403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.04.36.txt
 ## swap threshold exceeded
## server overview
2025-11-22.04.36 load[1] mem[68/64] mysql[1/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1504         166          39         692         633
Swap:          1999        1483         516
 04:36:01 up  3:39,  0 users,  load average: 1.00, 0.70, 0.58
## system overview
top - 04:36:02 up  3:39,  0 users,  load average: 1.00, 0.70, 0.58
Tasks: 202 total,   6 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   161620 free,  1549524 used,   709156 buff/cache
KiB Swap:  2047996 total,   529012 free,  1518984 used.   640884 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 53992 healtho+  20   0  463200  69816   4200 R  81.2  2.9   0:01.98 php-fpm: +
  1816 mysql     20   0 1464484 256288   3368 S  75.0 10.6   2:46.99 /usr/sbin+
 54218 nigeria   20   0  404052  16144  10384 R  12.5  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44396   3220   1456 S   0.0  0.1   0:17.26 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.56 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:12.92 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.09 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.16 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.12 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   1392   1148 S   0.0  0.1   0:07.02 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    460    340 S   0.0  0.0   0:01.08 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.28 /usr/sbin+
   485 root      20   0   24712   1152    792 S   0.0  0.0   0:03.11 /usr/lib/+
   486 root      20   0  152780     92     52 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   4376   1036 S   0.0  0.2   0:00.22 queueproc+
   488 root      20   0   52852    180    112 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    736    368 S   0.0  0.0   0:01.87 /usr/lib/+
   498 dbus      20   0   58748   1360    604 S   0.0  0.1   0:07.17 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1220    576 S   0.0  0.1   0:09.67 /usr/sbin+
   554 root      20   0   24208     12      8 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    544    392 S   0.0  0.0   0:00.38 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3464    536 S   0.0  0.1   0:00.35 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.23 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    748    280 S   0.0  0.0   0:01.21 /usr/bin/+
   920 root      20   0  257360   1444    948 S   0.0  0.1   0:03.53 /usr/sbin+
   926 root      20   0 1902000 415444    676 S   0.0 17.2   0:37.01 /usr/loca+
   927 named     20   0 1185864  32656   2008 S   0.0  1.3   0:07.14 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.29 /usr/bin/+
   931 root      20   0  389508    336    244 S   0.0  0.0   0:00.43 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.60 sw-engine+
   939 root      20   0  439788    368    276 S   0.0  0.0   0:00.46 php-fpm: +
   941 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    304    216 S   0.0  0.0   0:00.42 php-fpm: +
   944 cpanelc+  20   0   10608   3660   2328 R   0.0  0.2   0:10.50 /usr/loca+
   946 systuser  20   0  114016   9636   2188 S   0.0  0.4   0:03.33 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    324    240 S   0.0  0.0   0:00.44 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.45 /usr/sbin+
   960 root      20   0   51508    468    304 S   0.0  0.0   0:00.22 /usr/sbin+
   962 root      20   0  261024   5580   1180 S   0.0  0.2   0:01.90 cpsrvd (S+
   965 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1484    612 S   0.0  0.1   0:01.59 php-fpm: +
   973 root      20   0  153404    260    176 S   0.0  0.0   0:00.27 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.04 /usr/bin/+
   975 root      20   0 1276356   6472      0 S   0.0  0.3   0:25.55 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  34856   5676 S   0.0  1.4   0:07.55 /usr/loca+
  1079 dovenull  20   0   47136   1504    804 S   0.0  0.1   0:00.42 dovecot/p+
  1080 dovenull  20   0   47392   2416   1628 S   0.0  0.1   0:00.21 dovecot/i+
  1081 dovecot   20   0   10320    276    168 S   0.0  0.0   0:00.12 dovecot/a+
  1082 root      20   0   10452    548    344 S   0.0  0.0   0:00.26 dovecot/l+
  1083 dovenull  20   0   47300   1644   1040 S   0.0  0.1   0:00.54 dovecot/p+
  1084 dovenull  20   0   47424   2340   1508 S   0.0  0.1   0:00.23 dovecot/i+
  1090 root      20   0   24564   1988    432 S   0.0  0.1   0:00.10 dovecot/c+
  1091 dovecot   20   0   13568    400    200 S   0.0  0.0   0:00.03 dovecot/s+
  1141 root      20   0  247944   2876    724 S   0.0  0.1   0:04.44 /usr/loca+
  1153 dovecot   20   0   41156   1528   1012 S   0.0  0.1   0:00.73 dovecot/a+
  1158 systuser  20   0  157704   2888    908 S   0.0  0.1   0:00.08 SonarPush+
  1177 wp-tool+  20   0  387528   3184   1280 S   0.0  0.1   0:00.19 /usr/bin/+
  1178 wp-tool+  20   0  412368  23060   1236 S   0.0  1.0   0:04.36 /usr/bin/+
  1261 root      20   0  262228  24424   6696 S   0.0  1.0   0:00.91 cpdavd - +
  1262 root      20   0  209248  10136   2372 S   0.0  0.4   0:01.65 tailwatchd
  1263 root      20   0  167452   4164   2792 S   0.0  0.2   0:00.32 dnsadmin +
  1662 root      38  18  130416   1372    704 S   0.0  0.1   0:00.04 cpanellog+
  1690 root      20   0  299272    376    216 S   0.0  0.0   0:00.37 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:01.16 /usr/sbin+
  1929 root      20   0   12776    316    216 S   0.0  0.0   0:01.33 /usr/loca+
  1930 root      20   0   12732    288    212 S   0.0  0.0   0:01.18 /usr/loca+
  1931 root      20   0   12788    328    220 S   0.0  0.0   0:01.23 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182596   9692   1116 S   0.0  0.4   0:11.28 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.26 [kworker]
  6717 root      20   0  259460  89268   1952 S   0.0  3.7   0:02.64 spamd chi+
  6719 root      20   0  247944   1396    428 S   0.0  0.1   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
 29048 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 32175 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 32544 nobody    20   0  277604  19844   4808 S   0.0  0.8   0:02.83 /usr/sbin+
 33169 nobody    20   0  277776  20120   4836 S   0.0  0.8   0:02.37 /usr/sbin+
 37541 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 41477 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 43516 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 45778 nobody    20   0  277584  19364   4584 S   0.0  0.8   0:01.12 /usr/sbin+
 46590 nobody    20   0  277908  18444   4452 S   0.0  0.8   0:01.00 /usr/sbin+
 46894 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 49137 nobody    20   0  277584  18392   4404 S   0.0  0.8   0:00.68 /usr/sbin+
 49155 nobody    20   0  277716  18520   4328 S   0.0  0.8   0:00.58 /usr/sbin+
 49156 nobody    20   0  277584  18824   4444 S   0.0  0.8   0:00.66 /usr/sbin+
 49528 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 49545 nobody    20   0  277716  18284   4212 S   0.0  0.8   0:00.53 /usr/sbin+
 49555 nobody    20   0  277788  18532   4304 S   0.0  0.8   0:00.57 /usr/sbin+
 49556 nobody    20   0  277916  18756   4240 S   0.0  0.8   0:00.63 /usr/sbin+
 50271 nobody    20   0  277776  18680   4396 S   0.0  0.8   0:00.52 /usr/sbin+
 50287 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 50707 nobody    20   0  277908  19172   4296 S   0.0  0.8   0:00.40 /usr/sbin+
 50771 nobody    20   0  277672  18468   4380 S   0.0  0.8   0:00.42 /usr/sbin+
 51650 nobody    20   0  277520  18248   4332 S   0.0  0.8   0:00.35 /usr/sbin+
 52256 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52702 nobody    20   0  277908  18008   4000 S   0.0  0.7   0:00.18 /usr/sbin+
 52844 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53172 nobody    20   0  277932  17996   3936 S   0.0  0.7   0:00.14 /usr/sbin+
 53387 nobody    20   0  277528  17372   3748 S   0.0  0.7   0:00.15 /usr/sbin+
 53541 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53797 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 53991 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 54059 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.00 php-fpm: +
 54072 cloudw    20   0  559812  95768   6780 S   0.0  4.0   0:01.37 php-fpm: +
 54085 wp-tool+  20   0  445028    316    184 S   0.0  0.0   0:00.00 sw-engine+
 54118 mailnull  20   0   91204   5684   2456 S   0.0  0.2   0:00.00 /usr/sbin+
 54139 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 54140 healtho+  20   0  400460   1608    564 S   0.0  0.1   0:00.00 php-fpm: +
 54146 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54148 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54151 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54152 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54153 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54154 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54155 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54156 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54157 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54158 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54160 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54164 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 54166 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 54169 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 54180 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54181 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54182 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54183 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 54184 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54186 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54189 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54190 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54191 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 54192 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 54204 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 54209 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 54212 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 54227 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 54234 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 54236 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 54237 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 54238 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 54239 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 54240 cloudsms  20   0    4800      4      0 R   0.0  0.0   0:00.00 /opt/cpan+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      29048  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:3]
root      32175  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:1]
root      37541  0.0  0.0      0     0 ?        S    04:11   0:00  \_ [kworker/0:0]
root      41477  0.0  0.0      0     0 ?        S    04:17   0:00  \_ [kworker/1:5]
root      43516  0.0  0.0      0     0 ?        S    04:20   0:00  \_ [kworker/0:5]
root      46894  0.0  0.0      0     0 ?        S    04:25   0:00  \_ [kworker/1:4]
root      49528  0.0  0.0      0     0 ?        S    04:29   0:00  \_ [kworker/0:3]
root      50287  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/u200:2]
root      52256  0.0  0.0      0     0 ?        S    04:33   0:00  \_ [kworker/1:0]
root      52844  0.0  0.0      0     0 ?        S    04:34   0:00  \_ [kworker/1:1]
root      53541  0.0  0.0      0     0 ?        S    04:35   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44396  3220 ?        Ss   00:56   0:17 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.0  39500  1392 ?        Ss   00:56   0:07 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   460 ?        S<sl 00:56   0:01 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1152 ?        Ss   00:56   0:03 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    92 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  4376 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   180 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   736 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1360 ?        Ss   00:56   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1220 ?        Ssl  00:56   0:09 /usr/sbin/nscd
root        554  0.0  0.0  24208    12 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   544 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      54146  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54164  0.0  0.0 113284  1212 ?        Ss   04:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      54166  0.0  0.0 108052   356 ?        S    04:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      54169  0.0  0.0 113288  1516 ?        S    04:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      54241  0.0  0.0 153840  2096 ?        R    04:36   0:00  |               \_ ps auxf
root      54148  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54180  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      54151  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54181  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      54152  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54184  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      54153  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54182  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      54154  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54190  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      54155  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54183  0.0  0.0  20164   984 ?        Ss   04:36   0:00  |   \_ jailshell (cloudsms) [54238] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  54238  0.0  0.0      0     0 ?        R    04:36   0:00  |       \_ [jailshell]
root      54156  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54186  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      54157  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54189  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      54158  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54192  0.0  0.0  20164   964 ?        Ss   04:36   0:00  |   \_ jailshell (pactpay) [54209] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   54209  0.0  0.0  20164   260 ?        S    04:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   54212  1.0  0.7 480124 17668 ?        S    04:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      54160  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      54191  0.0  0.0  20164   968 ?        Ss   04:36   0:00      \_ jailshell (nigeria) [54204] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   54204  0.0  0.0  20164   260 ?        S    04:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   54218  3.0  0.6 404052 16144 ?        S    04:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3464 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  54118  0.0  0.2  91204  5684 ?        S    04:35   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   748 ?        Ssl  00:56   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.0 257360  1444 ?        Ssl  00:56   0:03 /usr/sbin/rsyslogd -n
root        926  0.2 17.1 1902000 415444 ?      Ssl  00:56   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.3 1185864 32656 ?       Ssl  00:56   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   336 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  54085  0.0  0.0 445028   316 ?        S    04:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   368 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932    68 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   304 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3660 ?        Ss   00:56   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.3 114016  9636 ?        Ssl  00:56   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   324 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root      53991  0.0  0.1 111304  4276 ?        Ss   04:35   0:00  \_ sshd: [accepted]
root      54236  0.0  0.1 111304  4272 ?        Ss   04:36   0:00  \_ sshd: [accepted]
sshd      54237  0.0  0.1 115644  2628 ?        S    04:36   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   468 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136  1504 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392  2416 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   276 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   548 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300  1644 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  47424  2340 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24564  1988 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   400 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1528 ?        S    00:56   0:00  \_ dovecot/auth
root      53797  0.0  0.1  41052  2724 ?        S    04:35   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261024  5580 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      54139  0.0  0.0      0     0 ?        Z    04:35   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1484 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  53992 11.0  2.7 460640 67444 ?        S    04:35   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   54059  0.0  0.1 400460  4336 ?        S    04:35   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    54072 17.1  3.9 559812 95768 ?        S    04:35   0:01  \_ php-fpm: pool cloudware_ng
healtho+  54140  0.0  0.0 400460  1608 ?        S    04:35   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        973  0.0  0.0 153404   260 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4164 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.1  0.2 1276356 6472 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 34856 ?       SLsl 00:56   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2876 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  3.6 259460 89268 ?        S    01:02   0:02  \_ spamd child
root       6719  0.0  0.0 247944  1396 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2888 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  3184 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 23060 ?        Ss   00:56   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  1.0 262228 24424 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.4 209248 10136 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.1 167452  4164 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1372 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   376 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2 10.5 1464484 256288 ?      Sl   00:56   2:47 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   00:56   0:01 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12776   316 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   288 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12788   328 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32544  0.1  0.8 277604 19844 ?        S    04:03   0:02  \_ /usr/sbin/httpd -k start
nobody    33169  0.1  0.8 277776 20120 ?        S    04:04   0:02  \_ /usr/sbin/httpd -k start
nobody    45778  0.1  0.8 277584 19364 ?        S    04:23   0:01  \_ /usr/sbin/httpd -k start
nobody    46590  0.1  0.7 277908 18444 ?        S    04:24   0:01  \_ /usr/sbin/httpd -k start
nobody    49137  0.1  0.7 277584 18392 ?        S    04:28   0:00  \_ /usr/sbin/httpd -k start
nobody    49155  0.1  0.7 277716 18520 ?        S    04:28   0:00  \_ /usr/sbin/httpd -k start
nobody    49156  0.1  0.7 277584 18824 ?        S    04:28   0:00  \_ /usr/sbin/httpd -k start
nobody    49545  0.1  0.7 277716 18284 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    49555  0.1  0.7 277788 18532 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    49556  0.1  0.7 277916 18756 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    50271  0.1  0.7 277776 18680 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    50707  0.1  0.7 277908 19172 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    50771  0.1  0.7 277672 18468 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    51650  0.1  0.7 277520 18248 ?        S    04:32   0:00  \_ /usr/sbin/httpd -k start
nobody    52702  0.1  0.7 277908 18008 ?        S    04:33   0:00  \_ /usr/sbin/httpd -k start
nobody    53172  0.1  0.7 277932 17996 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
cloudw    54227  1.0  0.6 353712 15972 ?        S    04:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    53387  0.2  0.7 277528 17372 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 182596  9692 ?        Ss   00:56   0:11 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    36 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 13151  Threads: 3  Questions: 938054  Slow queries: 0  Opens: 5248  Flush tables: 1  Open tables: 2000  Queries per second avg: 71.329
*************************** 1. row ***************************
     Id: 16609
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 16615
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 16618
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.86.115.253 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.157.22.109 TIME_WAIT
      2 66.249.70.193 TIME_WAIT
     41 159.65.137.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 04:36:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 39 minutes 6 seconds
   Server load: 1.00 0.70 0.58
   Total accesses: 59158 - Total Traffic: 1.5 GB - Total Duration: 29952006
   CPU Usage: u9.78 s4.5 cu763.03 cs609.26 - 10.5% CPU load
   4.5 requests/sec - 117.7 kB/second - 26.2 kB/request - 506.305 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KK_W__KKKK_.KKW..._C...K........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  49545 2/111/2965 K 1.83  1     358 1502861 65.5  2.44  73.05 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=3996287265 HTTP/1.1
   1-0  49555 1/119/3028 K 2.18  3     551 1497695 10.9  2.26  81.98 172.189.176.86 http/1.1 cloudware.ng:443           GET /tag/cloudware-technologies/ HTTP/1.1
   2-0  49556 0/125/2988 _ 2.43  0     370 1517898 0.0   2.87  78.61 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=2770057038 HTTP/1.1
   3-0  46590 0/178/2859 W 4.02  0     0   1629269 0.0   4.68  74.88 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  50271 0/102/3011 _ 2.32  0     346 1532292 0.0   2.59  74.71 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=373615651 HTTP/1.1
   5-0  50707 0/77/2735  _ 1.57  0     408 1302840 0.0   2.16  64.10 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=2509850956 HTTP/1.1
   6-0  53387 9/24/2958  K 0.61  3     418 1407659 279.5 0.66  71.61 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=3241821936 HTTP/1.1
   7-0  50771 4/80/2824  K 1.56  2     372 1342706 124.7 2.05  66.52 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=3383267924 HTTP/1.1
   8-0  45778 2/212/2922 K 4.61  2     411 1364042 59.8  4.77  75.08 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3474452921 HTTP/1.1
   9-0  33169 9/433/2632 K 9.80  1     342 1315122 275.0 10.11 64.67 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=3081709325 HTTP/1.1
   10-0 52702 0/36/2078  _ 0.77  0     0   1033506 0.0   0.81  50.36 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 -     0/0/2610   . 0.00  74    0   1373633 0.0   0.00  81.30 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 51650 1/70/2070  K 1.41  0     298 975129  33.6  1.48  49.56 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=3246230883 HTTP/1.1
   13-0 49137 4/130/2720 K 2.70  1     344 1434013 126.6 3.36  68.49 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=2757527618 HTTP/1.1
   14-0 53172 1/29/2094  W 0.42  0     0   1359697 34.1  0.72  54.04 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=3680216466 HTTP/1.1
   15-0 -     0/0/1737   . 0.00  125   0   898360  0.0   0.00  46.48 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/1605   . 0.00  321   0   785950  0.0   0.00  39.62 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/1387   . 0.00  324   0   718864  0.0   0.00  34.98 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 49155 0/124/2188 _ 2.07  1     2   919048  0.0   2.71  64.15 3.232.102.111  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/images/images/2019
   19-0 49156 1/135/829  C 2.49  0     359 442017  5.7   2.69  19.66 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   20-0 -     0/0/851    . 0.00  23    0   412146  0.0   0.00  19.54 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1451   . 0.00  446   0   793961  0.0   0.00  37.29 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1812   . 0.00  870   0   915125  0.0   0.00  44.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 32544 2/492/1341 K 11.70 1     400 851767  67.0  12.97 33.55 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=2669357966 HTTP/1.1
   24-0 -     0/0/438    . 0.00  826   0   245547  0.0   0.00  11.59 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/181    . 0.00  447   0   106820  0.0   0.00  4.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/302    . 0.00  867   0   163792  0.0   0.00  10.38 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/184    . 0.00  872   0   70902   0.0   0.00  3.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179    . 0.00  635   0   121763  0.0   0.00  4.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/765    . 0.00  871   0   452473  0.0   0.00  35.26 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/519    . 0.00  878   0   266267  0.0   0.00  11.90 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/609    . 0.00  4166  0   309233  0.0   0.00  15.78 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/11     . 0.00  4156  0   3774    0.0   0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00  4168  0   1828    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/117    . 0.00  3743  0   46396   0.0   0.00  2.24  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/146    . 0.00  4180  0   57340   0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/240    . 0.00  4152  0   105059  0.0   0.00  5.69  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00  4179  0   4588    0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/102    . 0.00  3745  0   37924   0.0   0.00  1.98  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/196    . 0.00  3696  3   51541   0.0   0.00  2.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/203    . 0.00  3452  0   91622   0.0   0.00  4.31  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  4159  0   2066    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  4155  0   5210    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  4178  0   13      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/158    . 0.00  3699  0   66237   0.0   0.00  3.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/522    . 0.00  4063  0   184884  0.0   0.00  9.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  10970 0   4       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  10937 0   766     0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  10964 0   48      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  10935 0   10      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  10920 0   695     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  10913 0   3150    0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  10916 0   538     0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00  10914 0   8196    0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  10927 0   519     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00  10951 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00  10521 0   48080   0.0   0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  10805 0   13507   0.0   0.00  0.78  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00  10923 0   7269    0.0   0.00  0.33  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00  10907 0   1848    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00  10960 0   1       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00  10798 0   10684   0.0   0.00  0.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  10932 0   7       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00  10958 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00  10919 0   1750    0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  10956 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  10957 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  10934 0   6       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  10908 0   859     0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00  10675 0   36843   0.0   0.00  1.92  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00  10312 0   74918   0.0   0.00  4.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00  10952 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00  10955 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00  10911 0   3305    0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00  10906 0   2230    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  10954 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  10953 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00  10815 0   15854   0.0   0.00  0.86  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00  10959 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  10950 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1044
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...52)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 44023
   total entries replaced since starting: 0
   total entries expired since starting: 42969
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 118 miss
   total removes since starting: 11 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit