403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.01.09.txt
 ## swap threshold exceeded
## server overview
2025-11-18.01.09 load[0] mem[58/69] mysql[1/11] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1292         102          74         969         811
Swap:          1999        1460         539
 01:09:01 up  6:21,  0 users,  load average: 0.22, 0.27, 0.37
## system overview
top - 01:09:01 up  6:21,  0 users,  load average: 0.22, 0.27, 0.37
Tasks: 202 total,   4 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 62.9 us, 34.3 sy,  0.0 ni,  2.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    88388 free,  1338180 used,   993732 buff/cache
KiB Swap:  2047996 total,   552956 free,  1495040 used.   815984 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264420   3220 S  41.2 10.9   5:15.89 /usr/sbin+
 70737 root      20   0  165404  14376   2736 R  41.2  0.6   0:00.07 /usr/loca+
 70748 nigeria   20   0  404052  16140  10384 S  11.8  0.7   0:00.02 /opt/cpan+
   511 polkitd   20   0  612240   1044    636 S   5.9  0.0   0:03.07 /usr/lib/+
 70743 pactpay   20   0  480124  16792  11088 S   5.9  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44412   3444   1572 S   0.0  0.1   0:31.62 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.36 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.98 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:23.05 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.97 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.87 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.56 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.43 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.66 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.28 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   7324   7020 S   0.0  0.3   0:11.15 /usr/lib/+
   391 root      20   0   45424    268    192 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    536    420 S   0.0  0.0   0:01.58 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   514 root      20   0  224148   5924   1196 S   0.0  0.2   0:00.28 queueproc+
   516 rpc       20   0   69256     88     28 S   0.0  0.0   0:00.02 /sbin/rpc+
   517 root      20   0   21540    428    340 S   0.0  0.0   0:00.52 /usr/sbin+
   521 root      20   0  152780    216    176 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    360    256 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1412    680 S   0.0  0.1   0:11.95 /usr/bin/+
   532 root      20   0  195208     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1232    876 S   0.0  0.1   0:05.28 /usr/lib/+
   556 root      20   0  126388    520    364 S   0.0  0.0   0:00.74 /usr/sbin+
   558 root      20   0   25908      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1848    792 S   0.0  0.1   0:18.64 /usr/sbin+
   578 root      20   0  114704    120    120 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4068    980 S   0.0  0.2   0:00.48 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
  1061 root      20   0  153404    384    300 S   0.0  0.0   0:00.50 pure-ftpd+
  1062 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13184   2348 S   0.0  0.5   0:05.45 /usr/loca+
  1067 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.51 /usr/bin/+
  1068 root      20   0 1276356   9184    148 S   0.0  0.4   0:26.95 /usr/bin/+
  1069 telegraf  20   0 5654304  40276   6048 S   0.0  1.7   0:12.33 /usr/loca+
  1071 root      20   0  572372    932    356 S   0.0  0.0   0:01.99 /usr/bin/+
  1072 root      20   0   51508    584    420 S   0.0  0.0   0:00.28 /usr/sbin+
  1076 root      20   0 1277056   9788    144 S   0.0  0.4   0:23.11 /usr/bin/+
  1085 systuser  20   0   12756     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    488    388 S   0.0  0.0   0:02.13 /usr/sbin+
  1087 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1404   1292 S   0.0  0.1   0:00.97 sw-engine+
  1091 root      20   0  389508    768    552 S   0.0  0.0   0:00.66 php-fpm: +
  1098 named     20   0 1055796  39572   1580 S   0.0  1.6   0:12.32 /usr/sbin+
  1109 root      20   0  388892    800    588 S   0.0  0.0   0:00.61 php-fpm: +
  1113 root      20   0  273744   7304   6224 S   0.0  0.3   0:05.57 /usr/sbin+
  1117 root      20   0 1763304 179256   1012 S   0.0  7.4   0:13.84 /usr/loca+
  1123 root      20   0  439788    996    904 S   0.0  0.0   0:00.69 php-fpm: +
  1131 root      20   0  400740   2092    736 S   0.0  0.1   0:03.31 php-fpm: +
  1134 root      20   0  261152   7136   2040 S   0.0  0.3   0:02.40 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3776   2404 R   0.0  0.2   0:18.23 /usr/loca+
  1149 root      20   0  396248    584    412 S   0.0  0.0   0:00.62 php-fpm: +
  1213 dovenull  20   0   46984   2540   1812 S   0.0  0.1   0:00.36 dovecot/p+
  1214 dovenull  20   0   47660   2996   1724 S   0.0  0.1   0:00.26 dovecot/i+
  1215 dovecot   20   0   10320    396    284 S   0.0  0.0   0:00.06 dovecot/a+
  1216 root      20   0   10452    680    504 S   0.0  0.0   0:00.28 dovecot/l+
  1217 dovenull  20   0   47056   2680   1880 S   0.0  0.1   0:00.49 dovecot/p+
  1218 dovenull  20   0   47472   2980   1868 S   0.0  0.1   0:00.19 dovecot/i+
  1226 root      20   0   24528   2348    488 S   0.0  0.1   0:00.14 dovecot/c+
  1227 dovecot   20   0   13568    564    348 S   0.0  0.0   0:00.05 dovecot/s+
  1292 systuser  20   0  157704   3096   1044 S   0.0  0.1   0:00.10 SonarPush+
  1297 dovecot   20   0   41188   1596   1084 S   0.0  0.1   0:00.48 dovecot/a+
  1300 wp-tool+  20   0  412396  32760   1952 S   0.0  1.4   0:07.37 /usr/bin/+
  1301 wp-tool+  20   0  387556  13596   1936 S   0.0  0.6   0:00.25 /usr/bin/+
  1308 root      20   0  248116 117400   1000 S   0.0  4.9   0:05.53 /usr/loca+
  1409 root      20   0  210048  13404   2404 S   0.0  0.6   0:02.86 tailwatchd
  1412 root      20   0  262224  24492   6572 S   0.0  1.0   0:01.23 cpdavd - +
  1413 root      20   0  167452   4256   2888 S   0.0  0.2   0:00.39 dnsadmin +
  1836 root      20   0  299272    796    416 S   0.0  0.0   0:00.62 php-fpm: +
  1853 root      38  18  130416   1496    764 S   0.0  0.1   0:00.05 cpanellog+
  2063 root      20   0  266984   7772    732 S   0.0  0.3   0:03.22 /usr/sbin+
  2067 root      20   0   12888    400    292 S   0.0  0.0   0:02.48 /usr/loca+
  2068 root      20   0   12732    364    288 S   0.0  0.0   0:02.15 /usr/loca+
  2069 root      20   0   12920    412    292 S   0.0  0.0   0:02.31 /usr/loca+
  2075 root      20   0   53252    188    188 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  264072 127596   2096 S   0.0  5.3   0:02.54 spamd chi+
  7507 root      20   0  248116 116772    416 S   0.0  4.8   0:00.00 spamd chi+
 13053 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.41 [kworker]
 14140 root      20   0  181620  29588   2320 S   0.0  1.2   0:04.18 lfd - sle+
 38740 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 51192 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 51258 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51661 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53670 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55907 nobody    20   0  277744  19768   4748 S   0.0  0.8   0:01.94 /usr/sbin+
 56134 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 62775 root      20   0  182832   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62833 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 62852 root      20   0  108056    356    284 S   0.0  0.0   0:00.00 sleep 1h +
 63053 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 63081 root      20   0       0      0      0 R   0.0  0.0   0:00.03 [kworker/+
 63453 nobody    20   0  277744  19500   4604 S   0.0  0.8   0:00.82 /usr/sbin+
 64849 nobody    20   0  277876  19260   4304 S   0.0  0.8   0:00.49 /usr/sbin+
 65830 nobody    20   0  277744  19124   4260 S   0.0  0.8   0:00.57 /usr/sbin+
 66606 nobody    20   0  277744  19292   4356 S   0.0  0.8   0:00.43 /usr/sbin+
 68151 nobody    20   0  277744  18908   4060 S   0.0  0.8   0:00.33 /usr/sbin+
 68168 nobody    20   0  277760  19028   4128 S   0.0  0.8   0:00.31 /usr/sbin+
 68171 nobody    20   0  277744  18988   4140 S   0.0  0.8   0:00.25 /usr/sbin+
 68172 nobody    20   0  277744  18896   4040 S   0.0  0.8   0:00.33 /usr/sbin+
 68263 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68752 nobody    20   0  277744  19212   4200 S   0.0  0.8   0:00.23 /usr/sbin+
 69018 nobody    20   0  277744  18764   3984 S   0.0  0.8   0:00.20 /usr/sbin+
 69069 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69081 nobody    20   0  277744  19100   4088 S   0.0  0.8   0:00.24 /usr/sbin+
 69083 nobody    20   0  277740  19000   4048 S   0.0  0.8   0:00.24 /usr/sbin+
 69084 nobody    20   0  277740  18804   3980 S   0.0  0.8   0:00.28 /usr/sbin+
 69511 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 69526 nobody    20   0  277744  19044   4104 S   0.0  0.8   0:00.19 /usr/sbin+
 69904 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70105 nobody    20   0  277752  18524   3752 S   0.0  0.8   0:00.08 /usr/sbin+
 70150 nobody    20   0  277876  18508   3760 S   0.0  0.8   0:00.11 /usr/sbin+
 70206 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 70251 nobody    20   0  277848  18516   3528 S   0.0  0.8   0:00.11 /usr/sbin+
 70364 nobody    20   0  277660  18448   3684 S   0.0  0.8   0:00.06 /usr/sbin+
 70462 nigeria   20   0  400460   4548   2404 S   0.0  0.2   0:00.00 php-fpm: +
 70519 wp-tool+  20   0  445028    312    184 S   0.0  0.0   0:00.00 sw-engine+
 70569 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 70616 nobody    20   0  277876  18348   3616 S   0.0  0.8   0:00.02 /usr/sbin+
 70617 cloudw    20   0  525088  60556   6752 S   0.0  2.5   0:00.47 php-fpm: +
 70664 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 70665 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 70671 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 70678 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70679 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70680 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70681 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70682 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70684 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70685 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70686 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70687 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70688 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70689 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70691 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70693 nobody    20   0  277040  16080   2088 S   0.0  0.7   0:00.00 /usr/sbin+
 70694 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 70695 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 70696 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 70712 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 70718 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 70720 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70721 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 70722 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70723 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70725 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70726 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70727 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70728 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70729 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 70730 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70738 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 70739 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 70742 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 70752 mailnull  20   0   89492   4924   1744 S   0.0  0.2   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      69511  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kworker/1:1]
root      38740  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:2]
root      51192  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/0:1]
root      51258  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/1:2]
root      51661  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root      53670  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/0:6]
root      56134  0.0  0.0      0     0 ?        S    00:52   0:00  \_ [kworker/1:4]
root      63053  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/1:0]
root      63081  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:0]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root      69069  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:3]
root      69904  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44412  3444 ?        Ss   Nov17   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.3  40244  7324 ?        Ss   Nov17   0:11 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   268 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   536 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240  1044 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.2 224148  5924 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256    88 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   428 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   216 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   360 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1412 ?        Ss   Nov17   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    28 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1232 ?        Ss   Nov17   0:05 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126388   520 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      62775  0.0  0.0 182832  2136 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      62833  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      62852  0.0  0.0 108056   356 ?        S    01:00   0:00  |       \_ sleep 1h 4m
root      70678  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70694  0.0  0.0 113284  1208 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      70695  0.0  0.0 108052   356 ?        S    01:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      70696  0.0  0.0 113288  1516 ?        S    01:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      70763  0.0  0.0 153840  2092 ?        R    01:09   0:00  |               \_ ps auxf
root      70679  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70723  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      70680  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70726  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      70681  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70720  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      70682  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70725  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      70684  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70727  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      70685  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70730  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      70686  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70728  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      70687  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70722  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      70688  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70729  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      70737  0.0  0.6 165800 14636 ?        R    01:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      70689  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70718  0.0  0.0  20164   968 ?        Ss   01:09   0:00  |   \_ jailshell (pactpay) [70738] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70738  0.0  0.0  20164   264 ?        S    01:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70743  0.0  0.7 480124 17320 ?        S    01:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      70691  0.0  0.0 182832  2132 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      70721  0.0  0.0  20164   964 ?        Ss   01:09   0:00      \_ jailshell (nigeria) [70742] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70742  0.0  0.0  20164   256 ?        S    01:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70748  0.0  0.6 404052 16140 ?        S    01:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908     0 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1848 ?        Ssl  Nov17   0:18 /usr/sbin/nscd
root        578  0.0  0.0 114704   120 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   136 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4068 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  70752  0.0  0.2  89492  4924 ?        S    01:09   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   384 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13184 ?        Ssl  Nov17   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400    32 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.1  0.3 1276356 9184 ?        Ssl  Nov17   0:26 /usr/bin/cspdaemon
telegraf   1069  0.0  1.6 5654304 40276 ?       SLsl Nov17   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372   932 ?        Ssl  Nov17   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   584 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.1  46984  2540 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47660  2996 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   396 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   680 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2680 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47472  2980 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2348 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   564 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1596 ?        S    Nov17   0:00  \_ dovecot/auth
root       1076  0.1  0.4 1277056 9788 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    48 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   488 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      70206  0.0  0.1 111304  4268 ?        Ss   01:08   0:00  \_ sshd: [accepted]
root      70569  0.0  0.1 111304  4268 ?        Ss   01:08   0:00  \_ sshd: [accepted]
root      70664  0.0  0.2 157100  5080 ?        Ss   01:08   0:00  \_ sshd: unknown [priv]
sshd      70665  0.0  0.1 115644  2628 ?        S    01:08   0:00      \_ sshd: unknown [net]
systuser   1087  0.0  0.0 111864    76 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1404 ?        Ss   Nov17   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  70519  0.0  0.0 445028   312 ?        S    01:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   768 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.6 1055796 39572 ?       Ssl  Nov17   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   800 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.3 273744  7304 ?        Ssl  Nov17   0:05 /usr/sbin/rsyslogd -n
root       1117  0.0  7.4 1763304 179256 ?      Ssl  Nov17   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788   996 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2092 ?        Ss   Nov17   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   70462  0.0  0.1 400460  4548 ?        S    01:08   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    70617 11.7  2.5 525088 60556 ?        S    01:08   0:00  \_ php-fpm: pool cloudware_ng
root       1134  0.0  0.2 261152  7136 ?        Ss   Nov17   0:02 cpsrvd (SSL) - waiting for connections                   
root      70671  0.0  0.0      0     0 ?        Z    01:08   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3776 ?        Rs   Nov17   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   584 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  3096 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.3 412396 32760 ?        Ss   Nov17   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.5 387556 13596 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  4.8 248116 117400 ?       Ss   Nov17   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  5.2 264072 127596 ?       S    Nov17   0:02  \_ spamd child
root       7507  0.0  4.8 248116 116772 ?       S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.5 210048 13404 ?        Ss   Nov17   0:02 tailwatchd
root       1412  0.0  1.0 262224 24492 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  4256 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   796 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1496 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.3 10.9 1458600 264420 ?      Sl   Nov17   5:15 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7772 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12888   400 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   364 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12920   412 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   188 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    55907  0.1  0.8 277744 19768 ?        S    00:51   0:01  \_ /usr/sbin/httpd -k start
nobody    63453  0.1  0.8 277744 19500 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody    64849  0.1  0.7 277876 19260 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    65830  0.1  0.7 277744 19124 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    66606  0.1  0.7 277744 19292 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    68151  0.1  0.7 277744 18908 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    70712  0.0  0.6 353712 15976 ?        S    01:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    68168  0.1  0.7 277760 19028 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68171  0.1  0.7 277744 18988 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68172  0.1  0.7 277744 18896 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68752  0.1  0.7 277744 19212 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    69018  0.1  0.7 277744 18764 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    69081  0.2  0.7 277744 19100 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    69083  0.2  0.7 277740 19000 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    69084  0.2  0.7 277740 18804 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    69526  0.2  0.7 277744 19044 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    70105  0.1  0.7 277752 18524 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70150  0.2  0.7 277876 18508 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70251  0.3  0.7 277848 18516 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70364  0.2  0.7 277660 18448 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70616  0.5  0.7 277876 18348 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70693  0.0  0.6 277040 16080 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148   416 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152   492 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.2 181620 29588 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 22855  Threads: 3  Questions: 2003512  Slow queries: 0  Opens: 7232  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.661
*************************** 1. row ***************************
     Id: 30404
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30407
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30410
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 142.44.220.236 TIME_WAIT
      1 154.38.189.70 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.241.206.44 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 43.157.50.58 TIME_WAIT
      1 51.222.168.1 TIME_WAIT
      1 54.39.203.29 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      7 45.227.253.15 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 01:09:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 20 minutes 49 seconds
   Server load: 0.22 0.27 0.37
   Total accesses: 112570 - Total Traffic: 2.7 GB - Total Duration: 59348779
   CPU Usage: u5.4 s5.05 cu1453.84 cs1158.65 - 11.5% CPU load
   4.93 requests/sec - 124.3 kB/second - 25.2 kB/request - 527.217 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

K_KKKKKKKKKK_.KW..KK.._....K..KK................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                            Request
   0-0  69526 1/35/5158  K 0.84 3    431 3041413 35.7  0.85  120.19 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1274009602 HTTP/1.1
   1-0  65830 0/90/5224  _ 2.41 0    259 2672760 0.0   2.65  124.70 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=3652630155 HTTP/1.1
   2-0  68752 8/41/4899  K 1.16 2    379 2508770 245.4 0.97  118.61 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=3157354587 HTTP/1.1
   3-0  70105 3/13/4685  K 0.30 2    361 2465365 92.5  0.36  113.11 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=1382096408 HTTP/1.1
   4-0  70150 1/19/5089  K 0.49 1    25  2526265 5.8   0.52  119.84 66.249.70.7   http/1.1 test.cloudware.ng:443  GET /14749325?goodscode=0014730758 HTTP/1.1
   5-0  69018 1/34/4924  K 0.80 1    356 2487570 33.7  0.88  120.88 66.249.70.173 http/1.1 team.cloudware.ng:443  GET /?l=1053549128 HTTP/1.1
   6-0  70616 2/3/4903   K 0.04 1    336 2526124 63.6  0.07  122.67 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1265707556 HTTP/1.1
   7-0  69081 2/39/4484  K 1.12 1    473 2265377 65.7  1.05  114.66 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=4288007008 HTTP/1.1
   8-0  70251 3/15/4350  K 0.37 2    525 2141923 99.0  0.54  103.01 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=4193031079 HTTP/1.1
   9-0  69083 5/40/4417  K 1.05 1    335 2242739 155.7 1.01  109.68 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1610992824 HTTP/1.1
   10-0 69084 5/44/4416  K 1.20 2    380 2205806 153.5 1.24  106.85 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=698116000 HTTP/1.1
   11-0 70364 8/11/4550  K 0.21 3    385 2275306 249.7 0.27  116.37 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3857017158 HTTP/1.1
   12-0 70693 0/1/3754   _ 0.00 0    0   2038461 0.0   0.02  94.77  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 -     0/0/3871   . 0.00 102  0   1885316 0.0   0.00  94.89  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 68151 1/56/4059  K 1.39 0    271 2125751 33.8  1.52  96.29  66.249.64.35  http/1.1 team.cloudware.ng:443  GET /?l=3542345252 HTTP/1.1
   15-0 55907 0/320/4040 W 8.40 0    0   2052559 0.0   8.59  97.05  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   16-0 -     0/0/3727   . 0.00 52   0   2688082 0.0   0.00  104.46 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/3858   . 0.00 116  0   1894190 0.0   0.00  99.80  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 66606 10/75/3057 K 1.78 1    366 1579185 309.3 1.78  69.32  192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=1839574602 HTTP/1.1
   19-0 64849 1/83/3024  K 2.03 0    357 1490027 33.3  2.18  72.54  66.249.64.75  http/1.1 team.cloudware.ng:443  GET /?l=311428098 HTTP/1.1
   20-0 -     0/0/3409   . 0.00 175  0   1703332 0.0   0.00  83.72  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/2275   . 0.00 167  0   1204386 0.0   0.00  53.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 63453 0/138/1973 _ 3.78 0    388 1036303 0.0   3.74  49.42  192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=2075805576 HTTP/1.1
   23-0 -     0/0/2202   . 0.00 105  0   1093588 0.0   0.00  49.32  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2119   . 0.00 159  0   1226715 0.0   0.00  58.29  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1367   . 0.00 168  0   824943  0.0   0.00  36.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1271   . 0.00 164  0   742077  0.0   0.00  31.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 68168 1/53/1162  K 1.39 0    281 689283  35.0  1.35  27.88  66.249.64.76  http/1.1 team.cloudware.ng:443  GET /?l=990930205 HTTP/1.1
   28-0 -     0/0/1199   . 0.00 162  0   667892  0.0   0.00  26.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/1127   . 0.00 103  0   691662  0.0   0.00  29.88  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 68171 6/41/915   K 1.00 3    373 534270  189.1 1.12  23.25  192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=1238744520 HTTP/1.1
   31-0 68172 1/53/943   K 1.45 0    301 462256  34.8  1.54  21.53  66.249.70.33  http/1.1 team.cloudware.ng:443  GET /?l=226494114 HTTP/1.1
   32-0 -     0/0/638    . 0.00 3233 0   353573  0.0   0.00  17.97  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/932    . 0.00 3362 0   602731  0.0   0.00  27.29  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/535    . 0.00 3361 0   290281  0.0   0.00  13.80  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/461    . 0.00 3358 0   255827  0.0   0.00  12.63  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/420    . 0.00 2975 0   233407  0.0   0.00  11.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/558    . 0.00 3349 0   311293  0.0   0.00  17.32  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/371    . 0.00 3346 0   197602  0.0   0.00  10.72  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/111    . 0.00 3352 0   55375   0.0   0.00  2.84   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/365    . 0.00 3230 0   203780  0.0   0.00  9.39   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/81     . 0.00 3357 0   39481   0.0   0.00  1.95   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/121    . 0.00 3336 0   63252   0.0   0.00  3.11   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/251    . 0.00 3355 0   94774   0.0   0.00  3.69   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/190    . 0.00 3130 0   101665  0.0   0.00  4.99   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/73     . 0.00 3351 0   39616   0.0   0.00  2.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/225    . 0.00 3227 0   119013  0.0   0.00  5.41   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/65     . 0.00 3316 0   35063   0.0   0.00  1.48   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/243    . 0.00 3340 0   115638  0.0   0.00  5.61   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19     . 0.00 3356 0   7927    0.0   0.00  0.41   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/52     . 0.00 7420 0   34889   0.0   0.00  1.28   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/70     . 0.00 7502 0   34943   0.0   0.00  1.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/33     . 0.00 7478 0   12820   0.0   0.00  0.87   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/22     . 0.00 8771 0   10829   0.0   0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/121    . 0.00 8682 0   71948   0.0   0.00  3.51   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/72     . 0.00 8737 0   40608   0.0   0.00  2.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/7      . 0.00 9105 0   1321    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00 9097 0   2507    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/9      . 0.00 9114 0   517     0.0   0.00  0.87   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/4      . 0.00 9112 0   12      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/42     . 0.00 8950 0   19606   0.0   0.00  1.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 9121 0   821     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/19     . 0.00 9073 0   7935    0.0   0.00  0.50   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1327
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...42)
   index usage: 23%, cache usage: 31%
   total entries stored since starting: 83278
   total entries replaced since starting: 0
   total entries expired since starting: 81932
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 203 miss
   total removes since starting: 19 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit