403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.01.27.txt
 ## swap threshold exceeded
## server overview
2025-11-23.01.27 load[0] mem[65/76] mysql[1/12] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1462         370          35         530         701
Swap:          1999        1663         336
 01:27:02 up 14:24,  0 users,  load average: 0.61, 0.35, 0.42
## system overview
top - 01:27:02 up 14:24,  0 users,  load average: 0.61, 0.35, 0.42
Tasks: 210 total,   5 running, 203 sleeping,   0 stopped,   2 zombie
%Cpu(s): 64.5 us, 22.6 sy,  0.0 ni, 12.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   345384 free,  1503824 used,   571092 buff/cache
KiB Swap:  2047996 total,   344412 free,  1703584 used.   711632 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 222396   3208 S 106.2  9.2  11:34.25 /usr/sbin+
101149 nigeria   20   0  404052  16140  10380 S   6.2  0.7   0:00.03 /opt/cpan+
101163 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
101187 cloudsms  20   0  404052  15616  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44508   3184   1412 S   0.0  0.1   1:10.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.84 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.05 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:50.37 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.92 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.49 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.05 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.69 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.69 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   4528   4284 S   0.0  0.2   0:29.85 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    112      0 S   0.0  0.0   0:04.86 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.18 /usr/sbin+
   501 root      20   0   24704   1148    792 S   0.0  0.0   0:11.75 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:26.88 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3016    788 S   0.0  0.1   0:00.56 queueproc+
   515 polkitd   20   0  610540    840    464 S   0.0  0.0   0:06.82 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    264    176 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1780    600 S   0.0  0.1   0:36.37 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.43 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3572    644 S   0.0  0.1   0:01.01 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.11 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.74 /usr/bin/+
   913 systuser  20   0  111864     16      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.43 /usr/bin/+
   915 root      20   0   51508    400    232 S   0.0  0.0   0:00.76 /usr/sbin+
   916 telegraf  20   0 5654304  30376    140 S   0.0  1.3   0:27.58 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  11528   2028 S   0.0  0.5   0:12.07 /usr/loca+
   926 systuser  20   0  112524     16      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.36 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.66 /usr/bin/+
   930 root      20   0  445028    516    404 S   0.0  0.0   0:02.02 sw-engine+
   931 root      20   0  153404    212    128 S   0.0  0.0   0:01.12 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    344    252 S   0.0  0.0   0:01.35 php-fpm: +
   938 root      20   0  388892    256    172 S   0.0  0.0   0:01.23 php-fpm: +
   939 root      20   0 1828368 353184    168 S   0.0 14.6   0:30.01 /usr/loca+
   940 root      20   0  331088   4880   4360 S   0.0  0.2   0:14.81 /usr/sbin+
   949 named     20   0 1054796  31484   1592 S   0.0  1.3   0:23.22 /usr/sbin+
   958 root      20   0  400740   2440    600 S   0.0  0.1   0:06.36 php-fpm: +
   962 root      20   0  261692   5932   1340 S   0.0  0.2   0:08.14 cpsrvd (S+
   969 cpanelc+  20   0   10564   3464   2300 R   0.0  0.1   0:41.16 /usr/loca+
   979 root      20   0  396248    296    216 S   0.0  0.0   0:01.30 php-fpm: +
   985 root      20   0  389508    348    256 S   0.0  0.0   0:01.37 php-fpm: +
  1083 dovenull  20   0   47116   1228    616 S   0.0  0.1   0:01.62 dovecot/p+
  1084 dovenull  20   0   48232   1564    608 S   0.0  0.1   0:00.58 dovecot/i+
  1085 dovecot   20   0   10320    164     48 S   0.0  0.0   0:00.38 dovecot/a+
  1086 root      20   0   10452    536    348 S   0.0  0.0   0:01.00 dovecot/l+
  1087 dovenull  20   0   47264   1544    916 S   0.0  0.1   0:01.87 dovecot/p+
  1088 dovenull  20   0   48324   1536    644 S   0.0  0.1   0:00.55 dovecot/i+
  1093 root      20   0   24528   1596    196 S   0.0  0.1   0:00.33 dovecot/c+
  1101 dovecot   20   0   13568    312    132 S   0.0  0.0   0:00.13 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:08.98 /usr/loca+
  1161 dovecot   20   0   41320   1476    932 S   0.0  0.1   0:02.52 dovecot/a+
  1175 systuser  20   0  157708   2168    124 S   0.0  0.1   0:00.23 SonarPush+
  1177 wp-tool+  20   0  387556   3160   1228 S   0.0  0.1   0:00.45 /usr/bin/+
  1178 wp-tool+  20   0  412396   9300   1232 S   0.0  0.4   0:16.34 /usr/bin/+
  1260 root      20   0  262228  22492   4628 S   0.0  0.9   0:05.54 cpdavd - +
  1263 root      20   0  228228  17000   4096 S   0.0  0.7   0:00.83 dnsadmin +
  1264 root      20   0  209648   8880   1232 S   0.0  0.4   0:06.07 tailwatchd
  1800 root      20   0  299272    420    260 S   0.0  0.0   0:01.37 php-fpm: +
  1834 root      38  18  130416   1352    680 S   0.0  0.1   0:00.13 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.58 /usr/sbin+
  2050 root      20   0   12888    332    212 S   0.0  0.0   0:05.37 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:04.75 /usr/loca+
  2052 root      20   0   12928    344    216 S   0.0  0.0   0:05.04 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996  58628    908 S   0.0  2.4   0:06.10 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.64 [kworker/+
 44973 root      20   0  181468   7576   1084 S   0.0  0.3   0:04.53 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     80     40 S   0.0  0.0   0:00.92 [kworker]
 64356 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 70746 nobody    20   0       0      0      0 Z   0.0  0.0   0:04.14 [httpd] <+
 74385 nobody    20   0  277688  20260   4792 S   0.0  0.8   0:03.79 /usr/sbin+
 76551 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 79708 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 81298 worencom  20   0   38488   1864    928 S   0.0  0.1   0:00.00 dovecot/i+
 83419 root      20   0  183044   1664   1108 S   0.0  0.1   0:00.00 /usr/sbin+
 83465 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 83479 root      20   0  113284    736    556 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 2h +
 86894 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87353 nobody    20   0  277908  20744   4872 S   0.0  0.9   0:02.04 /usr/sbin+
 87471 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88061 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 91654 nobody    20   0  277736  20372   4764 S   0.0  0.8   0:01.14 /usr/sbin+
 92173 nobody    20   0  277848  20448   4740 S   0.0  0.8   0:01.01 /usr/sbin+
 93454 nobody    20   0  277916  20028   4536 S   0.0  0.8   0:01.07 /usr/sbin+
 93937 nobody    20   0  277648  19940   4488 S   0.0  0.8   0:00.93 /usr/sbin+
 93938 nobody    20   0  277624  19928   4484 S   0.0  0.8   0:00.92 /usr/sbin+
 94337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95805 nobody    20   0  277724  19736   4320 S   0.0  0.8   0:00.70 /usr/sbin+
 97027 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 97579 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98083 root      20   0  183044   1668   1112 S   0.0  0.1   0:00.00 /usr/sbin+
 98096 root      20   0  178144  26140   2648 S   0.0  1.1   0:00.12 /usr/loca+
 98122 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98123 root      20   0  158824  15216   2624 S   0.0  0.6   0:00.08 /usr/loca+
 98138 root      20   0  195352  34488   2964 S   0.0  1.4   0:00.19 /usr/loca+
 98162 root      20   0   76780  16788   2824 S   0.0  0.7   0:00.15 /usr/loca+
 98503 nobody    20   0  277520  18892   3916 S   0.0  0.8   0:00.34 /usr/sbin+
 98635 nobody    20   0  277844  19684   4192 S   0.0  0.8   0:00.34 /usr/sbin+
 99856 root      20   0   41052   1832   1164 S   0.0  0.1   0:00.00 dovecot/a+
100268 nobody    20   0  277996  19488   3980 S   0.0  0.8   0:00.05 /usr/sbin+
100293 nobody    20   0  277848  19332   3864 S   0.0  0.8   0:00.05 /usr/sbin+
100294 nobody    20   0  277796  19316   3956 S   0.0  0.8   0:00.08 /usr/sbin+
100295 nobody    20   0  277812  18792   3468 S   0.0  0.8   0:00.04 /usr/sbin+
100296 nobody    20   0  277744  19372   4056 S   0.0  0.8   0:00.05 /usr/sbin+
100298 nobody    20   0  277704  19332   4036 S   0.0  0.8   0:00.07 /usr/sbin+
100320 nobody    20   0  277688  18740   3556 S   0.0  0.8   0:00.06 /usr/sbin+
100321 nobody    20   0  277508  18528   3628 S   0.0  0.8   0:00.03 /usr/sbin+
100324 nobody    20   0  277660  18816   3684 S   0.0  0.8   0:00.04 /usr/sbin+
100326 nobody    20   0  277828  18784   3516 S   0.0  0.8   0:00.04 /usr/sbin+
100330 nobody    20   0  277752  19364   4044 S   0.0  0.8   0:00.06 /usr/sbin+
100846 nobody    20   0  277692  18680   3476 S   0.0  0.8   0:00.03 /usr/sbin+
100861 nobody    20   0  277376  18292   3508 S   0.0  0.8   0:00.02 /usr/sbin+
100862 nobody    20   0  277720  18740   3528 S   0.0  0.8   0:00.04 /usr/sbin+
100880 cloudw    20   0  568396 103848   6664 S   0.0  4.3   0:02.51 php-fpm: +
100919 nigeria   20   0  400460   5032   2396 S   0.0  0.2   0:00.00 php-fpm: +
101018 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
101054 cloudw    20   0  400460   2508    568 S   0.0  0.1   0:00.00 php-fpm: +
101097 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
101102 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101103 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101104 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101105 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101106 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101107 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101108 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101110 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101111 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101112 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
101114 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101120 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
101121 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101122 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
101123 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
101124 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101126 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
101127 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101128 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101129 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101130 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101131 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
101133 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
101134 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
101148 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
101156 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
101174 cloudw    20   0  353712  15968  10484 R   0.0  0.7   0:00.01 /opt/cpan+
101177 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
101181 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
101185 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
101186 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    Nov22   0:50  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      64356  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:4]
root      76551  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/u200:2]
root      79708  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:0]
root      83465  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:1]
root      86894  0.0  0.0      0     0 ?        S    01:05   0:00  \_ [kworker/1:0]
root      87471  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/1:2]
root      88061  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      94337  0.0  0.0      0     0 ?        S    01:17   0:00  \_ [kworker/1:3]
root      97027  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/0:2]
root      97579  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/0:3]
root      98122  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44508  3184 ?        Ss   Nov22   1:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  4528 ?        Ss   Nov22   0:29 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   112 ?        S<sl Nov22   0:04 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1148 ?        Ss   Nov22   0:11 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:26 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3016 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   840 ?        Ssl  Nov22   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   264 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1780 ?        Ssl  Nov22   0:36 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1664 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   736 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      98083  0.0  0.0 183044  1668 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      98096  0.0  1.0 178144 26140 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      98123  0.0  0.6 158824 15216 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      98138  0.0  1.4 195352 34488 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      98162  0.0  0.6  76780 16788 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root     101102  0.0  0.0 183076  2420 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101123  0.0  0.0 113284  1212 ?        Ss   01:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     101133  0.0  0.0 108052   360 ?        S    01:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     101134  0.0  0.0 113288  1516 ?        S    01:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     101188  0.0  0.0 153840  2092 ?        R    01:27   0:00  |               \_ ps auxf
root     101103  0.0  0.0 183076  2416 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101129  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root     101104  0.0  0.0 183076  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101124  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root     101106  0.0  0.0 183076  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101126  0.0  0.0  20164   988 ?        Ss   01:27   0:00  |   \_ jailshell (cloudsms) [101185] l -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms 101185  0.0  0.0  20164   260 ?        S    01:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms 101186  0.0  0.0 113284  1212 ?        S    01:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms 101187  0.0  0.6 404052 15616 ?        S    01:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root     101107  0.0  0.0 183076  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101128  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root     101108  0.0  0.0 183076  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101130  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root     101110  0.0  0.0 183076  2408 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101127  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root     101111  0.0  0.0 183076  2408 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101121  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root     101112  0.0  0.0 183076  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101131  0.0  0.0  20164   968 ?        Ss   01:27   0:00  |   \_ jailshell (pactpay) [101156] ll -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  101156  0.0  0.0  20164   260 ?        S    01:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  101163  2.0  0.7 480124 17672 ?        S    01:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root     101114  0.0  0.0 183076  2408 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root     101120  0.0  0.0  20164   968 ?        Ss   01:27   0:00      \_ jailshell (nigeria) [101148] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  101148  0.0  0.0  20164   256 ?        S    01:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  101149  5.0  0.6 404052 16140 ?        S    01:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3572 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    16 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   400 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  1228 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  48232  1564 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   164 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   536 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  1544 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.0  48324  1536 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1596 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   312 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1476 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.0  38488  1864 ?        S    00:56   0:00  \_ dovecot/imap
root      99856  0.0  0.0  41052  1832 ?        S    01:25   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.2 5654304 30376 ?       SLsl Nov22   0:27 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.4 114016 11528 ?        Ssl  Nov22   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    16 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   516 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+ 101018  0.0  0.0 445028   320 ?        S    01:26   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   212 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   344 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   256 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0 14.5 1828368 353184 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  4880 ?        Ssl  Nov22   0:14 /usr/sbin/rsyslogd -n
named       949  0.0  1.3 1054796 31484 ?       Ssl  Nov22   0:23 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2440 ?        Ss   Nov22   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw   100880 13.9  4.2 568396 103848 ?       S    01:26   0:02  \_ php-fpm: pool cloudware_ng
nigeria  100919  0.0  0.2 400460  5032 ?        S    01:26   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw   101054  0.0  0.1 400460  2508 ?        S    01:26   0:00  \_ php-fpm: pool cloudware_ng
root        962  0.0  0.2 261692  5932 ?        Ss   Nov22   0:08 cpsrvd (SSL) - waiting for connections                   
root     101097  0.0  0.0      0     0 ?        Z    01:27   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3464 ?        Ss   Nov22   0:41 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   296 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   348 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  2.4 271996 58628 ?        S    Nov22   0:06  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.0 157708  2168 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3160 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9300 ?        Ss   Nov22   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.9 262228 22492 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.7 228228 17000 ?        Ss   Nov22   0:00 dnsadmin - server mode
root       1264  0.0  0.3 209648  8880 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   420 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1352 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.1 1478544 222396 ?      Sl   Nov22  11:34 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12888   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12928   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    70746  0.1  0.0      0     0 ?        Z    00:40   0:04  \_ [httpd] <defunct>
nobody    74385  0.1  0.8 277688 20260 ?        S    00:45   0:03  \_ /usr/sbin/httpd -k start
nobody    87353  0.1  0.8 277908 20744 ?        S    01:05   0:02  \_ /usr/sbin/httpd -k start
cloudw   101174  0.0  0.6 353712 15968 ?        S    01:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    91654  0.1  0.8 277736 20372 ?        S    01:13   0:01  \_ /usr/sbin/httpd -k start
nobody    92173  0.1  0.8 277848 20448 ?        S    01:13   0:01  \_ /usr/sbin/httpd -k start
nobody    93454  0.1  0.8 277916 20028 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
nobody    93937  0.1  0.8 277648 19940 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    93938  0.1  0.8 277624 19928 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    95805  0.1  0.8 277724 19736 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    98503  0.1  0.7 277520 18892 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    98635  0.1  0.8 277844 19684 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody   100268  0.0  0.8 277996 19488 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100293  0.0  0.7 277848 19332 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100294  0.1  0.7 277796 19316 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100295  0.0  0.7 277812 18792 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100296  0.0  0.8 277744 19372 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100298  0.1  0.7 277704 19332 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100320  0.1  0.7 277688 18740 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100321  0.0  0.7 277508 18528 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100324  0.0  0.7 277660 18816 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100326  0.0  0.7 277828 18784 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100330  0.1  0.8 277752 19364 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100846  0.1  0.7 277692 18680 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100861  0.1  0.7 277376 18292 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody   100862  0.2  0.7 277720 18740 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    80 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  0.3 181468  7576 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 51836  Threads: 5  Questions: 4448270  Slow queries: 0  Opens: 10361  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.814
*************************** 1. row ***************************
     Id: 69722
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 69725
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 69730
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 114.119.145.198 TIME_WAIT
      1 15.235.96.20 TIME_WAIT
      1 159.69.71.83 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.210.53 TIME_WAIT
      1 61.219.140.50 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 162.216.149.196 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
     34 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 01:27:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 23 minutes 51 seconds
   Server load: 0.61 0.35 0.42
   Total accesses: 238986 - Total Traffic: 5.6 GB - Total Duration: 129439951
   CPU Usage: u12.34 s8.3 cu2934.44 cs2296.71 - 10.1% CPU load
   4.61 requests/sec - 113.5 kB/second - 24.6 kB/request - 541.621 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

_KK__CKK_..CW_...K_K.._KRK.R.....W_.._.K..._....................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc      M CPU    SS    Req    Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  100846 0/8/12799    _ 0.07  1     307   6637643 0.0   0.14  305.60 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=3439785765 HTTP/1.1
   1-0  93454  19/207/12519 K 4.45  2     343   6628789 578.9 4.95  306.24 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=163480509 HTTP/1.1
   2-0  87353  4/379/12327  K 9.31  0     275   6773077 125.0 8.81  294.70 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=4293608858 HTTP/1.1
   3-0  95805  0/132/11928  _ 2.84  0     28    6314215 0.0   3.15  295.04 164.92.244.132 http/1.1 cloudware.ng:443       GET /.git/config HTTP/1.1
   4-0  100861 0/9/12010    _ 0.02  0     5     6229224 0.0   0.09  292.41 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   5-0  70746  1/821/12347  C 18.60 0     0     6495620 0.2   17.02 322.78 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  98503  50/80/11518  K 2.06  1     26    5857031 337.0 1.13  288.51 5.135.131.86   http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   7-0  100862 1/13/11889   K 0.11  2     259   6207659 34.9  0.14  289.12 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=2589509760 HTTP/1.1
   8-0  91654  0/261/11426  _ 4.93  0     401   5842769 0.0   6.68  272.70 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=3175543200 HTTP/1.1
   9-0  -      0/0/10435    . 0.00  32    0     5558854 0.0   0.00  258.94 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 -      0/0/10785    . 0.00  43    323   5677194 0.0   0.00  254.67 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2619410371 HTTP/1.1
   11-0 98635  1/70/10699   C 1.34  0     83    5587411 18.2  1.51  257.31 164.92.244.132 http/1.1 cloudware.ng:443       GET /info.php HTTP/1.1
   12-0 92173  0/220/10653  W 4.53  0     0     5619637 0.0   4.40  267.41 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 74385  0/738/10101  _ 18.17 1     31    5244692 0.0   15.64 240.70 164.92.244.132 http/1.1 cloudware.ng:443       GET /config.json HTTP/1.1
   14-0 -      0/0/9106     . 0.00  40    0     4752228 0.0   0.00  217.90 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -      0/0/7445     . 0.00  5     0     3875386 0.0   0.00  189.18 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -      0/0/7813     . 0.00  15    0     4034803 0.0   0.00  181.67 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 93937  5/172/6932   K 4.13  2     259   3667806 159.6 4.28  171.37 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=1505963628 HTTP/1.1
   18-0 93938  0/230/5888   _ 4.43  1     8     3241585 0.0   4.14  139.41 64.226.65.160  http/1.1 cloudware.ng:443       GET /telescope/requests HTTP/1.1
   19-0 100268 1/19/6547    K 0.10  4     347   3305284 34.2  0.17  150.60 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3696494754 HTTP/1.1
   20-0 -      0/0/5170     . 0.00  10    0     2904202 0.0   0.00  120.15 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -      0/0/3859     . 0.00  47    0     2376264 0.0   0.00  92.27  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 100293 0/19/3121    _ 0.36  1     9     1860677 0.0   0.23  82.85  64.226.65.160  http/1.1 cloudware.ng:443       GET /info.php HTTP/1.1
   23-0 100294 1/23/2498    K 0.26  1     263   1414220 33.3  0.37  49.64  192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=1728550435 HTTP/1.1
   24-0 100295 0/11/1498    R 0.11  32    548   1196002 0.0   0.18  33.93  105.112.219.32 http/1.1
   25-0 100296 1/20/2439    K 0.09  3     347   1081108 33.4  0.37  54.52  192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=2520607250 HTTP/1.1
   26-0 -      0/0/1556     . 0.00  36    0     995610  0.0   0.00  36.53  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 100298 0/19/1197    R 0.21  2     481   788669  0.0   0.32  34.25  192.178.4.97   http/1.1 team.cloudware.ng:443
   28-0 -      0/0/1512     . 0.00  42    0     734147  0.0   0.00  31.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -      0/0/1473     . 0.00  39    0     896903  0.0   0.00  31.65  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -      0/0/1294     . 0.00  35    0     796559  0.0   0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -      0/0/535      . 0.00  28    0     418251  0.0   0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/521      . 0.00  41    0     501649  0.0   0.00  10.47  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 100320 0/16/224     W 0.20  0     0     242982  0.0   0.26  4.31   18.214.124.6   http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/blog/images/2019elections
   34-0 100321 0/24/609     _ 0.03  0     30    402066  0.0   0.17  8.92   164.92.244.132 http/1.1 cloudware.ng:443       GET /s/437313e2039313e2939313e2337313/_/;/META-INF/maven/com.at
   35-0 -      0/0/645      . 0.00  45    0     507090  0.0   0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/89       . 0.00  9     0     137985  0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 100324 0/21/202     _ 0.06  1     34    178274  0.0   0.21  4.36   164.92.244.132 http/1.1 cloudware.ng:443       GET /.env HTTP/1.1
   38-0 -      0/0/661      . 0.00  34    0     330279  0.0   0.00  12.67  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 100326 2/8/551      K 0.14  1     260   488515  64.8  0.22  12.60  192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1017770656 HTTP/1.1
   40-0 -      0/0/227      . 0.00  37    0     280411  0.0   0.00  4.37   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -      0/0/416      . 0.00  31    0     308037  0.0   0.00  9.50   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/144      . 0.00  8     0     280413  0.0   0.00  1.55   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 100330 0/24/97      _ 0.13  0     29    245552  0.0   0.35  1.21   164.92.244.132 http/1.1 cloudware.ng:443       GET /telescope/requests HTTP/1.1
   44-0 -      0/0/292      . 0.00  44    0     301816  0.0   0.00  6.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/198      . 0.00  7     0     141072  0.0   0.00  1.57   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -      0/0/60       . 0.00  8759  0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -      0/0/67       . 0.00  8781  0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -      0/0/203      . 0.00  8772  0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -      0/0/284      . 0.00  8423  0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -      0/0/82       . 0.00  8785  0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -      0/0/8        . 0.00  8745  0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -      0/0/9        . 0.00  8754  0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -      0/0/29       . 0.00  8752  0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -      0/0/536      . 0.00  6869  0     268842  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -      0/0/4        . 0.00  8789  0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -      0/0/9        . 0.00  8748  0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -      0/0/7        . 0.00  8750  0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -      0/0/43       . 0.00  8791  11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80        GET /requirements.txt HTTP/1.1
   59-0 -      0/0/141      . 0.00  8152  0     113874  0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -      0/0/132      . 0.00  8782  0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -      0/0/6        . 0.00  8780  0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -      0/0/204      . 0.00  8339  0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -      0/0/66       . 0.00  8764  0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -      0/0/11       . 0.00  8757  0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -      0/0/9        . 0.00  8777  0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -      0/0/27       . 0.00  10303 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -      0/0/42       . 0.00  10308 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -      0/0/3        . 0.00  10346 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -      0/0/2        . 0.00  10345 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -      0/0/5        . 0.00  10338 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -      0/0/47       . 0.00  10286 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -      0/0/1        . 0.00  10357 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -      0/0/458      . 0.00  8892  0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -      0/0/9        . 0.00  10334 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -      0/0/1        . 0.00  10356 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -      0/0/23       . 0.00  10298 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -      0/0/200      . 0.00  9655  0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -      0/0/63       . 0.00  10158 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1499
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...55)
   index usage: 26%, cache usage: 35%
   total entries stored since starting: 172097
   total entries replaced since starting: 0
   total entries expired since starting: 170535
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 452 miss
   total removes since starting: 65 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit