403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.04.15.txt
 ## swap threshold exceeded
## server overview
2025-11-21.04.15 load[0] mem[73/45] mysql[4/7] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1715          68          54         579         436
Swap:          1999        1036         963
 04:15:02 up 40 min,  0 users,  load average: 0.21, 0.46, 0.44
## system overview
top - 04:15:02 up 40 min,  0 users,  load average: 0.21, 0.46, 0.44
Tasks: 210 total,   3 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 77.8 us, 19.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.8 si,  0.0 st
KiB Mem :  2420300 total,    88904 free,  1762832 used,   568564 buff/cache
KiB Swap:  2047996 total,   985432 free,  1062564 used.   440592 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457548 209176   3640 S 100.0  8.6   0:30.63 /usr/sbin+
 35891 cloudw    20   0  570876 105240   6364 S  41.2  4.3   0:00.44 php-fpm: +
    36 root      20   0       0      0      0 S   5.9  0.0   0:07.58 [kswapd0]
   507 root      20   0   24696   1160    816 S   5.9  0.0   0:00.59 /usr/lib/+
 35948 nigeria   20   0  404052  16144  10384 S   5.9  0.7   0:00.05 /opt/cpan+
 36045 cloudsms  20   0  404184  16056  10300 S   5.9  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44276   3276   1452 S   0.0  0.1   0:03.91 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:02.40 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.44 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.60 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.70 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   3876   3568 S   0.0  0.2   0:01.88 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    128     16 S   0.0  0.0   0:00.32 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    124     80 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5812    780 S   0.0  0.2   0:00.11 queueproc+
   474 dbus      20   0   58748   1336    628 S   0.0  0.1   0:01.31 /usr/bin/+
   478 nscd      20   0  926904   1360    720 S   0.0  0.1   0:02.03 /usr/sbin+
   483 rpc       20   0   69256    188     80 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
   505 polkitd   20   0  610540    896    448 S   0.0  0.0   0:00.36 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.06 /usr/sbin+
   514 root      20   0   52852    240    180 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.07 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89112   3796    840 S   0.0  0.2   0:00.07 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.69 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 607356    828 S   0.0 25.1   0:14.67 /usr/loca+
   942 named     20   0  990260  29996   1592 S   0.0  1.2   0:01.84 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    504    340 S   0.0  0.0   0:00.06 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.86 /usr/bin/+
   955 telegraf  20   0 5654048  38368   5588 S   0.0  1.6   0:01.57 /usr/loca+
   956 root      20   0  445028   3232   3124 S   0.0  0.1   0:00.09 sw-engine+
   960 root      20   0  396248    524    348 S   0.0  0.0   0:00.13 php-fpm: +
   963 systuser  20   0  114016  12588   2548 S   0.0  0.5   0:00.69 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.05 pure-ftpd+
   965 cpanelc+  20   0    9948   2868   2312 R   0.0  0.1   0:01.95 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.48 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.53 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.04 /usr/bin/+
   979 root      20   0  261028   4716   1000 S   0.0  0.2   0:00.47 cpsrvd (S+
   980 root      20   0  572372    704    236 S   0.0  0.0   0:00.30 /usr/bin/+
   984 root      20   0  389508    664    460 S   0.0  0.0   0:00.12 php-fpm: +
   998 root      20   0  388892    576    480 S   0.0  0.0   0:00.16 php-fpm: +
  1001 root      20   0  400740   3080    644 S   0.0  0.1   0:00.42 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  224592   4276   2812 S   0.0  0.2   0:00.85 /usr/sbin+
  1010 root      20   0  439788  11416  11116 S   0.0  0.5   0:00.17 php-fpm: +
  1097 dovenull  20   0   46912   2524   1804 S   0.0  0.1   0:00.04 dovecot/p+
  1098 dovenull  20   0   47324   2980   1948 S   0.0  0.1   0:00.04 dovecot/i+
  1099 dovecot   20   0   10320    396    280 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    624    452 S   0.0  0.0   0:00.03 dovecot/l+
  1101 dovenull  20   0   47064   2548   1848 S   0.0  0.1   0:00.07 dovecot/p+
  1102 dovenull  20   0   47056   2640   1800 S   0.0  0.1   0:00.03 dovecot/i+
  1106 root      20   0   24564   2340    508 S   0.0  0.1   0:00.04 dovecot/c+
  1107 dovecot   20   0   13568    616    400 S   0.0  0.0   0:00.01 dovecot/s+
  1135 root      20   0  247868 117536   1060 S   0.0  4.9   0:03.12 /usr/loca+
  1157 dovecot   20   0   41056   1420    992 S   0.0  0.1   0:00.07 dovecot/a+
  1197 systuser  20   0  157700   2836    792 S   0.0  0.1   0:00.02 SonarPush+
  1199 wp-tool+  20   0  387528  12960   1332 S   0.0  0.5   0:00.11 /usr/bin/+
  1200 wp-tool+  20   0  412368  32272   1488 S   0.0  1.3   0:01.00 /usr/bin/+
  1281 root      20   0  262228  21948   4084 S   0.0  0.9   0:00.17 cpdavd - +
  1283 root      20   0  167452   1340    740 S   0.0  0.1   0:00.09 dnsadmin +
  1285 root      20   0  209216  11680   2180 S   0.0  0.5   0:00.44 tailwatchd
  1709 root      20   0  299272    624    244 S   0.0  0.0   0:00.06 php-fpm: +
  1717 root      38  18  130416   1432    708 S   0.0  0.1   0:00.00 cpanellog+
  1930 root      20   0  267052   8100    716 S   0.0  0.3   0:00.35 /usr/sbin+
  1931 root      20   0   12812    384    268 S   0.0  0.0   0:00.26 /usr/loca+
  1932 root      20   0   12732    296    220 S   0.0  0.0   0:00.21 /usr/loca+
  1933 root      20   0   12832    352    228 S   0.0  0.0   0:00.25 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181260   9872   1180 S   0.0  0.4   0:02.37 lfd - sle+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
  7259 root      20   0  262628 129484   3116 S   0.0  5.3   0:01.05 spamd chi+
  7260 root      20   0  247868 116808    368 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  20636   4636 S   0.0  0.9   0:02.72 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12564 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 21298 nobody    20   0  277712  20348   4764 S   0.0  0.8   0:01.36 /usr/sbin+
 21299 nobody    20   0  278004  20788   4844 S   0.0  0.9   0:01.37 /usr/sbin+
 22186 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 23203 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.01 [kworker]
 24071 root      20   0  123364    604    376 S   0.0  0.0   0:00.00 /usr/sbin+
 25701 nobody    20   0  277624  20096   4664 S   0.0  0.8   0:01.03 /usr/sbin+
 25912 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26660 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28038 nobody    20   0  277632  20092   4596 S   0.0  0.8   0:00.72 /usr/sbin+
 28052 nobody    20   0  277600  19956   4564 S   0.0  0.8   0:00.73 /usr/sbin+
 28200 nobody    20   0  277908  20340   4656 S   0.0  0.8   0:00.88 /usr/sbin+
 28483 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 29119 worencom  20   0   38492   2372   1384 S   0.0  0.1   0:00.00 dovecot/i+
 29294 nobody    20   0  277668  19844   4408 S   0.0  0.8   0:00.80 /usr/sbin+
 29692 nobody    20   0  277688  19812   4468 S   0.0  0.8   0:00.69 /usr/sbin+
 29800 nobody    20   0  277584  19520   4376 S   0.0  0.8   0:00.63 /usr/sbin+
 30980 nobody    20   0  277584  19340   4248 S   0.0  0.8   0:00.63 /usr/sbin+
 33642 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34165 nobody    20   0  277520  18568   3656 S   0.0  0.8   0:00.27 /usr/sbin+
 34178 nobody    20   0  277520  18976   3996 S   0.0  0.8   0:00.23 /usr/sbin+
 34179 nobody    20   0  277924  19212   4028 S   0.0  0.8   0:00.18 /usr/sbin+
 34338 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 34587 nobody    20   0  277520  18772   3764 S   0.0  0.8   0:00.11 /usr/sbin+
 34619 nobody    20   0  277520  18508   3556 S   0.0  0.8   0:00.15 /usr/sbin+
 35097 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35196 nobody    20   0  277520  18160   3252 S   0.0  0.8   0:00.12 /usr/sbin+
 35197 nobody    20   0  277520  18192   3272 S   0.0  0.8   0:00.03 /usr/sbin+
 35215 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 35261 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 35264 mailnull  20   0   90244   9640   4244 S   0.0  0.4   0:00.00 /usr/sbin+
 35415 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 35494 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 35576 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 35593 nigeria   20   0  400460   5632   2404 S   0.0  0.2   0:00.00 php-fpm: +
 35618 wp-tool+  20   0  445028    320    196 S   0.0  0.0   0:00.00 sw-engine+
 35636 nobody    20   0  277520  18172   3264 S   0.0  0.8   0:00.03 /usr/sbin+
 35648 nobody    20   0  277520  18132   3224 S   0.0  0.7   0:00.03 /usr/sbin+
 35649 nobody    20   0  277520  18112   3204 S   0.0  0.7   0:00.04 /usr/sbin+
 35669 nobody    20   0  277908  18736   3608 S   0.0  0.8   0:00.06 /usr/sbin+
 35717 root      20   0   28936   2368   1948 S   0.0  0.1   0:00.00 dovecot/q+
 35742 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 35850 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 35851 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 35852 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 35874 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35875 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35876 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35877 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35878 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35879 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35880 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35882 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35884 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35886 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35887 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35889 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35905 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35906 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35907 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35909 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 35911 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 35914 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35915 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35916 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35917 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35919 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 35921 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 35923 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 35924 root      20   0  188220  11116   5148 S   0.0  0.5   0:00.02 /usr/loca+
 35936 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 35940 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 35942 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 35944 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 35946 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 35987 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
 36041 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 36042 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 36044 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    03:34   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      12564  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:1]
root      22186  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:0]
root      25912  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:0]
root      26660  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/0:4]
root      28483  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:4]
root      33642  0.0  0.0      0     0 ?        S    04:12   0:00  \_ [kworker/0:1]
root      34338  0.0  0.0      0     0 ?        S    04:13   0:00  \_ [kworker/1:2]
root      35097  0.0  0.0      0     0 ?        S    04:14   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44276  3276 ?        Ss   03:34   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  3876 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   128 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780   124 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5812 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1336 ?        Ss   03:34   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1360 ?        Ssl  03:34   0:02 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   188 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   896 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1160 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   240 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      35874  0.0  0.0 183044  2148 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35923  0.0  0.0 113284  1212 ?        Ss   04:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      35936  0.0  0.0 108052   356 ?        S    04:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      35940  0.0  0.0 113288  1520 ?        S    04:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      36048  0.0  0.0 153840  2096 ?        R    04:15   0:00  |               \_ ps auxf
root      35875  0.0  0.0 183044  2152 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35905  0.0  0.0  20164   808 ?        Ss   04:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      35876  0.0  0.0 183044  2152 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35909  0.0  0.0  20164   988 ?        Ss   04:15   0:00  |   \_ jailshell (cloudsms) [36042] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  36042  0.0  0.0      0     0 ?        D    04:15   0:00  |       \_ [jailshell]
root      35877  0.0  0.0 183044  2152 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35906  0.0  0.0  20164   804 ?        Ss   04:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      35878  0.0  0.0 183044  2152 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35917  0.0  0.0  20164   988 ?        Ss   04:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      36049  0.0  0.2  38648  6504 ?        R    04:15   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      35879  0.0  0.0 183044  2152 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35907  0.0  0.0  20164   808 ?        Ss   04:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      35880  0.0  0.0 183044  2152 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35914  0.0  0.0  20164   804 ?        Ss   04:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      35882  0.0  0.0 183044  2148 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35916  0.0  0.0  20164   804 ?        Ss   04:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      35884  0.0  0.0 183044  2144 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35915  0.0  0.0  20164   804 ?        Ss   04:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      35886  0.0  0.0 183044  2140 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35911  0.0  0.0 113284  1212 ?        Ss   04:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      35924  0.0  0.4 188220 11116 ?        S    04:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      35987  0.0  0.0 160224  2368 ?        S    04:15   0:00  |           \_ top -n 2 -b -c
root      35887  0.0  0.0 183044  2140 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35919  0.0  0.0  20164   972 ?        Ss   04:15   0:00  |   \_ jailshell (pactpay) [35942] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35942  0.0  0.0  20164   264 ?        S    04:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35946  0.0  0.7 480124 17668 ?        S    04:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      35889  0.0  0.0 183044  2144 ?        S    04:15   0:00  \_ /usr/sbin/CROND -n
root      35921  0.0  0.0  20164   972 ?        Ss   04:15   0:00      \_ jailshell (nigeria) [35944] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35944  0.0  0.0  20164   260 ?        S    04:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35948  0.0  0.6 404052 16144 ?        R    04:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  89112  3796 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  35264  0.0  0.3  90244  9640 ?        S    04:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.5 25.0 1763340 607356 ?      Ssl  03:34   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.2 990260 29996 ?        Ssl  03:34   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   504 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.1  46912  2524 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2980 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   396 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   624 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47064  2548 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2640 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24564  2340 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   616 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056  1420 ?        S    03:34   0:00  \_ dovecot/auth
worencom  29119  0.0  0.0  38492  2372 ?        S    04:06   0:00  \_ dovecot/imap
root      35494  0.0  0.1  41052  2728 ?        S    04:14   0:00  \_ dovecot/auth -w
root      35717  0.0  0.0  28936  2368 ?        S    04:14   0:00  \_ dovecot/quota-status -p postfix
root        954  0.8  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 38368 ?       SLsl 03:34   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  3232 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  35618  0.0  0.0 445028   320 ?        S    04:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   524 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.5 114016 12588 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9948  2868 ?        Ss   03:34   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      35215  0.0  0.1 111304  4268 ?        Ss   04:14   0:00  \_ sshd: [accepted]
sshd      35261  0.0  0.1 115644  2624 ?        S    04:14   0:00  |   \_ sshd: [net]
root      35415  0.0  0.1 111304  4276 ?        Ss   04:14   0:00  \_ sshd: [accepted]
root      35576  0.0  0.1 111304  4272 ?        Ss   04:14   0:00  \_ sshd: [accepted]
root      35742  0.0  0.1 111304  4272 ?        Ss   04:14   0:00  \_ sshd: [accepted]
root      35850  0.5  0.2 162436  5836 ?        Ss   04:14   0:00  \_ sshd: root [priv]
sshd      35851  0.0  0.1 115644  2632 ?        S    04:14   0:00      \_ sshd: root [net]
root        967  1.2  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  4716 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      35852  0.0  0.0      0     0 ?        Z    04:14   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   704 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   664 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   576 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.1 400740  3080 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   35593  0.0  0.2 400460  5632 ?        S    04:14   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    35891  0.0  4.4 573564 106560 ?       S    04:15   0:00  \_ php-fpm: pool cloudware_ng
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 224592  4276 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11416 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.1  4.8 247868 117536 ?       Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  5.3 262628 129484 ?       S    03:40   0:01  \_ spamd child
root       7260  0.0  4.8 247868 116808 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2836 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.5 387528 12960 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.3 412368 32272 ?        Ss   03:34   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.9 262228 21948 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1283  0.0  0.0 167452  1340 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.4 209216 11680 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   624 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1432 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.6 1457548 209176 ?      Sl   03:34   0:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8100 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12812   384 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   296 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12832   352 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9147  0.1  0.8 277904 20636 ?        S    03:42   0:02  \_ /usr/sbin/httpd -k start
nobody    21298  0.1  0.8 277712 20348 ?        S    03:57   0:01  \_ /usr/sbin/httpd -k start
nobody    21299  0.1  0.8 278004 20788 ?        S    03:57   0:01  \_ /usr/sbin/httpd -k start
nobody    25701  0.1  0.8 277624 20096 ?        S    04:02   0:01  \_ /usr/sbin/httpd -k start
nobody    28038  0.1  0.8 277632 20092 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28052  0.1  0.8 277600 19956 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28200  0.1  0.8 277908 20340 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29294  0.1  0.8 277668 19844 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29692  0.1  0.8 277688 19812 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    29800  0.1  0.8 277584 19520 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    30980  0.1  0.7 277584 19340 ?        S    04:09   0:00  \_ /usr/sbin/httpd -k start
nobody    34165  0.2  0.7 277520 18568 ?        S    04:12   0:00  \_ /usr/sbin/httpd -k start
nobody    34178  0.1  0.7 277520 18976 ?        S    04:12   0:00  \_ /usr/sbin/httpd -k start
nobody    34179  0.1  0.7 277924 19212 ?        S    04:12   0:00  \_ /usr/sbin/httpd -k start
nobody    34587  0.1  0.7 277520 18772 ?        S    04:13   0:00  \_ /usr/sbin/httpd -k start
nobody    34619  0.1  0.7 277520 18508 ?        S    04:13   0:00  \_ /usr/sbin/httpd -k start
nobody    35196  0.2  0.7 277520 18160 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    35197  0.0  0.7 277520 18192 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    35636  0.1  0.7 277520 18172 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    35648  0.1  0.7 277520 18132 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    35649  0.2  0.7 277520 18112 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    35669  0.3  0.7 277908 18736 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.0  0.4 181260  9872 ?        Ss   03:34   0:02 lfd - sleeping
oysipao+  23203  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152   424 ?        S    04:00   0:00  \_ [kworker]
root      24071  0.0  0.0 123364   604 ?        Ss   04:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 2446  Threads: 4  Questions: 155177  Slow queries: 0  Opens: 1835  Flush tables: 1  Open tables: 1690  Queries per second avg: 63.441
*************************** 1. row ***************************
     Id: 2576
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 2578
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2579
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 2589
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 5. row ***************************
     Id: 2590
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 6. row ***************************
     Id: 2591
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
## network stats
      1 114.119.150.65 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.144 TIME_WAIT
      1 20.90.7.145 TIME_WAIT
      1 20.90.7.147 TIME_WAIT
      1 20.90.7.153 TIME_WAIT
      1 43.157.95.239 TIME_WAIT
      1 51.161.65.22 TIME_WAIT
      1 5.175.47.32 TIME_WAIT
      1 8.217.162.124 TIME_WAIT
      1 8.217.213.114 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.90.7.155 TIME_WAIT
      3 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:15:03 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 40 minutes 41 seconds
   Server load: 0.21 0.46 0.44
   Total accesses: 11569 - Total Traffic: 328.3 MB - Total Duration: 6078071
   CPU Usage: u9.39 s3.76 cu148.55 cs122.24 - 11.6% CPU load
   4.74 requests/sec - 137.7 kB/second - 29.1 kB/request - 525.376 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_KWKKK__KWKK_RRKR_KWKK..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU    SS  Req  Dur   Conn  Child  Slot     Client      Protocol         VHost                                     Request
   0-0  29294 0/132/432 _ 3.43  0    279 200195 0.0   3.73  10.83 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=2008645673 HTTP/1.1
   1-0  35648 4/5/610   K 0.11  0    415 293905 127.2 0.16  14.05 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=1528742833 HTTP/1.1
   2-0  34587 0/20/552  W 0.43  0    0   289632 0.0   0.52  14.91 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  30980 7/99/554  K 2.79  1    352 265560 216.9 2.93  16.60 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=900814152 HTTP/1.1
   4-0  34619 5/26/476  K 0.67  2    393 259841 159.3 0.71  15.65 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=84625747 HTTP/1.1
   5-0  35636 1/4/370   K 0.09  0    368 167893 34.5  0.13  11.50 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=1634167743 HTTP/1.1
   6-0  28038 0/130/464 _ 2.96  0    26  225609 0.0   3.24  11.41 51.161.65.22    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Sokoto&lga=Rabah HTTP/1.1
   7-0  34165 0/43/470  _ 1.20  0    1   257138 0.0   1.27  12.78 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   8-0  35649 5/6/470   K 0.14  4    268 252826 158.8 0.19  13.77 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3274843397 HTTP/1.1
   9-0  35196 0/17/434  W 0.47  1    0   234876 0.0   0.52  12.62 111.124.201.195 http/1.1 cloudware.ng:443       GET /our-it-solutions/ HTTP/1.1
   10-0 34178 6/39/484  K 0.96  3    393 254635 187.0 1.12  13.94 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3225613504 HTTP/1.1
   11-0 28200 2/150/554 K 3.79  4    268 283417 64.9  4.73  15.16 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=2970251182 HTTP/1.1
   12-0 34179 0/33/372  _ 0.75  0    7   207508 0.0   0.88  9.59  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   13-0 35197 0/5/306   R 0.12  22   262 171446 0.0   0.17  9.74  20.90.7.159     http/1.1
   14-0 29692 0/112/325 R 2.93  22   358 268309 0.0   3.19  11.84 20.90.7.146     http/1.1
   15-0 29800 1/109/331 K 3.25  0    478 173269 36.7  2.76  8.16  192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=2862022300 HTTP/1.1
   16-0 21298 0/238/415 R 5.81  21   343 179955 0.0   7.51  10.66 20.90.7.147     http/1.1
   17-0 21299 0/236/362 _ 5.81  1    405 173334 0.0   6.40  9.51  192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=966608664 HTTP/1.1
   18-0 28052 1/127/289 K 3.08  0    477 147465 33.6  3.96  8.60  192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=888028096 HTTP/1.1
   19-0 9147  1/468/503 W 11.70 0    0   267127 34.7  12.89 13.76 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=733036754 HTTP/1.1
   20-0 25701 1/166/181 K 4.36  3    257 96183  35.9  4.74  4.99  192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3028213397 HTTP/1.1
   21-0 35669 8/9/174   K 0.21  0    353 91513  248.7 0.25  7.12  192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=1699277578 HTTP/1.1
   22-0 -     0/0/244   . 0.00  39   0   132782 0.0   0.00  8.24  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/159   . 0.00  215  0   92409  0.0   0.00  4.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/281   . 0.00  232  0   155474 0.0   0.00  8.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/39    . 0.00  471  0   16225  0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/30    . 0.00  439  0   13761  0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00  1804 0   3360   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/184   . 0.00  1098 0   93070  0.0   0.00  4.64  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00  1848 0   9      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00  1847 0   13     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00  1827 0   2022   0.0   0.00  0.09  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00  1803 0   1566   0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00  1818 0   1895   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00  1829 0   57     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00  1769 0   11094  0.0   0.00  0.65  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00  1806 0   823    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00  1462 0   38300  0.0   0.00  1.90  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00  1764 0   6642   0.0   0.00  0.35  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00  1823 0   40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00  1826 4   40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00  1844 0   34     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00  1797 0   4106   0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00  1798 0   2657   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00  1799 0   3864   0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00  1777 0   3619   0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00  1845 0   113    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00  1808 0   38     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00  1824 0   18     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00  1767 0   9315   0.0   0.00  0.49  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/335   . 0.00  534  0   176390 0.0   0.00  9.65  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/2     . 0.00  1843 0   23     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00  1842 0   19     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00  1694 0   31192  0.0   0.00  3.71  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00  1838 0   52     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00  1821 0   73     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00  1839 0   54     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00  1837 0   40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00  1464 0   43953  0.0   0.00  2.25  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00  1768 0   3369   0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00  1841 0   51     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00  1830 0   36     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00  1801 0   1263   0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00  1834 0   35     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00  1795 0   8103   0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00  1840 0   46     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00  1814 0   53     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00  1831 0   145    0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00  1800 0   753    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/224   . 0.00  921  0   141502 0.0   0.00  5.80  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2     . 0.00  1833 0   52     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00  1765 0   9108   0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00  1287 0   86335  0.0   0.00  5.84  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00  1697 0   14353  0.0   0.00  0.77  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00  1636 0   23982  0.0   0.00  1.17  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/264   . 0.00  775  0   150949 0.0   0.00  7.38  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/2     . 0.00  1836 0   44     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00  1828 0   58     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00  1807 0   1963   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00  1832 0   34     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00  1635 0   25894  0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00  1809 0   672    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00  1792 0   2458   0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1127
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...32)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 8342
   total entries replaced since starting: 0
   total entries expired since starting: 7210
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 6 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit