403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.03.03.txt
 ## swap threshold exceeded
## server overview
2025-11-23.03.03 load[0] mem[68/71] mysql[3/12] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1479          71          79         813         622
Swap:          1999        1608         391
 03:03:01 up 16:00,  0 users,  load average: 0.74, 0.53, 0.55
## system overview
top - 03:03:02 up 16:00,  0 users,  load average: 0.74, 0.53, 0.55
Tasks: 204 total,   5 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 77.4 us, 16.1 sy,  0.0 ni,  6.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    67228 free,  1519644 used,   833428 buff/cache
KiB Swap:  2047996 total,   401316 free,  1646680 used.   632804 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 240764   2668 R 112.5  9.9  13:14.10 /usr/sbin+
 64977 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.04 /opt/cpan+
 64603 oyotech+  20   0  389236   6340   2944 S   6.2  0.3   0:00.07 php-fpm: +
 64969 pactpay   20   0  480124  17668  11880 S   6.2  0.7   0:00.02 /opt/cpan+
 65008 cloudsms  20   0  404052  15876  10224 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44508   3244   1412 S   0.0  0.1   1:18.00 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:03.28 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:56.80 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.92 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:34.57 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.29 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.59 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:04.21 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:03.06 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   5888   5644 S   0.0  0.2   0:32.88 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    444    324 S   0.0  0.0   0:05.34 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.31 /usr/sbin+
   501 root      20   0   24704   1172    808 S   0.0  0.0   0:13.17 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:30.19 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3076    840 S   0.0  0.1   0:00.61 queueproc+
   515 polkitd   20   0  610540    832    456 S   0.0  0.0   0:07.67 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1824    628 S   0.0  0.1   0:40.32 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.60 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3816    888 S   0.0  0.2   0:01.15 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:03.38 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.24 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.76 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.02 /usr/loca+
   914 root      20   0  572372    640    172 S   0.0  0.0   0:04.91 /usr/bin/+
   915 root      20   0   51508    456    292 S   0.0  0.0   0:00.85 /usr/sbin+
   916 telegraf  20   0 5654304  33132   2536 S   0.0  1.4   0:30.65 /usr/loca+
   917 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12696   2452 S   0.0  0.5   0:13.41 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:08.01 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.73 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.25 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.25 pure-ftpd+
   932 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    356    264 S   0.0  0.0   0:01.51 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.57 php-fpm: +
   939 root      20   0 1828368 312916    512 S   0.0 12.9   0:30.23 /usr/loca+
   940 root      20   0  331088   6364   5728 S   0.0  0.3   0:16.42 /usr/sbin+
   949 named     20   0 1054796  34400   1512 S   0.0  1.4   0:26.08 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:07.52 php-fpm: +
   962 root      20   0  261692   6168   1448 S   0.0  0.3   0:09.13 cpsrvd (S+
   969 cpanelc+  20   0   10564   3448   2284 R   0.0  0.1   0:45.83 /usr/loca+
   979 root      20   0  396248    344    260 S   0.0  0.0   0:01.44 php-fpm: +
   985 root      20   0  389508    428    332 S   0.0  0.0   0:01.50 php-fpm: +
  1083 dovenull  20   0   47116   1604    980 S   0.0  0.1   0:01.79 dovecot/p+
  1084 dovenull  20   0   48232   2372   1368 S   0.0  0.1   0:00.64 dovecot/i+
  1085 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.42 dovecot/a+
  1086 root      20   0   10452    480    292 S   0.0  0.0   0:01.10 dovecot/l+
  1087 dovenull  20   0   47264   2168   1540 S   0.0  0.1   0:02.05 dovecot/p+
  1088 dovenull  20   0   48324   2296   1336 S   0.0  0.1   0:00.60 dovecot/i+
  1093 root      20   0   24396   1880    488 S   0.0  0.1   0:00.37 dovecot/c+
  1101 dovecot   20   0   13568    556    336 S   0.0  0.0   0:00.15 dovecot/s+
  1142 root      20   0  247932  18684   1200 S   0.0  0.8   0:09.67 /usr/loca+
  1161 dovecot   20   0   41320   1492    984 S   0.0  0.1   0:02.78 dovecot/a+
  1175 systuser  20   0  157708   2936    888 S   0.0  0.1   0:00.25 SonarPush+
  1177 wp-tool+  20   0  387556   3564   1632 S   0.0  0.1   0:00.49 /usr/bin/+
  1178 wp-tool+  20   0  412396   9704   1648 S   0.0  0.4   0:18.13 /usr/bin/+
  1260 root      20   0  183900   5952   2720 S   0.0  0.2   0:05.87 cpdavd - +
  1263 root      20   0  167452   3136   1768 S   0.0  0.1   0:00.91 dnsadmin +
  1264 root      20   0  209648   9964   1952 S   0.0  0.4   0:06.75 tailwatchd
  1800 root      20   0  299272    368    208 S   0.0  0.0   0:01.52 php-fpm: +
  1834 root      38  18  130416   1368    688 S   0.0  0.1   0:00.15 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:04.05 /usr/sbin+
  2050 root      20   0   12812    332    212 S   0.0  0.0   0:06.10 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.38 /usr/loca+
  2052 root      20   0   12856    344    216 S   0.0  0.0   0:05.74 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5634 root      20   0  259100  93432   2792 S   0.0  3.9   0:00.87 spamd chi+
 21598 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 43320 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44620 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 44973 root      20   0  182072   9480   1100 S   0.0  0.4   0:09.59 lfd - sle+
 45469 nobody    20   0  277676  20544   4872 S   0.0  0.8   0:02.02 /usr/sbin+
 47189 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     64     24 S   0.0  0.0   0:01.03 [kworker]
 48022 nobody    20   0  277632  20356   4840 S   0.0  0.8   0:01.90 /usr/sbin+
 48208 nobody    20   0  277680  20388   4696 S   0.0  0.8   0:01.71 /usr/sbin+
 49354 nobody    20   0  277660  20348   4708 S   0.0  0.8   0:01.51 /usr/sbin+
 49533 nobody    20   0  277620  20248   4688 S   0.0  0.8   0:01.61 /usr/sbin+
 52781 nobody    20   0  277552  20080   4696 S   0.0  0.8   0:01.16 /usr/sbin+
 54061 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 54693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54854 root      20   0  247932  21484   1432 S   0.0  0.9   0:00.00 spamd chi+
 55509 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55670 nobody    20   0  277584  19764   4440 S   0.0  0.8   0:00.98 /usr/sbin+
 56723 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 57579 nobody    20   0  277736  20176   4616 S   0.0  0.8   0:00.76 /usr/sbin+
 57711 nobody    20   0  277524  19824   4476 S   0.0  0.8   0:00.76 /usr/sbin+
 58827 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59800 nobody    20   0  277908  19608   4184 S   0.0  0.8   0:00.61 /usr/sbin+
 60265 nobody    20   0  277520  19360   4164 S   0.0  0.8   0:00.58 /usr/sbin+
 60608 nobody    20   0  277584  19556   4172 S   0.0  0.8   0:00.48 /usr/sbin+
 60877 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61085 nobody    20   0  277520  19452   4188 S   0.0  0.8   0:00.39 /usr/sbin+
 62527 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62813 nobody    20   0  277552  19264   3996 S   0.0  0.8   0:00.23 /usr/sbin+
 63168 nobody    20   0  277700  19228   3900 S   0.0  0.8   0:00.19 /usr/sbin+
 63319 nobody    20   0  277516  19320   4056 S   0.0  0.8   0:00.17 /usr/sbin+
 63462 root      20   0  123364    760    532 S   0.0  0.0   0:00.00 /usr/sbin+
 63559 nobody    20   0  277616  19456   4112 S   0.0  0.8   0:00.13 /usr/sbin+
 64063 healtho+  20   0  476300  83396   4120 S   0.0  3.4   0:06.44 php-fpm: +
 64409 healtho+  20   0  478380  85876   4112 S   0.0  3.5   0:05.02 php-fpm: +
 64492 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64625 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 64662 oyotech+  20   0  389236   6324   2940 S   0.0  0.3   0:00.05 php-fpm: +
 64776 agradio   20   0  430492  48484   4100 S   0.0  2.0   0:03.07 php-fpm: +
 64804 nobody    20   0  277764  18440   3344 S   0.0  0.8   0:00.00 /usr/sbin+
 64896 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64898 nobody    20   0  277416  17912   3212 S   0.0  0.7   0:00.00 /usr/sbin+
 64905 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 64906 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 64907 nigeria   20   0  400460   4776   2160 S   0.0  0.2   0:00.00 php-fpm: +
 64917 root      20   0  183076   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64920 root      20   0  183076   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64921 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64922 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64923 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64924 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64925 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64926 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64927 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64929 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64933 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 64938 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64940 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 64941 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 64942 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64943 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64944 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64945 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64947 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 64948 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64951 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 64954 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 64959 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 64961 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 64974 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65002 root      20   0  160220   2056   1580 R   0.0  0.1   0:00.00 top -bcn1
 65004 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65006 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 65007 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65009 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 65010 cloudsms  20   0  400380  12156   8340 R   0.0  0.5   0:00.00 /opt/cpan+
 81298 worencom  20   0   38488   2076   1092 S   0.0  0.1   0:00.03 dovecot/i+
 83419 root      20   0  183044   1656   1100 S   0.0  0.1   0:00.00 /usr/sbin+
 83479 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    300    228 S   0.0  0.0   0:00.00 sleep 2h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    Nov22   0:56  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov22   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:34  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:04  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root      21598  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/u200:2]
root      43320  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/1:0]
root      44620  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/0:0]
root      47189  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:1]
root      54061  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:0]
root      54693  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:2]
root      55509  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/1:2]
root      56723  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/0:3]
root      58827  0.0  0.0      0     0 ?        S    02:55   0:00  \_ [kworker/1:4]
root      60877  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:1]
root      62527  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44508  3244 ?        Ss   Nov22   1:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40240  5888 ?        Ss   Nov22   0:32 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   444 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1172 ?        Ss   Nov22   0:13 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:30 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3076 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   832 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   356 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1824 ?        Ssl  Nov22   0:40 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1656 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   300 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      64917  0.0  0.0 183076  2412 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64948  0.0  0.0 113284  1212 ?        Ss   03:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      64951  0.0  0.0 108052   356 ?        S    03:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      64959  0.0  0.0 113288  1520 ?        S    03:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      65011  0.0  0.0 153840  2096 ?        R    03:03   0:00  |               \_ ps auxf
root      64920  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64933  0.0  0.0  20164   984 ?        Ss   03:03   0:00  |   \_ jailshell (cloudsms) [65004] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  65004  0.0  0.0  20164   260 ?        R    03:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  65006  0.0  0.0      0     0 ?        Z    03:03   0:00  |           \_ [bash] <defunct>
root      64921  0.0  0.0 183076  2412 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64947  0.0  0.0  20164   988 ?        Ss   03:03   0:00  |   \_ jailshell (cloudsms) [65007] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  65007  0.0  0.0  20164   260 ?        S    03:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  65009  0.0  0.0 113284  1212 ?        S    03:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  65010  0.0  0.6 404052 15616 ?        S    03:03   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      64922  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64942  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      64923  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64943  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      64924  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64945  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      64925  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64944  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      64926  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64938  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      64927  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64940  0.0  0.0  20164   960 ?        Ss   03:03   0:00  |   \_ jailshell (pactpay) [64961] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   64961  0.0  0.0  20164   256 ?        S    03:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   64969  2.0  0.7 480124 17668 ?        S    03:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      64929  0.0  0.0 183076  2408 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      64941  0.0  0.0  20164   964 ?        Ss   03:03   0:00      \_ jailshell (nigeria) [64974] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64974  0.0  0.0  20164   260 ?        S    03:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64977  4.0  0.6 404052 16144 ?        S    03:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3816 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   640 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   456 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  1604 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  48232  2372 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   360 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   480 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2168 ?        S    Nov22   0:02  \_ dovecot/pop3-login
dovenull   1088  0.0  0.0  48324  2296 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24396  1880 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1492 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.0  38488  2076 ?        S    00:56   0:00  \_ dovecot/imap
telegraf    916  0.0  1.3 5654304 33132 ?       SLsl Nov22   0:30 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    52 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12696 ?        Ssl  Nov22   0:13 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:08 /usr/sbin/sshd -D
root      64492  0.0  0.1 111304  4268 ?        Ss   03:02   0:00  \_ sshd: [accepted]
root      64905  0.0  0.1 111304  4440 ?        Ss   03:02   0:00  \_ sshd: [accepted]
sshd      64906  0.0  0.1 115644  2628 ?        S    03:02   0:00      \_ sshd: [net]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  64625  0.0  0.0 445028   552 ?        S    03:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    36 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   356 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  64603  0.2  0.2 389236  6340 ?        S    03:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  64662  0.2  0.2 389236  6324 ?        S    03:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 12.9 1828368 312916 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  6364 ?        Ssl  Nov22   0:16 /usr/sbin/rsyslogd -n
named       949  0.0  1.4 1054796 34400 ?       Ssl  Nov22   0:26 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  64063 10.2  3.4 476300 83396 ?        S    03:01   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  64409 10.4  3.5 478380 85876 ?        S    03:02   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   64907  0.0  0.1 400460  4776 ?        S    03:02   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6168 ?        Ss   Nov22   0:09 cpsrvd (SSL) - waiting for connections                   
root      64896  0.0  0.0      0     0 ?        Z    03:02   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3448 ?        Rs   Nov22   0:45 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   344 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   428 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio   64776 43.8  2.0 430492 48484 ?        S    03:02   0:03  \_ php-fpm: pool agradio_ng
root       1142  0.0  0.7 247932 18684 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5634  0.0  3.8 259100 93432 ?        S    Nov22   0:00  \_ spamd child
root      54854  0.0  0.8 247932 21484 ?        S    02:49   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2936 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3564 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.4 412396  9704 ?        Ss   Nov22   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  5952 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.1 167452  3136 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209648  9964 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   368 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1368 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.9 1478544 240764 ?      Sl   Nov22  13:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:04 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12812   332 ?        S    Nov22   0:06  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12856   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    45469  0.1  0.8 277676 20544 ?        S    02:37   0:02  \_ /usr/sbin/httpd -k start
nobody    48022  0.1  0.8 277632 20356 ?        S    02:41   0:01  \_ /usr/sbin/httpd -k start
nobody    48208  0.1  0.8 277680 20388 ?        S    02:41   0:01  \_ /usr/sbin/httpd -k start
nobody    49354  0.1  0.8 277660 20348 ?        S    02:43   0:01  \_ /usr/sbin/httpd -k start
nobody    49533  0.1  0.8 277620 20248 ?        S    02:43   0:01  \_ /usr/sbin/httpd -k start
nobody    52781  0.1  0.8 277552 20080 ?        S    02:45   0:01  \_ /usr/sbin/httpd -k start
nobody    55670  0.1  0.8 277584 19764 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    57579  0.1  0.8 277736 20176 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    57711  0.1  0.8 277524 19824 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    59800  0.1  0.8 277908 19608 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
cloudw    64954  1.0  0.6 353712 16236 ?        S    03:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    60265  0.1  0.7 277520 19360 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    60608  0.1  0.8 277584 19556 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    61085  0.1  0.8 277520 19452 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    62813  0.1  0.7 277552 19264 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    63168  0.1  0.7 277700 19228 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    63319  0.1  0.7 277516 19320 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    63559  0.1  0.8 277616 19456 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    64804  0.0  0.7 277764 18440 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    64898  0.0  0.7 277416 17912 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    64 ?        S    Nov22   0:01  \_ [kworker]
root      44973  0.0  0.3 182072  9480 ?        Ss   00:00   0:09 lfd - sleeping
root      63462  0.0  0.0 123364   760 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 57596  Threads: 5  Questions: 5153287  Slow queries: 0  Opens: 11547  Flush tables: 1  Open tables: 2000  Queries per second avg: 89.473
*************************** 1. row ***************************
     Id: 79290
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 79291
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 79297
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 79298
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 79300
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.96.82 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 185.209.196.233 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 27.115.124.112 TIME_WAIT
      1 27.115.124.113 TIME_WAIT
      1 27.115.124.114 TIME_WAIT
      1 27.115.124.3 TIME_WAIT
      1 27.115.124.66 TIME_WAIT
      1 54.39.136.25 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 178.20.45.128 TIME_WAIT
      2 27.115.124.96 TIME_WAIT
      3 74.7.228.0 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 03:03:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 hours 59 minutes 51 seconds
   Server load: 0.74 0.53 0.55
   Total accesses: 272300 - Total Traffic: 6.5 GB - Total Duration: 144003512
   CPU Usage: u11.33 s7.92 cu3259.92 cs2543.6 - 10.1% CPU load
   4.73 requests/sec - 117.7 kB/second - 24.9 kB/request - 528.841 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

CKKKKWK__KKK_KKK.RKK............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS    Req    Dur   Conn  Child  Slot      Client      Protocol            VHost                              Request
   0-0  49533 1/389/14546 C 5.93 1     190   7397360 52.4  12.71 356.40 157.245.113.227 http/1.1 agradio.ng:443              GET /info.php HTTP/1.1
   1-0  64804 1/3/14252   K 0.00 1     271   7661187 33.6  0.08  352.46 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=718469259 HTTP/1.1
   2-0  57579 1/195/14056 K 2.96 0     0     7521811 5.8   4.31  338.64 74.7.244.23     http/1.1 nigeriadecide.org:443       GET /robots.txt HTTP/1.1
   3-0  45469 1/515/13547 K 7.29 1     275   7014051 34.8  16.82 335.77 192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=139676481 HTTP/1.1
   4-0  63559 1/45/13804  K 0.33 0     386   6988661 34.7  1.02  336.98 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=3674544552 HTTP/1.1
   5-0  48208 0/410/14158 W 6.98 0     0     7241548 0.0   12.27 368.21 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   6-0  63168 6/57/13074  K 0.64 1     301   6501793 189.9 1.17  327.72 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=2714511728 HTTP/1.1
   7-0  63319 0/48/13548  _ 0.65 0     0     6853959 0.0   0.88  327.34 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   8-0  62813 0/66/12902  _ 1.28 0     937   6492706 0.0   1.58  310.71 58.97.220.33    http/1.1 health.oyostate.gov.ng:80   GET /wp-admin/css/wp-login.php HTTP/1.1
   9-0  59800 1/140/12012 K 2.38 0     425   6272807 35.3  3.38  299.32 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=4230907707 HTTP/1.1
   10-0 57711 1/201/11964 K 2.72 2     330   6170939 34.2  4.85  285.64 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=4101843766 HTTP/1.1
   11-0 52781 1/310/12149 K 4.67 0     300   6241089 34.3  7.57  301.78 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=2945323222 HTTP/1.1
   12-0 64898 0/2/11977   _ 0.00 0     0     6219391 0.0   0.01  308.40 58.97.220.33    http/1.1 oysipa.oyostate.gov.ng:80   GET /cgi-bin/users.php HTTP/1.1
   13-0 60265 9/122/11681 K 2.28 3     397   5977242 281.5 3.38  280.97 192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=64953278 HTTP/1.1
   14-0 55670 1/223/10504 K 3.73 2     290   5325335 34.1  7.96  252.21 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=3075564608 HTTP/1.1
   15-0 49354 1/406/8928  K 5.42 0     8     4463092 0.8   9.52  221.30 58.97.220.33    http/1.1 covid-19.oyostate.gov.ng:80 GET /image/xl.php HTTP/1.1
   16-0 -     0/0/8846    . 0.00 266   0     4478817 0.0   0.00  210.29 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   17-0 48022 0/448/8338  R 7.53 0     361   4232753 0.0   14.10 207.12 192.178.4.97    http/1.1 team.cloudware.ng:443
   18-0 60608 1/111/7071  K 1.84 0     0     3745777 0.7   2.38  167.98 58.97.220.33    http/1.1 covid19.oyostate.gov.ng:80  GET /wp-admin/maint/wp_project.php HTTP/1.1
   19-0 61085 3/95/8020   K 1.47 2     281   3920812 94.5  1.99  198.40 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=1905013365 HTTP/1.1
   20-0 -     0/0/5745    . 0.00 1304  0     3141193 0.0   0.00  132.07 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   21-0 -     0/0/4658    . 0.00 331   0     2695112 0.0   0.00  114.04 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-0 -     0/0/3221    . 0.00 1507  0     1904649 0.0   0.00  85.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/2854    . 0.00 4426  0     1555805 0.0   0.00  58.97  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/1636    . 0.00 4035  0     1282876 0.0   0.00  39.63  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/2570    . 0.00 4530  0     1163271 0.0   0.00  57.91  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1903    . 0.00 4044  0     1185213 0.0   0.00  47.42  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1301    . 0.00 4493  0     843370  0.0   0.00  38.82  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/1528    . 0.00 4486  0     741140  0.0   0.00  34.17  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/1651    . 0.00 4027  0     952853  0.0   0.00  34.23  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1294    . 0.00 5795  0     796559  0.0   0.00  30.37  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/535     . 0.00 5788  0     418251  0.0   0.00  9.62   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/521     . 0.00 5801  0     501649  0.0   0.00  10.47  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/226     . 0.00 5755  0     242996  0.0   0.00  4.32   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/723     . 0.00 5207  0     452012  0.0   0.00  11.57  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/645     . 0.00 5805  0     507090  0.0   0.00  14.62  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/89      . 0.00 5769  0     137985  0.0   0.00  0.74   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/222     . 0.00 5674  0     187355  0.0   0.00  4.82   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/661     . 0.00 5794  0     330279  0.0   0.00  12.67  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/582     . 0.00 5635  0     506531  0.0   0.00  13.50  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/227     . 0.00 5797  0     280411  0.0   0.00  4.37   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/416     . 0.00 5791  0     308037  0.0   0.00  9.50   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/144     . 0.00 5768  0     280413  0.0   0.00  1.55   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/290     . 0.00 4955  0     344154  0.0   0.00  5.96   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/292     . 0.00 5804  0     301816  0.0   0.00  6.10   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/198     . 0.00 5767  0     141072  0.0   0.00  1.57   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00 14519 0     180509  0.0   0.00  0.80   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00 14541 0     226531  0.0   0.00  1.33   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00 14532 0     142085  0.0   0.00  4.09   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00 14183 0     181603  0.0   0.00  4.73   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00 14545 0     44788   0.0   0.00  1.22   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00 14505 0     43835   0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00 14514 0     45747   0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00 14512 0     44492   0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/536     . 0.00 12629 0     268842  0.0   0.00  11.18  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00 14549 0     23627   0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00 14508 0     47344   0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 14510 0     44159   0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00 14551 11655 23366   0.0   0.00  0.07   45.94.58.4      http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141     . 0.00 13912 0     113874  0.0   0.00  3.52   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/132     . 0.00 14542 0     76946   0.0   0.00  2.87   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00 14540 0     3701    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00 14099 0     97395   0.0   0.00  2.67   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00 14524 0     27806   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00 14517 0     25454   0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00 14537 0     28822   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00 16063 0     28      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00 16068 0     46      0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 16106 0     1240    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00 16105 0     703     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00 16098 0     1790    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00 16046 0     737     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 16117 0     0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00 14652 0     263682  0.0   0.00  8.36   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00 16094 0     4803    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 16116 0     0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00 16058 0     2942    0.0   0.00  0.21   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00 15414 0     87870   0.0   0.00  4.44   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00 15918 0     25484   0.0   0.00  1.24   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1007
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 1...34)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 191018
   total entries replaced since starting: 0
   total entries expired since starting: 189941
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 515 miss
   total removes since starting: 71 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit