - 111.1 kB/second - 21.5 kB/request - 498.82 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KK_K__WKK._.K......K............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-1  81597 1/37/12562   K 1.27 0     344 5918929 33.7  0.82  250.91 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=1931770541 HTTP/1.1
   1-1  81614 34/65/12832  K 2.10 0     24  6229914 33.5  0.87  253.98 66.249.70.8    http/1.1 test.cloudware.ng:443  GET /1571400609?goodscode=1569341870 HTTP/1.1
   2-1  81693 0/30/12173   _ 0.68 2     2   5839153 0.0   0.71  248.72 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   3-1  81552 78/120/12509 K 3.90 2     23  5785218 71.1  0.64  247.81 66.249.70.7    http/1.1 test.cloudware.ng:443  GET /871977682?goodscode=0870835618 HTTP/1.1
   4-1  81703 0/101/13094  _ 2.20 0     1   6627700 0.0   0.50  250.29 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   5-1  81551 0/78/11691   _ 1.89 2     2   5701184 0.0   0.67  246.48 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   6-1  81761 0/33/12041   W 0.82 0     0   5789033 0.0   0.61  246.64 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   7-1  82245 1/61/11184   K 2.33 0     914 5352993 297.8 0.52  225.40 216.244.66.226 http/1.1 theforge.com.ng:80     GET /theforgeapp/uploads/personal_info/lol@l/lol@l_Capture.PNG
   8-1  83280 2/10/10680   K 0.38 3     349 5342357 64.5  0.25  225.33 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=4145406580 HTTP/1.1
   9-0  -     0/0/10984    . 0.00 171   357 5190736 0.0   0.00  247.98 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2060911775 HTTP/1.1
   10-1 81553 0/33/11051   _ 1.32 1     18  5209250 0.0   1.01  237.16 52.71.46.142   http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/2019elections/blog/pollin
   11-0 -     0/0/10262    . 0.00 172   347 5259576 0.0   0.00  230.18 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2335627712 HTTP/1.1
   12-1 81549 1/110/9969   K 2.76 4     396 5366690 36.0  0.45  206.95 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=952677511 HTTP/1.1
   13-0 -     0/0/9893     . 0.00 522   0   5035378 0.0   0.00  210.50 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/8700     . 0.00 525   0   4278843 0.0   0.00  185.31 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/9036     . 0.00 173   392 4682652 0.0   0.00  193.95 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1505981542 HTTP/1.1
   16-0 -     0/0/8125     . 0.00 585   0   4046073 0.0   0.00  175.36 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/7806     . 0.00 624   0   3708865 0.0   0.00  159.19 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/6743     . 0.00 922   0   3647060 0.0   0.00  157.52 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-1 81550 1/124/7305   K 2.75 3     399 3517245 36.0  1.09  146.10 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=75860345 HTTP/1.1
   20-0 -     0/0/4830     . 0.00 1099  0   2517337 0.0   0.00  104.70 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/4778     . 0.00 586   0   2497608 0.0   0.00  104.33 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/4592     . 0.00 920   0   2570219 0.0   0.00  109.25 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/4649     . 0.00 676   0   2574917 0.0   0.00  107.67 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2611     . 0.00 2611  0   1598512 0.0   0.00  62.90  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1339     . 0.00 2737  0   720622  0.0   0.00  30.12  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1182     . 0.00 4505  0   641835  0.0   0.00  26.97  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/767      . 0.00 4417  0   421900  0.0   0.00  15.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/967      . 0.00 4486  0   448661  0.0   0.00  17.56  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/522      . 0.00 4499  0   306534  0.0   0.00  11.62  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1233     . 0.00 4508  0   719887  0.0   0.00  28.67  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/632      . 0.00 4498  0   244800  0.0   0.00  9.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/399      . 0.00 4484  0   188326  0.0   0.00  6.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/212      . 0.00 4507  0   119093  0.0   0.00  3.76   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/839      . 0.00 4237  0   454966  0.0   0.00  14.68  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/256      . 0.00 4495  0   159053  0.0   0.00  3.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/249      . 0.00 4471  0   209399  0.0   0.00  5.47   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/269      . 0.00 4491  0   116246  0.0   0.00  3.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/87       . 0.00 4504  0   41995   0.0   0.00  0.97   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/679      . 0.00 4489  0   324717  0.0   0.00  13.47  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/146      . 0.00 4494  0   134902  0.0   0.00  2.38   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/303      . 0.00 4043  0   130078  0.0   0.00  4.55   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/169      . 0.00 4482  0   102387  0.0   0.00  10.66  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/140      . 0.00 4513  0   75922   0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/638      . 0.00 2951  0   199834  0.0   0.00  13.45  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/534      . 0.00 4487  0   268130  0.0   0.00  12.15  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/31       . 0.00 4488  0   37248   0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/157      . 0.00 4502  0   39861   0.0   0.00  1.58   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/253      . 0.00 4308  0   72401   0.0   0.00  3.19   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/115      . 0.00 4394  0   85640   0.0   0.00  3.68   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/448      . 0.00 4514  0   253173  0.0   0.00  9.86   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/48       . 0.00 4470  0   22050   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/30       . 0.00 4512  0   8952    0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/125      . 0.00 7285  0   81098   0.0   0.00  2.15   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/286      . 0.00 7279  0   153536  0.0   0.00  5.93   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/422      . 0.00 7261  0   320901  0.0   0.00  13.81  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/79       . 0.00 7309  0   50774   0.0   0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/30       . 0.00 7310  0   8201    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/345      . 0.00 7144  0   224672  0.0   0.00  7.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/211      . 0.00 7148  0   85306   0.0   0.00  3.87   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/257      . 0.00 6892  0   154505  0.0   0.00  5.37   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/210      . 0.00 7163  0   75311   0.0   0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/225      . 0.00 7304  0   116672  0.0   0.00  4.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/53       . 0.00 7150  0   41973   0.0   0.00  0.90   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/234      . 0.00 7272  0   61300   0.0   0.00  1.81   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/104      . 0.00 7151  0   43929   0.0   0.00  1.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/54       . 0.00 7270  0   37444   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/137      . 0.00 6870  0   63130   0.0   0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/21       . 0.00 7301  0   40095   0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/201      . 0.00 7280  0   93119   0.0   0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/66       . 0.00 7289  0   66683   0.0   0.00  1.28   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/931      . 0.00 7263  0   498006  0.0   0.00  20.96  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/182      . 0.00 7139  0   69161   0.0   0.00  2.55   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/263      . 0.00 7267  0   128005  0.0   0.00  4.46   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/95       . 0.00 7136  0   55142   0.0   0.00  2.51   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/15       . 0.00 7297  0   12842   0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/151      . 0.00 7300  0   87735   0.0   0.00  3.29   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/15       . 0.00 7299  0   2685    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/17       . 0.00 7323  0   16053   0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/43       . 0.00 7311  0   30142   0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/21       . 0.00 7307  0   6790    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/361      . 0.00 7306  0   198769  0.0   0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/6        . 0.00 7282  0   876     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   83-0 -     0/0/3        . 0.00 36839 0   644     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   84-0 -     0/0/2        . 0.00 36857 0   3       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   85-0 -     0/0/7        . 0.00 36824 0   3861    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 372
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 141 seconds, (range: 125...190)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 372
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit