403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.01.15.txt
 ## swap threshold exceeded
## server overview
2025-11-17.01.15 load[0] mem[67/56] mysql[1/8] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1573         107          60         683         562
Swap:          1999        1226         773
 01:15:01 up  1:56,  0 users,  load average: 0.03, 0.19, 0.28
## system overview
top - 01:15:02 up  1:56,  0 users,  load average: 0.03, 0.19, 0.28
Tasks: 209 total,   5 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.6 us, 33.3 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   116024 free,  1603752 used,   700524 buff/cache
KiB Swap:  2047996 total,   791804 free,  1256192 used.   583204 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461500 252236   4564 S  64.7 10.4   1:18.68 /usr/sbin+
  4135 cloudsms  20   0  309000  27924  10736 R  23.5  1.2   0:00.04 /opt/cpan+
     1 root      20   0   44400   3492   1624 S  11.8  0.1   0:10.17 /usr/lib/+
   476 root      20   0   24716   1316    940 S  11.8  0.1   0:01.67 /usr/lib/+
  4071 nigeria   20   0  404052  16136  10380 S  11.8  0.7   0:00.03 /opt/cpan+
  4060 pactpay   20   0  480124  17688  11892 S   5.9  0.7   0:00.02 /opt/cpan+
 88825 nobody    20   0  277680  20480   4876 S   5.9  0.8   0:02.03 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.40 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:07.56 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.39 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.37 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:10.44 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.26 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.00 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   7448   7148 S   0.0  0.3   0:04.10 /usr/lib/+
   365 nobody    20   0  277868  19260   4192 S   0.0  0.8   0:00.33 /usr/sbin+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    568    440 S   0.0  0.0   0:00.64 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.00 /usr/sbin+
   475 polkitd   20   0  612240   1292    868 S   0.0  0.1   0:01.00 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.14 /usr/sbin+
   484 rpc       20   0   69256    176     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    560    464 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 S   0.0  0.1   0:03.72 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1520    888 S   0.0  0.1   0:06.82 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5872   1160 S   0.0  0.2   0:00.16 queueproc+
   545 root      20   0  124480    584    452 S   0.0  0.0   0:00.20 /usr/sbin+
   546 root      20   0   24208     60     60 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4128   1104 S   0.0  0.2   0:00.12 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.16 [loop0]
   711 nobody    20   0  277872  19532   4316 S   0.0  0.8   0:00.41 /usr/sbin+
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   897 worencom  20   0   38688   4116   3012 S   0.0  0.2   0:00.00 dovecot/i+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:00.92 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   917 root      20   0  232784   6724   5976 S   0.0  0.3   0:02.00 /usr/sbin+
   918 named     20   0  924724  32680   2080 S   0.0  1.4   0:04.20 /usr/sbin+
   919 root      20   0 1763124 390808    720 S   0.0 16.1   0:14.06 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    668    508 S   0.0  0.0   0:00.10 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:00.67 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.23 sw-engine+
   937 root      20   0  439788  11484  11276 S   0.0  0.5   0:00.31 php-fpm: +
   938 systuser  20   0  114016  13852   2636 S   0.0  0.6   0:01.79 /usr/loca+
   939 root      20   0  261296   7584   2124 S   0.0  0.3   0:01.50 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.24 /usr/bin/+
   944 root      20   0 1276356   7880    228 S   0.0  0.3   0:24.78 /usr/bin/+
   947 cpanelc+  20   0   10308   3344   2408 S   0.0  0.1   0:05.90 /usr/loca+
   952 root      20   0  396248    792    608 S   0.0  0.0   0:00.29 php-fpm: +
   957 root      20   0  388892    704    604 S   0.0  0.0   0:00.28 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  37680   5636 S   0.0  1.6   0:04.13 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.14 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:01.16 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.15 /usr/bin/+
   974 root      20   0  389508    816    612 R   0.0  0.0   0:00.25 php-fpm: +
  1002 worencom  20   0   38364   3672   2872 S   0.0  0.2   0:00.00 dovecot/i+
  1043 nobody    20   0  277744  19588   4348 S   0.0  0.8   0:00.33 /usr/sbin+
  1080 dovenull  20   0   46912   2200   1568 S   0.0  0.1   0:00.12 dovecot/p+
  1081 dovenull  20   0   47340   3040   2024 S   0.0  0.1   0:00.05 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.01 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.07 dovecot/l+
  1084 dovenull  20   0   46984   2300   1568 S   0.0  0.1   0:00.15 dovecot/p+
  1085 dovenull  20   0   47308   2984   2148 S   0.0  0.1   0:00.04 dovecot/i+
  1091 root      20   0   24396   2300    628 S   0.0  0.1   0:00.05 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.01 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:03.66 /usr/loca+
  1160 dovecot   20   0   41056   1548   1116 S   0.0  0.1   0:00.13 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.05 SonarPush+
  1176 wp-tool+  20   0  387556   5096   1724 S   0.0  0.2   0:00.15 /usr/bin/+
  1177 wp-tool+  20   0  412368  32528   1752 S   0.0  1.3   0:02.38 /usr/bin/+
  1211 root      20   0  209168  11492   1968 S   0.0  0.5   0:00.90 tailwatchd
  1213 root      20   0  183900   6688   3460 S   0.0  0.3   0:00.49 cpdavd - +
  1216 root      20   0  167452   3848   2476 S   0.0  0.2   0:00.19 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1627 root      20   0  299272    888    548 S   0.0  0.0   0:00.19 php-fpm: +
  1673 root      38  18  130416   1580    812 S   0.0  0.1   0:00.01 cpanellog+
  1723 nobody    20   0  277744  19032   3976 S   0.0  0.8   0:00.20 /usr/sbin+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:00.94 /usr/sbin+
  1932 root      20   0   12892    516    376 S   0.0  0.0   0:00.91 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:00.80 /usr/loca+
  1934 root      20   0   12948    492    348 S   0.0  0.0   0:00.86 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  2533 nobody    20   0  277744  18984   3916 S   0.0  0.8   0:00.23 /usr/sbin+
  3039 nobody    20   0  277464  18404   3580 S   0.0  0.8   0:00.10 /usr/sbin+
  3229 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3315 nobody    20   0  277744  18708   3664 S   0.0  0.8   0:00.13 /usr/sbin+
  3603 nobody    20   0  277744  18596   3524 S   0.0  0.8   0:00.05 /usr/sbin+
  3663 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
  3798 nigeria   20   0  483560  20224   6204 S   0.0  0.8   0:00.21 php-fpm: +
  3814 nobody    20   0  277376  18076   3388 S   0.0  0.7   0:00.02 /usr/sbin+
  3862 cloudw    20   0  507188  43208   6684 S   0.0  1.8   0:00.48 php-fpm: +
  3866 cloudw    20   0  517632  54016   7044 S   0.0  2.2   0:00.89 php-fpm: +
  3932 nigeria   20   0  409372  15836   3916 S   0.0  0.7   0:00.18 php-fpm: +
  3945 nobody    20   0  277340  18256   3644 S   0.0  0.8   0:00.00 /usr/sbin+
  3960 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  3980 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3981 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3982 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3983 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3984 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3985 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3986 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3988 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3989 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3990 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3991 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3992 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3994 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3998 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  4001 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  4002 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  4023 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4024 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
  4025 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4026 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  4029 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4030 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4031 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  4032 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4033 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4036 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4037 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  4039 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4043 root      20   0  188212  11092   5152 S   0.0  0.5   0:00.01 /usr/loca+
  4045 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
  4049 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  4059 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  4082 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  4106 root      20   0  160220   2064   1580 S   0.0  0.1   0:00.00 top -n 2 +
  4136 root      20   0   38648   6584   3100 R   0.0  0.3   0:00.00 /usr/loca+
  8393 root      20   0  263740 127052   1720 S   0.0  5.2   0:00.86 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.07 [kworker]
 40218 root      20   0  181372  28768   1644 S   0.0  1.2   0:04.63 lfd - sle+
 62652 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72665 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72707 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 82071 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 86521 nobody    20   0  277888  20516   4748 S   0.0  0.8   0:02.00 /usr/sbin+
 89833 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 89850 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91557 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 93318 root      20   0  183052   2116   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1148    972 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
 94354 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95484 nobody    20   0  277768  19876   4640 S   0.0  0.8   0:01.22 /usr/sbin+
 96378 nobody    20   0  277744  19936   4724 S   0.0  0.8   0:01.22 /usr/sbin+
 99433 nobody    20   0  277876  19808   4432 S   0.0  0.8   0:00.76 /usr/sbin+
 99732 nobody    20   0  277680  19716   4428 S   0.0  0.8   0:00.75 /usr/sbin+
 99990 nobody    20   0  277688  19848   4520 S   0.0  0.8   0:00.66 /usr/sbin+
100230 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101167 nobody    20   0  277744  19596   4392 S   0.0  0.8   0:00.67 /usr/sbin+
101786 nobody    20   0  277484  19400   4412 S   0.0  0.8   0:00.58 /usr/sbin+
101852 nobody    20   0  277676  19632   4464 S   0.0  0.8   0:00.52 /usr/sbin+
102022 nobody    20   0  277744  19836   4436 S   0.0  0.8   0:00.48 /usr/sbin+
102023 nobody    20   0  277680  19336   4196 S   0.0  0.8   0:00.27 /usr/sbin+
102054 nobody    20   0  277884  19652   4452 S   0.0  0.8   0:00.52 /usr/sbin+
102056 nobody    20   0  277680  19324   4152 S   0.0  0.8   0:00.39 /usr/sbin+
102093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov16   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      62652  0.0  0.0      0     0 ?        S    00:24   0:00  \_ [kworker/u200:1]
root      72665  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/0:4]
root      72707  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/1:1]
root      82071  0.0  0.0      0     0 ?        S    00:47   0:00  \_ [kworker/1:2]
root      89833  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/1:4]
root      89850  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/0:1]
root      91557  0.0  0.0      0     0 ?        S    00:58   0:00  \_ [kworker/u200:0]
root      94354  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/0:2]
root     100230  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:3]
root     102093  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/0:0]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root       3229  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44400  3492 ?        Ss   Nov16   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.3  40244  7448 ?        Ss   Nov16   0:04 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   568 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1292 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:01 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   176 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   560 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1520 ?        Ssl  Nov16   0:06 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5872 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   584 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2116 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1148 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root       3980  0.0  0.0 183048  2156 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       3998  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       4001  0.0  0.0 108052   360 ?        S    01:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       4002  0.0  0.0 113288  1516 ?        S    01:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       4137  0.0  0.0 153840  2092 ?        R    01:15   0:00  |               \_ ps auxf
root       3981  0.0  0.0 183048  2156 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4033  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       3982  0.0  0.0 183048  2156 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4029  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       3983  0.0  0.0 183048  2156 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4032  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       3984  0.0  0.0 183048  2156 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4024  0.0  0.0  20164   984 ?        Ss   01:15   0:00  |   \_ jailshell (cloudsms) [4138] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       3985  0.0  0.0 183048  2152 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4025  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       3986  0.0  0.0 183048  2152 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4030  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       3988  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4039  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       3989  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4023  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       3990  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4036  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       3991  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4031  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       4043  1.0  0.4 188212 11092 ?        S    01:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       4106  0.0  0.0 160220  2064 ?        S    01:15   0:00  |           \_ top -n 2 -b -c
root       3992  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4026  0.0  0.0  20164   968 ?        Ss   01:15   0:00  |   \_ jailshell (pactpay) [4049] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4049  0.0  0.0  20164   260 ?        S    01:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4060  2.0  0.7 480124 17688 ?        S    01:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       3994  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root       4037  0.0  0.0  20164   968 ?        Ss   01:15   0:00      \_ jailshell (nigeria) [4059] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4059  0.0  0.0  20164   260 ?        S    01:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4071  4.0  0.6 404052 16136 ?        S    01:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208    60 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4128 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:00 /usr/sbin/sshd -D
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 232784  6724 ?        Ssl  Nov16   0:02 /usr/sbin/rsyslogd -n
named       918  0.0  1.3 924724 32680 ?        Ssl  Nov16   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.2 16.1 1763124 390808 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   668 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  2200 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  3040 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984  2300 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  2984 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24396  2300 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41056  1548 ?        S    Nov16   0:00  \_ dovecot/auth
worencom    897  0.0  0.1  38688  4116 ?        S    01:11   0:00  \_ dovecot/imap
worencom   1002  0.0  0.1  38364  3672 ?        S    01:11   0:00  \_ dovecot/imap
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   3663  0.0  0.0 445028   312 ?        S    01:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11484 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13852 ?        Ssl  Nov16   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7584 ?        Ss   Nov16   0:01 cpsrvd (SSL) - waiting for connections                   
root       3960  0.0  0.0      0     0 ?        Z    01:14   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.2  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.3  0.3 1276356 7880 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3344 ?        Ss   Nov16   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   792 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   704 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.5 5654048 37680 ?       SLsl Nov16   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    3798  1.6  0.8 483560 20224 ?        S    01:14   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw     3862  6.0  1.7 507188 43208 ?        S    01:14   0:00  \_ php-fpm: pool cloudware_ng
cloudw     3866 12.7  2.2 517632 54016 ?        S    01:14   0:00  \_ php-fpm: pool cloudware_ng
nigeria    3932  4.5  0.6 409372 15836 ?        S    01:14   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   816 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.2 263740 127052 ?       S    Nov16   0:00  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5096 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32528 ?        Ss   Nov16   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209168 11492 ?        Ss   Nov16   0:00 tailwatchd
root       1213  0.0  0.2 183900  6688 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  3848 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   888 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1580 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:00 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12892   516 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12948   492 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    86521  0.1  0.8 277888 20516 ?        S    00:52   0:02  \_ /usr/sbin/httpd -k start
nobody    88825  0.1  0.8 277680 20480 ?        S    00:54   0:02  \_ /usr/sbin/httpd -k start
cloudsms   4135  0.0  1.3 314528 33424 ?        S    01:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    95484  0.1  0.8 277768 19876 ?        S    01:02   0:01  \_ /usr/sbin/httpd -k start
cloudw     4045  1.0  0.6 353712 15976 ?        S    01:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    96378  0.1  0.8 277744 19936 ?        S    01:03   0:01  \_ /usr/sbin/httpd -k start
nobody    99433  0.1  0.8 277876 19808 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    99732  0.1  0.8 277680 19716 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    99990  0.1  0.8 277688 19848 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody   101167  0.1  0.8 277744 19596 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody   101786  0.1  0.8 277484 19400 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody   101852  0.1  0.8 277676 19632 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody   102022  0.1  0.8 277744 19836 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody   102023  0.0  0.7 277680 19336 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody   102054  0.1  0.8 277884 19652 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody   102056  0.1  0.7 277680 19324 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody      365  0.1  0.7 277868 19260 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody      711  0.1  0.8 277872 19532 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody     1043  0.1  0.8 277744 19588 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody     1723  0.1  0.7 277744 19032 ?        S    01:12   0:00  \_ /usr/sbin/httpd -k start
nobody     2533  0.1  0.7 277744 18984 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody     3039  0.1  0.7 277464 18404 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody     3315  0.2  0.7 277744 18708 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody     3603  0.1  0.7 277744 18596 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody     3814  0.1  0.7 277376 18076 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody     3945  0.0  0.7 277340 18256 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.1 10.4 1461500 252236 ?      Sl   Nov16   1:18 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.1 181372 28768 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 6928  Threads: 4  Questions: 498254  Slow queries: 0  Opens: 3106  Flush tables: 1  Open tables: 1987  Queries per second avg: 71.918
*************************** 1. row ***************************
     Id: 7404
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-17' LIMIT 1
*************************** 2. row ***************************
     Id: 7407
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 7410
   User: cloudsms_wp167
   Host: localhost
     db: cloudsms_wp167
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 7412
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.233.44.25 TIME_WAIT
      1 127.0.0.1 TIME_WAIT
      1 142.44.225.165 TIME_WAIT
      1 148.113.130.107 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 185.47.93.156 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.26.246.4 TIME_WAIT
      1 43.130.101.151 TIME_WAIT
      1 45.157.82.252 TIME_WAIT
      1 51.161.37.223 TIME_WAIT
      1 54.39.0.25 TIME_WAIT
      1 78.157.49.100 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
      2 37.156.146.119 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 01:15:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 56 minutes 12 seconds
   Server load: 0.03 0.19 0.28
   Total accesses: 41237 - Total Traffic: 1.1 GB - Total Duration: 21259723
   CPU Usage: u10.01 s4.77 cu561.84 cs459.01 - 14.9% CPU load
   5.91 requests/sec - 160.5 kB/second - 27.1 kB/request - 515.55 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KRKR_RKK_KK_R_K_KRKK_...WKW.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS  Req  Dur   Conn  Child  Slot     Client      Protocol          VHost                                       Request
   0-0  99433  14/159/1896 K 3.88 3    347 989762 428.2 2.99  49.44 192.178.4.103   http/1.1 team.cloudware.ng:443    GET /?l=1620014110 HTTP/1.1
   1-0  3603   0/10/1651   R 0.45 1    36  874290 0.0   0.22  46.47 192.178.4.96    http/1.1 team.cloudware.ng:443
   2-0  101786 1/95/1675   K 2.52 1    36  878570 5.7   2.49  45.46 66.249.70.7     http/1.1 test.cloudware.ng:443    GET /181931282?goodscode=0181693602 HTTP/1.1
   3-0  365    0/67/1777   R 1.44 1    357 887659 0.0   1.38  43.79 78.157.49.100   http/1.1 cloudware.ng:443
   4-0  99732  0/128/1691  _ 3.05 0    478 839863 0.0   4.03  47.52 192.178.4.99    http/1.1 team.cloudware.ng:443    GET /?l=355523369 HTTP/1.1
   5-0  2533   0/34/1628   R 0.95 1    265 823614 0.0   1.05  44.94 78.157.49.100   http/1.1
   6-0  3315   5/21/1757   K 0.54 2    403 873714 161.3 0.60  47.85 192.178.4.101   http/1.1 team.cloudware.ng:443    GET /?l=2015492745 HTTP/1.1
   7-0  99990  5/122/1555  K 2.79 1    258 787505 162.9 2.88  39.35 192.178.4.99    http/1.1 team.cloudware.ng:443    GET /?l=2190966972 HTTP/1.1
   8-0  711    0/73/1631   _ 1.68 0    348 818284 0.0   2.20  42.59 192.178.4.100   http/1.1 team.cloudware.ng:443    GET /?l=713417099 HTTP/1.1
   9-0  101852 3/89/1554   K 2.19 3    404 823483 99.3  2.47  41.02 192.178.4.105   http/1.1 team.cloudware.ng:443    GET /?l=2338661837 HTTP/1.1
   10-0 1043   2/61/1633   K 1.36 1    360 841077 67.0  1.42  42.80 192.178.4.104   http/1.1 team.cloudware.ng:443    GET /?l=955248628 HTTP/1.1
   11-0 102022 0/85/1567   _ 2.15 0    343 855941 0.0   2.08  42.54 192.178.4.100   http/1.1 team.cloudware.ng:443    GET /?l=1684446458 HTTP/1.1
   12-0 102023 0/45/1440   R 1.21 128  6   736850 0.0   1.34  37.18 41.204.85.19    http/1.1
   13-0 1723   0/34/1655   _ 0.83 0    427 874569 0.0   1.12  44.74 192.178.4.98    http/1.1 team.cloudware.ng:443    GET /?l=4218773067 HTTP/1.1
   14-0 3039   3/17/1446   K 0.43 0    294 766649 98.8  0.47  38.95 192.178.4.97    http/1.1 team.cloudware.ng:443    GET /?l=619897944 HTTP/1.1
   15-0 96378  0/207/1496  _ 5.81 0    0   779832 0.0   5.43  40.05 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   16-0 102054 8/100/1286  K 2.35 1    302 692535 253.4 2.23  34.79 192.178.4.102   http/1.1 team.cloudware.ng:443    GET /?l=4055924006 HTTP/1.1
   17-0 86521  0/357/1386  R 9.20 42   23  721571 0.0   12.52 38.87 103.117.180.206 http/1.1 cloudware.ng:443
   18-0 95484  5/221/1125  K 5.20 0    367 581658 155.6 5.80  29.32 192.178.4.105   http/1.1 team.cloudware.ng:443    GET /?l=3075289182 HTTP/1.1
   19-0 3814   1/5/934     K 0.07 0    345 469257 209.2 0.21  28.72 192.178.4.98    http/1.1 team.cloudware.ng:443    GET /vendor/hoa/compiler/Test/Integration/Llk/ HTTP/1.1
   20-0 3945   0/3/1064    _ 0.00 0    0   523120 0.0   0.03  25.74 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   21-0 -      0/0/1253    . 0.00 150  0   670799 0.0   0.00  34.64 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-0 -      0/0/772     . 0.00 285  4   425388 0.0   0.00  20.13 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -      0/0/873     . 0.00 294  0   446225 0.0   0.00  23.12 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 88825  0/345/1190  W 8.79 0    0   643302 0.0   9.68  31.88 216.243.116.81  http/1.1 blog.cloudsms.com.ng:443 GET /cloudware-technologies-visits-less-privileged-home-at-uch-
   25-0 102056 1/67/633    K 1.77 3    230 296254 11.2  1.92  16.17 185.210.206.181 http/1.1 nigeriadecide.org:443    GET /blog/national-conference-noa-tasks-delegates-on-national-i
   26-0 101167 0/113/267   W 3.23 0    0   131868 0.0   3.12  6.32  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   27-0 -      0/0/517     . 0.00 284  0   260228 0.0   0.00  13.06 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -      0/0/442     . 0.00 3052 0   227041 0.0   0.00  11.06 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -      0/0/70      . 0.00 3066 0   36084  0.0   0.00  1.51  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -      0/0/274     . 0.00 2473 0   126063 0.0   0.00  6.58  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -      0/0/459     . 0.00 1789 0   223052 0.0   0.00  10.36 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -      0/0/71      . 0.00 3084 0   32316  0.0   0.00  1.29  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -      0/0/106     . 0.00 3079 0   46426  0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -      0/0/292     . 0.00 3072 0   156256 0.0   0.00  7.78  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -      0/0/28      . 0.00 3065 0   6362   0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -      0/0/170     . 0.00 3011 0   85805  0.0   0.00  4.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -      0/0/11      . 0.00 3076 0   7767   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -      0/0/144     . 0.00 3058 0   77733  0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -      0/0/424     . 0.00 1666 0   220703 0.0   0.00  11.36 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -      0/0/88      . 0.00 2945 0   19096  0.0   0.00  1.31  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -      0/0/8       . 0.00 3078 0   3054   0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -      0/0/43      . 0.00 2933 0   22487  0.0   0.00  0.98  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -      0/0/114     . 0.00 3077 0   52913  0.0   0.00  2.30  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -      0/0/661     . 0.00 718  0   366544 0.0   0.00  17.77 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -      0/0/42      . 0.00 3082 0   19040  0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -      0/0/11      . 0.00 3054 0   5124   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -      0/0/20      . 0.00 3015 0   7973   0.0   0.00  0.58  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -      0/0/83      . 0.00 2766 0   40607  0.0   0.00  1.94  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -      0/0/37      . 0.00 3070 0   18588  0.0   0.00  0.72  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -      0/0/7       . 0.00 3064 0   3381   0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -      0/0/9       . 0.00 3038 0   3457   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -      0/0/2       . 0.00 5774 0   1702   0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -      0/0/7       . 0.00 5749 0   2649   0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -      0/0/2       . 0.00 5773 0   1806   0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -      0/0/27      . 0.00 5694 0   13156  0.0   0.00  0.55  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -      0/0/189     . 0.00 4940 0   98784  0.0   0.00  5.53  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -      0/0/44      . 0.00 5634 0   19861  0.0   0.00  0.82  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1277
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...35)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 31412
   total entries replaced since starting: 0
   total entries expired since starting: 30133
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 80 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit