403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.03.45.txt
 ## swap threshold exceeded
## server overview
2025-11-17.03.45 load[0] mem[61/68] mysql[4/25] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1392         180           6         790         807
Swap:          1999        1516         483
 03:45:01 up  4:26,  0 users,  load average: 0.73, 1.37, 0.92
## system overview
top - 03:45:02 up  4:26,  0 users,  load average: 0.73, 1.37, 0.92
Tasks: 203 total,   4 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 21.9 sy,  0.0 ni, 25.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   191340 free,  1417900 used,   811060 buff/cache
KiB Swap:  2047996 total,   494836 free,  1553160 used.   833988 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1467796 211988   4252 S  68.8  8.8   3:36.27 /usr/sbin+
 28891 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.04 /opt/cpan+
 26209 nobody    20   0  277748  18432   3936 S   6.2  0.8   0:00.31 /usr/sbin+
     1 root      20   0   44400   3056   1392 S   0.0  0.1   0:21.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.11 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.90 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:17.31 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.88 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:46.32 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.02 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.20 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.97 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   2476   2320 S   0.0  0.1   0:08.78 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    220     96 S   0.0  0.0   0:01.36 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780      4      0 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    980    624 S   0.0  0.0   0:02.26 /usr/lib/+
   476 root      20   0   24716   1068    784 S   0.0  0.0   0:03.78 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.35 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   485 root      20   0   52852      8      0 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1240    600 S   0.0  0.1   0:08.64 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1240    696 S   0.0  0.1   0:15.36 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   2996    712 S   0.0  0.1   0:00.25 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.47 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120    440    292 S   0.0  0.0   0:00.30 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.67 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:01.95 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  265552   1436   1044 S   0.0  0.1   0:04.46 /usr/sbin+
   918 named     20   0 1185864  27196   1352 S   0.0  1.1   0:10.63 /usr/sbin+
   919 root      20   0 1828136 623164    180 S   0.0 25.7   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    412    256 S   0.0  0.0   0:00.20 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.48 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.62 sw-engine+
   937 root      20   0  439788    344    260 S   0.0  0.0   0:00.69 php-fpm: +
   938 systuser  20   0  114016  13084   2432 S   0.0  0.5   0:03.97 /usr/loca+
   939 root      20   0  261296   3976    848 S   0.0  0.2   0:03.60 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.28 /usr/bin/+
   944 root      20   0 1276356   6392      4 S   0.0  0.3   0:24.87 /usr/bin/+
   947 cpanelc+  20   0   10416   3316   2304 S   0.0  0.1   0:13.51 /usr/loca+
   952 root      20   0  396248    284    204 S   0.0  0.0   0:00.62 php-fpm: +
   957 root      20   0  388892    368    276 S   0.0  0.0   0:00.61 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   963 telegraf  20   0 5654048  35516   5788 S   0.0  1.5   0:09.23 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.32 pure-ftpd+
   967 root      20   0  400740    652    488 S   0.0  0.0   0:02.71 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.35 /usr/bin/+
   974 root      20   0  389508    108     24 S   0.0  0.0   0:00.58 php-fpm: +
  1080 dovenull  20   0   46912    724    468 S   0.0  0.0   0:00.25 dovecot/p+
  1081 dovenull  20   0   47608   2292   1492 S   0.0  0.1   0:00.12 dovecot/i+
  1082 dovecot   20   0   10320    292    200 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    604    436 S   0.0  0.0   0:00.17 dovecot/l+
  1084 dovenull  20   0   46984    808    548 S   0.0  0.0   0:00.30 dovecot/p+
  1085 dovenull  20   0   47432    216     68 S   0.0  0.0   0:00.11 dovecot/i+
  1091 root      20   0   24528   1836    476 S   0.0  0.1   0:00.11 dovecot/c+
  1095 dovecot   20   0   13568    400    264 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   2704    508 R   0.0  0.1   0:04.76 /usr/loca+
  1160 dovecot   20   0   41160   1356    968 S   0.0  0.1   0:00.34 dovecot/a+
  1168 systuser  20   0  157704   2968   1008 S   0.0  0.1   0:00.09 SonarPush+
  1176 wp-tool+  20   0  387556   2656   1316 S   0.0  0.1   0:00.22 /usr/bin/+
  1177 wp-tool+  20   0  412368   8948   1184 S   0.0  0.4   0:05.36 /usr/bin/+
  1211 root      20   0  209308   6184   1484 S   0.0  0.3   0:01.82 tailwatchd
  1213 root      20   0  262224   2972    184 S   0.0  0.1   0:00.89 cpdavd - +
  1216 root      20   0  167452    756    284 S   0.0  0.0   0:00.38 dnsadmin +
  1627 root      20   0  299272    276    128 S   0.0  0.0   0:00.44 php-fpm: +
  1673 root      38  18  130416     40      0 S   0.0  0.0   0:00.04 cpanellog+
  1928 root      20   0  266984   4956    468 S   0.0  0.2   0:01.99 /usr/sbin+
  1932 root      20   0   12844    296    136 S   0.0  0.0   0:02.07 /usr/loca+
  1933 root      20   0   12732    120     44 S   0.0  0.0   0:01.81 /usr/loca+
  1934 root      20   0   12900    372    168 S   0.0  0.0   0:01.96 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4229 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8393 root      20   0  266004   3600    396 S   0.0  0.1   0:03.76 spamd chi+
  8394 root      20   0  248032   2112    376 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 13393 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 15866 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 17108 nobody    20   0  277868  12920   3660 S   0.0  0.5   0:01.29 /usr/sbin+
 19840 nobody    20   0  277744   9344   3384 S   0.0  0.4   0:00.96 /usr/sbin+
 20656 nobody    20   0  277592  10608   3932 S   0.0  0.4   0:00.96 /usr/sbin+
 20659 nobody    20   0  277688  10396   4088 S   0.0  0.4   0:01.07 /usr/sbin+
 22340 nobody    20   0  277680  10392   3796 S   0.0  0.4   0:00.69 /usr/sbin+
 22341 nobody    20   0  277744   9876   3668 S   0.0  0.4   0:00.70 /usr/sbin+
 22343 nobody    20   0  277912  10712   3632 S   0.0  0.4   0:00.78 /usr/sbin+
 22482 nobody    20   0  277868   8860   3000 S   0.0  0.4   0:00.50 /usr/sbin+
 23411 nobody    20   0  277728  10232   3628 S   0.0  0.4   0:00.65 /usr/sbin+
 23560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25474 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 25641 nobody    20   0  277876  15472   3856 S   0.0  0.6   0:00.45 /usr/sbin+
 25668 nobody    20   0  277744  16892   3968 S   0.0  0.7   0:00.44 /usr/sbin+
 25685 nobody    20   0  277580  15408   3392 S   0.0  0.6   0:00.29 /usr/sbin+
 25806 nobody    20   0  277744  16836   3656 S   0.0  0.7   0:00.40 /usr/sbin+
 26222 nobody    20   0  277748  18268   3936 S   0.0  0.8   0:00.21 /usr/sbin+
 26249 nobody    20   0  277680  18436   4100 S   0.0  0.8   0:00.27 /usr/sbin+
 27057 nobody    20   0  277752  18244   4040 R   0.0  0.8   0:00.18 /usr/sbin+
 27060 nobody    20   0  277744  18384   4204 S   0.0  0.8   0:00.20 /usr/sbin+
 27075 nobody    20   0  277744  17884   3772 S   0.0  0.7   0:00.19 /usr/sbin+
 27079 nobody    20   0  277744  18488   4208 S   0.0  0.8   0:00.19 /usr/sbin+
 27080 nobody    20   0  277744  17676   3736 S   0.0  0.7   0:00.13 /usr/sbin+
 27569 root      20   0   41052   2812   2144 S   0.0  0.1   0:00.00 dovecot/a+
 28007 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28078 nobody    20   0  277884  17620   3720 S   0.0  0.7   0:00.05 /usr/sbin+
 28290 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 28338 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 28345 mailnull  20   0   89500   3760   2580 S   0.0  0.2   0:00.00 /usr/sbin+
 28554 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 28806 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 28808 nigeria   20   0  400460   4416   2324 S   0.0  0.2   0:00.00 php-fpm: +
 28828 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28829 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28830 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28831 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28832 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28833 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28834 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28836 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28837 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28839 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28840 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28842 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28862 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 28863 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 28864 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28866 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28867 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28868 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28869 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28871 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28873 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 28874 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28875 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28879 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 28884 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 28885 root      20   0  188212  11104   5148 S   0.0  0.5   0:00.01 /usr/loca+
 28889 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 28892 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 28897 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 28898 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 28900 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 28940 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -n 2 +
 28945 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.30 [kworker]
 40218 root      20   0  182316   6684   1080 S   0.0  0.3   0:13.54 lfd - sle+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 99607 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101261 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:17  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:46  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root      99607  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/0:4]
root     101261  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:2]
root       4229  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:1]
root       5177  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/0:3]
root      13393  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/1:3]
root      15866  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      23560  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:2]
root      25474  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/1:1]
root      28007  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44400  3056 ?        Ss   Nov16   0:21 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  2476 ?        Ss   Nov16   0:08 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   220 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780     4 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   980 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1068 ?        Ss   Nov16   0:03 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852     8 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1240 ?        Ss   Nov16   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1240 ?        Ssl  Nov16   0:15 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  2996 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      28828  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28873  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      28884  0.0  0.0 108052   356 ?        S    03:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      28892  0.0  0.0 113288  1516 ?        S    03:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      28988  0.0  0.0 153840  2088 ?        R    03:45   0:00  |               \_ ps auxf
root      28829  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28867  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      28830  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28871  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      28831  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28868  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      28832  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28869  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      28833  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28864  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      28834  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28874  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      28836  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28875  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      28837  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28866  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      28839  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28862  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      28885  1.0  0.4 188212 11104 ?        S    03:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      28940  0.0  0.0 160224  2336 ?        S    03:45   0:00  |           \_ top -n 2 -b -c
root      28840  0.0  0.0 183048  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28879  0.0  0.0  20164   960 ?        Ss   03:45   0:00  |   \_ jailshell (pactpay) [28897] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28897  0.0  0.0  20164   256 ?        S    03:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28900  1.0  0.7 480124 17688 ?        S    03:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      28842  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      28863  0.0  0.0  20164   964 ?        Ss   03:45   0:00      \_ jailshell (nigeria) [28889] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28889  0.0  0.0  20164   260 ?        S    03:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28891  4.0  0.6 404052 16144 ?        S    03:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.0  89120   440 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  28345  0.0  0.1  89500  3760 ?        S    03:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      28290  0.0  0.1 111304  4268 ?        Ss   03:44   0:00  \_ sshd: [accepted]
root      28338  0.0  0.1 111304  4272 ?        Ss   03:44   0:00  \_ sshd: [accepted]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.0 265552  1436 ?        Ssl  Nov16   0:04 /usr/sbin/rsyslogd -n
named       918  0.0  1.1 1185864 27196 ?       Ssl  Nov16   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.2 25.7 1828136 623164 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   412 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912   724 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47608  2292 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   292 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   604 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   808 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.0  47432   216 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  1836 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   400 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1356 ?        S    Nov16   0:00  \_ dovecot/auth
root      27569  0.0  0.1  41052  2812 ?        S    03:43   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  28554  0.0  0.0 445028   312 ?        S    03:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   344 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13084 ?        Ssl  Nov16   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.1 261296  3976 ?        Ss   Nov16   0:03 cpsrvd (SSL) - waiting for connections                   
root      28806  0.0  0.0      0     0 ?        Z    03:44   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.1 1277312 3688 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6392 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3316 ?        Ss   Nov16   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   284 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   368 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35516 ?       SLsl Nov16   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   652 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   28808  0.0  0.1 400460  4416 ?        S    03:44   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   108 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  2704 ?        Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  0.1 266004  3600 ?        S    Nov16   0:03  \_ spamd child
root       8394  0.0  0.0 248032  2112 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2968 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  2656 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  8948 ?        Ss   Nov16   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.2 209308  6184 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.1 262224  2972 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.0 167452   756 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   276 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416    40 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4956 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12844   296 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   120 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12900   372 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    17108  0.1  0.5 277868 12920 ?        S    03:31   0:01  \_ /usr/sbin/httpd -k start
nobody    19840  0.1  0.3 277744  9344 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    20656  0.1  0.4 277592 10608 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    20659  0.1  0.4 277688 10396 ?        S    03:35   0:01  \_ /usr/sbin/httpd -k start
nobody    22340  0.1  0.4 277680 10392 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    22341  0.1  0.4 277744  9876 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    22343  0.1  0.4 277912 10712 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    22482  0.1  0.3 277868  8860 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    23411  0.1  0.4 277728 10232 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    25641  0.1  0.6 277876 15780 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25668  0.1  0.6 277744 16892 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25685  0.1  0.6 277580 15408 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25806  0.2  0.6 277744 16836 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    28898  1.0  0.6 353712 15976 ?        S    03:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    26209  0.1  0.7 277748 18432 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    26222  0.1  0.7 277748 18268 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    26249  0.1  0.7 277680 18436 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    27057  0.1  0.7 277752 18244 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    27060  0.1  0.7 277744 18384 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    27075  0.1  0.7 277744 17884 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    27079  0.1  0.7 277744 18488 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    27080  0.1  0.7 277744 17676 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    28078  0.0  0.7 277884 17620 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.3  8.7 1467796 211988 ?      Sl   Nov16   3:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.2 182316  6684 ?        Ss   00:00   0:13 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 15928  Threads: 3  Questions: 1267000  Slow queries: 0  Opens: 7594  Flush tables: 1  Open tables: 2000  Queries per second avg: 79.545
*************************** 1. row ***************************
     Id: 17978
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 17983
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 17988
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 142.44.220.52 TIME_WAIT
      1 15.235.27.40 TIME_WAIT
      1 185.152.39.9 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 209.242.219.130 TIME_WAIT
      1 209.242.219.66 TIME_WAIT
      1 3.15.1.70 TIME_WAIT
      1 43.133.187.11 TIME_WAIT
      1 44.201.73.243 TIME_WAIT
      1 45.95.24.0 TIME_WAIT
      1 45.95.24.4 TIME_WAIT
      1 52.167.144.173 TIME_WAIT
      1 54.39.136.217 TIME_WAIT
      1 74.7.230.56 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 168.205.75.5 TIME_WAIT
      3 209.242.219.162 TIME_WAIT
      3 34.96.44.200 TIME_WAIT
      3 34.96.47.11 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 03:45:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 26 minutes 12 seconds
   Server load: 0.73 1.37 0.92
   Total accesses: 92854 - Total Traffic: 2.3 GB - Total Duration: 47471387
   CPU Usage: u7 s5.89 cu1270.87 cs1046.28 - 14.6% CPU load
   5.81 requests/sec - 151.4 kB/second - 26.0 kB/request - 511.248 ms/request
   20 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

_KWK.KK..K...K..KK_..KK.RKKKR....K..W...WK......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol              VHost                                Request
   0-0  28078 0/14/4167   _ 0.24 0     0   2177667 0.0   0.17  105.24 3.15.209.200    http/1.1 proxy-subdomains-vhost.localhos GET / HTTP/1.1
   1-0  25806 1/55/3652   K 1.61 0     474 1908590 36.1  1.58  104.19 66.249.70.70    http/1.1 team.cloudware.ng:443           GET /?l=1996469486 HTTP/1.1
   2-0  25641 0/65/4029   W 2.01 0     0   1944488 0.0   1.91  98.86  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  25668 14/61/3919  K 1.98 2     265 1931563 432.2 1.83  97.37  192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=2560915538 HTTP/1.1
   4-0  -     0/0/3950    . 0.00 98    0   1869808 0.0   0.00  98.43  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  23411 1/97/3630   K 2.34 2     307 1831192 35.9  3.00  94.36  192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=722758620 HTTP/1.1
   6-0  26209 1/54/3841   K 1.31 0     366 1897491 33.5  1.19  95.89  66.249.70.66    http/1.1 team.cloudware.ng:443           GET /?l=1179874420 HTTP/1.1
   7-0  -     0/0/3613    . 0.00 113   0   1862070 0.0   0.00  93.46  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  -     0/0/3722    . 0.00 124   0   1787723 0.0   0.00  89.32  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-0  26222 1/36/3703   K 0.83 0     345 1872077 35.1  0.84  94.91  66.249.64.226   http/1.1 team.cloudware.ng:443           GET /?l=2896269541 HTTP/1.1
   10-0 -     0/0/3688    . 0.00 100   0   1890108 0.0   0.00  96.48  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 -     0/0/3408    . 0.00 122   0   1756551 0.0   0.00  86.46  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 -     0/0/3413    . 0.00 121   0   1774077 0.0   0.00  87.98  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-0 17108 2/218/3591  K 6.33 2     396 1843660 66.2  4.57  89.94  192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=412724183 HTTP/1.1
   14-0 -     0/0/3216    . 0.00 119   0   1641974 0.0   0.00  81.36  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -     0/0/3222    . 0.00 116   0   1675646 0.0   0.00  83.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 26249 7/53/3362   K 1.05 2     342 1701181 219.9 1.43  83.49  192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=2031834969 HTTP/1.1
   17-0 20656 1/149/3252  K 4.45 1     272 1668119 33.8  4.40  86.78  192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=3199121486 HTTP/1.1
   18-0 22340 0/110/2968  _ 3.16 0     0   1527998 0.0   2.66  77.59  3.15.1.70       http/1.1 proxy-subdomains-vhost.localhos GET / HTTP/1.1
   19-0 -     0/0/2631    . 0.00 114   0   1369428 0.0   0.00  70.79  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/2739    . 0.00 99    0   1408365 0.0   0.00  68.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 22341 11/115/2468 K 3.47 1     343 1330824 335.8 3.80  67.56  192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=3452992208 HTTP/1.1
   22-0 25685 1/25/1806   K 0.64 0     345 1131296 33.8  0.59  43.47  66.249.70.137   http/1.1 team.cloudware.ng:443           GET /?l=3749795021 HTTP/1.1
   23-0 -     0/0/1938    . 0.00 123   0   962713  0.0   0.00  49.55  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 19840 0/202/2044  R 6.54 24    265 1052119 0.0   3.15  51.58  106.154.144.141 http/1.1
   25-0 22343 1/113/1354  K 3.65 1     26  666076  5.8   2.94  33.88  66.249.70.7     http/1.1 test.cloudware.ng:443           GET /186664249?goodscode=0186420366 HTTP/1.1
   26-0 20659 8/150/1129  K 4.76 1     398 508602  249.1 4.22  23.82  192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=799503935 HTTP/1.1
   27-0 22482 8/82/931    K 2.12 2     351 740321  252.3 2.19  24.08  192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=222033471 HTTP/1.1
   28-0 27057 0/35/1150   R 0.82 0     22  585487  0.0   0.68  28.30  71.6.232.29     http/1.1
   29-0 -     0/0/573     . 0.00 111   0   271785  0.0   0.00  13.51  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/1144    . 0.00 117   0   558715  0.0   0.00  26.75  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/698     . 0.00 78    0   320711  0.0   0.00  15.42  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/200     . 0.00 120   0   87424   0.0   0.00  4.21   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 27060 4/32/150    K 0.85 1     347 72558   124.2 0.95  4.52   192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=4152658784 HTTP/1.1
   34-0 -     0/0/329     . 0.00 36    0   169541  0.0   0.00  8.56   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/586     . 0.00 112   0   324653  0.0   0.00  16.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 27075 0/30/225    W 0.82 0     0   118582  0.0   0.86  5.84   66.249.64.103   http/1.1 team.cloudware.ng:443           GET /?l=2931815698 HTTP/1.1
   37-0 -     0/0/370     . 0.00 125   0   194052  0.0   0.00  9.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/160     . 0.00 60    0   86409   0.0   0.00  4.07   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/427     . 0.00 115   0   221231  0.0   0.00  11.39  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 27079 0/38/126    W 0.92 0     0   34863   0.0   0.98  2.29   66.249.70.34    http/1.1 team.cloudware.ng:443           GET /?l=1851952651 HTTP/1.1
   41-0 27080 8/24/32     K 0.56 1     351 15549   241.3 0.78  0.83   192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=3884279257 HTTP/1.1
   42-0 -     0/0/43      . 0.00 11933 0   22487   0.0   0.00  0.98   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00 12077 0   52913   0.0   0.00  2.30   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00 9718  0   366544  0.0   0.00  17.77  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00 12082 0   19040   0.0   0.00  0.83   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00 12055 0   5124    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00 12015 0   7973    0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00 11766 0   40607   0.0   0.00  1.94   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00 12070 0   18588   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00 12065 0   3381    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00 12039 0   3457    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00 14774 0   1702    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00 14750 0   2649    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 14773 0   1806    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00 14694 0   13156   0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00 13940 0   98784   0.0   0.00  5.53   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00 14634 0   19861   0.0   0.00  0.82   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1406
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...27)
   index usage: 24%, cache usage: 33%
   total entries stored since starting: 69484
   total entries replaced since starting: 0
   total entries expired since starting: 68072
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 282 miss
   total removes since starting: 12 hit, 11 miss
Youez - 2016 - github.com/yon3zu
LinuXploit