403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.02.33.txt
 ## swap threshold exceeded
## server overview
2025-11-17.02.33 load[0] mem[62/62] mysql[3/8] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1406          68          63         888         727
Swap:          1999        1349         650
 02:33:01 up  3:14,  0 users,  load average: 0.22, 0.24, 0.28
## system overview
top - 02:33:01 up  3:14,  0 users,  load average: 0.22, 0.24, 0.28
Tasks: 200 total,   5 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 43.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   110496 free,  1458052 used,   851752 buff/cache
KiB Swap:  2047996 total,   664572 free,  1383424 used.   726544 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 271796   5060 S  26.7 11.2   2:26.67 /usr/sbin+
     1 root      20   0   44400   3492   1624 S  13.3  0.1   0:15.96 /usr/lib/+
    36 root      20   0       0      0      0 S   6.7  0.0   0:12.37 [kswapd0]
   492 dbus      20   0   58700   1520    768 R   6.7  0.1   0:06.16 /usr/bin/+
 65762 pactpay   20   0  479860  16260  10648 S   6.7  0.7   0:00.01 /opt/cpan+
 65766 nigeria   20   0  404052  16140  10384 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.65 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:12.49 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.63 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.57 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.29 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.66 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   5316   5012 S   0.0  0.2   0:06.40 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    596    468 S   0.0  0.0   0:00.99 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.62 /usr/lib/+
   476 root      20   0   24716   1316    940 D   0.0  0.1   0:02.71 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.25 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    440    344 S   0.0  0.0   0:00.01 /usr/sbin+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1528    900 S   0.0  0.1   0:10.95 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   6076   1364 S   0.0  0.3   0:00.21 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.35 /usr/sbin+
   546 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4100   1076 S   0.0  0.2   0:00.21 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.43 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  249168   5240   4388 S   0.0  0.2   0:03.19 /usr/sbin+
   918 named     20   0  989256  38468   2528 S   0.0  1.6   0:07.14 /usr/sbin+
   919 root      20   0 1763124 269324   1128 S   0.0 11.1   0:14.12 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.16 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.06 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.43 sw-engine+
   937 root      20   0  439788  11508  11300 S   0.0  0.5   0:00.44 php-fpm: +
   938 systuser  20   0  114016  14224   2776 S   0.0  0.6   0:02.88 /usr/loca+
   939 root      20   0  261296   7612   2052 S   0.0  0.3   0:02.36 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.26 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.83 /usr/bin/+
   947 cpanelc+  20   0   10308   3544   2424 S   0.0  0.1   0:09.76 /usr/loca+
   952 root      20   0  396248    740    556 S   0.0  0.0   0:00.40 php-fpm: +
   957 root      20   0  388892    776    676 S   0.0  0.0   0:00.41 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  36140   5960 S   0.0  1.5   0:06.62 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.23 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:01.97 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.25 /usr/bin/+
   974 root      20   0  389508    816    612 S   0.0  0.0   0:00.37 php-fpm: +
  1080 dovenull  20   0   46912   2588   1876 S   0.0  0.1   0:00.19 dovecot/p+
  1081 dovenull  20   0   47340   3184   2164 S   0.0  0.1   0:00.08 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.02 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.13 dovecot/l+
  1084 dovenull  20   0   46984   2496   1764 S   0.0  0.1   0:00.22 dovecot/p+
  1085 dovenull  20   0   47308   3096   2144 S   0.0  0.1   0:00.07 dovecot/i+
  1091 root      20   0   24528   2500    632 S   0.0  0.1   0:00.08 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.02 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.22 /usr/loca+
  1160 dovecot   20   0   41160   1588   1128 S   0.0  0.1   0:00.23 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.07 SonarPush+
  1176 wp-tool+  20   0  387556   5072   1700 S   0.0  0.2   0:00.18 /usr/bin/+
  1177 wp-tool+  20   0  412368  32508   1732 S   0.0  1.3   0:03.84 /usr/bin/+
  1211 root      20   0  209308  12156   2580 S   0.0  0.5   0:01.39 tailwatchd
  1213 root      20   0  262224  24332   6472 S   0.0  1.0   0:00.66 cpdavd - +
  1216 root      20   0  167452   4120   2748 S   0.0  0.2   0:00.30 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    888    548 S   0.0  0.0   0:00.31 php-fpm: +
  1673 root      38  18  130416   1592    820 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.43 /usr/sbin+
  1932 root      20   0   12832    520    376 S   0.0  0.0   0:01.48 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:01.29 /usr/loca+
  1934 root      20   0   12860    500    348 S   0.0  0.0   0:01.40 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  264952 129772   3344 S   0.0  5.4   0:01.70 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 14071 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35569 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.17 [kworker]
 40218 root      20   0  181888  29244   1644 S   0.0  1.2   0:09.17 lfd - sle+
 44789 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47511 nobody    20   0  277680  20396   4936 S   0.0  0.8   0:01.98 /usr/sbin+
 48575 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 48576 root      20   0       0      0      0 D   0.0  0.0   0:00.05 [kworker/+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 52247 nobody    20   0  277580  20320   4784 S   0.0  0.8   0:01.19 /usr/sbin+
 52255 nobody    20   0  277656  20480   4848 S   0.0  0.8   0:01.41 /usr/sbin+
 52258 nobody    20   0  277616  20276   4760 S   0.0  0.8   0:01.33 /usr/sbin+
 52503 nobody    20   0  277720  20368   4888 S   0.0  0.8   0:01.61 /usr/sbin+
 54233 nobody    20   0  277692  20340   4812 S   0.0  0.8   0:01.40 /usr/sbin+
 54829 nobody    20   0  277692  20288   4876 S   0.0  0.8   0:01.05 /usr/sbin+
 55807 nobody    20   0  277680  20268   4740 S   0.0  0.8   0:01.01 /usr/sbin+
 56370 nobody    20   0  277744  20460   4708 S   0.0  0.8   0:01.13 /usr/sbin+
 56483 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 58187 nobody    20   0  277676  20052   4688 S   0.0  0.8   0:00.96 /usr/sbin+
 60187 nobody    20   0  277744  19552   4360 S   0.0  0.8   0:00.65 /usr/sbin+
 60336 nobody    20   0  277744  20376   4604 S   0.0  0.8   0:00.57 /usr/sbin+
 61433 nobody    20   0  277880  19692   4452 S   0.0  0.8   0:00.47 /usr/sbin+
 62553 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63584 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 64181 nobody    20   0  277744  18844   3768 S   0.0  0.8   0:00.15 /usr/sbin+
 64182 nobody    20   0  277744  19380   4148 S   0.0  0.8   0:00.19 /usr/sbin+
 64314 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 64762 nobody    20   0  277744  18516   3424 S   0.0  0.8   0:00.15 /usr/sbin+
 64771 nobody    20   0  277876  19240   4024 S   0.0  0.8   0:00.13 /usr/sbin+
 64772 nobody    20   0  277744  18996   3724 S   0.0  0.8   0:00.13 /usr/sbin+
 65041 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 65095 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 65467 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 65491 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 65562 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 65669 workflo+  20   0  524940  59280   6072 S   0.0  2.4   0:00.21 php-fpm: +
 65673 workflo+  20   0  522608  55864   4344 S   0.0  2.3   0:00.20 php-fpm: +
 65682 root      20   0  153408    964    736 S   0.0  0.0   0:00.00 pure-ftpd+
 65683 root      20   0  153408    140      0 S   0.0  0.0   0:00.00 pure-ftpd+
 65693 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 65697 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 65699 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65700 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65701 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65702 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65703 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65705 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65706 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65707 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65708 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65709 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65711 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 65713 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 65714 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 65715 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 65737 root      20   0  160248   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 65738 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 65739 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 65740 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65741 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65742 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 65743 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65744 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 65747 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65749 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65750 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 65760 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65764 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65770 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65771 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 65772 cloudsms  20   0  315212   8136   5808 R   0.0  0.3   0:00.00 /opt/cpan+
 65776 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 93318 root      20   0  183052   2112   1548 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1116    940 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root      14071  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:1]
root      35569  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:1]
root      44789  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:2]
root      48575  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      48576  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:1]
root      50830  0.0  0.0      0     0 ?        R    02:14   0:00  \_ [kworker/1:2]
root      56483  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/1:3]
root      62553  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/0:3]
root      63584  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/0:4]
root      64314  0.0  0.0      0     0 ?        D    02:31   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44400  3492 ?        Ss   Nov16   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  5316 ?        Ss   Nov16   0:06 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   596 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:02 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   440 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1528 ?        Ssl  Nov16   0:10 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  6076 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1116 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      65699  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65713  0.0  0.0 113284  1212 ?        Ss   02:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      65714  0.0  0.0 108052   360 ?        S    02:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      65715  0.0  0.0 113288  1516 ?        S    02:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      65777  0.0  0.0 153840  2096 ?        R    02:33   0:00  |               \_ ps auxf
root      65700  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65744  0.0  0.0  20164   968 ?        Ss   02:33   0:00  |   \_ jailshell (cloudsms) [65770] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  65770  0.0  0.0  20164   260 ?        S    02:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  65771  0.0  0.0 113284  1212 ?        S    02:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  65772  0.0  0.4 400112 11632 ?        R    02:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      65701  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65749  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      65702  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65741  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      65703  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65747  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      65705  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65739  0.0  0.0  20164   804 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      65706  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65740  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      65707  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65743  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      65708  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65742  0.0  0.0  20164   812 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      65709  0.0  0.0 183048  2152 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65750  0.0  0.0  20164   968 ?        Ss   02:33   0:00  |   \_ jailshell (pactpay) [65760] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   65760  0.0  0.0  20164   260 ?        S    02:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   65762  0.0  0.6 480124 16788 ?        S    02:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      65711  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      65738  0.0  0.0  20164   972 ?        Ss   02:33   0:00      \_ jailshell (nigeria) [65764] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   65764  0.0  0.0  20164   260 ?        S    02:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   65766  0.0  0.6 404052 16140 ?        S    02:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208   244 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4100 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      65041  0.0  0.1 111304  4268 ?        Ss   02:32   0:00  \_ sshd: [accepted]
root      65095  0.0  0.1 111304  4268 ?        Ss   02:32   0:00  \_ sshd: [accepted]
root      65562  0.0  0.1 111304  4268 ?        Ss   02:32   0:00  \_ sshd: [accepted]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 249168  5240 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 989256 38468 ?        Ssl  Nov16   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 11.1 1763124 269324 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2588 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  3184 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2496 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3096 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24528  2500 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1588 ?        S    Nov16   0:00  \_ dovecot/auth
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  65491  0.0  0.0 445028   316 ?        S    02:32   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11508 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 14224 ?        Ssl  Nov16   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7612 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      65693  0.0  0.0      0     0 ?        Z    02:32   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        943  0.1  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.2  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3544 ?        Ss   Nov16   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   740 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   776 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 36140 ?       SLsl Nov16   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root      65682  0.0  0.0 153408   964 ?        S    02:32   0:00  \_ pure-ftpd (IDLE)
root      65683  0.0  0.0 153408   140 ?        S    02:32   0:00      \_ pure-ftpd (PRIV)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   65467  0.0  0.1 400460  4420 ?        S    02:32   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  65669 10.5  2.4 524940 59280 ?        S    02:32   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  65673 10.0  2.3 522608 55864 ?        S    02:32   0:00  \_ php-fpm: pool blog_workflow-management-software_com
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   816 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.3 264952 129772 ?       S    Nov16   0:01  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5072 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32508 ?        Ss   Nov16   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.5 209308 12156 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  1.0 262224 24332 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.1 167452  4120 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   888 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1592 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12832   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12860   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47511  0.1  0.8 277680 20396 ?        S    02:09   0:01  \_ /usr/sbin/httpd -k start
nobody    52247  0.1  0.8 277580 20320 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52255  0.1  0.8 277656 20480 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52258  0.1  0.8 277616 20276 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52503  0.1  0.8 277720 20368 ?        S    02:16   0:01  \_ /usr/sbin/httpd -k start
nobody    54233  0.1  0.8 277692 20340 ?        S    02:18   0:01  \_ /usr/sbin/httpd -k start
nobody    54829  0.1  0.8 277692 20288 ?        S    02:19   0:01  \_ /usr/sbin/httpd -k start
nobody    55807  0.1  0.8 277680 20268 ?        S    02:20   0:01  \_ /usr/sbin/httpd -k start
nobody    56370  0.1  0.8 277744 20460 ?        S    02:20   0:01  \_ /usr/sbin/httpd -k start
nobody    58187  0.1  0.8 277676 20052 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    60187  0.1  0.8 277744 19552 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    60336  0.1  0.8 277744 20376 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    61433  0.1  0.8 277880 19692 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody    64181  0.1  0.7 277744 18844 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    64182  0.1  0.8 277744 19380 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    64762  0.1  0.7 277744 18516 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    64771  0.1  0.7 277876 19240 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    64772  0.1  0.7 277744 18996 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
cloudw    65697  0.0  0.6 353712 15980 ?        R    02:33   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
mysql      2639  1.2 11.2 1461652 271796 ?      Sl   Nov16   2:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.0  1.2 181888 29244 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 11607  Threads: 6  Questions: 879632  Slow queries: 0  Opens: 4874  Flush tables: 1  Open tables: 2000  Queries per second avg: 75.784
*************************** 1. row ***************************
     Id: 13077
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 13078
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 2
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 13082
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 13084
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 5. row ***************************
     Id: 13089
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 142.44.233.246 TIME_WAIT
      1 148.113.128.188 TIME_WAIT
      1 166.0.151.55 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.7 TIME_WAIT
      1 43.166.244.251 TIME_WAIT
      1 51.222.95.10 TIME_WAIT
      1 52.167.144.167 TIME_WAIT
      1 54.39.89.45 TIME_WAIT
      1 66.249.70.5 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 201.46.112.136 TIME_WAIT
     20 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 02:33:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 14 minutes 11 seconds
   Server load: 0.22 0.24 0.28
   Total accesses: 66826 - Total Traffic: 1.7 GB - Total Duration: 33554391
   CPU Usage: u11.27 s5.66 cu905.68 cs738.84 - 14.3% CPU load
   5.74 requests/sec - 150.7 kB/second - 26.3 kB/request - 502.116 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

R.K..KKK__KK.KKWW.KKWK......_...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  60187 0/129/3078 R 2.82 26    5   1578917 0.0   2.75  78.59 161.97.170.156  http/1.1
   1-0  -     0/0/2687   . 0.00 64    0   1397852 0.0   0.00  79.48 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-0  61433 7/82/2880  K 1.92 1     353 1417967 218.8 2.08  73.83 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=3167965940 HTTP/1.1
   3-0  -     0/0/2957   . 0.00 53    0   1477545 0.0   0.00  71.97 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   4-0  -     0/0/2958   . 0.00 65    0   1339572 0.0   0.00  74.68 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  60336 3/113/2702 K 2.20 0     393 1332952 97.2  2.81  71.07 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=4207093606 HTTP/1.1
   6-0  52503 2/304/2942 K 7.60 1     343 1420472 64.3  6.38  74.04 192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=4053258510 HTTP/1.1
   7-0  64181 6/25/2459  K 0.63 1     357 1286661 188.2 0.69  64.08 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=2765407589 HTTP/1.1
   8-0  64182 0/35/2630  _ 0.74 0     157 1301909 0.0   0.83  64.88 217.113.194.127 http/1.1 team.cloudware.ng:443           GET /var/cache/dev/pools/AcsHjSlfaz/L/?C=D;O=D HTTP/1.1
   9-0  54233 0/246/2716 _ 5.80 0     0   1349575 0.0   7.15  67.52 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   10-0 56370 6/212/2716 K 4.91 3     356 1378544 189.2 4.63  70.40 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=3729034507 HTTP/1.1
   11-0 52247 2/213/2484 K 5.16 0     407 1288628 66.2  5.87  65.02 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=1322654251 HTTP/1.1
   12-0 -     0/0/2416   . 0.00 30    0   1273577 0.0   0.00  63.49 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-0 52255 5/253/2552 K 5.59 1     23  1354750 8.6   6.21  67.07 66.249.70.7     http/1.1 test.cloudware.ng:443           GET /1013784021?goodscode=1012456102 HTTP/1.1
   14-0 64762 3/24/2289  K 0.65 1     356 1182004 94.6  0.69  59.37 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=3919725821 HTTP/1.1
   15-0 64771 0/23/2476  W 0.47 0     0   1259758 0.0   0.55  63.33 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   16-0 54829 0/200/2367 W 5.36 2     0   1188300 0.0   4.92  59.59 173.252.70.7    http/1.1 blog.workflow-management-softwa GET /robots.txt HTTP/1.1
   17-0 -     0/0/2401   . 0.00 66    0   1214698 0.0   0.00  64.49 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 64772 1/30/2013  K 0.69 0     357 1017617 35.1  0.43  52.14 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=1861096883 HTTP/1.1
   19-0 47511 7/341/1826 K 9.55 0     0   936524  10.9  8.63  51.52 104.248.148.237 http/1.1 beta.cloudsms.com.ng:443        GET /.git/config HTTP/1.1
   20-0 55807 0/198/1965 W 4.65 2     0   982613  0.0   4.20  48.96 96.30.57.23     http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763343179.40851211547851562500
   21-0 52258 2/237/1891 K 5.71 2     352 1003042 63.9  6.36  51.48 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=632167336 HTTP/1.1
   22-0 -     0/0/1305   . 0.00 435   0   660176  0.0   0.00  32.17 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/1224   . 0.00 530   0   586731  0.0   0.00  29.95 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/1523   . 0.00 452   0   797856  0.0   0.00  40.09 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/988    . 0.00 499   0   469877  0.0   0.00  25.03 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/869    . 0.00 552   0   341801  0.0   0.00  16.88 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/749    . 0.00 62    0   367299  0.0   0.00  19.30 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 58187 0/166/766  _ 4.15 0     354 393734  0.0   4.36  18.95 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=504742858 HTTP/1.1
   29-0 -     0/0/117    . 0.00 2781  0   56902   0.0   0.00  2.50  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/628    . 0.00 1684  0   285658  0.0   0.00  13.70 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/500    . 0.00 2845  0   230058  0.0   0.00  10.64 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/183    . 0.00 2910  0   79523   0.0   0.00  3.91  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00 7758  0   46426   0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00 7751  0   156256  0.0   0.00  7.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00 7745  0   6362    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00 7691  0   85805   0.0   0.00  4.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00 7755  0   7767    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00 7738  0   77733   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/424    . 0.00 6345  0   220703  0.0   0.00  11.36 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/88     . 0.00 7624  0   19096   0.0   0.00  1.31  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00 7757  0   3054    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00 7612  0   22487   0.0   0.00  0.98  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00 7756  0   52913   0.0   0.00  2.30  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00 5397  0   366544  0.0   0.00  17.77 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00 7761  0   19040   0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00 7734  0   5124    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00 7695  0   7973    0.0   0.00  0.58  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00 7445  0   40607   0.0   0.00  1.94  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00 7749  0   18588   0.0   0.00  0.72  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 7744  0   3381    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00 7718  0   3457    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 10453 0   1702    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00 10429 0   2649    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 10452 0   1806    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 10374 0   13156   0.0   0.00  0.55  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 9619  0   98784   0.0   0.00  5.53  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 10313 0   19861   0.0   0.00  0.82  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1217
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 1...34)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 50233
   total entries replaced since starting: 0
   total entries expired since starting: 49012
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 115 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit