403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.04.06.txt
 ## swap threshold exceeded
## server overview
2025-11-16.04.06 load[0] mem[65/69] mysql[3/25] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1431         139          19         792         727
Swap:          1999        1514         485
 04:06:01 up 13:41,  0 users,  load average: 0.19, 0.27, 0.39
## system overview
top - 04:06:01 up 13:41,  0 users,  load average: 0.19, 0.27, 0.39
Tasks: 206 total,   4 running, 200 sleeping,   0 stopped,   2 zombie
%Cpu(s): 51.5 us, 27.3 sy,  0.0 ni, 21.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   130284 free,  1478024 used,   811992 buff/cache
KiB Swap:  2047996 total,   497616 free,  1550380 used.   733232 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1462292 258540   4712 R  75.0 10.7  11:34.60 /usr/sbin+
101614 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.05 /opt/cpan+
101646 cloudw    20   0  288176  15948  10472 S   6.2  0.7   0:00.01 /opt/cpan+
101653 cloudsms  20   0  404052  15880  10224 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44412   3232   1464 S   0.0  0.1   1:06.95 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.99 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.34 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:49.26 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.18 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.51 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:36.60 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.86 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.89 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:03.23 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:03.88 [kworker/+
   358 root      20   0   40244   4840   4584 S   0.0  0.2   0:24.51 /usr/lib/+
   385 root      20   0   45444     72     68 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    184     88 S   0.0  0.0   0:03.64 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    348    260 S   0.0  0.0   0:01.11 /usr/sbin+
   516 root      20   0  152780     44     40 S   0.0  0.0   0:00.03 /usr/sbin+
   521 root      20   0   24708   1124    796 S   0.0  0.0   0:11.45 /usr/lib/+
   523 nscd      20   0 1264844   1756    772 S   0.0  0.1   0:39.76 /usr/sbin+
   524 root      20   0   52852    252    184 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240    924    628 S   0.0  0.0   0:06.75 /usr/lib/+
   529 root      20   0  224148   3188    924 S   0.0  0.1   0:00.55 queueproc+
   531 dbus      20   0   58740   1372    600 S   0.0  0.1   0:26.09 /usr/bin/+
   539 rpc       20   0   69256     48     44 S   0.0  0.0   0:00.05 /sbin/rpc+
   541 root      20   0    4388     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    432    296 S   0.0  0.0   0:01.40 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704     12     12 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   88988   4308   1280 S   0.0  0.2   0:01.00 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:05.97 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    376    276 S   0.0  0.0   0:05.04 /usr/sbin+
   919 root      20   0 1350088   6372     12 S   0.0  0.3   0:20.19 /usr/bin/+
   920 systuser  20   0  111864     60      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  34776   5844 S   0.0  1.4   0:26.95 /usr/loca+
   922 memcach+  20   0  342400      0      0 S   0.0  0.0   0:01.08 /usr/bin/+
   924 root      20   0  153404    268    188 S   0.0  0.0   0:01.01 pure-ftpd+
   926 root      20   0  572372    796    336 S   0.0  0.0   0:04.27 /usr/bin/+
   927 systuser  20   0  114016  10416   2644 S   0.0  0.4   0:11.70 /usr/loca+
   928 systuser  20   0   12756     20      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508    468    304 S   0.0  0.0   0:00.57 /usr/sbin+
   932 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   5968     32 S   0.0  0.2   0:24.35 /usr/bin/+
   946 root      20   0  396248    436    344 S   0.0  0.0   0:01.26 php-fpm: +
   954 named     20   0 1185864  27584   1892 S   0.0  1.1   0:25.33 /usr/sbin+
   957 root      20   0  331088   5088   4648 S   0.0  0.2   0:12.62 /usr/sbin+
   973 root      20   0  400740   1840    624 S   0.0  0.1   0:07.49 php-fpm: +
   975 root      20   0  439788    368    280 S   0.0  0.0   0:01.49 php-fpm: +
   978 cpanelc+  20   0   10456   3440   2312 S   0.0  0.1   0:39.15 /usr/loca+
   980 root      20   0  388892    472    376 S   0.0  0.0   0:01.50 php-fpm: +
   991 root      20   0  389508    388    300 S   0.0  0.0   0:01.38 php-fpm: +
   992 root      20   0 1901868 553240    624 S   0.0 22.9   0:37.54 /usr/loca+
   993 root      20   0  261288   6188   1708 S   0.0  0.3   0:09.89 cpsrvd (S+
  1065 dovenull  20   0   47524   1996   1396 S   0.0  0.1   0:00.94 dovecot/p+
  1066 dovenull  20   0   47948   2164   1424 S   0.0  0.1   0:00.55 dovecot/i+
  1067 dovecot   20   0   10320    392    280 S   0.0  0.0   0:00.15 dovecot/a+
  1068 root      20   0   10452    440    292 S   0.0  0.0   0:00.55 dovecot/l+
  1069 dovenull  20   0   47600    900    580 S   0.0  0.0   0:00.73 dovecot/p+
  1070 dovenull  20   0   47848   2252   1556 S   0.0  0.1   0:00.46 dovecot/i+
  1077 root      20   0   24528   1888    484 S   0.0  0.1   0:00.29 dovecot/c+
  1078 dovecot   20   0   13568    420    268 S   0.0  0.0   0:00.10 dovecot/s+
  1150 root      20   0  248140   2804    744 S   0.0  0.1   0:08.71 /usr/loca+
  1151 systuser  20   0  157704   2936    968 S   0.0  0.1   0:00.23 SonarPush+
  1152 dovecot   20   0   41180   1456    984 S   0.0  0.1   0:01.14 dovecot/a+
  1153 wp-tool+  20   0  387556   3524   1660 S   0.0  0.1   0:00.44 /usr/bin/+
  1154 wp-tool+  20   0  410480  10732   1680 S   0.0  0.4   0:41.73 /usr/bin/+
  1229 root      20   0  183900   6448   3216 S   0.0  0.3   0:02.67 cpdavd - +
  1231 root      20   0  210368   9476   1904 S   0.0  0.4   0:06.41 tailwatchd
  1232 root      20   0  167452   1224    668 S   0.0  0.1   0:00.79 dnsadmin +
  1638 root      20   0  299272    432    272 S   0.0  0.0   0:01.33 php-fpm: +
  1681 root      38  18  130416   1380    708 S   0.0  0.1   0:00.12 cpanellog+
  1909 root      20   0  266984   5624    528 S   0.0  0.2   0:04.88 /usr/sbin+
  8198 root      20   0  268280  48780   1124 S   0.0  2.0   0:08.00 spamd chi+
  8199 root      20   0  249268   1336    388 S   0.0  0.1   0:00.07 spamd chi+
 31033 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152     48     12 S   0.0  0.0   0:00.92 [kworker]
 48777 root      20   0  182464   8320   1112 S   0.0  0.3   0:16.29 lfd - sle+
 64252 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 66208 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 70611 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 78155 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 81206 root      30  10  132964    716     16 S   0.0  0.0   0:00.00 ConfigSer+
 81217 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 208+
 81352 root      20   0  183052     20     20 S   0.0  0.0   0:00.00 /usr/sbin+
 81404 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 3h +
 81530 root      20   0   12792    424    288 S   0.0  0.0   0:00.19 /usr/loca+
 81531 root      20   0   12732    416    308 S   0.0  0.0   0:00.16 /usr/loca+
 81532 root      20   0   12816    432    292 S   0.0  0.0   0:00.18 /usr/loca+
 81548 root      20   0   53256   5152     64 S   0.0  0.2   0:00.04 /usr/loca+
 84542 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87796 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 88163 nobody    20   0  277616  19780   4808 S   0.0  0.8   0:01.32 /usr/sbin+
 89227 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 91620 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92056 nobody    20   0  277512  19232   4384 S   0.0  0.8   0:01.12 /usr/sbin+
 92066 nobody    20   0  277712  19448   4584 S   0.0  0.8   0:01.63 /usr/sbin+
 92934 nobody    20   0  277800  19652   4656 S   0.0  0.8   0:00.96 /usr/sbin+
 96730 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96808 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 96900 nobody    20   0  277652  18828   4128 S   0.0  0.8   0:00.29 /usr/sbin+
 97454 nobody    20   0  277776  18984   4396 S   0.0  0.8   0:00.92 /usr/sbin+
 97458 nobody    20   0  277712  18856   4328 S   0.0  0.8   0:00.52 /usr/sbin+
 97459 nobody    20   0  277908  18804   4272 S   0.0  0.8   0:00.34 /usr/sbin+
 97588 nobody    20   0  277784  18824   4224 S   0.0  0.8   0:00.43 /usr/sbin+
 97654 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97687 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 97724 nobody    20   0  277780  18584   4120 S   0.0  0.8   0:00.33 /usr/sbin+
 98120 nobody    20   0  277908  18944   4352 S   0.0  0.8   0:00.43 /usr/sbin+
 98139 nobody    20   0  277908  18448   4080 S   0.0  0.8   0:00.34 /usr/sbin+
100203 nobody    20   0  277776  18780   4048 S   0.0  0.8   0:00.18 /usr/sbin+
100489 nobody    20   0  277904  17844   3532 S   0.0  0.7   0:00.17 /usr/sbin+
100500 nobody    20   0  277924  18492   4096 S   0.0  0.8   0:00.10 /usr/sbin+
101060 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
101136 nobody    20   0  277464  17676   3540 S   0.0  0.7   0:00.02 /usr/sbin+
101148 nobody    20   0  277908  18208   3776 S   0.0  0.8   0:00.07 /usr/sbin+
101254 root      20   0  111304   4280   3256 S   0.0  0.2   0:00.00 sshd: [ac+
101269 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
101370 nobody    20   0  277700  17824   3616 S   0.0  0.7   0:00.01 /usr/sbin+
101405 nigeria   20   0  401500   9460   4052 S   0.0  0.4   0:00.20 php-fpm: +
101544 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
101548 nobody    20   0  277376  15964   2184 S   0.0  0.7   0:00.01 /usr/sbin+
101558 nobody    20   0  277052  14140    808 S   0.0  0.6   0:00.00 /usr/sbin+
101559 nobody    20   0  277052  14140    808 S   0.0  0.6   0:00.00 /usr/sbin+
101563 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101564 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101566 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101567 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101568 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101569 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101570 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101571 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101572 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101573 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101574 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101575 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101577 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101580 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
101583 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101584 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101585 root      20   0   20164    988    788 R   0.0  0.0   0:00.00 jailshell+
101586 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101587 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101588 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101589 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101590 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101591 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
101592 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
101593 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
101596 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101598 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
101602 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
101608 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
101612 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
101615 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
101644 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
101647 cloudsms  20   0       0      0      0 Z   0.0  0.0   0:00.00 [jailshel+
101651 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
101652 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
101655 root      20   0  153404     80      0 R   0.0  0.0   0:00.00 pure-ftpd+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov15   0:49  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:36  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:04  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:03  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:05  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      64252  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/0:4]
root      66208  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/u200:1]
root      70611  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/1:0]
root      78155  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:1]
root      84542  0.0  0.0      0     0 ?        S    03:43   0:00  \_ [kworker/0:1]
root      87796  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/u200:0]
root      89227  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/1:4]
root      91620  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/0:2]
root      96730  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/0:0]
root      96808  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/1:2]
root      97654  0.0  0.0      0     0 ?        S    04:01   0:00  \_ [kworker/0:3]
root      97687  0.0  0.0      0     0 ?        S    04:01   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44412  3232 ?        Ss   Nov15   1:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4840 ?        Ss   Nov15   0:24 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444    72 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   184 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   348 ?        Ss   Nov15   0:01 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780    44 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1124 ?        Ss   Nov15   0:11 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1756 ?        Ssl  Nov15   0:39 /usr/sbin/nscd
root        524  0.0  0.0  52852   252 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240   924 ?        Ssl  Nov15   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.1 224148  3188 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1372 ?        Rs   Nov15   0:26 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256    48 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    32 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   432 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052    20 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root     101563  0.0  0.0 183048  2156 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101580  0.0  0.0 113284  1208 ?        Ss   04:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     101598  0.0  0.0 108052   356 ?        S    04:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     101602  0.0  0.0 113288  1520 ?        S    04:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     101656  0.0  0.0 153840  2096 ?        R    04:06   0:00  |               \_ ps auxf
root     101564  0.0  0.0 183044  2216 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101566  0.0  0.0 183048  2160 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101586  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root     101567  0.0  0.0 183048  2160 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101589  0.0  0.0  20164   808 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root     101568  0.0  0.0 183048  2156 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101590  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root     101569  0.0  0.0 183048  2156 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101588  0.0  0.0  20164   808 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root     101570  0.0  0.0 183048  2152 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101591  0.0  0.0  20164   992 ?        Ss   04:06   0:00  |   \_ jailshell (cloudsms) [101651] l -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms 101651  0.0  0.0      0     0 ?        D    04:06   0:00  |       \_ [jailshell]
root     101571  0.0  0.0 183048  2156 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101584  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root     101572  0.0  0.0 183048  2148 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101583  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root     101573  0.0  0.0 183048  2152 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101596  0.0  0.0  20164   808 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root     101574  0.0  0.0 183048  2152 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101587  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root     101575  0.0  0.0 183048  2152 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101592  0.0  0.0  20164   964 ?        Ss   04:06   0:00  |   \_ jailshell (pactpay) [101612] ll -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  101612  0.0  0.0  20164   260 ?        S    04:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  101615  0.0  0.7 480124 17688 ?        S    04:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root     101577  0.0  0.0 183048  2148 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root     101593  0.0  0.0  20164   968 ?        Ss   04:06   0:00      \_ jailshell (nigeria) [101608] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  101608  0.0  0.0  20164   260 ?        S    04:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  101614  0.0  0.6 404052 16140 ?        S    04:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296    44 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704    12 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  88988  4308 ?        Ss   Nov15   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   376 ?        Ss   Nov15   0:05 /usr/sbin/sshd -D
root     101060  0.0  0.1 111304  4272 ?        Ss   04:05   0:00  \_ sshd: [accepted]
root     101254  0.0  0.1 111304  4280 ?        Ss   04:05   0:00  \_ sshd: [accepted]
sshd     101269  0.0  0.1 115644  2632 ?        S    04:05   0:00      \_ sshd: [net]
root        919  0.0  0.2 1350088 6372 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    60 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 34776 ?       SLsl Nov15   0:26 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400     0 ?        Ssl  Nov15   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   268 ?        Ss   Nov15   0:01 pure-ftpd (SERVER)
root        926  0.0  0.0 572372   796 ?        Ssl  Nov15   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.4 114016 10416 ?        Ssl  Nov15   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    20 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132     0 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   468 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.0  47524  1996 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.0  47948  2164 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   392 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   440 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.0  47600   900 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.0  47848  2252 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.0  24528  1888 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   420 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1456 ?        S    Nov15   0:01  \_ dovecot/auth
systuser    932  0.0  0.0 113932     4 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028     0 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 5968 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   436 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.1 1185864 27584 ?       Ssl  Nov15   0:25 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.2 331088  5096 ?        Ssl  Nov15   0:12 /usr/sbin/rsyslogd -n
