403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.04.18.txt
 ## swap threshold exceeded
## server overview
2025-11-17.04.18 load[1] mem[64/63] mysql[3/25] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1500         384          34         479         667
Swap:          1999        1408         591
 04:18:01 up  4:59,  0 users,  load average: 1.23, 0.52, 0.53
## system overview
top - 04:18:01 up  4:59,  0 users,  load average: 1.23, 0.52, 0.53
Tasks: 207 total,   6 running, 199 sleeping,   0 stopped,   2 zombie
%Cpu(s): 69.7 us, 24.2 sy,  0.0 ni,  0.0 id,  6.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   369448 free,  1526032 used,   524820 buff/cache
KiB Swap:  2047996 total,   606156 free,  1441840 used.   693260 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 257876   4208 S  87.5 10.7   4:09.15 /usr/sbin+
 60721 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.04 /opt/cpan+
   476 root      20   0   24716   1140    792 S   6.2  0.0   0:04.25 /usr/lib/+
 54749 nobody    20   0  277632  18612   4532 S   6.2  0.8   0:00.67 /usr/sbin+
 60750 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44400   3212   1440 S   0.0  0.1   0:24.12 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.25 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.02 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:19.66 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.00 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.60 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:47.66 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.29 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.41 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.11 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   1444   1204 S   0.0  0.1   0:10.03 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    452    320 S   0.0  0.0   0:01.56 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     44     16 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    976    620 S   0.0  0.0   0:02.53 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.40 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   485 root      20   0   52852    320    220 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1324    600 S   0.0  0.1   0:09.71 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1320    636 S   0.0  0.1   0:17.43 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   3088    804 S   0.0  0.1   0:00.26 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.52 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3536    688 S   0.0  0.1   0:00.33 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.69 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.25 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  273744   1600   1060 S   0.0  0.1   0:05.04 /usr/sbin+
   918 named     20   0 1185864  29676   1252 S   0.0  1.2   0:12.05 /usr/sbin+
   919 root      20   0 1828136 547340      0 S   0.0 22.6   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    432    268 S   0.0  0.0   0:00.22 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.64 /usr/bin/+
   928 root      20   0  445028    588    480 R   0.0  0.0   0:00.71 sw-engine+
   937 root      20   0  439788    236    144 R   0.0  0.0   0:00.74 php-fpm: +
   938 systuser  20   0  114016  13424   2284 S   0.0  0.6   0:04.44 /usr/loca+
   939 root      20   0  261296   6452   1728 S   0.0  0.3   0:04.07 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.29 /usr/bin/+
   944 root      20   0 1276356   6404      4 S   0.0  0.3   0:24.89 /usr/bin/+
   947 cpanelc+  20   0   10416   3308   2296 R   0.0  0.1   0:15.23 /usr/loca+
   952 root      20   0  396248    300    216 S   0.0  0.0   0:00.67 php-fpm: +
   957 root      20   0  388892    464    364 R   0.0  0.0   0:00.67 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   963 telegraf  20   0 5654048  30100   1120 S   0.0  1.2   0:10.31 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.37 pure-ftpd+
   967 root      20   0  400740    780    608 S   0.0  0.0   0:03.05 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.40 /usr/bin/+
   974 root      20   0  389508    260    176 S   0.0  0.0   0:00.63 php-fpm: +
  1080 dovenull  20   0   46912   1828   1324 S   0.0  0.1   0:00.27 dovecot/p+
  1081 dovenull  20   0   47608   2220   1404 S   0.0  0.1   0:00.13 dovecot/i+
  1082 dovecot   20   0   10320    280    188 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    604    436 S   0.0  0.0   0:00.19 dovecot/l+
  1084 dovenull  20   0   46984    728    468 S   0.0  0.0   0:00.33 dovecot/p+
  1085 dovenull  20   0   47564   1988   1136 S   0.0  0.1   0:00.12 dovecot/i+
  1091 root      20   0   24528   1972    328 S   0.0  0.1   0:00.12 dovecot/c+
  1095 dovecot   20   0   13568    552    376 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   3568    708 S   0.0  0.1   0:05.00 /usr/loca+
  1160 dovecot   20   0   41160   1264    828 S   0.0  0.1   0:00.38 dovecot/a+
  1168 systuser  20   0  157704   2968   1008 S   0.0  0.1   0:00.09 SonarPush+
  1176 wp-tool+  20   0  387556   3332   1412 S   0.0  0.1   0:00.24 /usr/bin/+
  1177 wp-tool+  20   0  412368   9844   1388 S   0.0  0.4   0:05.97 /usr/bin/+
  1211 root      20   0  209308   8992   1996 S   0.0  0.4   0:02.01 tailwatchd
  1213 root      20   0  183900   6088   2860 S   0.0  0.3   0:01.00 cpdavd - +
  1216 root      20   0  167452   1204    644 S   0.0  0.0   0:00.41 dnsadmin +
  1627 root      20   0  299272    496    332 S   0.0  0.0   0:00.49 php-fpm: +
  1673 root      38  18  130416   1344    684 S   0.0  0.1   0:00.05 cpanellog+
  1928 root      20   0  266984   4956    468 S   0.0  0.2   0:02.28 /usr/sbin+
  1932 root      20   0   12812    324    212 S   0.0  0.0   0:02.36 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.05 /usr/loca+
  1934 root      20   0   12836    332    216 S   0.0  0.0   0:02.23 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4229 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8393 root      20   0  266004  45096   1056 S   0.0  1.9   0:04.04 spamd chi+
  8394 root      20   0  248032   2112    376 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 15866 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 30014 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.33 [kworker]
 40218 root      20   0  182516   9048   1100 S   0.0  0.4   0:15.61 lfd - sle+
 46682 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46686 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 51287 nobody    20   0  277876  19016   4652 S   0.0  0.8   0:00.74 /usr/sbin+
 51481 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52027 nobody    20   0  277872  19180   4704 S   0.0  0.8   0:01.04 /usr/sbin+
 52400 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 52443 nobody    20   0  277748  19060   4596 S   0.0  0.8   0:00.63 /usr/sbin+
 53038 nobody    20   0  277744  19368   4728 S   0.0  0.8   0:00.72 /usr/sbin+
 53394 nobody    20   0  277744  19004   4660 S   0.0  0.8   0:00.66 /usr/sbin+
 54076 nobody    20   0  277744  18960   4540 S   0.0  0.8   0:00.64 /usr/sbin+
 54180 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54818 nobody    20   0  277616  18536   4400 S   0.0  0.8   0:00.64 /usr/sbin+
 56026 nobody    20   0  277680  18724   4476 S   0.0  0.8   0:00.52 /usr/sbin+
 56107 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 56181 nobody    20   0  277744  18260   4120 S   0.0  0.8   0:00.51 /usr/sbin+
 56872 nobody    20   0  277744  18484   4260 S   0.0  0.8   0:00.44 /usr/sbin+
 56904 nobody    20   0  277744  19048   4492 S   0.0  0.8   0:00.42 /usr/sbin+
 56965 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57432 nobody    20   0  277740  18260   4176 S   0.0  0.8   0:00.30 /usr/sbin+
 57536 nobody    20   0  277744  18280   4172 S   0.0  0.8   0:00.36 /usr/sbin+
 57555 nobody    20   0  277748  18276   4176 S   0.0  0.8   0:00.31 /usr/sbin+
 58076 nobody    20   0  277740  17340   3464 S   0.0  0.7   0:00.08 /usr/sbin+
 59312 nobody    20   0  277744  17712   3732 S   0.0  0.7   0:00.12 /usr/sbin+
 59335 nobody    20   0  277884  18224   3992 S   0.0  0.8   0:00.11 /usr/sbin+
 59385 root      20   0   60820   4364   3380 S   0.0  0.2   0:00.00 dovecot/l+
 60195 nobody    20   0  277744  17716   3608 S   0.0  0.7   0:00.03 /usr/sbin+
 60209 nobody    20   0  277744  17044   3288 S   0.0  0.7   0:00.03 /usr/sbin+
 60210 nobody    20   0  277744  17572   3620 S   0.0  0.7   0:00.04 /usr/sbin+
 60272 nobody    20   0  277740  17348   3480 S   0.0  0.7   0:00.07 /usr/sbin+
 60300 nobody    20   0  277464  17236   3552 S   0.0  0.7   0:00.03 /usr/sbin+
 60301 nobody    20   0  277820  17820   3864 S   0.0  0.7   0:00.04 /usr/sbin+
 60302 nobody    20   0  277884  17452   3592 S   0.0  0.7   0:00.03 /usr/sbin+
 60309 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.01 php-fpm: +
 60383 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 60606 mailnull  20   0   89308   4908   1788 S   0.0  0.2   0:00.00 /usr/sbin+
 60637 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60643 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 60644 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 60669 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60670 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60671 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60672 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60673 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60677 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60678 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60679 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60680 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60681 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 60683 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60685 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60686 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60687 