403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.04.03.txt
 ## swap threshold exceeded
## server overview
2025-11-17.04.03 load[0] mem[66/62] mysql[2/25] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1531         100          23         731         647
Swap:          1999        1398         601
 04:03:01 up  4:44,  0 users,  load average: 0.20, 0.48, 0.66
## system overview
top - 04:03:01 up  4:44,  0 users,  load average: 0.20, 0.48, 0.66
Tasks: 206 total,   2 running, 202 sleeping,   0 stopped,   2 zombie
%Cpu(s): 45.5 us, 24.2 sy,  0.0 ni, 24.2 id,  3.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    92656 free,  1576372 used,   751272 buff/cache
KiB Swap:  2047996 total,   615648 free,  1432348 used.   654724 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 254164   4664 S  60.0 10.5   3:54.73 /usr/sbin+
 46674 nigeria   20   0  404052  16136  10376 S  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44400   3212   1452 S   6.7  0.1   0:23.00 /usr/lib/+
   492 dbus      20   0   58700   1340    600 S   6.7  0.1   0:09.24 /usr/bin/+
 46671 root      20   0  160220   2064   1588 R   6.7  0.1   0:00.01 top -bcn1
 46673 pactpay   20   0  479860  16260  10648 R   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.19 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.97 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:18.60 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.95 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.40 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:46.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.20 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.32 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.04 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   5876   5636 S   0.0  0.2   0:09.46 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    212     96 S   0.0  0.0   0:01.47 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     52     24 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    980    624 S   0.0  0.0   0:02.42 /usr/lib/+
   476 root      20   0   24716   1140    792 S   0.0  0.0   0:04.04 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.38 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   485 root      20   0   52852    320    220 S   0.0  0.0   0:00.01 /usr/sbin+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1376    692 S   0.0  0.1   0:16.49 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   2996    712 S   0.0  0.1   0:00.26 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.50 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3728    888 S   0.0  0.2   0:00.32 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.68 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.12 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  265552   4564   4076 S   0.0  0.2   0:04.78 /usr/sbin+
   918 named     20   0 1185864  28920   1652 S   0.0  1.2   0:11.40 /usr/sbin+
   919 root      20   0 1828136 567616    136 S   0.0 23.5   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    456    292 S   0.0  0.0   0:00.22 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.56 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.67 sw-engine+
   937 root      20   0  439788    380    288 S   0.0  0.0   0:00.72 php-fpm: +
   938 systuser  20   0  114016  13636   2656 S   0.0  0.6   0:04.22 /usr/loca+
   939 root      20   0  261296   6400   1724 S   0.0  0.3   0:03.96 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.28 /usr/bin/+
   944 root      20   0 1276356   6444      4 S   0.0  0.3   0:24.88 /usr/bin/+
   947 cpanelc+  20   0   10416   3312   2300 S   0.0  0.1   0:14.45 /usr/loca+
   952 root      20   0  396248    404    320 S   0.0  0.0   0:00.64 php-fpm: +
   957 root      20   0  388892    544    444 S   0.0  0.0   0:00.65 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   963 telegraf  20   0 5654048  33304   4820 S   0.0  1.4   0:09.82 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.35 pure-ftpd+
   967 root      20   0  400740    764    596 S   0.0  0.0   0:02.89 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.38 /usr/bin/+
   974 root      20   0  389508    308    224 S   0.0  0.0   0:00.60 php-fpm: +
  1080 dovenull  20   0   46912    724    468 S   0.0  0.0   0:00.26 dovecot/p+
  1081 dovenull  20   0   47608   2416   1608 S   0.0  0.1   0:00.12 dovecot/i+
  1082 dovecot   20   0   10320    292    200 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    604    436 S   0.0  0.0   0:00.19 dovecot/l+
  1084 dovenull  20   0   46984    808    548 S   0.0  0.0   0:00.31 dovecot/p+
  1085 dovenull  20   0   47564   2512   1700 S   0.0  0.1   0:00.12 dovecot/i+
  1091 root      20   0   24528   2124    480 S   0.0  0.1   0:00.12 dovecot/c+
  1095 dovecot   20   0   13568    624    448 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   3580    720 S   0.0  0.1   0:04.89 /usr/loca+
  1160 dovecot   20   0   41160   1428    992 S   0.0  0.1   0:00.36 dovecot/a+
  1168 systuser  20   0  157704   2968   1008 S   0.0  0.1   0:00.09 SonarPush+
  1176 wp-tool+  20   0  387556   3476   1628 S   0.0  0.1   0:00.23 /usr/bin/+
  1177 wp-tool+  20   0  412368  10128   1672 S   0.0  0.4   0:05.70 /usr/bin/+
  1211 root      20   0  209308   7504   1604 S   0.0  0.3   0:01.93 tailwatchd
  1213 root      20   0  262224  23020   5100 S   0.0  1.0   0:00.99 cpdavd - +
  1216 root      20   0  167452   1212    652 S   0.0  0.1   0:00.40 dnsadmin +
  1627 root      20   0  299272    496    332 S   0.0  0.0   0:00.47 php-fpm: +
  1673 root      38  18  130416   1340    684 S   0.0  0.1   0:00.04 cpanellog+
  1928 root      20   0  266984   4956    468 S   0.0  0.2   0:02.13 /usr/sbin+
  1932 root      20   0   12852    324    212 S   0.0  0.0   0:02.22 /usr/loca+
  1933 root      20   0   12732    260    180 S   0.0  0.0   0:01.94 /usr/loca+
  1934 root      20   0   12900    332    216 S   0.0  0.0   0:02.11 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4229 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8393 root      20   0  266004  45228   1188 S   0.0  1.9   0:03.96 spamd chi+
  8394 root      20   0  248032   2112    376 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 15866 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 25641 nobody    20   0  277812  18080   4828 S   0.0  0.7   0:02.21 /usr/sbin+
 29075 nobody    20   0  277740  20240   5104 S   0.0  0.8   0:01.61 /usr/sbin+
 30014 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33338 nobody    20   0  277768  19956   4840 S   0.0  0.8   0:01.22 /usr/sbin+
 34451 nobody    20   0  277636  19224   4800 S   0.0  0.8   0:01.06 /usr/sbin+
 35100 nobody    20   0  277680  19428   4756 S   0.0  0.8   0:01.05 /usr/sbin+
 35768 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 38052 nobody    20   0  277680  19212   4692 S   0.0  0.8   0:00.79 /usr/sbin+
 40017 nobody    20   0  277604  19020   4608 S   0.0  0.8   0:00.65 /usr/sbin+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.32 [kworker]
 40055 nobody    20   0  277680  19176   4488 S   0.0  0.8   0:00.67 /usr/sbin+
 40218 root      20   0  182416   8544   1100 S   0.0  0.4   0:14.63 lfd - sle+
 41277 nobody    20   0  277744  18532   4364 S   0.0  0.8   0:00.51 /usr/sbin+
 42083 nobody    20   0  277612  18988   4512 S   0.0  0.8   0:00.42 /usr/sbin+
 42606 nobody    20   0  277708  18896   4496 S   0.0  0.8   0:00.45 /usr/sbin+
 43150 nobody    20   0  277868  18860   4428 S   0.0  0.8   0:00.33 /usr/sbin+
 43333 nobody    20   0  277744  18688   4316 S   0.0  0.8   0:00.27 /usr/sbin+
 43347 nobody    20   0  277616  18676   4404 S   0.0  0.8   0:00.24 /usr/sbin+
 44698 nobody    20   0  277816  18324   4272 S   0.0  0.8   0:00.14 /usr/sbin+
 44862 nobody    20   0  277596  18040   3956 S   0.0  0.7   0:00.17 /usr/sbin+
 44996 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 45319 nobody    20   0  277744  17324   3532 S   0.0  0.7   0:00.13 /usr/sbin+
 45335 nobody    20   0  277744  17676   3884 S   0.0  0.7   0:00.11 /usr/sbin+
 45336 nobody    20   0  277744  17748   3820 S   0.0  0.7   0:00.13 /usr/sbin+
 45759 nobody    20   0  277876  17812   3884 S   0.0  0.7   0:00.10 /usr/sbin+
 45771 nobody    20   0  277744  17240   3352 S   0.0  0.7   0:00.10 /usr/sbin+
 45772 nobody    20   0  277596  17424   3692 S   0.0  0.7   0:00.09 /usr/sbin+
 45887 wp-tool+  20   0  445880  22220  19252 S   0.0  0.9   0:00.05 sw-engine+
 45957 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 46139 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 46563 nobody    20   0  277600  16656   3176 S   0.0  0.7   0:00.00 /usr/sbin+
 46566 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 46567 nobody    20   0  277600  16652   3172 S   0.0  0.7   0:00.01 /usr/sbin+
 46568 nobody    20   0  277600  16648   3168 S   0.0  0.7   0:00.00 /usr/sbin+
 46584 nobody    20   0  277600  16644   3164 S   0.0  0.7   0:00.00 /usr/sbin+
 46585 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.00 [httpd] <+
 46586 nobody    20   0  277600  16628   3148 S   0.0  0.7   0:00.00 /usr/sbin+
 46587 nobody    20   0  277176  14856   1816 S   0.0  0.6   0:00.00 /usr/sbin+
 46588 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 46591 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 46592 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 46595 cloudsms  20   0  299364  17884  11468 S   0.0  0.7   0:00.02 /opt/cpan+
 46604 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46607 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46608 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46609 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46610 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46611 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46612 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46613 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46614 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46616 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 46618 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 46619 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 46620 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 46642 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 46644 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46646 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46647 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46648 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46649 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46650 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46651 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46653 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 46655 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 46667 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 46668 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 46682 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46686 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kworker/+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.36 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
101261 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:18  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:46  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root     101261  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:2]
root       4229  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:1]
root      15866  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      30014  0.0  0.0      0     0 ?        S    03:46   0:00  \_ [kworker/0:0]
root      35768  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:4]
root      37613  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/1:1]
root      46682  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/1:3]
root      46683  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:2]
root      46686  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44400  3212 ?        Ss   Nov16   0:23 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  5876 ?        Ss   Nov16   0:09 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   212 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780    52 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   980 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1140 ?        Ss   Nov16   0:04 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   320 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1340 ?        Ss   Nov16   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1376 ?        Ssl  Nov16   0:16 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  2996 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      46604  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46618  0.0  0.0 113284  1212 ?        Ss   04:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      46619  0.0  0.0 108052   356 ?        S    04:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      46620  0.0  0.0 113288  1516 ?        S    04:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      46688  0.0  0.0 153840  2096 ?        R    04:03   0:00  |               \_ ps auxf
root      46607  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46650  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      46608  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46647  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      46609  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46648  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      46610  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46644  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      46611  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46649  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      46612  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46651  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      46613  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46646  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      46614  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46653  0.0  0.0  20164   968 ?        Ss   04:03   0:00  |   \_ jailshell (pactpay) [46667] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46667  0.0  0.0  20164   260 ?        S    04:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46673  0.0  0.6 480124 16788 ?        S    04:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      46616  0.0  0.0 183048  2152 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      46655  0.0  0.0  20164   968 ?        Ss   04:03   0:00      \_ jailshell (nigeria) [46668] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46668  0.0  0.0  20164   256 ?        S    04:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46674  0.0  0.6 404052 16136 ?        S    04:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3728 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   Nov16   0:02 /usr/sbin/sshd -D
root      45957  0.0  0.1 111304  4272 ?        Ss   04:02   0:00  \_ sshd: [accepted]
root      46139  0.0  0.1 111304  4272 ?        Ss   04:02   0:00  \_ sshd: [accepted]
root      46591  1.0  0.2 162436  5836 ?        Ss   04:02   0:00  \_ sshd: root [priv]
sshd      46592  0.0  0.1 115644  2628 ?        S    04:02   0:00      \_ sshd: root [net]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 265552  4564 ?        Ssl  Nov16   0:04 /usr/sbin/rsyslogd -n
named       918  0.0  1.1 1185864 28920 ?       Ssl  Nov16   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.2 23.4 1828136 567616 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   456 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912   724 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47608  2416 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   292 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   604 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   808 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47564  2512 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2124 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   624 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1428 ?        S    Nov16   0:00  \_ dovecot/auth
root      44996  0.0  0.1  60820  4508 ?        S    04:01   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  45887  0.1  0.9 445880 22220 ?        S    04:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   380 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13636 ?        Ssl  Nov16   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6400 ?        Ss   Nov16   0:03 cpsrvd (SSL) - waiting for connections                   
root      46588  0.0  0.0      0     0 ?        Z    04:02   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.1 1277312 3688 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6444 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3312 ?        Ss   Nov16   0:14 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   404 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   544 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.3 5654048 33304 ?       SLsl Nov16   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   764 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   46566  0.0  0.1 400460  4420 ?        S    04:02   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   308 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  3580 ?        Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  1.8 266004 45228 ?        S    Nov16   0:03  \_ spamd child
root       8394  0.0  0.0 248032  2112 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2968 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3476 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.4 412368 10128 ?        Ss   Nov16   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.3 209308  7504 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.9 262224 23020 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.0 167452  1212 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   496 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1340 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4956 ?        Ss   Nov16   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12852   324 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   260 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12900   332 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    25641  0.1  0.7 277812 18080 ?        S    03:41   0:02  \_ /usr/sbin/httpd -k start
nobody    29075  0.1  0.8 277740 20240 ?        S    03:45   0:01  \_ /usr/sbin/httpd -k start
nobody    33338  0.1  0.8 277768 19956 ?        S    03:49   0:01  \_ /usr/sbin/httpd -k start
nobody    34451  0.1  0.7 277636 19224 ?        S    03:50   0:01  \_ /usr/sbin/httpd -k start
nobody    35100  0.1  0.8 277680 19428 ?        S    03:51   0:01  \_ /usr/sbin/httpd -k start
nobody    38052  0.1  0.7 277680 19212 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody    40017  0.1  0.7 277604 19020 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    40055  0.1  0.7 277680 19176 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
cloudw    46642  0.0  0.6 353712 15976 ?        S    04:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    41277  0.1  0.7 277744 18532 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    42083  0.1  0.7 277612 18988 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody    42606  0.2  0.7 277708 18896 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    43150  0.1  0.7 277868 18860 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    43333  0.1  0.7 277744 18688 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    43347  0.1  0.7 277616 18676 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    44698  0.1  0.7 277816 18324 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    44862  0.1  0.7 277596 18040 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    45319  0.1  0.7 277744 17324 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    45335  0.1  0.7 277744 17676 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    45336  0.1  0.7 277744 17748 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    45759  0.1  0.7 277876 17812 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    45771  0.1  0.7 277744 17240 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    45772  0.1  0.7 277596 17424 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    46563  0.0  0.6 277600 16656 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    46567  0.3  0.6 277600 16652 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    46568  0.0  0.6 277600 16648 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    46584  0.0  0.6 277600 16644 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    46585  0.0  0.0      0     0 ?        Z    04:02   0:00  \_ [httpd] <defunct>
nobody    46586  0.0  0.6 277600 16628 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    46587  0.0  0.6 277176 14856 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
cloudsms  46595  2.0  0.7 299364 17884 ?        S    04:02   0:00      \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
mysql      2639  1.3 10.5 1468028 254164 ?      Sl   Nov16   3:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.3 182416  8544 ?        Ss   00:00   0:14 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 17007  Threads: 4  Questions: 1370304  Slow queries: 0  Opens: 8262  Flush tables: 1  Open tables: 2000  Queries per second avg: 80.572
*************************** 1. row ***************************
     Id: 19345
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 19351
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 19353
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 19355
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 142.44.220.8 TIME_WAIT
      1 142.44.228.214 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.95.200 TIME_WAIT
      1 54.39.136.182 TIME_WAIT
      1 64.62.197.167 TIME_WAIT
      1 66.249.64.103 TIME_WAIT
      1 66.249.70.136 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.248.90.230 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.155.162.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 04:03:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 44 minutes 12 seconds
   Server load: 0.20 0.48 0.66
   Total accesses: 100067 - Total Traffic: 2.5 GB - Total Duration: 51214924
   CPU Usage: u8.94 s5.65 cu1366.84 cs1127.79 - 14.7% CPU load
   5.87 requests/sec - 154.0 kB/second - 26.2 kB/request - 511.806 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

K__KKKC_KK___K_K__WRKKWKK._KW...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req    Dur   Conn Child  Slot      Client     Protocol             VHost                                         Request
   0-0  44698 1/31/4503  K 0.55  0     336  2356338 34.6 0.56  113.72 66.249.64.2    http/1.1 team.cloudware.ng:443         GET /?l=4058319213 HTTP/1.1
   1-0  44862 0/29/3971  _ 0.70  0     399  2105560 0.0  3.61  117.21 192.178.4.99   http/1.1 team.cloudware.ng:443         GET /?l=1402264155 HTTP/1.1
   2-0  25641 0/367/4331 _ 10.28 0     261  2102859 0.0  9.58  106.53 192.178.4.102  http/1.1 team.cloudware.ng:443         GET /?l=682347423 HTTP/1.1
   3-0  43150 1/57/4207  K 1.37  3     275  2086804 34.9 1.76  104.84 66.249.70.8    http/1.1 team.cloudware.ng:443         GET /?l=4122374041 HTTP/1.1
   4-0  42083 1/74/4212  K 1.60  1     410  2018058 39.1 4.07  107.99 66.249.64.233  http/1.1 team.cloudware.ng:443         GET /?l=2915500253 HTTP/1.1
   5-0  46563 1/1/3904   K 0.00  3     271  1955952 33.6 0.03  101.78 66.249.70.2    http/1.1 team.cloudware.ng:443         GET /?l=2065199870 HTTP/1.1
   6-0  41277 1/81/4117  C 2.17  0     0    2040938 0.2  5.34  106.36 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   7-0  45319 0/21/3892  _ 0.59  1     261  1997762 0.0  0.64  99.87  192.178.4.97   http/1.1 team.cloudware.ng:443         GET /?l=3268267868 HTTP/1.1
   8-0  34451 1/190/4006 K 4.76  4     305  1924024 36.0 6.38  97.64  66.249.64.42   http/1.1 team.cloudware.ng:443         GET /?l=2113127579 HTTP/1.1
   9-0  35100 1/192/3937 K 4.68  1     347  1995085 35.5 4.98  101.28 66.249.64.44   http/1.1 team.cloudware.ng:443         GET /?l=2320460563 HTTP/1.1
   10-0 45759 0/26/3985  _ 0.54  1     253  2028127 0.0  0.26  103.53 192.178.4.96   http/1.1 team.cloudware.ng:443         GET /?l=3061379277 HTTP/1.1
   11-0 33338 0/213/3639 _ 5.21  0     267  1874922 0.0  5.83  92.74  192.178.4.101  http/1.1 team.cloudware.ng:443         GET /?l=2192788096 HTTP/1.1
   12-0 45335 0/17/3675  _ 0.43  1     301  1891747 0.0  0.51  94.77  192.178.4.96   http/1.1 team.cloudware.ng:443         GET /?l=1869157133 HTTP/1.1
   13-0 45336 1/22/3813  K 0.56  4     269  1955913 35.5 0.58  95.33  66.249.70.130  http/1.1 team.cloudware.ng:443         GET /?l=1017505385 HTTP/1.1
   14-0 29075 0/289/3505 _ 7.77  0     297  1790509 0.0  9.22  90.57  66.249.70.64   http/1.1 team.cloudware.ng:443         GET /?l=3604980915 HTTP/1.1
   15-0 42606 1/78/3447  K 1.84  2     302  1790870 36.1 2.21  89.82  192.178.4.99   http/1.1 team.cloudware.ng:443         GET /?l=2645955108 HTTP/1.1
   16-0 38052 0/132/3661 _ 3.34  0     3    1852305 0.0  3.62  93.76  ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   17-0 45771 0/17/3484  _ 0.44  0     1010 1825124 0.0  0.47  92.98  92.205.19.191  http/1.1 developers.cloudsms.com.ng:80 GET /api.php?userid=10312800&password=lovely1&type=5&destinatio
   18-0 40017 0/104/3210 W 2.72  0     0    1667073 0.0  3.13  84.87  ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   19-0 43333 0/54/2883  R 1.14  19    7    1481377 0.0  1.05  76.58  35.172.125.172 http/1.1 nigeriadecide.org:443         GET /polling_unit_category.php/images/2019elections/2019electio
   20-0 45772 1/14/2992  K 0.36  2     265  1537396 35.3 0.44  74.70  66.249.70.7    http/1.1 team.cloudware.ng:443         GET /?l=827120124 HTTP/1.1
   21-0 46567 1/1/2696   K 0.01  2     261  1457687 33.9 0.03  74.54  66.249.70.34   http/1.1 team.cloudware.ng:443         GET /?l=1031374221 HTTP/1.1
   22-0 40055 0/113/2074 W 2.88  0     0    1284732 0.0  3.13  50.25  192.178.4.101  http/1.1 team.cloudware.ng:443         GET /?l=3616478483 HTTP/1.1
   23-0 46568 1/1/2251   K 0.00  2     256  1107548 34.1 0.03  57.22  66.249.64.5    http/1.1 team.cloudware.ng:443         GET /?l=1462441796 HTTP/1.1
   24-0 46584 1/1/2155   K 0.00  0     350  1106132 33.3 0.03  54.13  66.249.70.32   http/1.1 team.cloudware.ng:443         GET /?l=3469797074 HTTP/1.1
   25-0 -     0/0/1496   . 0.00  0     0    737034  0.0  0.00  38.01  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 43347 0/42/1376  _ 1.05  0     23   651877  0.0  1.04  30.59  66.249.70.7    http/1.1 test.cloudware.ng:443         GET /2985005847?goodscode=2981094414 HTTP/1.1
   27-0 46586 1/1/985    K 0.00  0     342  769589  34.2 0.03  25.36  66.249.64.106  http/1.1 team.cloudware.ng:443         GET /?l=1157963982 HTTP/1.1
   28-0 46587 0/0/1207   W 0.00  0     0    612615  0.0  0.00  29.61  68.233.227.37  http/1.1 developers.cloudsms.com.ng:80 GET /api.php?userid=60198988&password=Shakers$4&type=0&destinat
   29-0 -     0/0/576    . 0.00  1028  0    272126  0.0  0.00  13.52  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/1150   . 0.00  1013  0    560685  0.0  0.00  26.86  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/717    . 0.00  1026  0    325970  0.0  0.00  15.89  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/237    . 0.00  941   0    98062   0.0  0.00  4.68   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/176    . 0.00  998   0    86694   0.0  0.00  5.18   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/355    . 0.00  975   0    184428  0.0  0.00  9.27   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/586    . 0.00  1192  0    324653  0.0  0.00  16.02  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/239    . 0.00  1012  0    125237  0.0  0.00  6.18   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/370    . 0.00  1205  0    194052  0.0  0.00  9.01   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/160    . 0.00  1140  0    86409   0.0  0.00  4.07   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/427    . 0.00  1195  0    221231  0.0  0.00  11.39  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/128    . 0.00  1070  0    35694   0.0  0.00  2.32   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/34     . 0.00  1071  0    15628   0.0  0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00  13013 0    22487   0.0  0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00  13156 0    52913   0.0  0.00  2.30   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00  10797 0    366544  0.0  0.00  17.77  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00  13161 0    19040   0.0  0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00  13134 0    5124    0.0  0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00  13095 0    7973    0.0  0.00  0.58   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00  12846 0    40607   0.0  0.00  1.94   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00  13149 0    18588   0.0  0.00  0.72   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00  13144 0    3381    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00  13118 0    3457    0.0  0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  15853 0    1702    0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00  15829 0    2649    0.0  0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  15852 0    1806    0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00  15774 0    13156   0.0  0.00  0.55   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00  15019 0    98784   0.0  0.00  5.53   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  15714 0    19861   0.0  0.00  0.82   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1692
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 2 seconds, (range: 0...8)
   index usage: 29%, cache usage: 40%
   total entries stored since starting: 74951
   total entries replaced since starting: 0
   total entries expired since starting: 73246
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 312 miss
   total removes since starting: 15 hit, 11 miss
Youez - 2016 - github.com/yon3zu
LinuXploit