403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.11.06.txt
 ## swap threshold exceeded
## server overview
2025-11-17.11.06 load[1] mem[68/62] mysql[5/25] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1588          69          41         705         560
Swap:          1999        1332         667
 11:06:01 up  5:45,  0 users,  load average: 1.26, 0.94, 0.84
## system overview
top - 11:06:01 up  5:45,  0 users,  load average: 1.26, 0.94, 0.84
Tasks: 202 total,   6 running, 194 sleeping,   0 stopped,   2 zombie
%Cpu(s): 72.7 us, 24.2 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    81656 free,  1622440 used,   716204 buff/cache
KiB Swap:  2047996 total,   683276 free,  1364720 used.   578636 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 275876   3444 S  94.1 11.4   4:51.32 /usr/sbin+
  5905 cloudw    20   0  573952 108896   6936 R  11.8  4.5   0:00.88 php-fpm: +
  6019 cloudw    20   0  353712  15976  10492 S  11.8  0.7   0:00.02 /opt/cpan+
  4464 nobody    20   0  277748  18312   4012 S   5.9  0.8   0:00.12 /usr/sbin+
  5981 pactpay   20   0  480124  17688  11892 S   5.9  0.7   0:00.02 /opt/cpan+
  5985 nigeria   20   0  404052  16144  10384 S   5.9  0.7   0:00.03 /opt/cpan+
  6016 root      20   0  160220   2060   1584 R   5.9  0.1   0:00.01 top -bcn1
     1 root      20   0   44400   3396   1504 S   0.0  0.1   0:28.00 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:22.91 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.22 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:50.81 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.79 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.81 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.38 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   3792   3552 S   0.0  0.2   0:12.03 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    440    308 S   0.0  0.0   0:01.88 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     56     12 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    812    444 S   0.0  0.0   0:02.93 /usr/lib/+
   476 root      20   0   24716   1156    792 S   0.0  0.0   0:04.93 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.46 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    232    132 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1328    600 S   0.0  0.1   0:11.28 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1376    696 S   0.0  0.1   0:20.46 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5028   1192 S   0.0  0.2   0:00.37 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.61 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3700    784 S   0.0  0.2   0:00.38 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.75 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.69 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  281936   3868   3176 S   0.0  0.2   0:06.04 /usr/sbin+
   918 named     20   0 1185864  35784   1676 S   0.0  1.5   0:14.15 /usr/sbin+
   919 root      20   0 1828136 465092    848 S   0.0 19.2   0:35.56 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    432    268 S   0.0  0.0   0:00.25 /usr/sbin+
   926 root      20   0  572372    780    316 S   0.0  0.0   0:01.86 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.81 sw-engine+
   937 root      20   0  439788    392    300 S   0.0  0.0   0:00.82 php-fpm: +
   938 systuser  20   0  114016  13668   2404 S   0.0  0.6   0:05.12 /usr/loca+
   939 root      20   0  261296   6412   1572 S   0.0  0.3   0:04.92 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.30 /usr/bin/+
   944 root      20   0 1276356   6548      4 S   0.0  0.3   0:24.92 /usr/bin/+
   947 cpanelc+  20   0   10400   3376   2296 R   0.0  0.1   0:17.67 /usr/loca+
   952 root      20   0  396248    332    248 S   0.0  0.0   0:00.73 php-fpm: +
   957 root      20   0  388892    384    284 S   0.0  0.0   0:00.75 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  34632   5420 S   0.0  1.4   0:11.86 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.44 pure-ftpd+
   967 root      20   0  400740    776    604 S   0.0  0.0   0:03.53 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.47 /usr/bin/+
   974 root      20   0  389508    252    164 S   0.0  0.0   0:00.69 php-fpm: +
  1055 nobody    20   0  277740  18456   4168 S   0.0  0.8   0:00.59 /usr/sbin+
  1080 dovenull  20   0   47332   3272   2164 S   0.0  0.1   0:00.35 dovecot/p+
  1081 dovenull  20   0   48020   3172   1748 S   0.0  0.1   0:00.19 dovecot/i+
  1082 dovecot   20   0   10320    388    280 S   0.0  0.0   0:00.04 dovecot/a+
  1083 root      20   0   10452    464    268 S   0.0  0.0   0:00.24 dovecot/l+
  1084 dovenull  20   0   47124   3060   2068 S   0.0  0.1   0:00.41 dovecot/p+
  1085 dovenull  20   0   47764   3660   2292 S   0.0  0.2   0:00.18 dovecot/i+
  1091 root      20   0   24556   2260    432 S   0.0  0.1   0:00.14 dovecot/c+
  1095 dovecot   20   0   13568    416    232 S   0.0  0.0   0:00.04 dovecot/s+
  1160 dovecot   20   0   41160   1296    860 S   0.0  0.1   0:00.42 dovecot/a+
  1168 systuser  20   0  157704   2848    880 S   0.0  0.1   0:00.11 SonarPush+
  1174 nobody    20   0  277684  19332   4344 S   0.0  0.8   0:00.43 /usr/sbin+
  1176 wp-tool+  20   0  387556   3176   1256 S   0.0  0.1   0:00.26 /usr/bin/+
  1177 wp-tool+  20   0  412368   9720   1260 S   0.0  0.4   0:06.84 /usr/bin/+
  1211 root      20   0  209332  20544   3128 S   0.0  0.8   0:02.69 tailwatchd
  1213 root      20   0  262228  24620   6760 S   0.0  1.0   0:01.22 cpdavd - +
  1216 root      20   0  167452   1208    648 S   0.0  0.0   0:00.45 dnsadmin +
  1597 nobody    20   0  277872  18752   4276 S   0.0  0.8   0:00.33 /usr/sbin+
  1627 root      20   0  299272    460    296 S   0.0  0.0   0:00.57 php-fpm: +
  1673 root      38  18  130416   1348    680 S   0.0  0.1   0:00.05 cpanellog+
  1840 nobody    20   0  277752  18664   4400 S   0.0  0.8   0:00.39 /usr/sbin+
  1928 root      20   0  266984   4940    452 S   0.0  0.2   0:02.61 /usr/sbin+
  1932 root      20   0   12792    324    212 S   0.0  0.0   0:02.75 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.39 /usr/loca+
  1934 root      20   0   12808    332    216 S   0.0  0.0   0:02.60 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  3538 nobody    20   0  277744  18380   4132 S   0.0  0.8   0:00.22 /usr/sbin+
  3539 nobody    20   0  277872  17976   3784 S   0.0  0.7   0:00.29 /usr/sbin+
  3884 nobody    20   0  277744  18252   4016 S   0.0  0.8   0:00.16 /usr/sbin+
  4024 nobody    20   0  277884  18132   3812 S   0.0  0.7   0:00.16 /usr/sbin+
  4234 root      20   0   28936   1604   1168 S   0.0  0.1   0:00.00 dovecot/q+
  4235 root      20   0   41052   1744   1080 S   0.0  0.1   0:00.00 dovecot/a+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4439 nobody    20   0  277472  17708   3976 S   0.0  0.7   0:00.15 /usr/sbin+
  4463 nobody    20   0  277748  18188   4012 S   0.0  0.8   0:00.13 /usr/sbin+
  4470 nobody    20   0  277900  17936   3856 S   0.0  0.7   0:00.08 /usr/sbin+
  4471 nobody    20   0  277744  17980   3976 S   0.0  0.7   0:00.19 /usr/sbin+
  4874 mailnull  20   0   89424   5384   2176 S   0.0  0.2   0:00.00 /usr/sbin+
  5143 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
  5245 mailnull  20   0   89500   4908   1744 S   0.0  0.2   0:00.00 /usr/sbin+
  5604 nobody    20   0  277820  17404   3688 S   0.0  0.7   0:00.02 /usr/sbin+
  5738 root      20   0  262228  19472   1692 S   0.0  0.8   0:00.00 cpdavd - +
  5741 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
  5859 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  5918 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5919 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5921 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5923 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5927 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5928 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5929 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5930 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5932 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5934 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  5936 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  5937 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
  5938 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  5940 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  5950 root      20   0   20164    992    788 R   0.0  0.0   0:00.00 /usr/loca+
  5951 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  5952 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5956 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5957 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5958 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5970 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5980 nigeria   20   0  400460   4424   2332 S   0.0  0.2   0:00.00 php-fpm: +
  5982 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  5987 nobody    20   0  276908  13548    800 S   0.0  0.6   0:00.00 /usr/sbin+
  5994 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6024 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6025 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  6026 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [setupvir+
  6027 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.39 [kworker]
 40218 root      20   0  183132  10360   1100 S   0.0  0.4   0:18.64 lfd - sle+
 71800 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 81155 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85782 nobody    20   0  277896  20124   4836 S   0.0  0.8   0:01.64 /usr/sbin+
 86706 nobody    20   0  277680  20048   4836 S   0.0  0.8   0:01.73 /usr/sbin+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:01.01 [kworker/+
 89091 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 89673 nobody    20   0  277744  19872   4688 S   0.0  0.8   0:01.94 /usr/sbin+
 90515 nobody    20   0  277752  19836   4812 S   0.0  0.8   0:01.53 /usr/sbin+
 92278 root      20   0  248096 120680   4016 S   0.0  5.0   0:02.87 /usr/loca+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 96113 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 96474 nobody    20   0  277872  20052   4868 S   0.0  0.8   0:01.13 /usr/sbin+
 98008 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 98393 root      20   0  259580 126288   2980 S   0.0  5.2   0:01.40 spamd chi+
 98394 root      20   0  248096 118052   1424 S   0.0  4.9   0:00.00 spamd chi+
100234 nobody    20   0  277876  19216   4480 S   0.0  0.8   0:00.68 /usr/sbin+
100480 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
102303 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    05:20   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:50  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      88136  0.0  0.0      0     0 ?        S    08:59   0:01  \_ [kworker/u200:2]
root      37613  0.0  0.0      0     0 ?        S    09:55   0:00  \_ [kworker/1:1]
root      71800  0.0  0.0      0     0 ?        S    10:30   0:00  \_ [kworker/0:3]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root      81155  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:4]
root      89091  0.0  0.0      0     0 ?        S    10:47   0:00  \_ [kworker/0:1]
root      96113  0.0  0.0      0     0 ?        S    10:53   0:00  \_ [kworker/1:0]
root      98008  0.0  0.0      0     0 ?        S    10:55   0:00  \_ [kworker/1:3]
root     100480  0.0  0.0      0     0 ?        S    10:58   0:00  \_ [kworker/0:2]
root     102303  0.0  0.0      0     0 ?        S    11:00   0:00  \_ [kworker/1:2]
root       4438  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/u200:1]
root       5994  0.0  0.0      0     0 ?        S    11:06   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44400  3396 ?        Ss   05:20   0:28 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  3792 ?        Ss   05:20   0:12 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   440 ?        S<sl 05:20   0:01 /sbin/auditd
root        470  0.0  0.0 152780    56 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   812 ?        Ssl  05:20   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1156 ?        Ss   05:20   0:04 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   232 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1328 ?        Ss   05:20   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1376 ?        Ssl  05:20   0:20 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5028 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    07:01   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   07:01   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    07:01   0:00  |       \_ sleep 4h 32m
root       5918  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5934  0.0  0.0 113284  1212 ?        Ss   11:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       5936  0.0  0.0 108052   356 ?        S    11:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       5940  0.0  0.0 113288  1520 ?        S    11:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       6031  0.0  0.0 153840  2096 ?        R    11:06   0:00  |               \_ ps auxf
root       5919  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5958  0.0  0.0  20164   992 ?        Ss   11:06   0:00  |   \_ jailshell (cloudsms) [6032] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       6032  0.0  0.0  20164   264 ?        R    11:06   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       5921  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5956  0.0  0.0  20164   808 ?        Ss   11:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       5923  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5957  0.0  0.0  20164   804 ?        Ss   11:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       5927  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5950  0.0  0.0  20164   992 ?        Ss   11:06   0:00  |   \_ jailshell (cloudsms) [6029] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       6029  0.0  0.0  20164   264 ?        R    11:06   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       5928  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5937  0.0  0.0  20164   992 ?        Ss   11:06   0:00  |   \_ jailshell (cloudsms) [6024] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms   6024  0.0  0.0  20164   260 ?        S    11:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms   6025  0.0  0.0 113284  1212 ?        S    11:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms   6027  0.0  0.5 400380 12412 ?        R    11:06   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue3.php
root       5929  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5952  0.0  0.0  20164   804 ?        Ss   11:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       5930  0.0  0.0 183048  2148 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5938  0.0  0.0  20164   964 ?        Ss   11:06   0:00  |   \_ jailshell (pactpay) [5970] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5970  0.0  0.0  20164   260 ?        S    11:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5981  0.0  0.7 480124 17688 ?        S    11:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       5932  0.0  0.0 183048  2152 ?        S    11:06   0:00  \_ /usr/sbin/CROND -n
root       5951  0.0  0.0  20164   972 ?        Ss   11:06   0:00      \_ jailshell (nigeria) [5982] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5982  0.0  0.0  20164   264 ?        S    11:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5985  0.0  0.6 404052 16144 ?        S    11:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3700 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   4874  0.0  0.2  89424  5384 ?        S    11:04   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   5245  0.0  0.2  89500  4908 ?        S    11:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:02 /usr/sbin/sshd -D
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 281936  3868 ?        Ssl  05:20   0:06 /usr/sbin/rsyslogd -n
named       918  0.0  1.4 1185864 35784 ?       Ssl  05:20   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 19.2 1828136 465092 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   432 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47332  3272 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48020  3172 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   464 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47124  3060 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47764  3660 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24556  2260 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   416 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1296 ?        S    05:20   0:00  \_ dovecot/auth
root       4234  0.0  0.0  28936  1604 ?        S    11:04   0:00  \_ dovecot/quota-status -p postfix
root       4235  0.0  0.0  41052  1744 ?        S    11:04   0:00  \_ dovecot/auth -w
root       5143  0.0  0.1  60820  4508 ?        S    11:05   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   780 ?        Ssl  05:20   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   05:20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   5741  0.0  0.0 445028   316 ?        S    11:05   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   392 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13668 ?        Ssl  05:20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6412 ?        Ss   05:20   0:04 cpsrvd (SSL) - waiting for connections                   
root       5859  0.0  0.0      0     0 ?        Z    11:05   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.0  0.1 1277312 3688 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6548 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3376 ?        Rs   05:20   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   332 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   384 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 34632 ?       SLsl 05:20   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   776 ?        Ss   05:20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw     5905 88.0  4.4 573952 108896 ?       S    11:05   0:00  \_ php-fpm: pool cloudware_ng
nigeria    5980  0.0  0.1 400460  4424 ?        S    11:06   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   252 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.1 157704  2848 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3176 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.4 412368  9720 ?        Ss   05:20   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.8 209332 20544 ?        Ss   05:20   0:02 tailwatchd
root       1213  0.0  1.0 262228 24620 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       5738  0.0  0.8 262228 19472 ?        S    11:05   0:00  \_ cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.0 167452  1208 ?        Ss   05:20   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   460 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1348 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4940 ?        Ss   05:20   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12792   324 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12808   332 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    85782  0.1  0.8 277896 20124 ?        S    10:44   0:01  \_ /usr/sbin/httpd -k start
nobody    86706  0.1  0.8 277680 20048 ?        S    10:45   0:01  \_ /usr/sbin/httpd -k start
nobody    89673  0.1  0.8 277744 19872 ?        S    10:48   0:01  \_ /usr/sbin/httpd -k start
nobody    90515  0.1  0.8 277752 19836 ?        S    10:49   0:01  \_ /usr/sbin/httpd -k start
nobody    96474  0.1  0.8 277872 20052 ?        S    10:53   0:01  \_ /usr/sbin/httpd -k start
nobody   100234  0.1  0.7 277876 19216 ?        S    10:57   0:00  \_ /usr/sbin/httpd -k start
nobody     1055  0.1  0.7 277740 18456 ?        S    11:00   0:00  \_ /usr/sbin/httpd -k start
nobody     1174  0.1  0.7 277684 19332 ?        S    11:00   0:00  \_ /usr/sbin/httpd -k start
nobody     1597  0.1  0.7 277872 18752 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody     1840  0.1  0.7 277752 18664 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody     3538  0.1  0.7 277744 18380 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
nobody     3539  0.1  0.7 277872 17976 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
nobody     3884  0.1  0.7 277744 18252 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
cloudw     6019  0.0  0.6 353712 15976 ?        S    11:06   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     4024  0.1  0.7 277884 18132 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
nobody     4439  0.1  0.7 277472 17708 ?        S    11:04   0:00  \_ /usr/sbin/httpd -k start
nobody     4463  0.1  0.7 277748 18188 ?        S    11:04   0:00  \_ /usr/sbin/httpd -k start
nobody     4464  0.1  0.7 277748 18312 ?        S    11:04   0:00  \_ /usr/sbin/httpd -k start
nobody     4470  0.0  0.7 277900 17936 ?        S    11:04   0:00  \_ /usr/sbin/httpd -k start
nobody     4471  0.2  0.7 277744 17980 ?        S    11:04   0:00  \_ /usr/sbin/httpd -k start
nobody     5604  0.0  0.7 277820 17404 ?        S    11:05   0:00  \_ /usr/sbin/httpd -k start
nobody     5987  0.0  0.5 276908 13548 ?        S    11:06   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 11.3 1468028 275876 ?      Sl   05:21   4:51 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183132 10360 ?        Ss   06:01   0:18 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.2  4.9 248096 120680 ?       Ss   10:49   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.2  5.2 259580 126288 ?       S    10:55   0:01  \_ spamd child
root      98394  0.0  4.8 248096 118052 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 42387  Threads: 4  Questions: 1667200  Slow queries: 0  Opens: 9526  Flush tables: 1  Open tables: 2000  Queries per second avg: 39.332
*************************** 1. row ***************************
     Id: 23730
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 23736
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 23738
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 23746
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.11.103.4 TIME_WAIT
      1 114.119.134.79 TIME_WAIT
      1 142.44.225.221 TIME_WAIT
      1 142.44.225.69 TIME_WAIT
      1 142.44.233.115 TIME_WAIT
      1 142.44.233.39 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 31.220.151.86 TIME_WAIT
      1 40.77.167.48 TIME_WAIT
      1 43.231.115.89 TIME_WAIT
      1 45.145.212.245 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 51.222.95.190 TIME_WAIT
      1 66.225.238.39 TIME_WAIT
      1 68.167.151.171 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.174 TIME_WAIT
      2 185.11.166.192 TIME_WAIT
      2 37.19.223.250 TIME_WAIT
      2 92.205.186.4 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 11:06:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 47 minutes 12 seconds
   Server load: 1.26 0.94 0.84
   Total accesses: 124603 - Total Traffic: 3.1 GB - Total Duration: 106957816
   CPU Usage: u8.59 s5.93 cu1697.72 cs1401.87 - 7.34% CPU load
   2.94 requests/sec - 76.0 kB/second - 25.9 kB/request - 858.389 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

RRK_KWKK.K._WKR.W_.KK_K..RW.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur    Conn  Child  Slot      Client      Protocol          VHost                                       Request
   0-0  85782  0/279/5400 R 7.35  7     253 2837826  0.0   7.16  136.29 161.97.170.156  http/1.1
   1-0  5987   0/0/4887   R 0.00  0     0   2596782  0.0   0.00  140.58 35.173.18.61    http/1.1 nigeriadecide.org:443
   2-0  5604   1/5/5257   K 0.04  2     342 2547192  34.1  0.10  127.83 192.178.4.102   http/1.1 team.cloudware.ng:443    GET /?l=2840687527 HTTP/1.1
   3-0  96474  0/201/5150 _ 5.17  0     80  2557366  0.0   6.24  129.51 114.119.134.79  http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Ogun&lga=Egbado%20south&wa
   4-0  1597   1/61/5059  K 1.30  1     28  2444962  0.7   1.52  130.50 66.249.70.5     http/1.1 test.cloudware.ng:80     GET /?1832027188?goodscode=1829626866 HTTP/1.1
   5-0  3884   0/32/4862  W 0.63  0     0   2419230  0.0   0.63  123.25 192.178.4.98    http/1.1 team.cloudware.ng:443    GET /?l=4007028873 HTTP/1.1
   6-0  90515  1/259/5076 K 6.54  0     282 2570970  35.6  7.02  132.32 192.178.4.105   http/1.1 team.cloudware.ng:443    GET /?l=3655335486 HTTP/1.1
   7-0  1840   2/71/4763  K 1.57  2     266 2433208  67.0  1.83  120.97 192.178.4.104   http/1.1 team.cloudware.ng:443    GET /?l=3179822752 HTTP/1.1
   8-0  -      0/0/4888   . 0.00  63    0   2335541  0.0   0.00  116.78 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   9-0  4024   1/35/4875  K 0.76  1     273 2429739  34.4  0.49  122.60 66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=3907939160 HTTP/1.1
   10-0 -      0/0/4763   . 0.00  83    0   2409744  0.0   0.00  123.00 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   11-0 1055   0/102/4470 _ 2.64  0     0   2285721  0.0   2.64  111.15 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   12-0 3538   0/38/4586  W 0.95  0     0   2339937  0.0   0.97  116.46 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   13-0 3539   3/49/4600  K 1.31  0     76  2369306  7.4   1.46  115.90 66.249.70.7     http/1.1 test.cloudware.ng:443    GET /202548691?goodscode=0202283990 HTTP/1.1
   14-0 89673  0/381/4566 R 10.24 0     372 45746686 0.0   6.98  113.75 120.28.213.90   http/1.1
   15-0 -      0/0/4088   . 0.00  64    0   2099987  0.0   0.00  105.37 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 100234 1/119/4716 W 2.89  0     0   2333121  35.1  4.44  116.97 192.178.4.100   http/1.1 team.cloudware.ng:443    GET /?l=723212227 HTTP/1.1