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60689 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60691 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 60692 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60693 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60694 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60696 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 60697 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60701 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 60702 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 60705 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 60716 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 60717 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 60722 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 60732 cloudw    20   0  353712  16236  10612 S   0.0  0.7   0:00.01 /opt/cpan+
 60743 cloudw    20   0  353712  15976  10492 R   0.0  0.7   0:00.00 /opt/cpan+
 60748 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kworker/+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.40 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:19  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:47  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root       4229  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:1]
root      15866  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      30014  0.0  0.0      0     0 ?        S    03:46   0:00  \_ [kworker/0:0]
root      37613  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/1:1]
root      46682  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/1:3]
root      46686  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:3]
root      47560  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/1:4]
root      51481  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/0:2]
root      52400  0.0  0.0      0     0 ?        S    04:09   0:00  \_ [kworker/1:2]
root      54180  0.0  0.0      0     0 ?        S    04:11   0:00  \_ [kworker/0:4]
root      56107  0.0  0.0      0     0 ?        S    04:13   0:00  \_ [kworker/1:5]
root      56965  0.0  0.0      0     0 ?        S    04:14   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44400  3212 ?        Ss   Nov16   0:24 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40244  1444 ?        Ss   Nov16   0:10 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   452 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780    44 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   976 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1140 ?        Ss   Nov16   0:04 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   320 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1324 ?        Ss   Nov16   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1320 ?        Ssl  Nov16   0:17 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  3088 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      60669  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60691  0.0  0.0 113284  1208 ?        Ss   04:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      60702  0.0  0.0 108052   360 ?        S    04:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      60705  0.0  0.0 113288  1520 ?        S    04:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      60763  0.0  0.0 153840  2092 ?        R    04:18   0:00  |               \_ ps auxf
root      60670  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60692  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      60671  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60693  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      60672  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60685  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      60673  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60689  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      60677  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60687  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      60678  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60697  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      60679  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60686  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      60680  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60694  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      60681  0.0  0.0 183048  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60696  0.0  0.0  20164   968 ?        Ss   04:18   0:00  |   \_ jailshell (pactpay) [60716] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   60716  0.0  0.0  20164   260 ?        S    04:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   60722  0.0  0.7 480124 17688 ?        S    04:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      60683  0.0  0.0 183048  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      60701  0.0  0.0  20164   968 ?        Ss   04:18   0:00      \_ jailshell (nigeria) [60717] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   60717  0.0  0.0  20164   260 ?        S    04:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   60721  0.0  0.6 404052 16140 ?        S    04:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3536 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  60606  0.0  0.2  89308  4908 ?        S    04:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   Nov16   0:02 /usr/sbin/sshd -D
root      60637  0.0  0.1 111304  4264 ?        Ss   04:17   0:00  \_ sshd: [accepted]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.0 273744  1600 ?        Ssl  Nov16   0:05 /usr/sbin/rsyslogd -n
named       918  0.0  1.2 1185864 29676 ?       Ssl  Nov16   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 22.6 1828136 547340 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   432 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  1828 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47608  2220 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   280 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   604 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   728 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.0  47564  1988 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  1972 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   552 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1264 ?        S    Nov16   0:00  \_ dovecot/auth
root      59385  0.0  0.1  60820  4364 ?        S    04:16   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  60383  0.0  0.0 445028   316 ?        S    04:17   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   236 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13424 ?        Ssl  Nov16   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6452 ?        Ss   Nov16   0:04 cpsrvd (SSL) - waiting for connections                   
root      60643  0.0  0.0      0     0 ?        Z    04:17   0:00  \_ [cpaneld - servi] <defunct>
root      60644  0.0  0.0      0     0 ?        Z    04:17   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        943  0.1  0.1 1277312 3688 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6404 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3308 ?        Rs   Nov16   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   300 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   464 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.2 5654048 30100 ?       SLsl Nov16   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   780 ?        Ss   Nov16   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   60309  0.0  0.1 400460  4420 ?        S    04:17   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   260 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  3568 ?        Ss   Nov16   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  1.8 266004 45096 ?        S    Nov16   0:04  \_ spamd child
root       8394  0.0  0.0 248032  2112 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2968 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3332 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.4 412368  9844 ?        Ss   Nov16   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.3 209308  8992 ?        Ss   Nov16   0:02 tailwatchd
root       1213  0.0  0.2 183900  6088 ?        Ss   Nov16   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.0 167452  1204 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   496 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1344 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4956 ?        Ss   Nov16   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12812   324 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12836   332 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    51287  0.1  0.7 277876 19016 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    52027  0.1  0.7 277872 19180 ?        S    04:08   0:01  \_ /usr/sbin/httpd -k start
nobody    52443  0.1  0.7 277748 19060 ?        S    04:09   0:00  \_ /usr/sbin/httpd -k start
nobody    53038  0.1  0.8 277744 19368 ?        S    04:09   0:00  \_ /usr/sbin/httpd -k start
nobody    53394  0.1  0.7 277744 19004 ?        S    04:10   0:00  \_ /usr/sbin/httpd -k start
nobody    54076  0.1  0.7 277744 18960 ?        S    04:10   0:00  \_ /usr/sbin/httpd -k start
nobody    54749  0.1  0.7 277632 18612 ?        S    04:11   0:00  \_ /usr/sbin/httpd -k start
cloudw    60750  0.0  0.6 353712 15976 ?        R    04:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    54818  0.1  0.7 277616 18536 ?        S    04:11   0:00  \_ /usr/sbin/httpd -k start
nobody    56026  0.1  0.7 277680 18724 ?        S    04:12   0:00  \_ /usr/sbin/httpd -k start
nobody    56181  0.1  0.7 277744 18260 ?        S    04:13   0:00  \_ /usr/sbin/httpd -k start
nobody    56872  0.1  0.7 277744 18484 ?        S    04:13   0:00  \_ /usr/sbin/httpd -k start
nobody    56904  0.1  0.7 277744 19048 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    57432  0.1  0.7 277740 18260 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    57536  0.1  0.7 277744 18280 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
cloudw    60743  0.0  0.6 353712 15976 ?        S    04:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    57555  0.1  0.7 277748 18276 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    58076  0.0  0.7 277740 17340 ?        S    04:15   0:00  \_ /usr/sbin/httpd -k start
nobody    59312  0.1  0.7 277744 17712 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    59335  0.1  0.7 277884 18224 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    60195  0.1  0.7 277744 17716 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    60209  0.1  0.7 277744 17044 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    60210  0.1  0.7 277744 17572 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    60272  0.2  0.7 277740 17348 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    60300  0.1  0.7 277464 17236 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    60301  0.1  0.7 277820 17820 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    60302  0.1  0.7 277884 17452 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.3 10.6 1468028 257876 ?      Sl   Nov16   4:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.3 182516  9048 ?        Ss   00:00   0:15 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 17907  Threads: 3  Questions: 1449387  Slow queries: 0  Opens: 8551  Flush tables: 1  Open tables: 2000  Queries per second avg: 80.939
*************************** 1. row ***************************
     Id: 20387
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 20391
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 20398
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.220.126 TIME_WAIT
      1 159.148.204.29 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 ::1 TIME_WAIT
      1 210.114.18.108 TIME_WAIT
      1 23.226.212.35 TIME_WAIT
      1 51.222.95.237 TIME_WAIT
      1 54.39.136.131 TIME_WAIT
      1 54.39.210.100 TIME_WAIT
      1 68.221.67.164 TIME_WAIT
      1 92.50.34.185 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     32 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 04:18:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 59 minutes 12 seconds
   Server load: 1.23 0.52 0.53
   Total accesses: 106113 - Total Traffic: 2.7 GB - Total Duration: 54586220
   CPU Usage: u6.65 s4.81 cu1449.44 cs1195.34 - 14.8% CPU load
   5.91 requests/sec - 155.1 kB/second - 26.2 kB/request - 514.416 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

KKKKKKRKKKKW.K.KKKR.W.KK.KK..WKK.K..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol         VHost                                      Request
   0-0  51287 1/135/4720 K 3.06 1     270 2483286 35.6  3.40  119.19 66.249.70.129   http/1.1 team.cloudware.ng:443  GET /?l=3470012743 HTTP/1.1
   1-0  52027 2/175/4196 K 4.49 1     404 2234427 66.1  5.19  123.69 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=4229662264 HTTP/1.1
   2-0  60195 2/6/4620   K 0.32 2     274 2207386 64.0  0.21  111.82 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3148034633 HTTP/1.1
   3-0  56872 2/69/4434  K 2.06 3     351 2222124 67.3  2.02  111.20 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=2177822326 HTTP/1.1
   4-0  59312 1/23/4440  K 0.56 1     276 2122512 35.5  0.71  113.83 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=2266096119 HTTP/1.1
   5-0  59335 1/18/4074  K 0.70 2     266 2042623 36.2  1.92  107.22 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=2434670957 HTTP/1.1
   6-0  54076 0/110/4336 R 2.69 2     2   2167240 0.0   2.84  112.23 188.124.234.217 http/1.1 nigeriadecide.org:443
   7-0  57432 1/47/4118  K 1.18 0     262 2110448 35.2  1.29  105.08 66.249.70.6     http/1.1 team.cloudware.ng:443  GET /?l=3101791753 HTTP/1.1
   8-0  60209 1/7/4148   K 0.10 2     259 1995287 35.1  0.13  101.46 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=3372099210 HTTP/1.1
   9-0  53038 1/124/4142 K 3.06 2     346 2101920 36.0  3.30  106.79 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=2664820842 HTTP/1.1
   10-0 56904 2/81/4162  K 1.71 1     270 2112031 67.1  1.89  107.92 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=1761855986 HTTP/1.1
   11-0 60773 0/0/3825   W 0.00 0     0   1975620 0.0   0.00  97.33  ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   12-0 -     0/0/3888   . 0.00 5     0   1998653 0.0   0.00  100.65 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 57536 1/55/3994  K 1.55 0     314 2057793 34.8  1.72  100.49 66.249.70.199   http/1.1 team.cloudware.ng:443  GET /?l=1973614238 HTTP/1.1
   14-0 -     0/0/3696   . 0.00 18    0   1914754 0.0   0.00  95.46  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 53394 2/109/3659 K 2.68 3     343 1892852 67.8  2.94  95.22  192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=3089897047 HTTP/1.1
   16-0 57555 1/49/3877  K 1.31 0     278 1974469 34.8  1.40  99.89  66.249.70.134   http/1.1 team.cloudware.ng:443  GET /?l=3438420678 HTTP/1.1
   17-0 60210 1/8/3645   K 0.15 2     23  1908750 5.7   0.31  97.27  66.249.89.38    http/1.1 test.cloudware.ng:443  GET /3005456009?goodscode=3001517774 HTTP/1.1
   18-0 58076 0/12/3394  R 0.33 105   52  1759779 0.0   0.33  90.04  213.231.4.64    http/1.1 cloudware.ng:443
   19-0 -     0/0/3026   . 0.00 11    0   1570157 0.0   0.00  80.88  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 54749 0/119/3332 W 3.21 0     0   1667322 0.0   2.94  80.72  66.249.70.139   http/1.1 team.cloudware.ng:443  GET /?l=232707157 HTTP/1.1
   21-0 -     0/0/2867   . 0.00 21    0   1556907 0.0   0.00  79.07  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 54818 1/105/2299 K 3.08 1     275 1389475 33.7  2.74  55.41  192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3847942580 HTTP/1.1
   23-0 56026 14/91/2485 K 2.16 0     22  1207726 16.6  2.44  62.47  66.249.70.7     http/1.1 test.cloudware.ng:443  GET /2993703602?goodscode=2989780770 HTTP/1.1
   24-0 -     0/0/2348   . 0.00 4     0   1220009 0.0   0.00  60.89  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 52443 2/102/1653 K 2.56 1     270 1071798 65.6  3.57  43.16  192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=377800402 HTTP/1.1
   26-0 60272 3/13/1508  K 0.32 2     264 722380  97.3  0.47  33.95  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=3916039534 HTTP/1.1
   27-0 -     0/0/1043   . 0.00 17    0   809466  0.0   0.00  27.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/1362   . 0.00 19    0   694441  0.0   0.00  33.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 60300 1/6/656    K 0.09 0     68  323656  10.8  0.25  15.89  217.182.195.225 http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   30-0 60301 1/7/1234   K 0.08 0     311 604521  36.1  0.16  28.77  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=1276512183 HTTP/1.1
   31-0 60302 1/7/748    K 0.13 0     335 342775  36.3  0.27  16.58  66.249.70.197   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2273457
   32-0 -     0/0/317    . 0.00 270   0   125012  0.0   0.00  6.04   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 56181 5/95/271   K 2.41 4     353 133326  160.4 2.09  7.28   192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=386128407 HTTP/1.1
   34-0 -     0/0/355    . 0.00 1875  0   184428  0.0   0.00  9.27   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/586    . 0.00 2092  0   324653  0.0   0.00  16.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/239    . 0.00 1912  0   125237  0.0   0.00  6.18   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/370    . 0.00 2105  0   194052  0.0   0.00  9.01   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/160    . 0.00 2040  0   86409   0.0   0.00  4.07   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/427    . 0.00 2095  0   221231  0.0   0.00  11.39  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/128    . 0.00 1970  0   35694   0.0   0.00  2.32   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/34     . 0.00 1971  0   15628   0.0   0.00  0.83   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00 13913 0   22487   0.0   0.00  0.98   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00 14056 0   52913   0.0   0.00  2.30   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00 11698 0   366544  0.0   0.00  17.77  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00 14061 0   19040   0.0   0.00  0.83   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00 14034 0   5124    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00 13995 0   7973    0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00 13746 0   40607   0.0   0.00  1.94   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00 14049 0   18588   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 14044 0   3381    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00 14018 0   3457    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 16753 0   1702    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00 16729 0   2649    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 16752 0   1806    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 16674 0   13156   0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 15919 0   98784   0.0   0.00  5.53   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 16614 0   19861   0.0   0.00  0.82   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1651
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 3 seconds, (range: 0...18)
   index usage: 29%, cache usage: 39%
   total entries stored since starting: 79891
   total entries replaced since starting: 0
   total entries expired since starting: 78225
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 322 miss
   total removes since starting: 16 hit, 12 miss
Youez - 2016 - github.com/yon3zu
LinuXploit