403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.01.45.txt
 ## swap threshold exceeded
## server overview
2025-11-20.01.45 load[1] mem[64/60] mysql[3/10] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1462         138          30         762         708
Swap:          1999        1309         690
 01:45:02 up 50 min,  0 users,  load average: 1.24, 0.83, 1.60
## system overview
top - 01:45:02 up 50 min,  0 users,  load average: 1.24, 0.83, 1.60
Tasks: 206 total,   5 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   169152 free,  1469476 used,   781672 buff/cache
KiB Swap:  2047996 total,   707168 free,  1340828 used.   753528 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 222780   3744 S 150.0  9.2   1:26.15 /usr/sbin+
 40555 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44256   3328   1508 S   0.0  0.1   0:04.74 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:03.48 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:08.59 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kauditd]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.64 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.74 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   3984   3664 S   0.0  0.2   0:01.89 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 R   0.0  0.0   0:00.30 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    856    492 S   0.0  0.0   0:00.44 /usr/lib/+
   477 dbus      20   0   58592   1296    624 S   0.0  0.1   0:01.66 /usr/bin/+
   486 rpc       20   0   69256    168     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1160    812 S   0.0  0.0   0:00.74 /usr/lib/+
   499 root      20   0   52852    252    188 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1376    676 S   0.0  0.1   0:02.34 /usr/sbin+
   506 root      20   0  224144   6468    896 S   0.0  0.3   0:00.10 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.07 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.08 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3644    636 S   0.0  0.2   0:00.11 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.72 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.06 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.08 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.06 /usr/bin/+
   927 telegraf  20   0 5654048  39384   6060 S   0.0  1.6   0:01.91 /usr/loca+
   928 systuser  20   0  114016  13956   2620 S   0.0  0.6   0:00.79 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.46 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.23 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  224592   4580   3052 S   0.0  0.2   0:00.92 /usr/sbin+
   935 root      20   0  439788  11340  11132 S   0.0  0.5   0:00.21 php-fpm: +
   936 named     20   0  636992  29384   2120 S   0.0  1.2   0:02.66 /usr/sbin+
   938 root      20   0  261028   4916   1292 S   0.0  0.2   0:00.46 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:01.15 php-fpm: +
   947 root      20   0 1763312 330372   1200 S   0.0 13.7   0:14.00 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.39 /usr/sbin+
   972 root      20   0  389508    720    512 S   0.0  0.0   0:00.16 php-fpm: +
   979 cpanelc+  20   0   10088   3008   2316 S   0.0  0.1   0:02.52 /usr/loca+
   982 root      20   0  396248    556    380 S   0.0  0.0   0:00.15 php-fpm: +
   984 root      20   0  388892    620    408 S   0.0  0.0   0:00.15 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.18 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    760    292 S   0.0  0.0   0:00.38 /usr/bin/+
  1116 dovenull  20   0   46912   2544   1920 S   0.0  0.1   0:00.04 dovecot/p+
  1117 dovenull  20   0   47592   3140   2040 S   0.0  0.1   0:00.05 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.00 dovecot/a+
  1119 root      20   0   10452    628    452 S   0.0  0.0   0:00.03 dovecot/l+
  1120 dovenull  20   0   46912   2484   1888 S   0.0  0.1   0:00.07 dovecot/p+
  1121 dovenull  20   0   47208   3128   2268 S   0.0  0.1   0:00.02 dovecot/i+
  1128 root      20   0   24528   2264    520 S   0.0  0.1   0:00.03 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.03 SonarPush+
  1137 dovecot   20   0   13568    452    244 S   0.0  0.0   0:00.01 dovecot/s+
  1172 root      20   0  248320 119764   2872 S   0.0  4.9   0:03.19 /usr/loca+
  1190 dovecot   20   0   41276   1660   1036 S   0.0  0.1   0:00.10 dovecot/a+
  1258 wp-tool+  20   0  412368  32236   1444 S   0.0  1.3   0:01.18 /usr/bin/+
  1259 wp-tool+  20   0  387528  12948   1320 S   0.0  0.5   0:00.13 /usr/bin/+
  1294 root      20   0  167452   4172   2800 S   0.0  0.2   0:00.14 dnsadmin +
  1298 root      20   0  183900   6104   2868 S   0.0  0.3   0:00.19 cpdavd - +
  1300 root      20   0  209344  11056   2028 S   0.0  0.5   0:00.90 tailwatchd
  1692 root      20   0  299272    908    528 S   0.0  0.0   0:00.07 php-fpm: +
  1709 root      38  18  130416   1428    704 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8056    772 S   0.0  0.3   0:00.38 /usr/sbin+
  1945 root      20   0   12836    424    292 S   0.0  0.0   0:00.48 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.40 /usr/loca+
  1947 root      20   0   12876    344    232 S   0.0  0.0   0:00.44 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  181584  10036   1192 S   0.0  0.4   0:03.00 lfd - sle+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.04 [kworker]
  7285 root      20   0  264212 128896   3248 S   0.0  5.3   0:00.66 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
 12301 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12309 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 13621 root      20   0       0      0      0 D   0.0  0.0   0:00.08 [kworker/+
 25292 nobody    20   0  277772  20396   4748 S   0.0  0.8   0:02.12 /usr/sbin+
 25324 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26414 nobody    20   0  277764  20088   4700 S   0.0  0.8   0:01.44 /usr/sbin+
 26781 root      20   0       0      0      0 D   0.0  0.0   0:00.06 [kworker/+
 29386 nobody    20   0  277772  20396   4792 S   0.0  0.8   0:01.24 /usr/sbin+
 31250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33522 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 34242 nobody    20   0  277892  19336   4192 S   0.0  0.8   0:00.71 /usr/sbin+
 36639 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37046 nobody    20   0  277884  19268   4176 S   0.0  0.8   0:00.45 /usr/sbin+
 37444 nobody    20   0  277764  19600   4196 S   0.0  0.8   0:00.38 /usr/sbin+
 38066 nobody    20   0  277764  19008   3876 S   0.0  0.8   0:00.17 /usr/sbin+
 38086 nobody    20   0  277912  19400   4288 S   0.0  0.8   0:00.31 /usr/sbin+
 38087 nobody    20   0  277552  18988   4056 S   0.0  0.8   0:00.17 /usr/sbin+
 38093 nobody    20   0  277804  19696   4272 S   0.0  0.8   0:00.22 /usr/sbin+
 38096 nobody    20   0  277760  19604   4232 S   0.0  0.8   0:00.33 /usr/sbin+
 38098 nobody    20   0  277576  19456   4176 S   0.0  0.8   0:00.35 /usr/sbin+
 38103 nobody    20   0  277904  18796   3708 S   0.0  0.8   0:00.12 /usr/sbin+
 38106 nobody    20   0  277756  19320   4144 S   0.0  0.8   0:00.22 /usr/sbin+
 38111 nobody    20   0  277512  18920   4044 S   0.0  0.8   0:00.35 /usr/sbin+
 38117 nobody    20   0  277516  19044   4148 S   0.0  0.8   0:00.30 /usr/sbin+
 39440 root      20   0   41052   2812   2144 S   0.0  0.1   0:00.01 dovecot/a+
 39916 nobody    20   0  277884  18768   3772 S   0.0  0.8   0:00.04 /usr/sbin+
 39932 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 39933 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 39950 root      20   0  162436   5728   4236 S   0.0  0.2   0:00.02 sshd: roo+
 39958 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 40045 nobody    20   0  277736  18728   3688 S   0.0  0.8   0:00.04 /usr/sbin+
 40059 nobody    20   0  277520  19080   3928 S   0.0  0.8   0:00.04 /usr/sbin+
 40104 healtho+  20   0  462820  69528   4244 S   0.0  2.9   0:05.51 php-fpm: +
 40111 nobody    20   0  277764  18616   3584 S   0.0  0.8   0:00.04 /usr/sbin+
 40122 nobody    20   0  277760  18736   3684 S   0.0  0.8   0:00.05 /usr/sbin+
 40123 nobody    20   0  277864  18616   3528 S   0.0  0.8   0:00.05 /usr/sbin+
 40134 nobody    20   0  277320  17700   3256 S   0.0  0.7   0:00.00 /usr/sbin+
 40136 nobody    20   0  277784  18976   3708 S   0.0  0.8   0:00.04 /usr/sbin+
 40137 nobody    20   0  277760  18252   3240 S   0.0  0.8   0:00.08 /usr/sbin+
 40354 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 40423 nigeria   20   0  400460   5176   2188 S   0.0  0.2   0:00.00 php-fpm: +
 40459 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 40474 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40476 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40478 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40480 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40481 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40482 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40483 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40485 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40486 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40488 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40498 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 40499 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40500 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 40503 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 40504 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 40506 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40508 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 40509 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 40510 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40513 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40516 root      20   0  188220  11104   5148 S   0.0  0.5   0:00.02 /usr/loca+
 40518 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 40525 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 40529 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 40531 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 40533 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 40546 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 40550 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 40559 cloudsms  20   0  404052  15348  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 40616 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 40642 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 40659 root      20   0  160220   2060   1584 S   0.0  0.1   0:00.00 top -n 2 +
 40668 root      20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
 40669 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:03  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:54   0:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        104  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:3]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      12301  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      13621  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      25324  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:0]
root      26781  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/1:1]
root      31250  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/1:0]
root      33522  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:2]
root      36639  0.0  0.0      0     0 ?        S    01:40   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44256  3328 ?        Ss   00:54   0:04 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  3984 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   856 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58592  1296 ?        Ss   00:54   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   168 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1160 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   252 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1376 ?        Ssl  00:54   0:02 /usr/sbin/nscd
root        506  0.0  0.2 224144  6468 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      40474  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40509  0.0  0.0 113284  1212 ?        Ss   01:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      40518  0.0  0.0 108052   360 ?        S    01:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      40525  0.0  0.0 113288  1516 ?        S    01:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      40670  0.0  0.0 153840  2096 ?        R    01:45   0:00  |               \_ ps auxf
root      40476  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40510  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      40478  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40506  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      40480  0.0  0.0 183048  2156 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40508  0.0  0.0  20164   968 ?        Ss   01:45   0:00  |   \_ jailshell (cloudsms) [40531] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  40531  0.0  0.0  20164   260 ?        S    01:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  40550  0.0  0.0 113284  1212 ?        S    01:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  40559  0.0  0.6 404052 15348 ?        S    01:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      40481  0.0  0.0 183048  2156 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40500  0.0  0.0  20164   988 ?        Ss   01:45   0:00  |   \_ jailshell (cloudsms) [40668] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  40668  0.0  0.0  20164   264 ?        S    01:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  40671  0.0  0.0 113284  1212 ?        S    01:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  40673  0.0  0.0 113284   184 ?        R    01:45   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      40482  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40513  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      40483  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40499  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      40485  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40498  0.0  0.0 113284  1212 ?        Ss   01:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      40516  2.0  0.4 188220 11104 ?        S    01:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      40659  0.0  0.0 160220  2060 ?        S    01:45   0:00  |           \_ top -n 2 -b -c
root      40486  0.0  0.0 183048  2148 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40504  0.0  0.0  20164   964 ?        Ss   01:45   0:00  |   \_ jailshell (pactpay) [40529] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40529  0.0  0.0  20164   260 ?        S    01:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40533  0.0  0.7 480124 17688 ?        S    01:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      40488  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      40503  0.0  0.0  20164   968 ?        Ss   01:45   0:00      \_ jailshell (nigeria) [40546] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40546  0.0  0.0  20164   264 ?        S    01:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40555  0.0  0.6 404052 16140 ?        S    01:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3644 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.1  46912  2544 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  3140 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   628 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.1  46912  2484 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47208  3128 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24528  2264 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   452 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1660 ?        S    00:54   0:00  \_ dovecot/auth
root      39440  0.0  0.1  41052  2812 ?        S    01:43   0:00  \_ dovecot/auth -w
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 39384 ?       SLsl 00:54   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.5 114016 13956 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.9  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.7  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.1 224592  4580 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11340 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.2 636992 29384 ?        Ssl  00:54   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  4916 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      40459  0.0  0.0      0     0 ?        Z    01:44   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  40104 13.7  2.8 462820 69528 ?        S    01:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   40423  0.0  0.2 400460  5176 ?        S    01:44   0:00  \_ php-fpm: pool nigeriadecide_org
root        947  0.4 13.6 1763312 330372 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      39932  0.0  0.1 111304  4268 ?        Ss   01:44   0:00  \_ sshd: [accepted]
sshd      39933  0.0  0.1 115644  2628 ?        S    01:44   0:00  |   \_ sshd: [net]
root      39950  0.0  0.2 162436  5728 ?        Ss   01:44   0:00  \_ sshd: root [priv]
sshd      39958  0.0  0.1 115644  2628 ?        S    01:44   0:00      \_ sshd: root [net]
root        972  0.0  0.0 389508   720 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10088  3008 ?        Ss   00:54   0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   556 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   620 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  40354  0.0  0.0 445028   324 ?        S    01:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   760 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.1  4.9 248320 119764 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 264212 128896 ?       S    01:00   0:00  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32236 ?        Ss   00:54   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 12948 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  4172 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.2 183900  6104 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.0  0.4 209344 11056 ?        Ss   00:54   0:00 tailwatchd
root       1692  0.0  0.0 299272   908 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1428 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.8  9.2 1462280 222780 ?      Sl   00:54   1:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8056 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12836   424 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12876   344 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    25292  0.1  0.8 277772 20396 ?        S    01:25   0:02  \_ /usr/sbin/httpd -k start
nobody    26414  0.1  0.8 277764 20088 ?        S    01:26   0:01  \_ /usr/sbin/httpd -k start
nobody    29386  0.1  0.8 277772 20396 ?        S    01:30   0:01  \_ /usr/sbin/httpd -k start
nobody    34242  0.1  0.7 277892 19336 ?        S    01:36   0:00  \_ /usr/sbin/httpd -k start
nobody    37046  0.1  0.7 277884 19268 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    37444  0.1  0.8 277764 19600 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38066  0.0  0.7 277764 19008 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38086  0.1  0.8 277912 19400 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38087  0.0  0.7 277552 18988 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38093  0.1  0.8 277804 19696 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38096  0.1  0.8 277760 19604 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38098  0.1  0.8 277576 19456 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38103  0.0  0.7 277904 18796 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38106  0.1  0.7 277756 19320 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38111  0.1  0.7 277512 18920 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    38117  0.1  0.7 277516 19044 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    39916  0.0  0.7 277884 18768 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40045  0.0  0.7 277736 18728 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
root      40672  0.0  0.0   6516   412 ?        S    01:45   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php72
nobody    40059  0.0  0.7 277520 19080 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40111  0.1  0.7 277764 18616 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40122  0.1  0.7 277760 18736 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40123  0.1  0.7 277864 18616 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40134  0.0  0.7 277320 17700 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40136  0.1  0.7 277784 18976 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40137  0.2  0.7 277760 18252 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 181584 10036 ?        Ss   00:54   0:03 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 3045  Threads: 3  Questions: 711382  Slow queries: 0  Opens: 2429  Flush tables: 1  Open tables: 1970  Queries per second avg: 233.622
*************************** 1. row ***************************
     Id: 11053
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 11057
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 11064
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: updating
   Info: DELETE FROM `sms_queue` WHERE `owner`='joesmile280@gmail.com' or `owner`='' or `sender`='FlRSTBANK'
*************************** 4. row ***************************
     Id: 11065
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.79 TIME_WAIT
      1 114.119.140.113 TIME_WAIT
      1 167.114.139.107 TIME_WAIT
      1 178.20.55.16 TIME_WAIT
      1 185.220.100.248 TIME_WAIT
      1 185.220.100.249 TIME_WAIT
      1 185.220.101.187 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 192.42.116.196 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.229.0.242 TIME_WAIT
      1 45.84.107.47 TIME_WAIT
      1 51.210.111.180 TIME_WAIT
      1 51.210.111.80 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     34 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 01:45:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 50 minutes 39 seconds
   Server load: 1.86 0.96 1.64
   Total accesses: 20868 - Total Traffic: 399.6 MB - Total Duration: 13112872
   CPU Usage: u6.78 s2.85 cu198.08 cs146.14 - 11.6% CPU load
   6.87 requests/sec - 134.6 kB/second - 19.6 kB/request - 628.372 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

._RWK.R_KWRKRK.RK.RK..KR..R.._.KR..R.....R.....K................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  -     0/0/888   . 0.00 30  0   538966 0.0   0.00  15.98 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  37444 0/73/942  _ 1.57 0   0   599354 0.0   1.68  17.04 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   2-0  39916 0/12/830  R 0.10 35  0   507418 0.0   2.87  19.01 104.28.226.248 http/1.1
   3-0  40045 0/10/921  W 0.14 0   0   560459 0.0   0.19  17.19 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=4141342291 HTTP/1.1
   4-0  29386 1/246/816 K 6.92 0   358 491151 35.7  4.86  14.69 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=1257433341 HTTP/1.1
   5-0  -     0/0/799   . 0.00 32  0   482388 0.0   0.00  14.28 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  38066 0/32/788  R 0.70 65  266 514662 0.0   3.23  19.04 195.123.219.34 http/1.1 nescrow.com.ng:443
   7-0  40059 0/11/891  _ 0.08 0   361 547802 0.0   0.15  15.79 157.15.40.56   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   8-0  40111 2/10/850  K 0.12 2   267 527614 65.3  0.19  14.62 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=55035140 HTTP/1.1
   9-0  40122 0/10/793  W 0.21 0   0   516145 0.0   0.26  13.64 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-0 25292 0/403/756 R 9.25 5   6   488014 0.0   8.96  15.31 195.123.219.34 http/1.1 nescrow.com.ng:443
   11-0 40123 3/10/837  K 0.20 0   302 533374 94.0  0.26  17.27 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=968842400 HTTP/1.1
   12-0 40134 0/1/852   R 0.00 36  7   568149 0.0   0.01  17.59 45.90.57.71    http/1.1 nescrow.com.ng:443
   13-0 37046 2/86/508  K 2.34 3   339 326498 64.4  1.93  9.26  192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=3341394742 HTTP/1.1
   14-0 -     0/0/491   . 0.00 29  0   294773 0.0   0.00  9.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 34242 0/134/412 R 3.05 36  26  261819 0.0   3.09  7.34  104.28.226.248 http/1.1
   16-0 40136 1/9/387   K 0.12 0   294 237471 35.0  0.18  9.25  192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=2084631885 HTTP/1.1
   17-0 -     0/0/728   . 0.00 7   0   419063 0.0   0.00  13.43 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 26414 0/362/690 R 6.10 71  356 406190 0.0   5.62  12.54 167.88.171.183 http/1.1 nescrow.com.ng:443
   19-0 40137 5/13/851  K 0.35 1   259 513679 156.4 0.40  14.95 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=2517899867 HTTP/1.1
   20-0 -     0/0/292   . 0.00 172 0   189213 0.0   0.00  5.95  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/124   . 0.00 180 0   82636  0.0   0.00  2.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 38086 3/55/567  K 1.26 0   328 377329 95.8  3.75  15.66 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1556509
   23-0 38087 0/36/699  R 0.57 54  7   474764 0.0   0.68  14.76 104.194.145.47 http/1.1 nescrow.com.ng:443
   24-0 -     0/0/280   . 0.00 175 32  125064 0.0   0.00  4.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/611   . 0.00 165 0   395939 0.0   0.00  10.47 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 38093 0/47/549  R 0.84 18  400 341053 0.0   0.94  11.45 102.91.4.116   http/1.1
   27-0 -     0/0/82    . 0.00 179 0   73492  0.0   0.00  0.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/235   . 0.00 162 0   169661 0.0   0.00  3.62  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 38096 0/64/389  _ 1.41 0   0   252497 0.0   1.51  5.06  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   30-0 -     0/0/250   . 0.00 181 0   177669 0.0   0.00  3.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 38098 3/64/123  K 1.46 3   281 69916  94.5  1.53  2.23  192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=3783066344 HTTP/1.1
   32-0 38103 0/20/463  R 0.75 116 4   319826 0.0   0.46  7.34  104.194.145.47 http/1.1 nescrow.com.ng:443
   33-0 -     0/0/222   . 0.00 164 0   146953 0.0   0.00  2.94  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/203   . 0.00 159 0   134811 0.0   0.00  3.99  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 38106 0/45/143  R 1.02 1   297 109465 0.0   3.54  4.44  192.178.4.105  http/1.1 team.cloudware.ng:443
   36-0 -     0/0/435   . 0.00 163 558 259389 0.0   0.00  8.47  51.75.119.69   http/1.1 blog.cloudsms.com.ng:443   GET /robots.txt HTTP/1.1
   37-0 -     0/0/19    . 0.00 116 0   9840   0.0   0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4     . 0.00 166 0   796    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3     . 0.00 173 0   839    0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/4     . 0.00 170 0   1340   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 38111 0/58/58   R 1.55 1   276 34714  0.0   1.62  1.62  157.15.40.56   http/1.1 health.oyostate.gov.ng:443
   42-0 -     0/0/2     . 0.00 178 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/7     . 0.00 154 0   2574   0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4     . 0.00 168 0   1141   0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2     . 0.00 177 0   60     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/4     . 0.00 169 0   244    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 38117 4/61/61   K 1.16 1   264 26551  125.7 1.27  1.27  192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=1165329687 HTTP/1.1
   48-0 -     0/0/3     . 0.00 171 0   77     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1061
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...53)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 9371
   total entries replaced since starting: 0
   total entries expired since starting: 8302
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 9 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit