403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.02.51.txt
 ## swap threshold exceeded
## server overview
2025-11-21.02.51 load[0] mem[59/68] mysql[1/10] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1283         229          92         850         801
Swap:          1999        1438         561
 02:51:02 up  8:01,  0 users,  load average: 0.63, 0.81, 3.58
## system overview
top - 02:51:02 up  8:01,  0 users,  load average: 0.63, 0.81, 3.58
Tasks: 194 total,   5 running, 188 sleeping,   0 stopped,   1 zombie
%Cpu(s): 40.6 us, 25.0 sy,  0.0 ni, 31.2 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   279884 free,  1266380 used,   874036 buff/cache
KiB Swap:  2047996 total,   574612 free,  1473384 used.   869176 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 270636   3248 S  53.3 11.2   5:45.06 /usr/sbin+
 44060 nigeria   20   0  404052  16140  10380 S  20.0  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44396   3512   1640 S   6.7  0.1   0:40.12 /usr/lib/+
   523 polkitd   20   0  610540   1108    708 S   6.7  0.0   0:03.99 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.68 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.40 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:28.58 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.37 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.92 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.01 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.97 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.15 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:02.08 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.84 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   7032   6720 S   0.0  0.3   0:15.24 /usr/lib/+
   386 root      20   0   45360    404    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    588    460 S   0.0  0.0   0:02.48 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    528    444 S   0.0  0.0   0:00.62 /usr/sbin+
   482 root      20   0  152780    368    328 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   6852   1772 S   0.0  0.3   0:00.37 queueproc+
   486 dbus      20   0   58728   1520    792 S   0.0  0.1   0:15.48 /usr/bin/+
   496 rpc       20   0   69256    268    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    564    452 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:06.79 /usr/lib/+
   522 nscd      20   0 1344744   2288    924 S   0.0  0.1   0:23.36 /usr/sbin+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.81 /usr/sbin+
   575 root      20   0   24208    228    208 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   3916    972 S   0.0  0.2   0:00.75 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.25 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13212   2444 S   0.0  0.5   0:06.91 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.44 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.61 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.23 sw-engine+
   916 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056   8888    276 S   0.0  0.4   0:35.79 /usr/bin/+
   923 root      20   0  396248    632    460 S   0.0  0.0   0:00.71 php-fpm: +
   927 root      20   0  439788   2180   1232 S   0.0  0.1   0:00.81 php-fpm: +
   929 named     20   0 1054792  42852   2052 S   0.0  1.8   0:14.51 /usr/sbin+
   930 root      20   0 1763340 157920    700 S   0.0  6.5   0:14.10 /usr/loca+
   937 root      20   0  261160   7432   1924 S   0.0  0.3   0:44.24 cpsrvd (S+
   944 systuser  20   0  113932     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   948 root      20   0   51656   1236    896 S   0.0  0.1   0:00.39 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.62 /usr/bin/+
   952 cpanelc+  20   0   10592   3596   2376 R   0.0  0.1   0:24.72 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  298320   7492   6284 S   0.0  0.3   0:07.61 /usr/sbin+
   966 root      20   0  389508    868    656 S   0.0  0.0   0:00.78 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.44 php-fpm: +
   976 telegraf  20   0 5654304  37492   5968 S   0.0  1.5   0:15.65 /usr/loca+
   985 root      20   0  388892    892    684 S   0.0  0.0   0:00.74 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.19 /usr/bin/+
   987 root      20   0  572372   1252    676 S   0.0  0.1   0:02.48 /usr/bin/+
  1080 dovecot   20   0   10320    572    456 S   0.0  0.0   0:00.13 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:06.22 /usr/loca+
  1156 systuser  20   0  157708   3148   1148 S   0.0  0.1   0:00.14 SonarPush+
  1161 wp-tool+  20   0  387556  13440   1788 S   0.0  0.6   0:00.29 /usr/bin/+
  1162 wp-tool+  20   0  412396  32756   1948 S   0.0  1.4   0:09.19 /usr/bin/+
  1235 root      20   0  262224  24624   6760 S   0.0  1.0   0:02.86 cpdavd - +
  1239 root      20   0  167452   4096   2724 S   0.0  0.2   0:00.51 dnsadmin +
  1241 root      20   0  209680  12584   2544 S   0.0  0.5   0:03.52 tailwatchd
  1655 root      20   0  299272    944    548 S   0.0  0.0   0:00.78 php-fpm: +
  1658 root      38  18  130416   1552    812 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  30652   5364 S   0.0  1.3   0:02.99 /usr/sbin+
  2729 dovenull  20   0   46912   3768   2732 S   0.0  0.2   0:00.07 dovecot/p+
  2730 dovenull  20   0   47148   4120   2912 S   0.0  0.2   0:00.04 dovecot/i+
  2731 root      20   0   10452   1204    832 S   0.0  0.0   0:00.05 dovecot/l+
  2732 dovenull  20   0   46912   3976   2936 S   0.0  0.2   0:00.10 dovecot/p+
  2733 dovenull  20   0   47056   3768   2740 S   0.0  0.2   0:00.02 dovecot/i+
  2734 root      20   0   24564  11952   1028 S   0.0  0.5   0:00.04 dovecot/c+
  2735 dovecot   20   0   13568   1200    932 S   0.0  0.0   0:00.00 dovecot/s+
  2736 dovecot   20   0   41188   2284   1448 S   0.0  0.1   0:00.13 dovecot/a+
  2737 root      20   0   12780   1388   1180 S   0.0  0.1   0:00.53 /usr/loca+
  2738 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.45 /usr/loca+
  2739 root      20   0   12812   1404   1180 S   0.0  0.1   0:00.49 /usr/loca+
  2740 root      20   0   53252  11812   2428 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263284 129684   2684 S   0.0  5.4   0:05.58 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.52 [kworker]
 22313 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 24525 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27685 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 28480 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31029 nobody    20   0  277940  36216   4828 S   0.0  1.5   0:01.43 /usr/sbin+
 31402 nobody    20   0  277636  36044   4800 S   0.0  1.5   0:01.42 /usr/sbin+
 31417 nobody    20   0  277616  36052   4752 S   0.0  1.5   0:01.23 /usr/sbin+
 31508 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 31822 nobody    20   0  277940  36220   4788 S   0.0  1.5   0:01.29 /usr/sbin+
 33084 nobody    20   0  277616  35932   4724 S   0.0  1.5   0:01.01 /usr/sbin+
 36137 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36776 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36841 nobody    20   0  277592  35584   4420 S   0.0  1.5   0:00.69 /usr/sbin+
 40252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40404 root      20   0  182276  30348   2284 S   0.0  1.3   0:09.37 lfd - sle+
 40593 nobody    20   0  277556  35532   4280 S   0.0  1.5   0:00.47 /usr/sbin+
 41294 root      20   0   41052   2396   1736 S   0.0  0.1   0:00.00 dovecot/a+
 41967 nobody    20   0  277940  35292   3900 S   0.0  1.5   0:00.23 /usr/sbin+
 41976 nobody    20   0  277848  35652   4160 S   0.0  1.5   0:00.25 /usr/sbin+
 42326 nobody    20   0  277616  35296   4040 S   0.0  1.5   0:00.18 /usr/sbin+
 42579 nobody    20   0  277612  35136   3880 S   0.0  1.5   0:00.12 /usr/sbin+
 43472 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 43500 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 43692 nobody    20   0  277952  35176   3784 S   0.0  1.5   0:00.04 /usr/sbin+
 43693 nobody    20   0  277612  34528   3280 S   0.0  1.4   0:00.07 /usr/sbin+
 43700 nobody    20   0  277612  34604   3352 S   0.0  1.4   0:00.04 /usr/sbin+
 43701 nobody    20   0  277948  35080   3680 S   0.0  1.4   0:00.06 /usr/sbin+
 43702 nobody    20   0  277936  35072   3688 S   0.0  1.4   0:00.03 /usr/sbin+
 43703 nobody    20   0  277616  34896   3648 S   0.0  1.4   0:00.04 /usr/sbin+
 43861 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 43886 nigeria   20   0  400460   4820   2388 S   0.0  0.2   0:00.00 php-fpm: +
 43965 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 43986 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 43987 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43988 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43989 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 43990 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43991 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43992 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43994 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43995 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 43996 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 43998 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44000 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 44002 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 44003 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 44022 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 44024 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 44025 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44026 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44027 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44028 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44029 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 44030 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44031 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44032 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 44041 cloudw    20   0  353712  15968  10484 R   0.0  0.7   0:00.01 /opt/cpan+
 44048 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 44051 pactpay   20   0  480124  17308  11572 S   0.0  0.7   0:00.01 /opt/cpan+
 44057 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 44058 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 44065 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 44066 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 44067 cloudsms  20   0  399656  10972   7648 R   0.0  0.5   0:00.00 /opt/cpan+
 44068 root      20   0   38648   6512   3048 R   0.0  0.3   0:00.00 /usr/loca+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:01.07 [kworker/+
 84944 root      20   0  183048   2060   1532 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1108    928 S   0.0  0.0   0:00.00 /bin/sh -+
 85029 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 5h +
 89738 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    Nov20   0:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:03  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:01  \_ [kworker/u200:2]
root      89738  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/u200:0]
root      22313  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/1:4]
root      24525  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:3]
root      27685  0.0  0.0      0     0 ?        R    02:32   0:00  \_ [kworker/1:3]
root      28480  0.0  0.0      0     0 ?        S    02:33   0:00  \_ [kworker/0:0]
root      31508  0.0  0.0      0     0 ?        S    02:37   0:00  \_ [kworker/1:1]
root      36137  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:1]
root      36776  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/0:2]
root      40252  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44396  3512 ?        Ss   Nov20   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  7032 ?        Ss   Nov20   0:15 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   404 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   588 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   528 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   368 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224288  6852 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Ss   Nov20   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   268 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   564 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:06 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2288 ?        Ssl  Nov20   0:23 /usr/sbin/nscd
polkitd     523  0.0  0.0 610540  1108 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1108 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      43986  0.0  0.0 183044  2144 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44000  0.0  0.0 113284  1212 ?        Ss   02:51   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      44002  0.0  0.0 108052   360 ?        S    02:51   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      44003  0.0  0.0 113288  1516 ?        S    02:51   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      44069  0.0  0.0 153840  2092 ?        R    02:51   0:00  |               \_ ps auxf
root      43987  0.0  0.0 183044  2152 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44028  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      43988  0.0  0.0 183044  2152 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44030  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      43989  0.0  0.0 183044  2144 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44032  0.0  0.0  20164   988 ?        Ss   02:51   0:00  |   \_ jailshell (cloudsms) [44070] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  44070  0.0  0.0  20164   256 ?        S    02:51   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      43990  0.0  0.0 183044  2148 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44025  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      43991  0.0  0.0 183044  2148 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44031  0.0  0.0  20164   808 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      43992  0.0  0.0 183044  2144 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44029  0.0  0.0  20164   988 ?        Ss   02:51   0:00  |   \_ jailshell (cloudsms) [44065] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  44065  0.0  0.0  20164   260 ?        S    02:51   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  44066  0.0  0.0 113284  1212 ?        S    02:51   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  44067  0.0  0.4 399980 11632 ?        R    02:51   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      43994  0.0  0.0 183044  2144 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44027  0.0  0.0  20164   808 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      43995  0.0  0.0 183044  2140 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44026  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      43996  0.0  0.0 183044  2140 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44024  0.0  0.0  20164   968 ?        Ss   02:51   0:00  |   \_ jailshell (pactpay) [44048] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   44048  0.0  0.0  20164   264 ?        S    02:51   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   44051  0.0  0.7 480124 17308 ?        S    02:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      43998  0.0  0.0 183044  2140 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      44022  0.0  0.0  20164   968 ?        Ss   02:51   0:00      \_ jailshell (nigeria) [44057] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   44057  0.0  0.0  20164   260 ?        S    02:51   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   44060  0.0  0.6 404052 16140 ?        S    02:51   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   228 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  3916 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13212 ?        Ssl  Nov20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      43500  0.0  0.1 111304  4268 ?        Ss   02:50   0:00  \_ sshd: [accepted]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  43861  0.0  0.0 445028   552 ?        S    02:50   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.3 1277056 8888 ?        Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   632 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.0 439788  2180 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 42852 ?       Ssl  Nov20   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 157920 ?      Ssl  Nov20   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.1  0.3 261160  7432 ?        Ss   Nov20   0:44 cpsrvd (SSL) - waiting for connections                   
root      43965  0.0  0.0      0     0 ?        Z    02:50   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1236 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   572 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  3768 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4120 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1204 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  3976 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47056  3768 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.4  24564 11952 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1200 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.0  41188  2284 ?        S    01:25   0:00  \_ dovecot/auth
root      41294  0.0  0.0  41052  2396 ?        S    02:47   0:00  \_ dovecot/auth -w
root      43472  0.0  0.1  60820  4512 ?        S    02:50   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3596 ?        Ss   Nov20   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.3 298320  7492 ?        Ssl  Nov20   0:07 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   868 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   43886  0.0  0.1 400460  4820 ?        S    02:50   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.5 5654304 37492 ?       SLsl Nov20   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   892 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1252 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263284 129684 ?       S    Nov20   0:05  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3148 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13440 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32756 ?        Ss   Nov20   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  1.0 262224 24624 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.1 167452  4096 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12584 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272   944 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1552 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 30652 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12780  1388 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1364 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12812  1404 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11812 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31029  0.1  1.4 277940 36216 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    31402  0.1  1.4 277636 36044 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    31417  0.1  1.4 277616 36052 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    31822  0.1  1.4 277940 36220 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    33084  0.1  1.4 277616 35932 ?        S    02:39   0:01  \_ /usr/sbin/httpd -k start
nobody    36841  0.1  1.4 277592 35584 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    40593  0.1  1.4 277556 35532 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    41967  0.1  1.4 277940 35292 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    41976  0.1  1.4 277848 35652 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    42326  0.1  1.4 277616 35296 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    42579  0.1  1.4 277612 35136 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    43692  0.1  1.4 277952 35176 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    44041  0.0  0.6 353712 15968 ?        S    02:51   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    43693  0.2  1.4 277612 34528 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    43700  0.1  1.4 277612 34604 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    43701  0.1  1.4 277948 35080 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    43702  0.0  1.4 277936 35072 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    43703  0.1  1.4 277616 34896 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.1 1462240 270636 ?      Sl   Nov20   5:45 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 182276 30348 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 28799  Threads: 3  Questions: 2130913  Slow queries: 0  Opens: 7731  Flush tables: 1  Open tables: 2000  Queries per second avg: 73.992
*************************** 1. row ***************************
     Id: 35272
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-21' LIMIT 1
*************************** 2. row ***************************
     Id: 35274
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 35278
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 15.235.98.169 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 185.117.225.117 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.0 TIME_WAIT
      1 43.153.19.83 TIME_WAIT
      1 52.167.144.146 TIME_WAIT
      1 74.7.244.61 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     15 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 02:51:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 8 hours 44 seconds
   Server load: 0.63 0.81 3.58
   Total accesses: 148150 - Total Traffic: 3.7 GB - Total Duration: 80650975
   CPU Usage: u6.59 s4.99 cu1960.58 cs1568.78 - 12.3% CPU load
   5.14 requests/sec - 135.7 kB/second - 26.4 kB/request - 544.387 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

.K.KKCK.K.K._.._WKKKKKRK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                            Request
   0-1  -     0/0/7317   . 0.00 25    0   3959863 0.0   0.00  192.97 ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   1-1  31822 1/223/7110 K 5.27 2     321 3746178 35.9  5.92  182.54 192.178.4.97    http/1.1 team.cloudware.ng:443     GET /?l=146860747 HTTP/1.1
   2-1  -     0/0/6638   . 0.00 26    0   3575077 0.0   0.00  169.52 ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   3-1  41967 6/44/7067  K 1.49 2     295 3956368 185.4 1.07  186.03 192.178.4.103   http/1.1 team.cloudware.ng:443     GET /?l=49803941 HTTP/1.1
   4-1  31402 1/247/7173 K 5.85 1     257 3771964 34.7  6.38  191.21 192.178.4.103   http/1.1 team.cloudware.ng:443     GET /?l=1663191993 HTTP/1.1
   5-1  40593 1/75/6835  C 2.06 0     0   3914039 0.7   2.10  179.53 209.250.242.219 http/1.1 oysipa.oyostate.gov.ng:80 GET /images/logo/logo-eoffice.php HTTP/1.1
   6-1  31417 2/230/7113 K 4.93 0     347 3907201 65.2  5.45  200.45 192.178.4.104   http/1.1 team.cloudware.ng:443     GET /?l=1833016505 HTTP/1.1
   7-1  -     0/0/6766   . 0.00 20    0   3752982 0.0   0.00  181.68 ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   8-1  36841 8/124/6943 K 2.86 3     342 3768100 249.6 4.35  176.27 192.178.4.96    http/1.1 team.cloudware.ng:443     GET /?l=2703864077 HTTP/1.1
   9-1  -     0/0/6666   . 0.00 24    0   3457346 0.0   0.00  163.38 ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   10-1 33084 3/176/6761 K 4.33 1     259 3484920 93.4  4.77  166.38 192.178.4.105   http/1.1 team.cloudware.ng:443     GET /?l=4286914917 HTTP/1.1
   11-1 -     0/0/6397   . 0.00 21    0   3431538 0.0   0.00  163.76 ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   12-1 42579 0/23/6460  _ 0.44 1     296 3478800 0.0   0.50  166.87 192.178.4.99    http/1.1 team.cloudware.ng:443     GET /?l=3838671091 HTTP/1.1
   13-1 -     0/0/6685   . 0.00 23    0   3470882 0.0   0.00  165.69 ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   14-1 -     0/0/6391   . 0.00 22    0   3299535 0.0   0.00  155.72 ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   15-1 31029 0/251/5924 _ 6.22 0     0   3334327 0.0   6.46  153.39 ::1             http/1.1 chs1.nescrow.com.ng:80    GET //whm-server-status HTTP/1.0
   16-1 41976 0/48/5330  W 1.00 0     0   2852773 0.0   1.31  145.05 ::1             http/1.1 chs1.nescrow.com.ng:80    GET //whm-server-status HTTP/1.0
   17-1 43692 1/9/4494   K 0.15 0     304 2617416 35.2  0.21  112.19 192.178.4.99    http/1.1 team.cloudware.ng:443     GET /?l=3063647227 HTTP/1.1
   18-1 42326 1/30/4463  K 0.67 4     259 2531658 33.8  0.87  111.67 192.178.4.105   http/1.1 team.cloudware.ng:443     GET /?l=4264057329 HTTP/1.1
   19-1 43693 11/13/4165 K 0.30 0     389 2340744 345.1 0.34  109.58 192.178.4.102   http/1.1 team.cloudware.ng:443     GET /?l=3600641140 HTTP/1.1
   20-1 43700 6/10/3758  K 0.19 2     264 2211405 189.4 0.25  103.82 192.178.4.97    http/1.1 team.cloudware.ng:443     GET /?l=2503279075 HTTP/1.1
   21-1 43701 7/11/3093  K 0.24 1     265 1655449 213.2 0.29  78.85  192.178.4.101   http/1.1 team.cloudware.ng:443     GET /?l=3721706946 HTTP/1.1
   22-1 43702 0/8/3383   R 0.06 1     1   1859192 0.0   0.10  83.56  192.178.4.100   http/1.1 team.cloudware.ng:443
   23-1 43703 1/9/3163   K 0.16 3     275 1744737 35.1  0.23  81.15  192.178.4.98    http/1.1 team.cloudware.ng:443     GET /?l=83887691 HTTP/1.1
   24-1 -     0/0/1928   . 0.00 2817  0   963238  0.0   0.00  46.70  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   25-1 -     0/0/1261   . 0.00 1846  0   817594  0.0   0.00  34.01  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   26-1 -     0/0/715    . 0.00 2861  0   428654  0.0   0.00  18.36  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   27-1 -     0/0/506    . 0.00 2573  0   297127  0.0   0.00  11.85  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   28-1 -     0/0/543    . 0.00 2773  0   356892  0.0   0.00  15.93  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   29-1 -     0/0/434    . 0.00 2863  0   260477  0.0   0.00  11.18  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   30-1 -     0/0/332    . 0.00 2850  0   200777  0.0   0.00  7.47   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   31-1 -     0/0/274    . 0.00 2872  0   193753  0.0   0.00  6.38   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00 9683  0   371705  0.0   0.00  14.42  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00 9223  0   111013  0.0   0.00  5.26   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00 11412 0   15090   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 11419 0   640     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00 11291 0   36928   0.0   0.00  1.90   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00 11248 0   25914   0.0   0.00  1.45   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00 11341 0   27597   0.0   0.00  1.54   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00 11372 0   13821   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00 10521 0   139506  0.0   0.00  7.31   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00 11428 0   8       0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00 11427 0   4242    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00 11153 0   42251   0.0   0.00  2.07   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00 11416 0   2792    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00 11154 0   25889   0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00 10106 0   190150  0.0   0.00  10.76  ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00 11432 0   2404    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 957
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...26)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 17210
   total entries replaced since starting: 0
   total entries expired since starting: 16245
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 46 miss
   total removes since starting: 8 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit