403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.00.18.txt
 ## swap threshold exceeded
## server overview
2025-11-23.00.18 load[0] mem[55/78] mysql[1/10] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1235         176         113         950         848
Swap:          1999        1654         345
 00:18:01 up 13:15,  0 users,  load average: 0.57, 0.76, 0.68
## system overview
top - 00:18:01 up 13:15,  0 users,  load average: 0.57, 0.76, 0.68
Tasks: 209 total,   6 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.8 us, 45.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   145860 free,  1298508 used,   975932 buff/cache
KiB Swap:  2047996 total,   353532 free,  1694464 used.   835544 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478016 298032   4284 S  40.0 12.3  10:40.73 /usr/sbin+
     1 root      20   0   44508   3472   1592 R  13.3  0.1   1:05.21 /usr/lib/+
 56951 nigeria   20   0  404052  16136  10380 S  13.3  0.7   0:00.02 /opt/cpan+
    14 root      20   0       0      0      0 S   6.7  0.0   0:07.26 [ksoftirq+
   502 dbus      20   0   58592   1468    776 S   6.7  0.1   0:24.71 /usr/bin/+
 56953 cloudsms  20   0  404052  15608  10164 S   6.7  0.6   0:00.01 /opt/cpan+
 56958 pactpay   20   0  412248  16144  10560 R   6.7  0.7   0:00.01 /opt/cpan+
 56962 cloudsms  20   0  404052  15876  10224 R   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.56 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.90 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:46.45 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.88 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.15 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.12 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.80 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.45 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   2392   2088 S   0.0  0.1   0:27.95 /usr/lib/+
   384 root      20   0   45352    312    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    552    424 R   0.0  0.0   0:04.58 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    456    368 S   0.0  0.0   0:01.08 /usr/sbin+
   501 root      20   0   24704   1268    888 R   0.0  0.1   0:10.80 /usr/lib/+
   504 rpc       20   0   69256    184    124 S   0.0  0.0   0:00.04 /sbin/rpc+
   514 root      20   0  224148   5136   1216 S   0.0  0.2   0:00.51 queueproc+
   515 polkitd   20   0  610540    860    460 S   0.0  0.0   0:06.25 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    420    304 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   2004    880 S   0.0  0.1   0:33.57 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:01.31 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4016    980 S   0.0  0.2   0:00.94 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.02 /usr/bin/+
   912 root      20   0 1277312   5996    140 S   0.0  0.2   0:24.72 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372   1096    512 S   0.0  0.0   0:04.06 /usr/bin/+
   915 root      20   0   51508    720    540 S   0.0  0.0   0:00.70 /usr/sbin+
   916 telegraf  20   0 5654304  36628   5800 S   0.0  1.5   0:25.28 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14600   2628 S   0.0  0.6   0:11.09 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:06.95 /usr/sbin+
   928 root      20   0 1276100   8520    104 S   0.0  0.4   0:25.62 /usr/bin/+
   930 root      20   0  445028   1408   1296 S   0.0  0.1   0:01.83 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:01.03 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788   1108    900 S   0.0  0.0   0:01.23 php-fpm: +
   938 root      20   0  388892    716    504 S   0.0  0.0   0:01.11 php-fpm: +
   939 root      20   0 1763124  77356    652 S   0.0  3.2   0:13.85 /usr/loca+
   940 root      20   0  331088   3648   2376 S   0.0  0.2   0:13.79 /usr/sbin+
   949 named     20   0 1055800  43860   2196 S   0.0  1.8   0:21.13 /usr/sbin+
   958 root      20   0  400740   3024    720 S   0.0  0.1   0:05.67 php-fpm: +
   962 root      20   0  261692   9232   2088 S   0.0  0.4   0:07.16 cpsrvd (S+
   969 cpanelc+  20   0   10564   3772   2368 S   0.0  0.2   0:37.88 /usr/loca+
   979 root      20   0  396248    628    452 S   0.0  0.0   0:01.17 php-fpm: +
   985 root      20   0  389508    800    588 S   0.0  0.0   0:01.22 php-fpm: +
  1083 dovenull  20   0   47116   3252   2316 S   0.0  0.1   0:01.50 dovecot/p+
  1084 dovenull  20   0   48236   4108   2280 S   0.0  0.2   0:00.50 dovecot/i+
  1085 dovecot   20   0   10320    548    428 S   0.0  0.0   0:00.35 dovecot/a+
  1086 root      20   0   10452    504    296 S   0.0  0.0   0:00.92 dovecot/l+
  1087 dovenull  20   0   47264   3408   2356 S   0.0  0.1   0:01.72 dovecot/p+
  1088 dovenull  20   0   48324   4180   2296 S   0.0  0.2   0:00.51 dovecot/i+
  1093 root      20   0   24528   2500    484 S   0.0  0.1   0:00.31 dovecot/c+
  1101 dovecot   20   0   13568    556    312 S   0.0  0.0   0:00.12 dovecot/s+
  1142 root      20   0  247932  54992   1124 S   0.0  2.3   0:08.48 /usr/loca+
  1161 dovecot   20   0   41320   1756   1104 S   0.0  0.1   0:02.33 dovecot/a+
  1175 systuser  20   0  157708   3112   1060 S   0.0  0.1   0:00.21 SonarPush+
  1177 wp-tool+  20   0  387556   5064   1708 S   0.0  0.2   0:00.42 /usr/bin/+
  1178 wp-tool+  20   0  412396  28760   1900 S   0.0  1.2   0:15.01 /usr/bin/+
  1260 root      20   0  262224  24500   6768 S   0.0  1.0   0:04.89 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.68 dnsadmin +
  1264 root      20   0  209648  11904   1992 S   0.0  0.5   0:05.63 tailwatchd
  1800 root      20   0  299272    864    488 S   0.0  0.0   0:01.25 php-fpm: +
  1834 root      38  18  130416   1460    776 S   0.0  0.1   0:00.12 cpanellog+
  2048 root      20   0  267052   9076    748 S   0.0  0.4   0:03.30 /usr/sbin+
  2050 root      20   0   12768    440    320 S   0.0  0.0   0:04.92 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:04.36 /usr/loca+
  2052 root      20   0   12776    440    308 S   0.0  0.0   0:04.62 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996 111980   2820 S   0.0  4.6   0:05.70 spamd chi+
  5634 root      20   0  247932  54468    452 S   0.0  2.3   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kworker/+
 16456 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 31893 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33683 nobody    20   0  277920  21436   5008 S   0.0  0.9   0:03.02 /usr/sbin+
 34991 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 39855 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42849 root      20   0       0      0      0 D   0.0  0.0   0:00.07 [kworker/+
 44973 root      20   0  181060  29152   2352 S   0.0  1.2   0:01.00 lfd - sle+
 45471 nobody    20   0  277908  21108   4696 S   0.0  0.9   0:01.48 /usr/sbin+
 46119 nobody    20   0  277584  20936   4856 S   0.0  0.9   0:01.25 /usr/sbin+
 46362 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46761 nobody    20   0  277584  20732   4620 S   0.0  0.9   0:01.25 /usr/sbin+
 47035 nobody    20   0  277652  20892   4688 S   0.0  0.9   0:01.31 /usr/sbin+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.83 [kworker]
 47831 nobody    20   0  277780  21056   4704 S   0.0  0.9   0:01.13 /usr/sbin+
 49361 nobody    20   0  277660  20940   4736 S   0.0  0.9   0:00.82 /usr/sbin+
 50212 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 50331 nobody    20   0  277888  20952   4584 S   0.0  0.9   0:00.79 /usr/sbin+
 50332 nobody    20   0  277920  20700   4488 S   0.0  0.9   0:00.51 /usr/sbin+
 50635 nobody    20   0  277584  20796   4672 S   0.0  0.9   0:00.75 /usr/sbin+
 50882 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51603 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52077 nobody    20   0  277600  20644   4496 S   0.0  0.9   0:00.63 /usr/sbin+
 53345 nobody    20   0  277584  20380   4340 S   0.0  0.8   0:00.43 /usr/sbin+
 53972 nobody    20   0  277916  20484   4204 S   0.0  0.8   0:00.37 /usr/sbin+
 54251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54322 nobody    20   0  277544  19992   4060 S   0.0  0.8   0:00.38 /usr/sbin+
 55277 nobody    20   0  277928  20204   4020 S   0.0  0.8   0:00.23 /usr/sbin+
 55594 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55674 nobody    20   0  277584  19920   3928 S   0.0  0.8   0:00.16 /usr/sbin+
 55821 nobody    20   0  277904  20192   4084 S   0.0  0.8   0:00.10 /usr/sbin+
 56301 root      20   0  157100   5076   3784 S   0.0  0.2   0:00.00 sshd: unk+
 56302 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 56378 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 56486 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
 56642 cloudw    20   0  568772 105600   6608 S   0.0  4.4   0:06.84 php-fpm: +
 56659 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 56681 healtho+  20   0  462820  69884   4216 S   0.0  2.9   0:04.24 php-fpm: +
 56684 nigeria   20   0  400460   5496   2384 S   0.0  0.2   0:00.01 php-fpm: +
 56747 nobody    20   0  277780  19636   3532 S   0.0  0.8   0:00.03 /usr/sbin+
 56875 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 56886 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56887 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56888 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56889 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56890 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56891 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56892 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56893 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56894 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56895 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56896 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56897 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56898 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56899 root      20   0  183040   2208   1636 S   0.0  0.1   0:00.00 /usr/sbin+
 56900 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56901 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56902 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 56903 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 56904 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 56926 root      20   0  160244   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 56927 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56929 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 56930 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56931 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56932 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56933 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56934 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56935 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56936 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56937 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56939 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56940 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56942 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56943 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56944 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56947 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 56949 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 56954 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 56955 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 56956 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 56959 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 56961 saboakin  20   0  404052  15616  10156 S   0.0  0.6   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:46  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      16456  0.0  0.0      0     0 ?        R    Nov22   0:00  \_ [kworker/1:2]
root      31893  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/1:4]
root      34991  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/0:2]
root      39855  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/1:1]
root      42849  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/0:1]
root      46362  0.0  0.0      0     0 ?        S    00:02   0:00  \_ [kworker/0:0]
root      50212  0.0  0.0      0     0 ?        S    00:08   0:00  \_ [kworker/u200:2]
root      50882  0.0  0.0      0     0 ?        S    00:09   0:00  \_ [kworker/0:4]
root      51603  0.0  0.0      0     0 ?        S    00:10   0:00  \_ [kworker/1:0]
root      54251  0.0  0.0      0     0 ?        S    00:14   0:00  \_ [kworker/1:3]
root      55594  0.0  0.0      0     0 ?        S    00:16   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44508  3472 ?        Rs   Nov22   1:05 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.0  40240  2392 ?        Ss   Nov22   0:27 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   312 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   552 ?        S<sl Nov22   0:04 /sbin/auditd
root        499  0.0  0.0  21540   456 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1268 ?        Ss   Nov22   0:10 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58592  1468 ?        Ss   Nov22   0:24 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256   184 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5136 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   860 ?        Ssl  Nov22   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   420 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 2004 ?        Ssl  Nov22   0:33 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    20 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      56886  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56902  0.0  0.0 113284  1212 ?        Ss   00:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      56903  0.0  0.0 108052   356 ?        S    00:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      56904  0.0  0.0 113288  1512 ?        S    00:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      56964  0.0  0.0 153840  2096 ?        R    00:18   0:00  |               \_ ps auxf
root      56887  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56935  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      56888  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56940  0.0  0.0  20164   804 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      56889  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56942  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      56890  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56939  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      56891  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56933  0.0  0.0  20164   804 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      56892  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56927  0.0  0.0  20164   968 ?        Ss   00:18   0:00  |   \_ jailshell (cloudsms) [56929] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  56929  0.0  0.0  20164   256 ?        S    00:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  56947  0.0  0.0 113284  1212 ?        S    00:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  56953  0.0  0.6 404052 15608 ?        S    00:18   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      56893  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56934  0.0  0.0  20164   804 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      56894  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56944  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      56895  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56932  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      56896  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56936  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      56898  0.0  0.0 183044  2144 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56937  0.0  0.0  20164   968 ?        Ss   00:18   0:00  |   \_ jailshell (pactpay) [56955] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   56955  0.0  0.0  20164   260 ?        S    00:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   56958  0.0  0.6 479860 16172 ?        Rl   00:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      56900  0.0  0.0 183044  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56931  0.0  0.0  20164   968 ?        Ss   00:18   0:00  |   \_ jailshell (nigeria) [56949] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   56949  0.0  0.0  20164   256 ?        S    00:18   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   56951  0.0  0.6 404052 16136 ?        S    00:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      56901  0.0  0.0 183044  2144 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      56943  0.0  0.0  20164   968 ?        Ss   00:18   0:00      \_ jailshell (saboakin) [56956] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  56956  0.0  0.0      0     0 ?        R    00:18   0:00          \_ [jailshell]
root        591  0.0  0.0 108296   136 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4016 ?        Ss   Nov22   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5996 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372  1096 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   720 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  47116  3252 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48236  4108 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   548 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   504 ?        S    Nov22   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47264  3408 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  4180 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2500 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1756 ?        S    Nov22   0:02  \_ dovecot/auth
root      56378  0.0  0.1  60820  4508 ?        S    00:17   0:00  \_ dovecot/lmtp
root      56486  0.0  0.1  41052  2732 ?        S    00:17   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 36628 ?       SLsl Nov22   0:25 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.6 114016 14600 ?        Ssl  Nov22   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   Nov22   0:06 /usr/sbin/sshd -D
root      56301  0.0  0.2 157100  5076 ?        Ss   00:17   0:00  \_ sshd: unknown [priv]
sshd      56302  0.0  0.1 115644  2632 ?        S    00:17   0:00      \_ sshd: unknown [net]
root        928  0.0  0.3 1276100 8520 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028  1408 ?        Ss   Nov22   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  56659  0.0  0.0 445028   320 ?        S    00:17   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788  1108 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   716 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  3.1 1763124 77356 ?       Ssl  Nov22   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.1 331088  3648 ?        Ssl  Nov22   0:13 /usr/sbin/rsyslogd -n
named       949  0.0  1.8 1055800 43860 ?       Ssl  Nov22   0:21 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3024 ?        Ss   Nov22   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    56642 25.3  4.3 568772 105600 ?       S    00:17   0:06  \_ php-fpm: pool cloudware_ng
healtho+  56681 18.4  2.8 462820 69884 ?        S    00:17   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   56684  0.0  0.2 400460  5496 ?        S    00:17   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 261692  9232 ?        Ss   Nov22   0:07 cpsrvd (SSL) - waiting for connections                   
root      56875  0.0  0.0      0     0 ?        Z    00:17   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3772 ?        Ss   Nov22   0:37 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   628 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   800 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  2.2 247932 54992 ?        Ss   Nov22   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  4.6 271996 111980 ?       S    Nov22   0:05  \_ spamd child
root       5634  0.0  2.2 247932 54468 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3112 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.2 387556  5064 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412396 28760 ?        Ss   Nov22   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  1.0 262224 24500 ?        Ss   Nov22   0:04 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.0 167452  1404 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209648 11904 ?        Ss   Nov22   0:05 tailwatchd
root       1800  0.0  0.0 299272   864 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1460 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 12.3 1478016 298032 ?      Sl   Nov22  10:40 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9076 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12768   440 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12776   440 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    33683  0.1  0.8 277920 21436 ?        S    Nov22   0:03  \_ /usr/sbin/httpd -k start
nobody    45471  0.1  0.8 277908 21108 ?        S    00:00   0:01  \_ /usr/sbin/httpd -k start
nobody    46119  0.1  0.8 277584 20936 ?        S    00:01   0:01  \_ /usr/sbin/httpd -k start
nobody    46761  0.1  0.8 277584 20732 ?        S    00:02   0:01  \_ /usr/sbin/httpd -k start
nobody    47035  0.1  0.8 277652 20892 ?        S    00:03   0:01  \_ /usr/sbin/httpd -k start
nobody    47831  0.1  0.8 277780 21056 ?        S    00:04   0:01  \_ /usr/sbin/httpd -k start
nobody    49361  0.1  0.8 277660 20940 ?        S    00:06   0:00  \_ /usr/sbin/httpd -k start
nobody    50331  0.1  0.8 277888 20952 ?        S    00:08   0:00  \_ /usr/sbin/httpd -k start
nobody    50332  0.0  0.8 277920 20700 ?        S    00:08   0:00  \_ /usr/sbin/httpd -k start
nobody    50635  0.1  0.8 277584 20796 ?        S    00:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52077  0.1  0.8 277600 20644 ?        S    00:10   0:00  \_ /usr/sbin/httpd -k start
nobody    53345  0.1  0.8 277584 20380 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
nobody    53972  0.1  0.8 277916 20484 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    54322  0.1  0.8 277544 19992 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    55277  0.1  0.8 277928 20204 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    55674  0.1  0.8 277584 19920 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    55821  0.0  0.8 277904 20192 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    56747  0.1  0.8 277780 19636 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  1.2 181060 29152 ?        Ss   00:00   0:01 lfd - sleeping
## mysql stats
Uptime: 47695  Threads: 5  Questions: 4027344  Slow queries: 0  Opens: 9727  Flush tables: 1  Open tables: 2000  Queries per second avg: 84.439
*************************** 1. row ***************************
     Id: 63105
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `16` WHERE `phone`='2347030224119' LIMIT 1
*************************** 2. row ***************************
     Id: 63109
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 63113
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 172.70.220.25 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 27.115.124.41 TIME_WAIT
      1 51.222.95.63 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 148.251.45.214 TIME_WAIT
     30 149.22.81.153 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 00:18:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 14 minutes 50 seconds
   Server load: 0.57 0.76 0.68
   Total accesses: 219530 - Total Traffic: 5.2 GB - Total Duration: 117017042
   CPU Usage: u11.18 s6.76 cu2706.01 cs2118.51 - 10.2% CPU load
   4.6 requests/sec - 114.2 kB/second - 24.8 kB/request - 533.034 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKK_KK_KW__KKRKK....KR..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req    Dur   Conn  Child  Slot      Client     Protocol           VHost                        Request
   0-0  56747 5/6/11602   K 0.11  2    270   5911528 157.0 0.16  278.83 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=275521887 HTTP/1.1
   1-0  54322 1/73/11431  K 1.43  3    392   5918401 35.9  1.63  278.69 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=2927133765 HTTP/1.1
   2-0  52077 3/119/11248 K 2.68  3    262   6078262 98.0  3.18  268.54 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=427445468 HTTP/1.1
   3-0  55674 0/37/10949  _ 0.56  0    343   5694044 0.0   0.68  272.50 149.22.81.153  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  46761 2/290/10903 K 4.61  3    404   5696666 66.1  5.20  271.70 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=829449505 HTTP/1.1
   5-0  53972 1/77/11196  K 1.62  1    265   5811977 34.8  1.53  298.86 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=572106939 HTTP/1.1
   6-0  53345 0/92/10569  _ 1.60  0    0     5318520 0.0   1.82  264.74 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  47035 2/276/10777 K 4.78  0    301   5564237 67.1  6.54  261.52 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=2789672283 HTTP/1.1
   8-0  47831 0/301/10516 W 4.04  0    0     5272460 0.0   4.98  251.41 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   9-0  55821 0/27/9547   _ 0.25  0    343   4971437 0.0   0.34  238.16 149.22.81.153  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-0 45471 0/324/9871  _ 5.77  0    750   5053835 0.0   6.33  234.15 104.207.32.215 http/1.1 cloudware.ng:443           POST /wp-login.php HTTP/1.1
   11-0 33683 2/582/9725  K 11.37 0    304   4950669 64.7  13.48 236.14 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=2242769380 HTTP/1.1
   12-0 46119 1/252/9711  K 4.89  3    395   5056559 35.1  7.71  246.89 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=2399610050 HTTP/1.1
   13-0 50635 0/164/8922  R 2.69  10   333   4583833 0.0   3.33  214.61 27.115.124.41  http/1.1
   14-0 49361 3/169/8168  K 2.91  1    348   4207551 93.8  3.85  197.65 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=2952060256 HTTP/1.1
   15-0 55277 3/50/6321   K 1.38  0    260   3202601 95.3  0.93  165.16 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=1313328972 HTTP/1.1
   16-0 -     0/0/7196    . 0.00  351  0     3626171 0.0   0.00  168.42 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/6643    . 0.00  546  0     3403264 0.0   0.00  165.54 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/5550    . 0.00  207  0     2960427 0.0   0.00  134.04 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/6091    . 0.00  541  0     2981582 0.0   0.00  140.91 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 50331 1/173/4624  K 2.82  4    339   2484427 33.5  3.42  109.54 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=2213824502 HTTP/1.1
   21-0 50332 0/128/3738  R 1.76  1    345   2197404 0.0   2.64  91.06  149.22.81.153  http/1.1 health.oyostate.gov.ng:443
   22-0 -     0/0/3029    . 0.00  540  0     1735053 0.0   0.00  81.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/2363    . 0.00  12   5     1216391 0.0   0.00  47.93  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/1411    . 0.00  2137 0     1067698 0.0   0.00  32.76  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/2419    . 0.00  2149 0     1072704 0.0   0.00  54.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1551    . 0.00  2501 0     994271  0.0   0.00  36.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1178    . 0.00  2955 0     781587  0.0   0.00  33.93  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1507    . 0.00  2732 0     732468  0.0   0.00  31.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/1468    . 0.00  1694 0     896900  0.0   0.00  31.64  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1287    . 0.00  2961 0     794356  0.0   0.00  30.29  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/528     . 0.00  2951 0     402740  0.0   0.00  9.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/518     . 0.00  4635 0     501315  0.0   0.00  10.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/208     . 0.00  4047 0     237017  0.0   0.00  4.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/585     . 0.00  4634 0     401414  0.0   0.00  8.75   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/643     . 0.00  4014 0     507088  0.0   0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/74      . 0.00  4606 0     128926  0.0   0.00  0.43   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/181     . 0.00  4602 0     172759  0.0   0.00  4.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/655     . 0.00  4630 0     329138  0.0   0.00  12.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/543     . 0.00  3714 0     484400  0.0   0.00  12.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/224     . 0.00  4590 0     279837  0.0   0.00  4.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/409     . 0.00  4625 0     303799  0.0   0.00  9.44   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/118     . 0.00  4475 0     273924  0.0   0.00  1.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/73      . 0.00  4628 0     237945  0.0   0.00  0.86   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/289     . 0.00  4619 0     301814  0.0   0.00  6.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/180     . 0.00  4622 0     137352  0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00  4618 0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00  4640 0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00  4631 0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00  4283 0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00  4644 0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00  4604 0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00  4613 0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00  4611 0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/536     . 0.00  2728 0     268842  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00  4648 0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00  4607 0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00  4609 0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00  4650 11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80            GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141     . 0.00  4012 0     113874  0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/132     . 0.00  4641 0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00  4639 0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00  4199 0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00  4623 0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00  4616 0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00  4636 0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00  6163 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00  6168 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00  6206 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00  6205 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00  6198 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00  6146 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00  6217 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00  4752 0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00  6194 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  6216 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00  6158 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00  5514 0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00  6017 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1100
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...27)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 157830
   total entries replaced since starting: 0
   total entries expired since starting: 156670
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 429 miss
   total removes since starting: 60 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit