403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.02.36.txt
 ## swap threshold exceeded
## server overview
2025-11-22.02.36 load[0] mem[62/58] mysql[1/8] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1422         345          51         594         728
Swap:          1999        1279         720
 02:36:01 up  1:39,  0 users,  load average: 0.04, 0.17, 0.24
## system overview
top - 02:36:01 up  1:39,  0 users,  load average: 0.04, 0.17, 0.24
Tasks: 209 total,   5 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.6 us, 21.2 sy,  0.0 ni, 21.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   360224 free,  1450684 used,   609392 buff/cache
KiB Swap:  2047996 total,   737860 free,  1310136 used.   752176 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 227704   2940 S  81.2  9.4   1:09.08 /usr/sbin+
 70007 nigeria   20   0  404052  16144  10384 R  18.8  0.7   0:00.05 /opt/cpan+
   495 polkitd   20   0  612240    900    468 S   6.2  0.0   0:00.84 /usr/lib/+
     1 root      20   0   44396   3296   1460 S   0.0  0.1   0:08.18 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:05.58 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:00.83 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.27 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.88 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.77 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   3316   3016 S   0.0  0.1   0:03.14 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    500    372 S   0.0  0.0   0:00.46 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.13 /usr/sbin+
   485 root      20   0   24712   1168    808 S   0.0  0.0   0:01.38 /usr/lib/+
   486 root      20   0  152780    124     84 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5508    784 S   0.0  0.2   0:00.14 queueproc+
   488 root      20   0   52852    300    204 S   0.0  0.0   0:00.00 /usr/sbin+
   498 dbus      20   0   58748   1352    612 S   0.0  0.1   0:03.17 /usr/bin/+
   506 rpc       20   0   69256    152     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1384    676 S   0.0  0.1   0:04.34 /usr/sbin+
   554 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.17 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3924    844 S   0.0  0.2   0:00.21 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    748    164 S   0.0  0.0   0:00.60 /usr/bin/+
   920 root      20   0  232784   2964   2396 S   0.0  0.1   0:01.53 /usr/sbin+
   926 root      20   0 1689392 359524    284 S   0.0 14.9   0:13.50 /usr/loca+
   927 named     20   0 1054792  33812   2048 S   0.0  1.4   0:03.10 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.12 /usr/bin/+
   931 root      20   0  389508    528    320 S   0.0  0.0   0:00.22 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.29 sw-engine+
   939 root      20   0  439788  11380  11048 S   0.0  0.5   0:00.25 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
   943 root      20   0  388892    596    392 S   0.0  0.0   0:00.21 php-fpm: +
   944 cpanelc+  20   0   10476   3276   2324 S   0.0  0.1   0:04.70 /usr/loca+
   946 systuser  20   0  114016  15528   2420 S   0.0  0.6   0:01.56 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    548    372 S   0.0  0.0   0:00.22 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.62 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.11 /usr/sbin+
   962 root      20   0  261024   6464   1652 S   0.0  0.3   0:00.85 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   972 root      20   0  400740   2644    640 S   0.0  0.1   0:00.68 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.12 pure-ftpd+
   974 root      20   0 1277312  10444     40 S   0.0  0.4   0:28.01 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.47 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  32392   1996 S   0.0  1.3   0:03.46 /usr/loca+
  1079 dovenull  20   0   47136   3296   2312 S   0.0  0.1   0:00.17 dovecot/p+
  1080 dovenull  20   0   47392   3556   2456 S   0.0  0.1   0:00.14 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.05 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.12 dovecot/l+
  1083 dovenull  20   0   47300   3372   2348 S   0.0  0.1   0:00.27 dovecot/p+
  1084 dovenull  20   0   47424   2916   1884 S   0.0  0.1   0:00.06 dovecot/i+
  1090 root      20   0   24528   2204    500 S   0.0  0.1   0:00.05 dovecot/c+
  1091 dovecot   20   0   13568    608    404 S   0.0  0.0   0:00.01 dovecot/s+
  1141 root      20   0  247944 117444    932 S   0.0  4.9   0:03.56 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.36 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.04 SonarPush+
  1177 wp-tool+  20   0  387528  13048   1420 S   0.0  0.5   0:00.13 /usr/bin/+
  1178 wp-tool+  20   0  412368  32156   1368 S   0.0  1.3   0:02.08 /usr/bin/+
  1261 root      20   0  183900   5568   2336 S   0.0  0.2   0:00.37 cpdavd - +
  1262 root      20   0  209248  11540   2076 S   0.0  0.5   0:00.91 tailwatchd
  1263 root      20   0  167452   2180    804 S   0.0  0.1   0:00.18 dnsadmin +
  1662 root      38  18  130416   1436    700 S   0.0  0.1   0:00.01 cpanellog+
  1690 root      20   0  299272    724    344 S   0.0  0.0   0:00.16 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.53 /usr/sbin+
  1929 root      20   0   12816    324    228 S   0.0  0.0   0:00.59 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.53 /usr/loca+
  1931 root      20   0   12860    332    228 S   0.0  0.0   0:00.55 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  181680  10452   1120 S   0.0  0.4   0:05.29 lfd - sle+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.11 [kworker]
  6717 root      20   0  249208 118876   1188 S   0.0  4.9   0:00.48 spamd chi+
  6719 root      20   0  247944 116768    288 S   0.0  4.8   0:00.00 spamd chi+
 23103 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 27055 nobody    20   0  277672  20912   4852 S   0.0  0.9   0:05.61 /usr/sbin+
 27127 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 32224 nobody    20   0  277908  21372   5088 S   0.0  0.9   0:05.23 /usr/sbin+
 41828 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 45359 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 49965 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 51644 nobody    20   0  277908  20676   4980 S   0.0  0.9   0:02.34 /usr/sbin+
 54919 nobody    20   0  277908  20792   4968 S   0.0  0.9   0:01.87 /usr/sbin+
 57550 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
 60213 nobody    20   0  277584  20080   4612 S   0.0  0.8   0:01.27 /usr/sbin+
 61559 nobody    20   0  277908  20440   4732 S   0.0  0.8   0:01.01 /usr/sbin+
 61773 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 63157 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 64337 nobody    20   0  277916  19992   4336 S   0.0  0.8   0:00.66 /usr/sbin+
 64549 nobody    20   0  277520  19832   4448 S   0.0  0.8   0:00.78 /usr/sbin+
 65121 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66394 nobody    20   0  277552  19912   4460 S   0.0  0.8   0:00.37 /usr/sbin+
 66402 nobody    20   0  277584  19864   4336 S   0.0  0.8   0:00.53 /usr/sbin+
 66403 nobody    20   0  277908  19832   4176 S   0.0  0.8   0:00.41 /usr/sbin+
 66638 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68288 nobody    20   0  277520  19120   3856 S   0.0  0.8   0:00.24 /usr/sbin+
 68438 root      20   0   41052   2812   2140 S   0.0  0.1   0:00.01 dovecot/a+
 68512 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68730 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 69356 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69499 root      20   0  157312   4860   3584 S   0.0  0.2   0:00.00 sshd: roo+
 69500 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 69542 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 69577 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 69647 worencom  20   0   38532   4220   3172 S   0.0  0.2   0:00.00 dovecot/i+
 69658 nigeria   20   0  400460   5200   2384 S   0.0  0.2   0:00.01 php-fpm: +
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69752 nobody    20   0  277948  19532   3924 S   0.0  0.8   0:00.03 /usr/sbin+
 69765 nobody    20   0  277520  18492   3216 S   0.0  0.8   0:00.04 /usr/sbin+
 69766 nobody    20   0  277792  19192   3808 S   0.0  0.8   0:00.02 /usr/sbin+
 69777 nobody    20   0  277548  19196   3820 S   0.0  0.8   0:00.03 /usr/sbin+
 69778 nobody    20   0  277628  18708   3456 S   0.0  0.8   0:00.02 /usr/sbin+
 69779 nobody    20   0  277908  19052   3620 S   0.0  0.8   0:00.04 /usr/sbin+
 69849 cloudw    20   0  494368  30268   6808 S   0.0  1.3   0:00.62 php-fpm: +
 69850 cloudw    20   0  496416  32352   6808 S   0.0  1.3   0:00.59 php-fpm: +
 69853 nobody    20   0  277920  19256   3708 S   0.0  0.8   0:00.02 /usr/sbin+
 69855 cloudw    20   0  496416  32232   6800 S   0.0  1.3   0:00.57 php-fpm: +
 69905 cloudw    20   0  412656  19488   3428 S   0.0  0.8   0:00.08 php-fpm: +
 69906 wp-tool+  20   0  445028    316    188 S   0.0  0.0   0:00.00 sw-engine+
 69942 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 69943 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: roo+
 69956 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 69959 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69960 root      20   0  183040   2208   1632 R   0.0  0.1   0:00.00 /usr/sbin+
 69961 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69962 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69963 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69964 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69965 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69966 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69967 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69968 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69969 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69971 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69973 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69975 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 69978 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 69979 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69981 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 69982 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 69983 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69985 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69986 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69987 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69988 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69989 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69990 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69994 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 69996 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 70006 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 70011 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 70014 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 70025 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 70037 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 70045 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      23103  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root      27127  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/u200:1]
root      41828  0.0  0.0      0     0 ?        S    01:55   0:00  \_ [kworker/0:4]
root      45359  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/0:0]
root      49965  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:2]
root      57550  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:3]
root      61773  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/1:0]
root      63157  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:3]
root      65121  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:4]
root      66638  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/0:1]
root      68512  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:2]
root      69356  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/1:1]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44396  3296 ?        Ss   00:56   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  40244  3316 ?        Ss   00:56   0:03 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   500 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1168 ?        Rs   00:56   0:01 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   124 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5508 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   300 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   900 ?        Ssl  00:56   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1352 ?        Ss   00:56   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   152 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1384 ?        Ssl  00:56   0:04 /usr/sbin/nscd
root        554  0.0  0.0  24208     0 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      69959  0.0  0.0 183044  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69981  0.0  0.0 113284  1212 ?        Ss   02:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      69994  0.0  0.0 108052   356 ?        S    02:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      69996  0.0  0.0 113288  1516 ?        S    02:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      70048  0.0  0.0 153840  2092 ?        R    02:36   0:00  |               \_ ps auxf
root      69960  0.0  0.0 183040  2208 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69961  0.0  0.0 183044  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69986  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      69962  0.0  0.0 183044  2152 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69988  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      69963  0.0  0.0 183044  2152 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69983  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      69964  0.0  0.0 183044  2144 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69979  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      69965  0.0  0.0 183044  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69989  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      69966  0.0  0.0 183044  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69978  0.0  0.0  20164   988 ?        Ss   02:36   0:00  |   \_ jailshell (cloudsms) [70045] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  70045  0.0  0.0      0     0 ?        R    02:36   0:00  |       \_ [jailshell]
root      69967  0.0  0.0 183044  2140 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69985  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      69968  0.0  0.0 183044  2144 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69987  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      69969  0.0  0.0 183044  2144 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69990  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      69971  0.0  0.0 183044  2144 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69982  0.0  0.0  20164   964 ?        Ss   02:36   0:00  |   \_ jailshell (pactpay) [70011] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70011  0.0  0.0  20164   260 ?        S    02:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70014  0.0  0.7 480124 17672 ?        S    02:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      69973  0.0  0.0 183044  2144 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      69975  0.0  0.0  20164   964 ?        Ss   02:36   0:00      \_ jailshell (nigeria) [70006] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70006  0.0  0.0  20164   260 ?        S    02:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70007  0.0  0.6 404052 16144 ?        S    02:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3924 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   748 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 232784  2964 ?        Ssl  00:56   0:01 /usr/sbin/rsyslogd -n
root        926  0.2 14.8 1689392 359524 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.3 1054792 33812 ?       Ssl  00:56   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   528 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  69906  0.0  0.0 445028   316 ?        S    02:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11380 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   596 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10476  3276 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15528 ?        Ssl  00:56   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   548 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root      69499  0.0  0.2 157312  4860 ?        Ss   02:35   0:00  \_ sshd: root [priv]
sshd      69500  0.0  0.1 115644  2628 ?        S    02:35   0:00  |   \_ sshd: root [net]
root      69542  0.0  0.1 111304  4268 ?        Ss   02:35   0:00  \_ sshd: [accepted]
sshd      69577  0.0  0.1 115644  2628 ?        S    02:35   0:00  |   \_ sshd: [net]
root      69942  1.0  0.2 162436  5828 ?        Ss   02:35   0:00  \_ sshd: root [priv]
sshd      69943  0.0  0.1 115644  2624 ?        S    02:35   0:00      \_ sshd: root [net]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3296 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3556 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3372 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2916 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24528  2204 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   608 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
root      68438  0.0  0.1  41052  2812 ?        S    02:33   0:00  \_ dovecot/auth -w
root      68730  0.0  0.1  60820  4508 ?        S    02:34   0:00  \_ dovecot/lmtp
worencom  69647  0.0  0.1  38532  4220 ?        S    02:35   0:00  \_ dovecot/imap
root        962  0.0  0.2 261024  6464 ?        Ss   00:56   0:00 cpsrvd (SSL) - waiting for connections                   
root      69956  0.0  0.0      0     0 ?        Z    02:35   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2644 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   69658  0.0  0.2 400460  5200 ?        S    02:35   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    69849  6.2  1.2 494368 30268 ?        S    02:35   0:00  \_ php-fpm: pool cloudware_ng
cloudw    69850  5.9  1.3 496416 32352 ?        S    02:35   0:00  \_ php-fpm: pool cloudware_ng
cloudw    69855  6.3  1.3 496416 32232 ?        S    02:35   0:00  \_ php-fpm: pool cloudware_ng
cloudw    69905  1.6  0.8 412656 19488 ?        S    02:35   0:00  \_ php-fpm: pool cloudware_ng
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.4  0.4 1277312 10444 ?       Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.4  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.3 5654304 32392 ?       SLsl 00:56   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 117444 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.9 249208 118876 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116768 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13048 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 32156 ?        Ss   00:56   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  5568 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.4 209248 11540 ?        Ss   00:56   0:00 tailwatchd
root       1263  0.0  0.0 167452  2180 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1436 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   724 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  9.4 1457824 227704 ?      Sl   00:56   1:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12816   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12860   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    27055  0.1  0.8 277672 20912 ?        S    01:33   0:05  \_ /usr/sbin/httpd -k start
nobody    32224  0.1  0.8 277908 21372 ?        S    01:40   0:05  \_ /usr/sbin/httpd -k start
nobody    51644  0.1  0.8 277908 20676 ?        S    02:09   0:02  \_ /usr/sbin/httpd -k start
nobody    54919  0.1  0.8 277908 20792 ?        S    02:14   0:01  \_ /usr/sbin/httpd -k start
nobody    60213  0.1  0.8 277584 20080 ?        S    02:21   0:01  \_ /usr/sbin/httpd -k start
nobody    61559  0.1  0.8 277908 20440 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    64337  0.1  0.8 277916 19992 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody    64549  0.1  0.8 277520 19832 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody    66394  0.1  0.8 277552 19912 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    66402  0.1  0.8 277584 19864 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    66403  0.1  0.8 277908 19832 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    68288  0.1  0.7 277520 19120 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
nobody    69752  0.1  0.8 277948 19532 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69765  0.2  0.7 277520 18492 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    70025  0.0  0.6 353712 15968 ?        S    02:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    69766  0.1  0.7 277792 19192 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69777  0.1  0.7 277548 19196 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69778  0.1  0.7 277628 18708 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69779  0.2  0.7 277908 19052 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69853  0.2  0.7 277920 19256 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181680 10452 ?        Ss   00:56   0:05 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 5950  Threads: 3  Questions: 376997  Slow queries: 0  Opens: 2303  Flush tables: 1  Open tables: 1985  Queries per second avg: 63.360
*************************** 1. row ***************************
     Id: 7083
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 7085
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 7091
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.216 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.129 TIME_WAIT
      1 213.180.203.93 TIME_WAIT
      1 54.39.136.60 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     15 172.161.73.78 TIME_WAIT
     22 193.24.211.48 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 02:36:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 39 minutes 6 seconds
   Server load: 0.04 0.17 0.24
   Total accesses: 26684 - Total Traffic: 657.7 MB - Total Duration: 12423193
   CPU Usage: u14.88 s6.17 cu322.21 cs262.39 - 10.2% CPU load
   4.49 requests/sec - 113.3 kB/second - 25.2 kB/request - 465.567 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KKKK__K_KK__KK.KK_W...K.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  61559 3/185/1231  K 4.46  3    402 613755 460.2 4.73  29.68 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /var/cache/prod/pools/2wJoJAFabM/T/I/ HTTP/1.1
   1-0  68288 5/37/1381   K 1.02  3    394 597159 155.8 1.05  35.91 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=805919
   2-0  51644 1/440/1347  K 9.99  3    393 645928 34.4  11.65 37.53 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3590491951 HTTP/1.1
   3-0  69752 1/8/1310    K 0.09  1    407 751352 35.6  0.14  32.77 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1270846066 HTTP/1.1
   4-0  54919 0/355/1329  _ 7.92  0    0   628533 0.0   8.28  32.16 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   5-0  64337 0/130/1273  _ 2.77  1    3   535606 0.0   2.90  27.81 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   6-0  64549 2/136/1494  K 3.31  2    406 627108 445.2 3.94  33.51 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /vendor/symfony/translation/Tests/Dumper/ HTTP/1.1
   7-0  32224 0/1107/1620 _ 22.95 1    398 679523 0.0   22.49 35.30 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3317707509 HTTP/1.1
   8-0  66394 1/71/1368   K 1.47  0    303 560558 36.1  1.74  33.37 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1615418451 HTTP/1.1
   9-0  69765 4/6/903     K 0.15  0    345 435817 126.1 0.19  22.94 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=171031394 HTTP/1.1
   10-0 69766 0/7/961     _ 0.04  0    401 448012 0.0   0.11  23.31 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=300880576 HTTP/1.1
   11-0 66402 0/93/1187   _ 2.25  1    2   552327 0.0   2.38  29.67 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   12-0 66403 1/81/843    K 1.64  4    477 333122 224.0 2.01  18.32 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /vendor/symfony/form/Tests/ChoiceList/Factory/ HTTP/1.1
   13-0 27055 3/1066/1239 K 24.21 1    406 731044 97.6  28.59 33.49 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2342948650 HTTP/1.1
   14-0 -     0/0/1103    . 0.00  5    0   547892 0.0   0.00  28.29 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 69777 3/8/569     K 0.09  1    270 273950 96.4  0.36  14.71 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3670446935 HTTP/1.1
   16-0 69778 2/6/793     K 0.12  2    30  368155 6.6   0.67  19.35 66.249.70.7    http/1.1 test.cloudware.ng:443  GET /?1589392447?goodscode=1587310126 HTTP/1.1
   17-0 69779 0/7/587     _ 0.15  0    3   290788 0.0   0.17  14.79 34.205.163.103 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/blog/blog/images/2019electi
   18-0 69853 0/5/1283    W 0.04  0    0   454371 0.0   0.07  40.89 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   19-0 -     0/0/295     . 0.00  804  0   143394 0.0   0.00  6.78  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/441     . 0.00  856  0   185420 0.0   0.00  9.69  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/570     . 0.00  630  0   284667 0.0   0.00  14.66 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 60213 1/223/830   K 5.35  3    345 397331 33.5  5.63  19.87 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1660847232 HTTP/1.1
   23-0 -     0/0/492     . 0.00  626  0   377066 0.0   0.00  11.51 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/243     . 0.00  23   0   115317 0.0   0.00  5.86  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/7       . 0.00  3711 0   3826   0.0   0.00  0.18  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/3       . 0.00  3738 0   753    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/3       . 0.00  3735 0   57     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/4       . 0.00  3723 0   743    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/8       . 0.00  3717 0   4677   0.0   0.00  0.21  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/3       . 0.00  3739 0   14     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/503     . 0.00  1580 0   236742 0.0   0.00  12.77 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/2       . 0.00  3765 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5       . 0.00  3720 0   1824   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/2       . 0.00  3762 0   21     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/145     . 0.00  3323 0   57340  0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/234     . 0.00  2873 0   102124 0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/2       . 0.00  3746 0   4587   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/3       . 0.00  3741 0   34     0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00  3764 0   8      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/3       . 0.00  3727 0   4408   0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/5       . 0.00  3721 0   2050   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/9       . 0.00  3728 0   4574   0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/2       . 0.00  3761 0   12     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/31      . 0.00  3628 0   20604  0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/458     . 0.00  2307 0   169465 0.0   0.00  9.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2       . 0.00  3769 0   4      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3       . 0.00  3736 0   766    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00  3763 0   48     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00  3734 0   10     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00  3719 0   695    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00  3712 0   3150   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00  3715 0   538    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/13      . 0.00  3713 0   8196   0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00  3726 0   519    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/1       . 0.00  3750 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/110     . 0.00  3321 0   48080  0.0   0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00  3604 0   13507  0.0   0.00  0.78  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/12      . 0.00  3722 0   7269   0.0   0.00  0.33  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/6       . 0.00  3706 0   1848   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00  3759 0   1      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/48      . 0.00  3597 0   10684  0.0   0.00  0.71  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00  3731 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1       . 0.00  3757 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/5       . 0.00  3718 0   1750   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00  3755 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00  3756 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  3733 0   6      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00  3707 0   859    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/74      . 0.00  3475 0   36843  0.0   0.00  1.92  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/149     . 0.00  3112 0   74918  0.0   0.00  4.57  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00  3751 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00  3754 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/6       . 0.00  3710 0   3305   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6       . 0.00  3705 0   2230   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  3753 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/1       . 0.00  3752 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/40      . 0.00  3614 0   15854  0.0   0.00  0.86  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/1       . 0.00  3758 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00  3749 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1002
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...36)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 18812
   total entries replaced since starting: 0
   total entries expired since starting: 17807
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 16 miss
   total removes since starting: 3 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit