403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.02.18.txt
 ## swap threshold exceeded
## server overview
2025-11-22.02.18 load[0] mem[61/58] mysql[4/8] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1400          89          43         873         759
Swap:          1999        1261         738
 02:18:01 up  1:21,  0 users,  load average: 0.61, 0.28, 0.25
## system overview
top - 02:18:02 up  1:21,  0 users,  load average: 0.61, 0.28, 0.25
Tasks: 202 total,   5 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 63.6 us, 24.2 sy,  0.0 ni, 12.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    76044 free,  1449608 used,   894648 buff/cache
KiB Swap:  2047996 total,   756624 free,  1291372 used.   762364 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 211580   2988 S  93.3  8.7   0:56.35 /usr/sbin+
 57419 cloudw    20   0  577484 111596   7104 R  26.7  4.6   0:00.96 php-fpm: +
 57489 nigeria   20   0  404052  16144  10384 S  20.0  0.7   0:00.05 /opt/cpan+
 57509 cloudw    20   0  353712  15972  10484 S   6.7  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44396   3308   1472 S   0.0  0.1   0:06.85 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:04.55 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.20 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.69 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.04 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.85 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.74 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   7272   6972 S   0.0  0.3   0:02.57 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    500    372 S   0.0  0.0   0:00.38 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.11 /usr/sbin+
   485 root      20   0   24712   1168    808 S   0.0  0.0   0:01.14 /usr/lib/+
   486 root      20   0  152780     96     56 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5660    936 S   0.0  0.2   0:00.12 queueproc+
   488 root      20   0   52852    300    204 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    900    468 S   0.0  0.0   0:00.69 /usr/lib/+
   498 dbus      20   0   58748   1352    612 S   0.0  0.1   0:02.61 /usr/bin/+
   506 rpc       20   0   69256    152     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1396    688 S   0.0  0.1   0:03.55 /usr/sbin+
   554 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.14 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   4036    956 S   0.0  0.2   0:00.19 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    748    164 S   0.0  0.0   0:00.51 /usr/bin/+
   920 root      20   0  224592   6412   5868 S   0.0  0.3   0:01.25 /usr/sbin+
   926 root      20   0 1689392 379016    284 S   0.0 15.7   0:13.50 /usr/loca+
   927 named     20   0 1054792  32944   2052 S   0.0  1.4   0:02.61 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.10 /usr/bin/+
   931 root      20   0  389508    460    252 S   0.0  0.0   0:00.19 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.25 sw-engine+
   939 root      20   0  439788  11380  11048 S   0.0  0.5   0:00.23 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
   943 root      20   0  388892    716    512 S   0.0  0.0   0:00.19 php-fpm: +
   944 cpanelc+  20   0   10344   3284   2332 S   0.0  0.1   0:03.84 /usr/loca+
   946 systuser  20   0  114016  15836   2832 S   0.0  0.7   0:01.32 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    556    380 S   0.0  0.0   0:00.19 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.49 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.10 /usr/sbin+
   962 root      20   0  261024   5812   1060 S   0.0  0.2   0:00.71 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   972 root      20   0  400740   2644    640 S   0.0  0.1   0:00.57 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.10 pure-ftpd+
   974 root      20   0 1277312  10444     40 S   0.0  0.4   0:27.99 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.46 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  36620   6080 S   0.0  1.5   0:02.90 /usr/loca+
  1079 dovenull  20   0   47136   3308   2324 S   0.0  0.1   0:00.15 dovecot/p+
  1080 dovenull  20   0   47392   3568   2468 S   0.0  0.1   0:00.10 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.04 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.10 dovecot/l+
  1083 dovenull  20   0   47300   3384   2360 S   0.0  0.1   0:00.23 dovecot/p+
  1084 dovenull  20   0   47424   2676   1784 S   0.0  0.1   0:00.05 dovecot/i+
  1090 root      20   0   24396   2036    496 S   0.0  0.1   0:00.05 dovecot/c+
  1091 dovecot   20   0   13568    608    404 S   0.0  0.0   0:00.00 dovecot/s+
  1141 root      20   0  247944 117444    932 S   0.0  4.9   0:03.43 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.29 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.04 SonarPush+
  1177 wp-tool+  20   0  387528  13292   1664 S   0.0  0.5   0:00.12 /usr/bin/+
  1178 wp-tool+  20   0  412368  32440   1652 S   0.0  1.3   0:01.75 /usr/bin/+
  1261 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.37 cpdavd - +
  1262 root      20   0  209248  11992   2528 S   0.0  0.5   0:00.81 tailwatchd
  1263 root      20   0  167452   2264    888 S   0.0  0.1   0:00.17 dnsadmin +
  1662 root      38  18  130416   1436    704 S   0.0  0.1   0:00.01 cpanellog+
  1690 root      20   0  299272    724    344 S   0.0  0.0   0:00.13 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.47 /usr/sbin+
  1929 root      20   0   12800    324    228 S   0.0  0.0   0:00.48 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.43 /usr/loca+
  1931 root      20   0   12832    332    228 S   0.0  0.0   0:00.45 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  181576  10228   1120 S   0.0  0.4   0:04.29 lfd - sle+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.09 [kworker]
  6717 root      20   0  249208 118876   1188 S   0.0  4.9   0:00.38 spamd chi+
  6719 root      20   0  247944 116768    288 S   0.0  4.8   0:00.00 spamd chi+
 23103 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 27055 nobody    20   0  277664  20752   4852 S   0.0  0.9   0:04.18 /usr/sbin+
 27127 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 32224 nobody    20   0  277908  21276   5076 S   0.0  0.9   0:03.66 /usr/sbin+
 40342 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 41828 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 42326 nobody    20   0  277600  20664   4984 S   0.0  0.9   0:01.92 /usr/sbin+
 42435 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43544 nobody    20   0  277596  20484   4932 S   0.0  0.8   0:01.82 /usr/sbin+
 44923 nobody    20   0  277592  20496   4836 S   0.0  0.8   0:01.73 /usr/sbin+
 45359 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46052 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 49263 nobody    20   0  277804  20364   4720 S   0.0  0.8   0:01.01 /usr/sbin+
 49773 nobody    20   0  277572  20432   4816 S   0.0  0.8   0:01.01 /usr/sbin+
 49965 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 50584 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51644 nobody    20   0  277908  19988   4344 S   0.0  0.8   0:00.79 /usr/sbin+
 52968 nobody    20   0  277584  19868   4312 S   0.0  0.8   0:00.75 /usr/sbin+
 53621 nobody    20   0  277544  20036   4364 S   0.0  0.8   0:00.54 /usr/sbin+
 53628 nobody    20   0  277532  19808   4332 S   0.0  0.8   0:00.50 /usr/sbin+
 53629 nobody    20   0  277524  19592   4164 S   0.0  0.8   0:00.60 /usr/sbin+
 54051 nobody    20   0  277584  19704   4212 S   0.0  0.8   0:00.44 /usr/sbin+
 54603 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54605 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54909 nobody    20   0  277536  19848   4404 S   0.0  0.8   0:00.39 /usr/sbin+
 54919 nobody    20   0  277908  19868   4280 S   0.0  0.8   0:00.38 /usr/sbin+
 54920 nobody    20   0  277924  19908   4248 S   0.0  0.8   0:00.32 /usr/sbin+
 55402 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56060 nobody    20   0  277900  19576   4008 S   0.0  0.8   0:00.23 /usr/sbin+
 57198 nigeria   20   0  400460   5200   2400 S   0.0  0.2   0:00.01 php-fpm: +
 57201 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 57299 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 57383 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 57402 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 57420 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 57432 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57433 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57434 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57435 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57436 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57438 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57439 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57440 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57441 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57442 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57443 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57444 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57446 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 57448 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 57449 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 57450 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 57453 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 57454 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57455 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57456 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57458 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 57459 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57460 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 57462 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57464 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57465 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57466 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 57467 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57476 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 57483 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 57485 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 57508 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 57512 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 57513 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 57515 cloudsms  20   0  403192  14048   9520 R   0.0  0.6   0:00.00 /opt/cpan+
 57516 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 57517 cloudsms  20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      23103  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root      27127  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/u200:1]
root      40342  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:1]
root      41828  0.0  0.0      0     0 ?        S    01:55   0:00  \_ [kworker/0:4]
root      42435  0.0  0.0      0     0 ?        S    01:56   0:00  \_ [kworker/1:5]
root      45359  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/0:0]
root      46052  0.0  0.0      0     0 ?        S    02:01   0:00  \_ [kworker/0:3]
root      49965  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:2]
root      50584  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/0:1]
root      54603  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/0:2]
root      54605  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/0:5]
root      55402  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44396  3308 ?        Ss   00:56   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.3  40244  7272 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   500 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1168 ?        Ss   00:56   0:01 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    96 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5660 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   300 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   900 ?        Ssl  00:56   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1352 ?        Ss   00:56   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   152 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1396 ?        Ssl  00:56   0:03 /usr/sbin/nscd
root        554  0.0  0.0  24208     0 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      57432  0.0  0.0 183044  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57448  0.0  0.0 113284  1212 ?        Ss   02:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      57449  0.0  0.0 108052   356 ?        S    02:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      57450  0.0  0.0 113288  1520 ?        S    02:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      57518  0.0  0.0 153840  2096 ?        R    02:18   0:00  |               \_ ps auxf
root      57433  0.0  0.0 183044  2152 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57455  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      57434  0.0  0.0 183044  2152 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57458  0.0  0.0  20164   984 ?        Ss   02:18   0:00  |   \_ jailshell (cloudsms) [57512] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  57512  0.0  0.0  20164   260 ?        S    02:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  57513  0.0  0.0 113284  1208 ?        S    02:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  57515  0.0  0.6 404052 15612 ?        S    02:18   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php
root      57435  0.0  0.0 183044  2152 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57456  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      57436  0.0  0.0 183044  2152 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57459  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      57438  0.0  0.0 183044  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57465  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      57439  0.0  0.0 183044  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57462  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      57440  0.0  0.0 183044  2144 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57464  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      57441  0.0  0.0 183044  2144 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57454  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      57442  0.0  0.0 183044  2144 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57467  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      57443  0.0  0.0 183044  2144 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57453  0.0  0.0  20164   980 ?        Ss   02:18   0:00  |   \_ jailshell (cloudsms) [57516] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  57516  0.0  0.0  20164   256 ?        S    02:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  57517  0.0  0.0 113284  1212 ?        S    02:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  57519  0.0  0.0 113284   184 ?        R    02:18   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      57444  0.0  0.0 183044  2144 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57460  0.0  0.0  20164   968 ?        Ss   02:18   0:00  |   \_ jailshell (pactpay) [57476] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   57476  0.0  0.0  20164   264 ?        S    02:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   57483  1.0  0.7 480124 17668 ?        S    02:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      57446  0.0  0.0 183044  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      57466  0.0  0.0  20164   968 ?        Ss   02:18   0:00      \_ jailshell (nigeria) [57485] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   57485  0.0  0.0  20164   260 ?        S    02:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   57489  5.0  0.6 404052 16144 ?        S    02:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  4036 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   748 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.2 224592  6412 ?        Ssl  00:56   0:01 /usr/sbin/rsyslogd -n
root        926  0.2 15.6 1689392 379016 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.3 1054792 32944 ?       Ssl  00:56   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   460 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  57299  0.0  0.0 445028   320 ?        S    02:17   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11380 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   716 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10344  3284 ?        Ss   00:56   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15836 ?        Ssl  00:56   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   556 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root      57383  0.0  0.1 111304  4444 ?        Ss   02:17   0:00  \_ sshd: [accepted]
sshd      57402  0.0  0.1 115644  2632 ?        S    02:17   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3308 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3568 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3384 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2676 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24396  2036 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   608 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
root      57201  0.0  0.1  41052  2728 ?        S    02:17   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261024  5812 ?        Ss   00:56   0:00 cpsrvd (SSL) - waiting for connections                   
root      57420  0.0  0.0      0     0 ?        Z    02:17   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2644 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   57198  0.0  0.2 400460  5200 ?        S    02:17   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    57419 48.5  4.6 577484 112652 ?       R    02:17   0:00  \_ php-fpm: pool cloudware_ng
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.5  0.4 1277312 10444 ?       Ssl  00:56   0:27 /usr/bin/checkstatus
root        975  0.5  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.5 5654304 36620 ?       SLsl 00:56   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 117444 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.9 249208 118876 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116768 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13292 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 32440 ?        Ss   00:56   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  6692 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.4 209248 11992 ?        Ss   00:56   0:00 tailwatchd
root       1263  0.0  0.0 167452  2264 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1436 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   724 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  8.7 1457824 211580 ?      Rl   00:56   0:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12800   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12832   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    27055  0.1  0.8 277664 20752 ?        S    01:33   0:04  \_ /usr/sbin/httpd -k start
nobody    32224  0.1  0.8 277908 21276 ?        S    01:40   0:03  \_ /usr/sbin/httpd -k start
nobody    42326  0.1  0.8 277600 20664 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
nobody    43544  0.1  0.8 277596 20484 ?        S    01:57   0:01  \_ /usr/sbin/httpd -k start
nobody    44923  0.1  0.8 277592 20496 ?        S    01:59   0:01  \_ /usr/sbin/httpd -k start
nobody    49263  0.1  0.8 277804 20364 ?        S    02:06   0:01  \_ /usr/sbin/httpd -k start
nobody    49773  0.1  0.8 277572 20432 ?        S    02:06   0:01  \_ /usr/sbin/httpd -k start
nobody    51644  0.1  0.8 277908 19988 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    52968  0.1  0.8 277584 19868 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    53621  0.1  0.8 277544 20036 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    53628  0.1  0.8 277532 19808 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    53629  0.1  0.8 277524 19592 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    54051  0.1  0.8 277584 19704 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    54909  0.1  0.8 277536 19848 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    54919  0.1  0.8 277908 19868 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
cloudw    57509  1.0  0.6 353712 15972 ?        S    02:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    54920  0.1  0.8 277924 19908 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    56060  0.1  0.8 277900 19576 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181576 10228 ?        Ss   00:56   0:04 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 4871  Threads: 4  Questions: 304077  Slow queries: 0  Opens: 2089  Flush tables: 1  Open tables: 1924  Queries per second avg: 62.425
*************************** 1. row ***************************
     Id: 5667
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 5670
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 5672
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-22' LIMIT 1
*************************** 4. row ***************************
     Id: 5677
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 5. row ***************************
     Id: 5678
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 116.179.37.13 TIME_WAIT
      1 116.179.37.185 TIME_WAIT
      1 116.179.37.39 TIME_WAIT
      1 116.179.37.45 TIME_WAIT
      1 127.0.0.1 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
     13 172.161.73.78 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 02:18:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 21 minutes 6 seconds
   Server load: 0.61 0.28 0.25
   Total accesses: 21766 - Total Traffic: 536.7 MB - Total Duration: 9730843
   CPU Usage: u14.37 s6.37 cu259.65 cs211.78 - 10.1% CPU load
   4.47 requests/sec - 112.9 kB/second - 25.2 kB/request - 447.066 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K_KKKKKWKKK_K_K_..K.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol              VHost                                          Request
   0-0  54909 1/68/999    K 1.87  0    269 466555 35.1  1.70  23.88 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=3456848247 HTTP/1.1
   1-0  53621 0/125/1149  _ 2.24  0    632 474137 0.0   2.06  29.87 107.152.32.246 http/1.1 cloudware.ng:443                GET /best-pharmaceutical-manufacturing-software/ HTTP/1.1
   2-0  51644 3/152/1059  K 3.52  0    266 502366 94.6  3.39  29.27 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=3355752418 HTTP/1.1
   3-0  53628 2/107/1012  K 1.88  2    303 494962 67.3  2.06  25.28 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=2625082285 HTTP/1.1
   4-0  54919 1/72/1046   K 1.60  0    288 484980 33.7  1.70  25.58 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=4185889966 HTTP/1.1
   5-0  54051 5/90/1080   K 1.74  0    284 463743 153.5 1.85  23.95 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=4088505164 HTTP/1.1
   6-0  44923 10/314/1237 K 7.36  3    305 499682 310.2 7.61  26.69 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=1270228422 HTTP/1.1
   7-0  32224 0/808/1321  W 16.30 0    0   543957 0.0   15.53 28.33 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   8-0  53629 47/135/1059 K 3.38  0    26  440670 317.5 2.25  27.08 51.83.9.65     http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   9-0  42326 1/360/824   K 7.58  2    266 397630 33.2  8.74  21.07 192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=2965911407 HTTP/1.1
   10-0 54920 1/59/676    K 1.61  3    0   308951 5.7   1.44  16.37 74.7.230.57    http/1.1 nigeriadecide.org:443           GET /robots.txt HTTP/1.1
   11-0 43544 0/364/871   _ 7.28  0    2   399030 0.0   9.76  21.94 34.231.45.47   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/blog/2019elections/images
   12-0 49263 1/188/573   K 4.06  0    796 259071 22.0  4.78  13.95 107.152.32.246 http/1.1 cloudware.ng:443                POST /best-pharmaceutical-manufacturing-software/ HTTP/1.1
   13-0 27055 0/801/974   _ 17.85 0    0   467023 0.0   21.80 26.70 172.161.73.78  http/1.1 proxy-subdomains-vhost.localhos GET /manager.php HTTP/1.1
   14-0 49773 6/198/1030  K 3.90  1    25  520682 38.2  4.18  26.11 54.36.60.45    http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   15-0 56060 0/43/495    _ 0.99  0    0   239924 0.0   1.10  12.75 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   16-0 -     0/0/515     . 0.00  315  0   246388 0.0   0.00  12.52 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/576     . 0.00  316  0   286090 0.0   0.00  14.55 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 52968 3/194/1005  K 4.19  2    262 327946 94.9  15.88 31.82 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=3273200410 HTTP/1.1
   19-0 -     0/0/280     . 0.00  1026 0   137556 0.0   0.00  6.48  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/439     . 0.00  1025 0   185417 0.0   0.00  9.68  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/502     . 0.00  714  0   254525 0.0   0.00  12.95 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/607     . 0.00  141  0   286985 0.0   0.00  14.24 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/443     . 0.00  2244 0   197568 0.0   0.00  10.17 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/2       . 0.00  2691 0   5      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/7       . 0.00  2632 0   3826   0.0   0.00  0.18  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/3       . 0.00  2659 0   753    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/3       . 0.00  2656 0   57     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/4       . 0.00  2644 0   743    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/8       . 0.00  2638 0   4677   0.0   0.00  0.21  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/3       . 0.00  2660 0   14     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/503     . 0.00  500  0   236742 0.0   0.00  12.77 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/2       . 0.00  2686 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/5       . 0.00  2641 0   1824   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/2       . 0.00  2683 0   21     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/145     . 0.00  2243 0   57340  0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/234     . 0.00  1794 0   102124 0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/2       . 0.00  2667 0   4587   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/3       . 0.00  2662 0   34     0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00  2685 0   8      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/3       . 0.00  2648 0   4408   0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/5       . 0.00  2642 0   2050   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/9       . 0.00  2649 0   4574   0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/2       . 0.00  2682 0   12     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/31      . 0.00  2549 0   20604  0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/458     . 0.00  1227 0   169465 0.0   0.00  9.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/2       . 0.00  2690 0   4      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/3       . 0.00  2657 0   766    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00  2684 0   48     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00  2655 0   10     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00  2640 0   695    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00  2633 0   3150   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00  2636 0   538    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/13      . 0.00  2634 0   8196   0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00  2647 0   519    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/1       . 0.00  2671 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/110     . 0.00  2241 0   48080  0.0   0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00  2525 0   13507  0.0   0.00  0.78  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/12      . 0.00  2643 0   7269   0.0   0.00  0.33  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/6       . 0.00  2627 0   1848   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00  2680 0   1      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/48      . 0.00  2518 0   10684  0.0   0.00  0.71  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00  2652 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/1       . 0.00  2678 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/5       . 0.00  2639 0   1750   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00  2676 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00  2677 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  2654 0   6      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00  2628 0   859    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/74      . 0.00  2395 0   36843  0.0   0.00  1.92  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/149     . 0.00  2032 0   74918  0.0   0.00  4.57  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00  2672 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00  2675 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/6       . 0.00  2631 0   3305   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/6       . 0.00  2626 0   2230   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  2674 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/1       . 0.00  2673 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/40      . 0.00  2535 0   15854  0.0   0.00  0.86  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/1       . 0.00  2679 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00  2670 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 936
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...39)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 15360
   total entries replaced since starting: 0
   total entries expired since starting: 14422
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 16 miss
   total removes since starting: 3 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit