403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-24.03.12.txt
 ## swap threshold exceeded
## server overview
2025-11-24.03.12 load[0] mem[64/37] mysql[1/25] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1293          70          48        1000         836
Swap:          4047        1693        2354
 03:12:02 up 12:31,  0 users,  load average: 0.76, 0.38, 0.34
## system overview
top - 03:12:02 up 12:31,  0 users,  load average: 0.76, 0.38, 0.34
Tasks: 197 total,   1 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 43.3 us, 33.3 sy,  0.0 ni, 20.0 id,  3.3 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    82076 free,  1320856 used,  1017368 buff/cache
KiB Swap:  4145144 total,  2410692 free,  1734452 used.   860276 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1744 mysql     20   0 1462304 288992   3036 S  73.3 11.9   9:54.82 /usr/sbin+
     1 root      20   0   44400   3240   1452 S  13.3  0.1   1:03.61 /usr/lib/+
    36 root      20   0       0      0      0 S   6.7  0.0   0:39.50 [kswapd0]
   506 nscd      20   0 1336536   1944    736 S   6.7  0.1   0:28.31 /usr/sbin+
 93587 nigeria   20   0  404052  16136  10384 S   6.7  0.7   0:00.03 /opt/cpan+
 93598 root      20   0  160220   2064   1584 R   6.7  0.1   0:00.01 top -bcn1
 93601 cloudw    20   0  366220  16580  10888 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.49 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.58 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:40.85 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.55 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.21 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:01.15 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:05.66 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:04.93 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.58 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   3788   3536 S   0.0  0.2   0:28.06 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.44 /usr/lib/+
   412 root      16  -4   55532    380    248 S   0.0  0.0   0:04.54 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   0:01.03 /usr/sbin+
   489 root      20   0   24704   1168    800 S   0.0  0.0   0:10.71 /usr/lib/+
   494 polkitd   20   0  610540    840    452 S   0.0  0.0   0:06.22 /usr/lib/+
   495 root      20   0  224144   3096    824 S   0.0  0.1   0:00.50 queueproc+
   496 root      20   0   52852    204    112 S   0.0  0.0   0:00.01 /usr/sbin+
   497 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   503 dbus      20   0   58716   1320    600 S   0.0  0.1   0:24.30 /usr/bin/+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0  124476    424    296 S   0.0  0.0   0:01.28 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89112   3508    500 S   0.0  0.1   0:00.84 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:03.99 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51508    456    280 S   0.0  0.0   0:00.64 /usr/sbin+
   928 systuser  20   0   11540     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   931 systuser  20   0  112524     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   932 systuser  20   0  111608     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  153404    220    136 S   0.0  0.0   0:01.01 pure-ftpd+
   934 root      20   0  445028    464    348 S   0.0  0.0   0:01.87 sw-engine+
   935 root      20   0  572372    656    200 S   0.0  0.0   0:03.84 /usr/bin/+
   936 telegraf  20   0 5654304  37652   2620 S   0.0  1.6   0:24.29 /usr/loca+
   937 root      20   0  111304    364    256 S   0.0  0.0   0:07.20 /usr/sbin+
   939 root      20   0 1350088   8280      4 S   0.0  0.3   0:25.09 /usr/bin/+
   941 root      20   0  400740   1908    552 S   0.0  0.1   0:05.49 php-fpm: +
   946 root      20   0  396248    408    316 S   0.0  0.0   0:01.20 php-fpm: +
   951 root      20   0  439788    244    152 S   0.0  0.0   0:01.25 php-fpm: +
   952 root      20   0  261164   4924    876 S   0.0  0.2   0:06.38 cpsrvd (S+
   953 root      20   0  331088   4300   3652 S   0.0  0.2   0:13.96 /usr/sbin+
   959 root      20   0  389508    296    204 S   0.0  0.0   0:01.19 php-fpm: +
   960 root      20   0 1828280 363104   1056 S   0.0 15.0   0:33.30 /usr/loca+
   969 cpanelc+  20   0   10516   3360   2256 S   0.0  0.1   0:35.00 /usr/loca+
   970 named     20   0  989260  37688   1380 S   0.0  1.6   0:20.52 /usr/sbin+
   972 memcach+  20   0  342400     48     48 S   0.0  0.0   0:00.98 /usr/bin/+
   974 root      20   0 1277312   2312      4 S   0.0  0.1   0:23.04 /usr/bin/+
   980 systuser  20   0  114016  12208   2208 S   0.0  0.5   0:10.74 /usr/loca+
   995 root      20   0  388892    204    120 S   0.0  0.0   0:01.11 php-fpm: +
  1053 dovenull  20   0   46984   1340    752 S   0.0  0.1   0:01.57 dovecot/p+
  1054 dovenull  20   0   48008   1812    812 S   0.0  0.1   0:00.43 dovecot/i+
  1055 dovecot   20   0   10320    220    104 S   0.0  0.0   0:00.30 dovecot/a+
  1056 root      20   0   10452    524    324 S   0.0  0.0   0:00.77 dovecot/l+
  1057 dovenull  20   0   47052   1344    656 S   0.0  0.1   0:01.18 dovecot/p+
  1058 dovenull  20   0   47772   1388    460 S   0.0  0.1   0:00.31 dovecot/i+
  1064 root      20   0   24556   1932    424 S   0.0  0.1   0:00.30 dovecot/c+
  1065 dovecot   20   0   13568    516    304 S   0.0  0.0   0:00.12 dovecot/s+
  1122 dovecot   20   0   41188   1404    912 S   0.0  0.1   0:01.91 dovecot/a+
  1144 systuser  20   0  157704   2204    212 S   0.0  0.1   0:00.20 SonarPush+
  1146 wp-tool+  20   0  412396   7172   1132 S   0.0  0.3   0:14.39 /usr/bin/+
  1147 wp-tool+  20   0  387556   3216   1336 S   0.0  0.1   0:00.41 /usr/bin/+
  1174 root      20   0  248224  11724    652 S   0.0  0.5   0:08.14 /usr/loca+
  1239 root      20   0  167452   2940   1572 S   0.0  0.1   0:00.75 dnsadmin +
  1243 root      20   0  209476   9068   1204 S   0.0  0.4   0:04.91 tailwatchd
  1244 root      20   0  262224  20312   2452 S   0.0  0.8   0:03.25 cpdavd - +
  1676 root      38  18  130416   1172    504 S   0.0  0.0   0:00.11 cpanellog+
  2037 root      20   0  267052   5484    500 S   0.0  0.2   0:02.89 /usr/sbin+
  2039 root      20   0   12848    328    212 S   0.0  0.0   0:04.13 /usr/loca+
  2040 root      20   0   12732    280    208 S   0.0  0.0   0:03.51 /usr/loca+
  2041 root      20   0   12884    340    216 S   0.0  0.0   0:03.82 /usr/loca+
  2045 root      20   0   53256      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2152 root      20   0  299272    484    320 S   0.0  0.0   0:01.33 php-fpm: +
  6714 root      20   0  266248  92560   1464 S   0.0  3.8   0:06.23 spamd chi+
  6715 root      20   0  248224  10404    192 S   0.0  0.4   0:00.02 spamd chi+
 15361 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.85 [kworker]
 37707 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 51048 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 60917 root      20   0  182512   9704   1032 S   0.0  0.4   0:11.69 lfd - sle+
 63604 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67381 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 67541 nobody    20   0  277756  19992   4704 S   0.0  0.8   0:01.98 /usr/sbin+
 70153 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 77665 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 78648 nobody    20   0  277884  19652   4608 S   0.0  0.8   0:01.42 /usr/sbin+
 78656 nobody    20   0  277560  19212   4460 S   0.0  0.8   0:01.36 /usr/sbin+
 80057 nobody    20   0  277588  18920   3952 S   0.0  0.8   0:01.08 /usr/sbin+
 81980 nobody    20   0  277584  19276   4412 S   0.0  0.8   0:01.06 /usr/sbin+
 83015 nobody    20   0  277628  18624   3824 S   0.0  0.8   0:00.91 /usr/sbin+
 83322 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83800 nobody    20   0  277884  18556   3604 S   0.0  0.8   0:00.82 /usr/sbin+
 87832 nobody    20   0  277596  19076   4220 S   0.0  0.8   0:00.51 /usr/sbin+
 88061 nobody    20   0  277584  18244   3632 S   0.0  0.8   0:00.53 /usr/sbin+
 89149 nobody    20   0  277592  18668   4004 S   0.0  0.8   0:00.39 /usr/sbin+
 89694 nobody    20   0  277580  18000   3764 S   0.0  0.7   0:00.41 /usr/sbin+
 89825 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90381 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 90766 nobody    20   0  277488  18072   3788 S   0.0  0.7   0:00.20 /usr/sbin+
 91019 root      30  10  132964   3932    392 S   0.0  0.2   0:00.00 ConfigSer+
 91040 root      30  10  108056    284    208 S   0.0  0.0   0:00.00 sleep 5236
 91997 nobody    20   0  277900  17432   3232 S   0.0  0.7   0:00.18 /usr/sbin+
 92219 root      20   0   41052   1768   1104 S   0.0  0.1   0:00.00 dovecot/a+
 92947 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93060 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 93140 root      20   0  111304   4444   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 93141 sshd      20   0  115644   2620   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 93159 nobody    20   0  277568  17540   3660 S   0.0  0.7   0:00.06 /usr/sbin+
 93225 nobody    20   0  277892  18056   3976 S   0.0  0.7   0:00.03 /usr/sbin+
 93280 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 93414 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 93445 nigeria   20   0  400460   4292   2184 S   0.0  0.2   0:00.00 php-fpm: +
 93462 nobody    20   0  277416  16800   3136 S   0.0  0.7   0:00.00 /usr/sbin+
 93500 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 93506 cloudw    20   0  287616  14584   9596 S   0.0  0.6   0:00.02 /opt/cpan+
 93516 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93517 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93518 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93519 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93522 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93523 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93524 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93525 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93526 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93527 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93528 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93530 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93540 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 93541 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93542 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 93543 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93544 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93546 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93547 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93548 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93549 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93550 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93551 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93552 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 93554 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 93561 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 93575 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 93576 pactpay   20   0  480124  17300  11564 S   0.0  0.7   0:00.01 /opt/cpan+
 93586 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
100526 root      20   0  183048   1572   1028 S   0.0  0.1   0:00.00 /usr/sbin+
100564 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
100600 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 4h +
100764 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov23   0:40  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov23   0:39  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   0:05  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   0:04  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   0:03  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root     100764  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:0]
root      37707  0.0  0.0      0     0 ?        S    01:54   0:00  \_ [kworker/u200:2]
root      51048  0.0  0.0      0     0 ?        S    02:13   0:00  \_ [kworker/0:3]
root      63604  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/1:1]
root      67381  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/1:2]
root      70153  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:2]
root      77665  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:1]
root      83322  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:0]
root      89825  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/1:3]
root      90381  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/0:4]
root      92947  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1  44400  3240 ?        Ss   Nov23   1:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  3788 ?        Ss   Nov23   0:28 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   380 ?        S<sl Nov23   0:04 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss   Nov23   0:01 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24704  1168 ?        Ss   Nov23   0:10 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610540   840 ?        Ssl  Nov23   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.1 224144  3096 ?        Ss   Nov23   0:00 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852   204 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    72 ?        Ss   Nov23   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58716  1320 ?        Ss   Nov23   0:24 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.0  0.0 1336536 1944 ?        Ssl  Nov23   0:28 /usr/sbin/nscd
rpc         511  0.0  0.0  69256    60 ?        Ss   Nov23   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208     4 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124476   424 ?        Ss   Nov23   0:01 /usr/sbin/crond -n
root     100526  0.0  0.0 183048  1572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root     100564  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root     100600  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 4h 23m
root      93516  0.0  0.0 183044  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93552  0.0  0.0 113284  1212 ?        Ss   03:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      93554  0.0  0.0 108052   360 ?        S    03:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      93561  0.0  0.0 113288  1516 ?        S    03:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      93609  0.0  0.0 153840  2092 ?        R    03:12   0:00  |               \_ ps auxf
root      93517  0.0  0.0 183044  2148 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93550  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      93518  0.0  0.0 183044  2148 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93543  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      93519  0.0  0.0 183044  2148 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93544  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      93522  0.0  0.0 183044  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93549  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      93523  0.0  0.0 183044  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93541  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      93524  0.0  0.0 183044  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93546  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      93525  0.0  0.0 183044  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93548  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      93526  0.0  0.0 183044  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93551  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      93527  0.0  0.0 183044  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93547  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      93528  0.0  0.0 183044  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93540  0.0  0.0  20164   964 ?        Ss   03:12   0:00  |   \_ jailshell (pactpay) [93575] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93575  0.0  0.0  20164   260 ?        S    03:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93576  0.0  0.7 480124 17300 ?        R    03:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      93530  0.0  0.0 183044  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      93542  0.0  0.0  20164   960 ?        Ss   03:12   0:00      \_ jailshell (nigeria) [93586] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93586  0.0  0.0  20164   256 ?        S    03:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93587  0.0  0.6 404052 16136 ?        S    03:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89112  3508 ?        Ss   Nov23   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51508   456 ?        Ss   Nov23   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1053  0.0  0.0  46984  1340 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1054  0.0  0.0  48008  1812 ?        S    Nov23   0:00  \_ dovecot/imap-login
dovecot    1055  0.0  0.0  10320   220 ?        S    Nov23   0:00  \_ dovecot/anvil
root       1056  0.0  0.0  10452   524 ?        S    Nov23   0:00  \_ dovecot/log
dovenull   1057  0.0  0.0  47052  1344 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1058  0.0  0.0  47772  1388 ?        S    Nov23   0:00  \_ dovecot/imap-login
root       1064  0.0  0.0  24556  1932 ?        S    Nov23   0:00  \_ dovecot/config
dovecot    1065  0.0  0.0  13568   516 ?        S    Nov23   0:00  \_ dovecot/stats
dovecot    1122  0.0  0.0  41188  1404 ?        S    Nov23   0:01  \_ dovecot/auth
root      92219  0.0  0.0  41052  1768 ?        S    03:10   0:00  \_ dovecot/auth -w
root      93280  0.0  0.1  60820  4512 ?        S    03:11   0:00  \_ dovecot/lmtp
systuser    928  0.0  0.0  11540    44 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    52 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    44 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    56 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   220 ?        Ss   Nov23   0:01 pure-ftpd (SERVER)
root        934  0.0  0.0 445028   464 ?        Ss   Nov23   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  93414  0.0  0.0 445028   328 ?        S    03:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        935  0.0  0.0 572372   656 ?        Ssl  Nov23   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    936  0.0  1.5 5654304 37652 ?       SLsl Nov23   0:24 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        937  0.0  0.0 111304   364 ?        Ss   Nov23   0:07 /usr/sbin/sshd -D
root      93060  0.0  0.1 111304  4260 ?        Ss   03:11   0:00  \_ sshd: [accepted]
root      93140  0.0  0.1 111304  4444 ?        Ss   03:11   0:00  \_ sshd: [accepted]
sshd      93141  0.0  0.1 115644  2620 ?        S    03:11   0:00      \_ sshd: [net]
root        939  0.0  0.3 1350088 8280 ?        Ssl  Nov23   0:25 /usr/bin/cspdaemon
root        941  0.0  0.0 400740  1908 ?        Ss   Nov23   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   93445  0.0  0.1 400460  4292 ?        S    03:11   0:00  \_ php-fpm: pool nigeriadecide_org
root        946  0.0  0.0 396248   408 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        951  0.0  0.0 439788   244 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        952  0.0  0.2 261164  4924 ?        Ss   Nov23   0:06 cpsrvd (SSL) - waiting for connections                   
root      93500  0.0  0.0      0     0 ?        Z    03:11   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.1 331088  4300 ?        Ssl  Nov23   0:13 /usr/sbin/rsyslogd -n
root        959  0.0  0.0 389508   296 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        960  0.0 15.0 1828280 363104 ?      Ssl  Nov23   0:33 /usr/local/cpanel/3rdparty/bin/clamd -F
cpanelc+    969  0.0  0.1  10516  3360 ?        Ss   Nov23   0:35 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
named       970  0.0  1.5 989260 37688 ?        Ssl  Nov23   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    972  0.0  0.0 342400    48 ?        Ssl  Nov23   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2312 ?        Ssl  Nov23   0:23 /usr/bin/checkstatus
systuser    980  0.0  0.5 114016 12208 ?        Ssl  Nov23   0:10 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        995  0.0  0.0 388892   204 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1144  0.0  0.0 157704  2204 ?        S    Nov23   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  0.2 412396  7172 ?        Ss   Nov23   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1147  0.0  0.1 387556  3216 ?        Ss   Nov23   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1174  0.0  0.4 248224 11724 ?        Ss   Nov23   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6714  0.0  3.8 266248 92560 ?        S    Nov23   0:06  \_ spamd child
root       6715  0.0  0.4 248224 10404 ?        S    Nov23   0:00  \_ spamd child
root       1239  0.0  0.1 167452  2940 ?        Ss   Nov23   0:00 dnsadmin - dormant mode
root       1243  0.0  0.3 209476  9068 ?        Ss   Nov23   0:04 tailwatchd
root       1244  0.0  0.8 262224 20312 ?        Ss   Nov23   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416  1172 ?        SN   Nov23   0:00 cpanellogd - sleeping for logs
mysql      1744  1.3 11.9 1462304 288992 ?      Sl   Nov23   9:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2037  0.0  0.2 267052  5484 ?        Ss   Nov23   0:02 /usr/sbin/httpd -k start
root       2039  0.0  0.0  12848   328 ?        S    Nov23   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2040  0.0  0.0  12732   280 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2041  0.0  0.0  12884   340 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2045  0.0  0.0  53256     4 ?        S    Nov23   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    67541  0.0  0.8 277756 19992 ?        S    02:38   0:01  \_ /usr/sbin/httpd -k start
cloudw    93601  0.0  0.6 366220 16580 ?        R    03:12   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    78648  0.1  0.8 277884 19652 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    78656  0.1  0.7 277560 19212 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    80057  0.0  0.7 277588 18920 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    81980  0.1  0.7 277584 19276 ?        S    02:56   0:01  \_ /usr/sbin/httpd -k start
nobody    83015  0.1  0.7 277628 18624 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    83800  0.1  0.7 277884 18556 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    87832  0.1  0.7 277596 19076 ?        S    03:04   0:00  \_ /usr/sbin/httpd -k start
nobody    88061  0.1  0.7 277584 18244 ?        S    03:04   0:00  \_ /usr/sbin/httpd -k start
nobody    89149  0.1  0.7 277592 18668 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    89694  0.1  0.7 277580 18000 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    90766  0.1  0.7 277488 18072 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91997  0.1  0.7 277900 17432 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    93159  0.1  0.7 277568 17540 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    93225  0.1  0.7 277892 18056 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    93462  0.0  0.6 277416 16800 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
root       2152  0.0  0.0 299272   484 ?        Ss   Nov23   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+  15361  0.0  0.0   3148     8 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3152    36 ?        S    Nov23   0:00  \_ [kworker]
root      60917  0.1  0.4 182512  9704 ?        Ss   00:00   0:11 lfd - sleeping
root      91019  0.0  0.1 132964  3932 ?        SN   03:09   0:00 ConfigServer Version Check
root      91040  0.0  0.0 108056   284 ?        SN   03:09   0:00  \_ sleep 5236
cloudw    93506  1.0  0.6 287616 14584 ?        S    03:11   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/rlvmde.php
## mysql stats
Uptime: 45062  Threads: 3  Questions: 3834911  Slow queries: 0  Opens: 9650  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.102
*************************** 1. row ***************************
     Id: 62741
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-24' LIMIT 1
*************************** 2. row ***************************
     Id: 62745
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 62748
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.132 TIME_WAIT
      1 104.210.140.142 TIME_WAIT
      1 114.119.136.120 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 205.169.39.14 TIME_WAIT
      1 43.167.232.38 TIME_WAIT
      1 66.179.80.51 TIME_WAIT
      1 74.7.229.244 TIME_WAIT
      1 74.7.243.57 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 24-Nov-2025 03:12:02 WAT
   Restart Time: Sunday, 23-Nov-2025 14:41:06 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 30 minutes 56 seconds
   Server load: 0.76 0.38 0.34
   Total accesses: 179257 - Total Traffic: 4.3 GB - Total Duration: 86228987
   CPU Usage: u8.01 s5.8 cu2121.93 cs1640.37 - 8.38% CPU load
   3.98 requests/sec - 100.9 kB/second - 25.4 kB/request - 481.036 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

__K_KRKKKK__....__R....W........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  89149 0/68/10780  _ 1.57 1     3   4902192 0.0   1.97  260.35 23.21.175.228   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/images/blog/images/ima
   1-0  81980 0/220/10057 _ 4.35 2     347 4883470 0.0   8.48  240.09 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=551668190 HTTP/1.1
   2-0  91997 1/27/10221  K 0.65 2     397 4873237 34.5  0.69  256.43 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=3388975276 HTTP/1.1
   3-0  87832 0/100/9939  _ 2.27 3     355 4630348 0.0   3.11  232.39 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=989378016 HTTP/1.1
   4-0  93159 1/10/9492   K 0.21 3     345 4407886 34.5  0.27  237.15 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=1358460449 HTTP/1.1
   5-0  88061 0/182/10068 R 1.92 34    1   5045554 0.0   3.77  248.95 101.10.158.189  http/1.1
   6-0  89694 3/73/9314   K 1.77 4     359 4439092 94.0  3.63  246.33 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=2045558574 HTTP/1.1
   7-0  78648 4/255/9488  K 5.99 0     283 4582758 124.9 6.87  242.16 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=2187873468 HTTP/1.1
   8-0  67541 1/355/8909  K 8.76 0     290 4495063 34.6  12.99 245.44 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=3756600865 HTTP/1.1
   9-0  90766 1/40/8644   K 0.98 0     304 4179777 36.0  1.31  215.53 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3258146766 HTTP/1.1
   10-0 93225 0/8/8821    _ 0.12 0     2   4207209 0.0   0.13  199.94 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 93462 0/1/8227    _ 0.00 1     349 3924682 0.0   0.03  204.91 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=2806446239 HTTP/1.1
   12-0 -     0/0/7951    . 0.00 455   0   3696772 0.0   0.00  195.83 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/7065    . 0.00 289   0   3443091 0.0   0.00  180.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -     0/0/8053    . 0.00 712   0   3748542 0.0   0.00  192.68 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/6606    . 0.00 690   0   3179856 0.0   0.00  152.91 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 78656 0/241/6520  _ 5.98 1     345 2971103 0.0   6.74  161.16 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=1022523795 HTTP/1.1
   17-0 83015 0/157/4908  _ 3.84 2     347 2454882 0.0   4.66  133.12 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1875703791 HTTP/1.1
   18-0 83800 0/242/3548  R 3.50 43    41  1581175 0.0   4.06  89.97  202.124.204.254 http/1.1 health.oyostate.gov.ng:443
   19-0 -     0/0/2650    . 0.00 669   0   1459659 0.0   0.00  69.42  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/3104    . 0.00 168   0   1607887 0.0   0.00  89.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/3069    . 0.00 713   0   1544078 0.0   0.00  69.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/2707    . 0.00 765   0   1425544 0.0   0.00  66.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 80057 0/335/2131  W 5.28 0     0   1110967 0.0   4.45  49.51  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 -     0/0/559     . 0.00 1000  0   299273  0.0   0.00  12.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/315     . 0.00 972   0   238794  0.0   0.00  10.44  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/140     . 0.00 670   0   54141   0.0   0.00  5.50   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/711     . 0.00 1036  0   307114  0.0   0.00  16.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/16      . 0.00 4580  0   4063    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/282     . 0.00 4398  0   132073  0.0   0.00  6.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/105     . 0.00 4413  0   51498   0.0   0.00  2.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/122     . 0.00 4604  0   43811   0.0   0.00  2.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/500     . 0.00 4611  0   254576  0.0   0.00  10.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/299     . 0.00 4575  0   138982  0.0   0.00  7.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/152     . 0.00 4602  0   65881   0.0   0.00  4.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/34      . 0.00 4414  0   20100   0.0   0.00  0.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/60      . 0.00 4579  0   21725   0.0   0.00  1.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/201     . 0.00 4583  0   67939   0.0   0.00  4.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/22      . 0.00 4601  0   7976    0.0   0.00  0.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/269     . 0.00 4486  0   107484  0.0   0.00  5.78   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/109     . 0.00 4606  0   44874   0.0   0.00  2.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/511     . 0.00 4565  0   262372  0.0   0.00  12.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/24      . 0.00 4576  0   9556    0.0   0.00  0.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/20      . 0.00 4609  0   7953    0.0   0.00  0.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/340     . 0.00 4600  0   120248  0.0   0.00  6.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/402     . 0.00 3636  0   257575  0.0   0.00  12.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/19      . 0.00 4570  0   7165    0.0   0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/24      . 0.00 4597  0   8311    0.0   0.00  0.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/5       . 0.00 4557  0   31      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/17      . 0.00 4596  0   4077    0.0   0.00  0.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00 4566  0   3020    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/18      . 0.00 4569  0   3093    0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/16      . 0.00 4572  0   6251    0.0   0.00  0.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/5       . 0.00 4599  0   142     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/3       . 0.00 4598  0   123     0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/3       . 0.00 4588  0   530     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2       . 0.00 4587  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3       . 0.00 4585  0   8       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/2       . 0.00 4595  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/11      . 0.00 4567  0   3270    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/3       . 0.00 4592  0   5       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/173     . 0.00 3825  0   100973  0.0   0.00  4.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/4       . 0.00 4568  0   18      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/45      . 0.00 4407  0   30130   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/97      . 0.00 4126  0   51206   0.0   0.00  2.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/6       . 0.00 4584  0   1388    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/970     . 0.00 2926  0   524903  0.0   0.00  17.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/20      . 0.00 4586  0   8979    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/2       . 0.00 4594  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/8       . 0.00 4553  0   3015    0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/18      . 0.00 4589  0   8604    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/259     . 0.00 3600  0   136946  0.0   0.00  6.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/39      . 0.00 4593  0   11176   0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2       . 0.00 4590  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/2       . 0.00 4591  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/5       . 0.00 4555  0   1531    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/4       . 0.00 14701 0   1217    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 622
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...67)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 128102
   total entries replaced since starting: 0
   total entries expired since starting: 127447
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 46 hit, 322 miss
   total removes since starting: 33 hit, 22 miss
Youez - 2016 - github.com/yon3zu
LinuXploit