   17-0 4439   0/32/4363  _ 0.67  0     343 2266289  0.0   0.60  112.94 192.178.4.100   http/1.1 team.cloudware.ng:443    GET /?l=518003075 HTTP/1.1
   18-0 -      0/0/3964   . 0.00  85    0   2034366  0.0   0.00  102.29 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   19-0 86706  1/297/3564 K 7.25  0     2   1840061  5.4   7.98  94.07  217.113.194.126 http/1.1 team.cloudware.ng:443    GET /robots.txt HTTP/1.1
   20-0 1174   4/77/3767  K 2.05  3     314 1905504  125.1 2.35  91.72  192.178.4.96    http/1.1 team.cloudware.ng:443    GET /?l=2228684453 HTTP/1.1
   21-0 4463   0/23/3328  _ 0.51  0     263 1787794  0.0   0.58  89.85  192.178.4.101   http/1.1 team.cloudware.ng:443    GET /?l=1867445364 HTTP/1.1
   22-0 4464   4/29/2842  K 0.55  0     382 1637553  128.5 0.54  67.79  192.178.4.98    http/1.1 team.cloudware.ng:443    GET /?l=3143963505 HTTP/1.1
   23-0 -      0/0/3161   . 0.00  62    0   1509910  0.0   0.00  79.31  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -      0/0/2852   . 0.00  87    0   1440013  0.0   0.00  72.72  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 4470   0/16/2194  R 0.28  56    404 1298719  0.0   0.45  52.72  192.178.4.101   http/1.1 team.cloudware.ng:443    GET /?l=1553425591 HTTP/1.1
   26-0 4471   1/34/2227  W 0.81  0     0   1073758  6.7   0.97  50.80  161.97.170.156  http/1.1 cloudware.ng:443         POST /wp-login.php HTTP/1.1
   27-0 -      0/0/1649   . 0.00  86    0   1072837  0.0   0.00  37.54  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -      0/0/1568   . 0.00  730   0   791359   0.0   0.00  39.42  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -      0/0/720    . 0.00  651   0   360726   0.0   0.00  17.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -      0/0/1355   . 0.00  703   0   669665   0.0   0.00  31.66  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -      0/0/791    . 0.00  661   0   365687   0.0   0.00  17.63  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -      0/0/337    . 0.00  760   0   132371   0.0   0.00  6.41   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -      0/0/276    . 0.00  810   0   134144   0.0   0.00  7.34   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -      0/0/397    . 0.00  680   0   198738   0.0   0.00  9.96   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -      0/0/586    . 0.00  26572 0   324653   0.0   0.00  16.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -      0/0/239    . 0.00  26392 0   125237   0.0   0.00  6.18   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -      0/0/370    . 0.00  26585 0   194052   0.0   0.00  9.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -      0/0/160    . 0.00  26520 0   86409    0.0   0.00  4.07   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -      0/0/427    . 0.00  26575 0   221231   0.0   0.00  11.39  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -      0/0/128    . 0.00  26450 0   35694    0.0   0.00  2.32   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -      0/0/34     . 0.00  26451 0   15628    0.0   0.00  0.83   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -      0/0/43     . 0.00  38393 0   22487    0.0   0.00  0.98   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -      0/0/114    . 0.00  38536 0   52913    0.0   0.00  2.30   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -      0/0/661    . 0.00  36177 0   366544   0.0   0.00  17.77  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -      0/0/42     . 0.00  38541 0   19040    0.0   0.00  0.83   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -      0/0/11     . 0.00  38514 0   5124     0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -      0/0/20     . 0.00  38475 0   7973     0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -      0/0/83     . 0.00  38226 0   40607    0.0   0.00  1.94   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -      0/0/37     . 0.00  38529 0   18588    0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -      0/0/7      . 0.00  38524 0   3381     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -      0/0/9      . 0.00  38498 0   3457     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -      0/0/2      . 0.00  41233 0   1702     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -      0/0/7      . 0.00  41209 0   2649     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -      0/0/2      . 0.00  41232 0   1806     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -      0/0/27     . 0.00  41154 0   13156    0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -      0/0/189    . 0.00  40399 0   98784    0.0   0.00  5.53   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -      0/0/44     . 0.00  41094 0   19861    0.0   0.00  0.82   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1225
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...51)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 92823
   total entries replaced since starting: 0
   total entries expired since starting: 91580
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 342 miss
   total removes since starting: 18 hit, 25 miss
Youez - 2016 - github.com/yon3zu
LinuXploit