root        973  0.0  0.0 400740  1840 ?        Ss   Nov15   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria  101405  1.0  0.3 401500  9460 ?        S    04:05   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788   368 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3440 ?        Ss   Nov15   0:39 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   472 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   388 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0 22.8 1901868 553240 ?      Ssl  Nov15   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  6188 ?        Ss   Nov15   0:09 cpsrvd (SSL) - waiting for connections                   
root     101544  0.0  0.0      0     0 ?        Z    04:05   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.1 248140  2804 ?        Ss   Nov15   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  2.0 268280 48780 ?        S    Nov15   0:08  \_ spamd child
root       8199  0.0  0.0 249268  1336 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2936 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.1 387556  3524 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  0.4 410480 10732 ?        Ss   Nov15   0:41 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  6448 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.3 210368  9476 ?        Ss   Nov15   0:06 tailwatchd
root       1232  0.0  0.0 167452  1224 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   432 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1380 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 10.6 1462292 258540 ?      Sl   Nov15  11:34 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.2 266984  5624 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root      81530  0.0  0.0  12792   424 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      81531  0.0  0.0  12732   416 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      81532  0.0  0.0  12816   432 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      81548  0.0  0.2  53256  5152 ?        S    03:39   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    88163  0.1  0.8 277616 19780 ?        S    03:48   0:01  \_ /usr/sbin/httpd -k start
nobody    92056  0.1  0.7 277512 19232 ?        S    03:54   0:01  \_ /usr/sbin/httpd -k start
nobody    92066  0.2  0.8 277712 19448 ?        S    03:54   0:01  \_ /usr/sbin/httpd -k start
nobody    92934  0.1  0.8 277800 19652 ?        S    03:55   0:00  \_ /usr/sbin/httpd -k start
nobody    96900  0.0  0.7 277652 18828 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    97454  0.2  0.7 277776 18984 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    97458  0.1  0.7 277712 18856 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
cloudw   101646  0.0  0.6 353712 15976 ?        S    04:06   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    97459  0.1  0.7 277908 18804 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    97588  0.1  0.7 277784 18824 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    97724  0.1  0.7 277780 18584 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    98120  0.1  0.7 277908 18944 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    98139  0.1  0.7 277908 18448 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody   100203  0.1  0.7 277776 18780 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody   100489  0.1  0.7 277904 17844 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody   100500  0.1  0.7 277924 18492 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody   101136  0.0  0.7 277464 17676 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody   101148  0.1  0.7 277908 18208 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody   101370  0.0  0.7 277700 17824 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody   101548  1.0  0.6 277376 15964 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody   101558  0.0  0.5 277052 14140 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody   101559  0.0  0.5 277052 14140 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148     8 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152    48 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  0.3 182464  8320 ?        Ss   00:00   0:16 lfd - sleeping
root      81206  0.0  0.0 132964   716 ?        SN   03:39   0:00 ConfigServer Version Check
root      81217  0.0  0.0 108056     0 ?        SN   03:39   0:00  \_ sleep 20878
## mysql stats
Uptime: 49295  Threads: 3  Questions: 4344740  Slow queries: 0  Opens: 15147  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.137
*************************** 1. row ***************************
     Id: 61238
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 61239
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 61246
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 114.119.149.43 TIME_WAIT
      1 114.119.153.191 TIME_WAIT
      1 142.147.186.83 TIME_WAIT
      1 154.30.73.248 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 69.91.190.151 TIME_WAIT
      1 78.159.130.8 TIME_WAIT
      1 92.50.23.102 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 04:06:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 13 hours 41 minutes 31 seconds
   Server load: 0.19 0.27 0.39
   Total accesses: 255729 - Total Traffic: 5.2 GB - Total Duration: 126374233
   CPU Usage: u7.16 s6.91 cu3112.48 cs2650.99 - 11.7% CPU load
   5.19 requests/sec - 111.4 kB/second - 21.5 kB/request - 494.172 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KKKKK_KKKKKWRKKK_...W_KR........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-1  96900  1/59/12957  K 1.40 1     268 6038357 33.9  1.24  258.85 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=3041805117 HTTP/1.1
   1-1  92056  1/186/13327 K 4.94 2     272 6360873 34.2  4.76  261.54 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=2513106761 HTTP/1.1
   2-1  101548 5/5/12665   K 0.08 0     27  5990726 4.1   0.00  256.77 66.249.70.5   http/1.1 test.cloudware.ng:80       GET /1825617426?goodscode=1823225506 HTTP/1.1
   3-1  100489 1/28/12903  K 0.79 1     280 5904321 34.5  0.75  254.84 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=3774386794 HTTP/1.1
   4-1  101370 1/4/13557   K 0.01 4     453 6771971 223.0 0.25  257.55 157.55.39.62  http/1.1 team.cloudware.ng:80       GET /var/cache/prod/pools/2wJoJAFabM/6/J/?C=N;O=A HTTP/1.1
   5-1  98120  0/89/12086  _ 2.17 0     0   5835134 0.0   1.78  254.80 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-1  100203 2/34/12611  K 0.80 1     262 5971721 64.1  0.77  254.46 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=677784686 HTTP/1.1
   7-1  92934  1/189/11603 K 4.56 3     259 5469738 33.8  3.75  233.01 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=2971368026 HTTP/1.1
   8-1  101136 1/7/11081   K 0.07 4     2   5454574 6.3   0.05  245.13 74.7.227.184  http/1.1 oysipa.oyostate.gov.ng:443 GET /assets/vendors/jquery-ajaxchimp/jquery.ajaxchimp.min.js HT
   9-1  92066  4/203/11323 K 5.74 4     260 5345104 127.8 5.74  255.31 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=666072902 HTTP/1.1
   10-1 101148 6/12/11457  K 0.27 3     259 5347689 188.8 0.52  245.28 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=2986462405 HTTP/1.1
   11-1 101558 0/0/10806   W 0.00 0     0   5397950 0.0   0.00  241.60 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-1 98139  0/54/10319  R 1.49 50    296 5476080 0.0   1.47  212.58 197.211.63.49 http/1.1
   13-1 97454  7/84/10173  K 2.55 4     273 5166902 218.7 2.04  216.95 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=2637352023 HTTP/1.1
   14-1 88163  1/261/8961  K 6.82 1     22  4413376 0.7   6.21  191.52 66.249.70.5   http/1.1 test.cloudware.ng:80       GET /1835903591?goodscode=1833498190 HTTP/1.1
   15-1 100500 3/21/9329   K 0.37 2     261 4761556 94.7  0.47  198.16 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=296179447 HTTP/1.1
   16-1 101559 0/0/8279    _ 0.00 0     0   4120207 0.0   0.00  186.96 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-1 -      0/0/8215    . 0.00 25    0   3906613 0.0   0.00  167.68 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 -      0/0/6840    . 0.00 243   0   3693958 0.0   0.00  159.09 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-1 -      0/0/7522    . 0.00 155   0   3613783 0.0   0.00  152.90 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-1 97458  2/105/4974  W 2.53 0     0   2581685 66.9  2.21  107.98 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=2201913976 HTTP/1.1
   21-1 97459  0/63/4884   _ 1.46 0     22  2547581 0.0   1.39  106.84 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /887824769?goodscode=0886661934 HTTP/1.1
   22-1 97588  3/78/4670   K 1.84 3     271 2606091 95.8  1.79  111.04 192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=3507924152 HTTP/1.1
   23-1 97724  0/59/4708   R 1.47 51    277 2601112 0.0   1.37  109.04 197.211.63.49 http/1.1
   24-1 -      0/0/2660    . 0.00 13    0   1618501 0.0   0.00  63.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1 -      0/0/1342    . 0.00 235   0   721235  0.0   0.00  30.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/1182    . 0.00 5945  0   641835  0.0   0.00  26.97  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/767     . 0.00 5857  0   421900  0.0   0.00  15.98  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/967     . 0.00 5926  0   448661  0.0   0.00  17.56  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/522     . 0.00 5939  0   306534  0.0   0.00  11.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/1233    . 0.00 5948  0   719887  0.0   0.00  28.67  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/632     . 0.00 5938  0   244800  0.0   0.00  9.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/399     . 0.00 5924  0   188326  0.0   0.00  6.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/212     . 0.00 5947  0   119093  0.0   0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/839     . 0.00 5677  0   454966  0.0   0.00  14.68  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/256     . 0.00 5935  0   159053  0.0   0.00  3.08   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/249     . 0.00 5911  0   209399  0.0   0.00  5.47   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/269     . 0.00 5931  0   116246  0.0   0.00  3.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/87      . 0.00 5944  0   41995   0.0   0.00  0.97   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/679     . 0.00 5929  0   324717  0.0   0.00  13.47  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/146     . 0.00 5934  0   134902  0.0   0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/303     . 0.00 5483  0   130078  0.0   0.00  4.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/169     . 0.00 5922  0   102387  0.0   0.00  10.66  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/140     . 0.00 5953  0   75922   0.0   0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/638     . 0.00 4391  0   199834  0.0   0.00  13.45  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/534     . 0.00 5927  0   268130  0.0   0.00  12.15  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/31      . 0.00 5928  0   37248   0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/157     . 0.00 5942  0   39861   0.0   0.00  1.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/253     . 0.00 5748  0   72401   0.0   0.00  3.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/115     . 0.00 5834  0   85640   0.0   0.00  3.68   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/448     . 0.00 5954  0   253173  0.0   0.00  9.86   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/48      . 0.00 5910  0   22050   0.0   0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/30      . 0.00 5952  0   8952    0.0   0.00  0.37   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/125     . 0.00 8724  0   81098   0.0   0.00  2.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/286     . 0.00 8718  0   153536  0.0   0.00  5.93   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/422     . 0.00 8700  0   320901  0.0   0.00  13.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/79      . 0.00 8748  0   50774   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/30      . 0.00 8749  0   8201    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/345     . 0.00 8584  0   224672  0.0   0.00  7.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/211     . 0.00 8588  0   85306   0.0   0.00  3.87   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/257     . 0.00 8332  0   154505  0.0   0.00  5.37   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/210     . 0.00 8603  0   75311   0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/225     . 0.00 8743  0   116672  0.0   0.00  4.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/53      . 0.00 8590  0   41973   0.0   0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/234     . 0.00 8711  0   61300   0.0   0.00  1.81   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/104     . 0.00 8591  0   43929   0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/54      . 0.00 8709  0   37444   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/137     . 0.00 8310  0   63130   0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/21      . 0.00 8740  0   40095   0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/201     . 0.00 8719  0   93119   0.0   0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/66      . 0.00 8728  0   66683   0.0   0.00  1.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/931     . 0.00 8702  0   498006  0.0   0.00  20.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/182     . 0.00 8579  0   69161   0.0   0.00  2.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/263     . 0.00 8706  0   128005  0.0   0.00  4.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/95      . 0.00 8576  0   55142   0.0   0.00  2.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/15      . 0.00 8736  0   12842   0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/151     . 0.00 8739  0   87735   0.0   0.00  3.29   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/15      . 0.00 8738  0   2685    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/17      . 0.00 8762  0   16053   0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/43      . 0.00 8750  0   30142   0.0   0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -      0/0/21      . 0.00 8746  0   6790    0.0   0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -      0/0/361     . 0.00 8745  0   198769  0.0   0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -      0/0/6       . 0.00 8721  0   876     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -      0/0/3       . 0.00 38279 0   644     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -      0/0/2       . 0.00 38297 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -      0/0/7       . 0.00 38264 0   3861    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1020
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...32)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 4418
   total entries replaced since starting: 0
   total entries expired since starting: 3398
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit