403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.02.09.txt
 ## swap threshold exceeded
## server overview
2025-11-20.02.09 load[0] mem[62/61] mysql[1/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1422          82          43         858         734
Swap:          1999        1325         674
 02:09:01 up  1:14,  0 users,  load average: 0.22, 0.59, 0.95
## system overview
top - 02:09:01 up  1:14,  0 users,  load average: 0.22, 0.59, 0.95
Tasks: 212 total,   7 running, 204 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 43.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    64416 free,  1476604 used,   879280 buff/cache
KiB Swap:  2047996 total,   690428 free,  1357568 used.   732136 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 224740   3816 S  20.0  9.3   1:55.38 /usr/sbin+
 57846 root      20   0  140984   6356   2496 R  13.3  0.3   0:00.02 /usr/loca+
 57854 nigeria   20   0  404052  16144  10384 S  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44256   3348   1520 S   6.7  0.1   0:06.56 /usr/lib/+
   505 nscd      20   0  928956   1388    684 S   6.7  0.1   0:03.36 /usr/sbin+
 52879 nobody    20   0  277760  19600   4460 S   6.7  0.8   0:00.65 /usr/sbin+
 57845 saboakin  20   0  404052  15608  10156 S   6.7  0.6   0:00.01 /opt/cpan+
 57848 pactpay   20   0  479860  16172  10576 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.59 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:05.41 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.07 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 R   0.0  0.0   0:09.03 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.69 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.83 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   7012   6688 S   0.0  0.3   0:02.49 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 S   0.0  0.0   0:00.38 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    856    492 S   0.0  0.0   0:00.63 /usr/lib/+
   477 dbus      20   0   58724   1344    624 R   0.0  0.1   0:02.42 /usr/bin/+
   486 rpc       20   0   69256    168     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1164    812 S   0.0  0.0   0:01.07 /usr/lib/+
   499 root      20   0   52852    416    320 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   506 root      20   0  224144   6468    896 S   0.0  0.3   0:00.11 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.09 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.13 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   4032    956 S   0.0  0.2   0:00.17 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.74 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.09 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.10 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.09 /usr/bin/+
   927 telegraf  20   0 5654048  39164   5900 S   0.0  1.6   0:02.67 /usr/loca+
   928 systuser  20   0  114016  14328   2860 S   0.0  0.6   0:01.17 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.48 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.24 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  224592   7260   5704 S   0.0  0.3   0:01.23 /usr/sbin+
   935 root      20   0  439788  11416  11208 S   0.0  0.5   0:00.25 php-fpm: +
   936 named     20   0  636992  31204   2112 S   0.0  1.3   0:03.75 /usr/sbin+
   938 root      20   0  261028   5136   1328 S   0.0  0.2   0:00.61 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:01.45 php-fpm: +
   947 root      20   0 1763312 297372    728 S   0.0 12.3   0:14.12 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.50 /usr/sbin+
   972 root      20   0  389508    720    512 S   0.0  0.0   0:00.19 php-fpm: +
   979 cpanelc+  20   0   10220   3004   2312 R   0.0  0.1   0:03.74 /usr/loca+
   982 root      20   0  396248    660    480 S   0.0  0.0   0:00.18 php-fpm: +
   984 root      20   0  388892    620    408 S   0.0  0.0   0:00.19 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.24 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    868    292 S   0.0  0.0   0:00.51 /usr/bin/+
  1116 dovenull  20   0   46912   2488   1864 S   0.0  0.1   0:00.06 dovecot/p+
  1117 dovenull  20   0   47592   3316   2188 S   0.0  0.1   0:00.07 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.01 dovecot/a+
  1119 root      20   0   10452    628    452 S   0.0  0.0   0:00.05 dovecot/l+
  1120 dovenull  20   0   46912   2424   1828 S   0.0  0.1   0:00.08 dovecot/p+
  1121 dovenull  20   0   47336   3332   2360 S   0.0  0.1   0:00.04 dovecot/i+
  1128 root      20   0   24528   2264    520 S   0.0  0.1   0:00.04 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.03 SonarPush+
  1137 dovecot   20   0   13568    452    244 S   0.0  0.0   0:00.01 dovecot/s+
  1172 root      20   0  248320 119764   2872 S   0.0  4.9   0:03.36 /usr/loca+
  1190 dovecot   20   0   41276   1664   1040 S   0.0  0.1   0:00.15 dovecot/a+
  1258 wp-tool+  20   0  412368  32968   2176 S   0.0  1.4   0:01.62 /usr/bin/+
  1259 wp-tool+  20   0  387528  13272   1644 S   0.0  0.5   0:00.13 /usr/bin/+
  1294 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.16 dnsadmin +
  1298 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.27 cpdavd - +
  1300 root      20   0  209484  11168   2008 S   0.0  0.5   0:01.29 tailwatchd
  1692 root      20   0  299272    908    528 S   0.0  0.0   0:00.12 php-fpm: +
  1709 root      38  18  130416   1436    712 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8056    772 S   0.0  0.3   0:00.50 /usr/sbin+
  1945 root      20   0   12816    428    292 S   0.0  0.0   0:00.66 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.56 /usr/loca+
  1947 root      20   0   12856    356    232 S   0.0  0.0   0:00.59 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  181864  10452   1192 S   0.0  0.4   0:04.37 lfd - sle+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.07 [kworker]
  7285 root      20   0  264464 129044   3028 S   0.0  5.3   0:00.80 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 31250 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 41158 nobody    20   0  277732  20544   4916 S   0.0  0.8   0:02.16 /usr/sbin+
 42094 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42352 nobody    20   0  277596  20284   4968 S   0.0  0.8   0:01.99 /usr/sbin+
 44035 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45507 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 47067 nobody    20   0  277764  19892   4556 S   0.0  0.8   0:01.07 /usr/sbin+
 48271 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 48273 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49508 nobody    20   0  277760  19716   4476 S   0.0  0.8   0:01.18 /usr/sbin+
 49532 nobody    20   0  277496  20028   4520 S   0.0  0.8   0:01.20 /usr/sbin+
 50275 nobody    20   0  277904  20324   4700 S   0.0  0.8   0:00.94 /usr/sbin+
 50291 nobody    20   0  277764  19800   4544 S   0.0  0.8   0:01.04 /usr/sbin+
 50408 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51899 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52613 nobody    20   0  277772  19828   4396 S   0.0  0.8   0:00.73 /usr/sbin+
 52646 nobody    20   0  277636  19896   4372 S   0.0  0.8   0:00.67 /usr/sbin+
 52774 nobody    20   0  277760  19584   4332 S   0.0  0.8   0:00.65 /usr/sbin+
 53875 nobody    20   0  277904  19532   4304 S   0.0  0.8   0:00.57 /usr/sbin+
 54559 nobody    20   0  277756  19360   4156 S   0.0  0.8   0:00.61 /usr/sbin+
 54772 worencom  20   0   38480   4056   3036 S   0.0  0.2   0:00.00 dovecot/i+
 54980 nobody    20   0  277764  19368   4200 S   0.0  0.8   0:00.34 /usr/sbin+
 55288 nobody    20   0  277760  19420   4024 S   0.0  0.8   0:00.16 /usr/sbin+
 55310 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55888 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56116 nobody    20   0  277760  18960   3868 S   0.0  0.8   0:00.32 /usr/sbin+
 56641 nobody    20   0  277760  18988   3900 S   0.0  0.8   0:00.17 /usr/sbin+
 56792 nobody    20   0  277764  19044   3932 S   0.0  0.8   0:00.15 /usr/sbin+
 57150 nobody    20   0  277340  17912   3348 S   0.0  0.7   0:00.00 /usr/sbin+
 57206 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57495 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 57602 healtho+  20   0  460640  67392   4224 S   0.0  2.8   0:02.03 php-fpm: +
 57630 root      20   0   41052   2784   2124 S   0.0  0.1   0:00.00 dovecot/a+
 57658 nigeria   20   0  400460   5432   2404 S   0.0  0.2   0:00.00 php-fpm: +
 57761 agradio   20   0  411996  29712   4080 S   0.0  1.2   0:00.20 php-fpm: +
 57773 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 57776 cloudw    20   0  523772  59052   6676 S   0.0  2.4   0:00.47 php-fpm: +
 57783 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57784 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57785 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57786 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57787 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57788 root      20   0  183044   2212   1632 S   0.0  0.1   0:00.00 /usr/sbin+
 57789 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57790 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57791 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57792 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57793 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57794 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57795 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57796 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57797 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 57799 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 57800 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 57801 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 57807 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 57825 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 57826 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 57828 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57829 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57830 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 57831 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57832 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 57833 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 57835 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 57836 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57837 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57838 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57839 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 57840 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 57841 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 57847 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 57849 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 57856 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 57858 robocal+  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 57860 robocal+  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 57861 robocal+  20   0  400440  12372   8432 R   0.0  0.5   0:00.00 /opt/cpan+
 57862 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 57863 cloudsms  20   0  400380  12148   8340 R   0.0  0.5   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:54   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      12309  0.0  0.0      0     0 ?        D    01:07   0:00  \_ [kworker/u200:0]
root      57866  0.0  0.0      0     0 ?        R    02:09   0:00  |   \_ [kworker/u200:0]
root      31250  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/1:0]
root      42094  0.0  0.0      0     0 ?        R    01:47   0:00  \_ [kworker/1:3]
root      44035  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:2]
root      45507  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:2]
root      48271  0.0  0.0      0     0 ?        S    01:56   0:00  \_ [kworker/0:0]
root      48273  0.0  0.0      0     0 ?        S    01:56   0:00  \_ [kworker/0:1]
root      50408  0.0  0.0      0     0 ?        D    01:59   0:00  \_ [kworker/1:1]
root      51899  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/u200:1]
root      55310  0.0  0.0      0     0 ?        D    02:05   0:00  \_ [kworker/0:3]
root      55888  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/1:4]
root      57206  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44256  3348 ?        Ss   00:54   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  7016 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   856 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Ss   00:54   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   168 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1164 ?        Rs   00:54   0:01 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   416 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1388 ?        Ssl  00:54   0:03 /usr/sbin/nscd
root        506  0.0  0.2 224144  6468 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      57783  0.0  0.0 183048  2156 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57799  0.0  0.0 113284  1212 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      57800  0.0  0.0 108052   360 ?        S    02:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      57801  0.0  0.0 113288  1516 ?        S    02:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      57864  0.0  0.0 153840  2092 ?        R    02:09   0:00  |               \_ ps auxf
root      57784  0.0  0.0 183048  2156 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57832  0.0  0.0  20164   812 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      57785  0.0  0.0 183048  2156 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57838  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      57786  0.0  0.0 183048  2156 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57836  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      57787  0.0  0.0 183048  2156 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57828  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      57789  0.0  0.0 183048  2152 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57829  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      57790  0.0  0.0 183048  2152 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57837  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      57791  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57841  0.0  0.0  20164   964 ?        Ss   02:09   0:00  |   \_ jailshell (cloudsms) [57856] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  57856  0.0  0.0      0     0 ?        D    02:09   0:00  |       \_ [jailshell]
root      57792  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57831  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      57793  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57839  0.0  0.0 113284  1208 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      57846  0.0  0.3 145048  8328 ?        R    02:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      57794  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57833  0.0  0.0  20164   968 ?        Ss   02:09   0:00  |   \_ jailshell (pactpay) [57847] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   57847  0.0  0.0  20164   264 ?        S    02:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   57848  0.0  0.6 479860 16260 ?        S    02:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      57796  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      57835  0.0  0.0  20164   960 ?        Ss   02:09   0:00      \_ jailshell (nigeria) [57849] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   57849  0.0  0.0  20164   256 ?        S    02:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   57854  0.0  0.6 404052 16144 ?        S    02:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  4032 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.1  46912  2488 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  3316 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   628 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.1  46912  2424 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  3332 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24528  2264 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   452 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1664 ?        S    00:54   0:00  \_ dovecot/auth
worencom  54772  0.0  0.1  38480  4056 ?        S    02:04   0:00  \_ dovecot/imap
root      57630  0.0  0.1  41052  2784 ?        S    02:08   0:00  \_ dovecot/auth -w
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 39164 ?       SLsl 00:54   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.5 114016 14328 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.6  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.5  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 224592  7260 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11416 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.2 636992 31204 ?        Ssl  00:54   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  5136 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      57773  0.0  0.0      0     0 ?        Z    02:08   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  57602 10.6  2.7 460640 67392 ?        S    02:08   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   57658  0.0  0.2 400460  5432 ?        S    02:08   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    57776 47.0  2.4 523772 59052 ?        S    02:08   0:00  \_ php-fpm: pool cloudware_ng
root        947  0.3 12.2 1763312 296472 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root        972  0.0  0.0 389508   720 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio   57761 10.0  1.2 411996 29712 ?        S    02:08   0:00  \_ php-fpm: pool agradio_ng
cpanelc+    979  0.0  0.1  10220  3004 ?        Ss   00:54   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   660 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   620 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  57495  0.0  0.1 445028  3268 ?        R    02:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   868 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119764 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 264464 129044 ?       S    01:00   0:00  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32968 ?        Ss   00:54   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13272 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  4168 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.2 183900  6692 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.0  0.4 209484 11168 ?        Ss   00:54   0:01 tailwatchd
root       1692  0.0  0.0 299272   908 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1436 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.5  9.2 1462280 224740 ?      Sl   00:54   1:55 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8056 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12816   428 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12856   356 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    41158  0.1  0.8 277732 20544 ?        S    01:45   0:02  \_ /usr/sbin/httpd -k start
nobody    42352  0.1  0.8 277596 20284 ?        S    01:47   0:01  \_ /usr/sbin/httpd -k start
nobody    47067  0.1  0.8 277764 19892 ?        S    01:54   0:01  \_ /usr/sbin/httpd -k start
nobody    49508  0.1  0.8 277760 19716 ?        S    01:57   0:01  \_ /usr/sbin/httpd -k start
cloudw    57807  0.0  0.6 353712 15976 ?        S    02:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    49532  0.1  0.8 277496 20028 ?        S    01:57   0:01  \_ /usr/sbin/httpd -k start
nobody    50275  0.1  0.8 277904 20324 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    50291  0.1  0.8 277764 19800 ?        S    01:58   0:01  \_ /usr/sbin/httpd -k start
nobody    52613  0.1  0.8 277772 19828 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    52646  0.1  0.8 277636 19896 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    52774  0.1  0.8 277760 19584 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    52879  0.1  0.8 277760 19600 ?        R    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    53875  0.1  0.8 277904 19532 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    54559  0.2  0.7 277756 19360 ?        S    02:04   0:00  \_ /usr/sbin/httpd -k start
nobody    54980  0.1  0.8 277764 19368 ?        S    02:04   0:00  \_ /usr/sbin/httpd -k start
nobody    55288  0.0  0.8 277760 19420 ?        S    02:05   0:00  \_ /usr/sbin/httpd -k start
nobody    56116  0.2  0.7 277760 18960 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    56641  0.1  0.7 277760 18988 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    56792  0.1  0.7 277764 19044 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    57150  0.0  0.7 277340 17912 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 181864 10452 ?        Ss   00:54   0:04 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 4484  Threads: 3  Questions: 926303  Slow queries: 0  Opens: 2988  Flush tables: 1  Open tables: 2000  Queries per second avg: 206.579
*************************** 1. row ***************************
     Id: 14079
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 14081
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 14086
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 114.119.140.48 TIME_WAIT
      1 137.135.191.38 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.52 TIME_WAIT
      1 51.161.65.15 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 74.7.228.38 TIME_WAIT
      1 95.108.213.168 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 192.178.4.101 TIME_WAIT
      2 47.128.113.72 TIME_WAIT
     37 157.15.40.56 TIME_WAIT
    138 172.161.90.19 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 02:09:01 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 14 minutes 38 seconds
   Server load: 0.22 0.59 0.95
   Total accesses: 28868 - Total Traffic: 591.6 MB - Total Duration: 17676158
   CPU Usage: u10.88 s4.21 cu286.77 cs213.78 - 11.5% CPU load
   6.45 requests/sec - 135.3 kB/second - 21.0 kB/request - 612.31 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

_K__W_KKKK_W___KR_...............K..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  42352 0/382/1369 _ 8.54 0    1   759342 0.0   8.89  25.62 172.161.90.19   http/1.1 cybersynchs.cloudware.ng:80     GET /wp-includes/fonts/index.php?p= HTTP/1.1
   1-0  54980 1/72/1260  K 1.25 2    391 766348 38.9  3.99  27.32 192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=725765412 HTTP/1.1
   2-0  50275 0/181/1227 _ 4.05 0    152 726495 0.0   3.98  30.20 217.113.194.126 http/1.1 team.cloudware.ng:80            GET /tests/Utils/?C=M;O=A HTTP/1.1
   3-0  53875 0/114/1356 _ 2.43 0    333 811337 0.0   2.40  25.41 157.15.40.56    http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   4-0  55288 0/38/1157  W 0.49 0    0   913097 0.0   0.60  22.86 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   5-0  56116 0/65/1225  _ 1.31 0    1   702427 0.0   1.38  23.50 172.161.90.19   http/1.1 cybersynchs.cloudware.ng:80     GET /wp-content/radio.php HTTP/1.1
   6-0  52613 3/141/1132 K 2.82 2    341 697276 95.2  3.09  27.54 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=3066576304 HTTP/1.1
   7-0  52646 8/130/1189 K 2.41 1    394 698333 245.5 2.75  22.58 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=2305305073 HTTP/1.1
   8-0  54559 5/103/1174 K 2.58 4    303 710069 155.6 2.76  23.06 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=3752064163 HTTP/1.1
   9-0  50291 2/199/1171 K 4.33 0    273 716631 66.1  4.43  22.27 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=1963361311 HTTP/1.1
   10-0 52774 0/137/1028 _ 2.67 0    0   640206 0.0   2.70  21.43 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   11-0 49508 4/211/1190 W 4.72 0    0   742926 126.2 5.48  25.99 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=1350384395 HTTP/1.1
   12-0 56641 0/43/1123  _ 0.60 0    580 716703 0.0   0.71  24.38 187.19.233.156  http/1.1 cloudware.ng:443                GET /tag/insurance-management-system-software-solutions/ HTTP/1
   13-0 56792 0/29/783   _ 0.62 0    336 475239 0.0   0.72  15.81 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=336325291 HTTP/1.1
   14-0 47067 0/212/719  _ 4.28 0    0   422680 0.0   5.03  15.49 172.161.90.19   http/1.1 cybersynchs.cloudware.ng:80     GET /wp-includes/assets/index.php HTTP/1.1
   15-0 49532 4/379/809  K 3.85 3    303 498256 126.6 4.78  12.44 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=1093783889 HTTP/1.1
   16-0 57150 0/2/538    R 0.00 59   431 317312 0.0   0.01  12.33 5.188.108.134   http/1.1 workflow-management-software.co
   17-0 52879 0/120/851  _ 2.52 0    1   486532 0.0   2.81  16.27 172.161.90.19   http/1.1 cybersynchs.cloudware.ng:80     GET /.well-known/gecko-litespeed.php HTTP/1.1
   18-0 -     0/0/711    . 0.00 1320 0   414420 0.0   0.00  12.97 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/906    . 0.00 1101 0   543126 0.0   0.00  16.31 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/306    . 0.00 1340 0   197044 0.0   0.00  6.35  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/129    . 0.00 1367 0   83958  0.0   0.00  2.35  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/583    . 0.00 1369 0   382709 0.0   0.00  15.96 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/1054   . 0.00 202  0   675216 0.0   0.00  27.38 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/288    . 0.00 1351 0   128176 0.0   0.00  4.93  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/621    . 0.00 1349 0   410298 0.0   0.00  11.12 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/813    . 0.00 416  0   476023 0.0   0.00  18.43 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/87     . 0.00 1379 0   73526  0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/403    . 0.00 666  0   257874 0.0   0.00  7.31  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/406    . 0.00 1380 0   261299 0.0   0.00  5.43  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/466    . 0.00 596  0   294580 0.0   0.00  9.57  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/140    . 0.00 1383 0   78134  0.0   0.00  2.41  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/847    . 0.00 440  0   527852 0.0   0.00  15.35 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 41158 1/399/621  K 9.22 4    265 362604 33.6  11.10 14.04 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=3432592534 HTTP/1.1
   34-0 -     0/0/205    . 0.00 1382 0   134815 0.0   0.00  4.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/157    . 0.00 1386 0   115547 0.0   0.00  4.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/466    . 0.00 1292 0   274598 0.0   0.00  9.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/22     . 0.00 1385 0   10578  0.0   0.00  0.40  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/23     . 0.00 1318 0   11684  0.0   0.00  0.51  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00 1319 0   15119  0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/4      . 0.00 1609 0   1340   0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/115    . 0.00 1102 0   65290  0.0   0.00  3.06  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 1617 0   7      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/7      . 0.00 1593 0   2574   0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00 1607 0   1141   0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 1616 0   60     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/4      . 0.00 1608 0   244    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/147    . 0.00 1062 0   75011  0.0   0.00  3.67  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/3      . 0.00 1610 0   77     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 976
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...44)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 14500
   total entries replaced since starting: 0
   total entries expired since starting: 13510
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 39 miss
   total removes since starting: 15 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit