403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-24.03.18.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-24.03.18 load[0] mem[94/50] mysql[2/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        2118          64          13         179          72
Swap:          4047        2135        1912
 03:18:04 up 12:37,  0 users,  load average: 2.19, 0.69, 0.44
## system overview
top - 03:18:04 up 12:37,  0 users,  load average: 2.19, 0.69, 0.44
Tasks: 205 total,   4 running, 199 sleeping,   0 stopped,   2 zombie
%Cpu(s): 76.3 us, 21.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.6 si,  0.0 st
KiB Mem :  2420300 total,    72376 free,  2152300 used,   195624 buff/cache
KiB Swap:  4145144 total,  1963032 free,  2182112 used.    86312 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
   960 root      20   0 3326548   1.4g    164 S  77.8 58.8   0:46.52 /usr/loca+
  1744 mysql     20   0 1462304 178008   1320 S  44.4  7.4   9:59.65 /usr/sbin+
     1 root      20   0   44400   2712    948 S   5.6  0.1   1:04.10 /usr/lib/+
    36 root      20   0       0      0      0 S   5.6  0.0   0:43.85 [kswapd0]
   265 root       0 -20       0      0      0 S   5.6  0.0   0:05.06 [kworker/+
 97449 nigeria   20   0  404052   8612   2828 S   5.6  0.4   0:00.05 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.52 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.60 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:41.17 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.56 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.27 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:01.16 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:05.77 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.60 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   4424   4188 S   0.0  0.2   0:28.29 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.44 /usr/lib/+
   412 root      16  -4   55532    184     52 S   0.0  0.0   0:04.57 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    132     44 S   0.0  0.0   0:01.04 /usr/sbin+
   489 root      20   0   24704    992    688 S   0.0  0.0   0:10.79 /usr/lib/+
   494 polkitd   20   0  610540   1068    696 S   0.0  0.0   0:06.27 /usr/lib/+
   495 root      20   0  224144   1156      0 S   0.0  0.0   0:00.50 queueproc+
   496 root      20   0   52852     92      0 S   0.0  0.0   0:00.01 /usr/sbin+
   497 root      20   0  152780     48      4 S   0.0  0.0   0:00.03 /usr/sbin+
   503 dbus      20   0   58716   1256    584 S   0.0  0.1   0:24.50 /usr/bin/+
   506 nscd      20   0 1336536    796      0 S   0.0  0.0   0:28.56 /usr/sbin+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0  124476    180     52 S   0.0  0.0   0:01.29 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89112    760      8 S   0.0  0.0   0:00.84 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:03.99 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51508    172      0 S   0.0  0.0   0:00.65 /usr/sbin+
   928 systuser  20   0   11540      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   931 systuser  20   0  112524      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   932 systuser  20   0  111608      8      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  153404     84      0 S   0.0  0.0   0:01.02 pure-ftpd+
   934 root      20   0  445028    220    108 S   0.0  0.0   0:01.89 sw-engine+
   935 root      20   0  572372    448      0 S   0.0  0.0   0:03.88 /usr/bin/+
   936 telegraf  20   0 5654304  20012      0 S   0.0  0.8   0:24.52 /usr/loca+
   937 root      20   0  111304    108      0 S   0.0  0.0   0:07.26 /usr/sbin+
   939 root      20   0 1350088   8264      4 S   0.0  0.3   0:25.10 /usr/bin/+
   941 root      20   0  400740    316    148 S   0.0  0.0   0:05.55 php-fpm: +
   946 root      20   0  396248    156     68 S   0.0  0.0   0:01.22 php-fpm: +
   951 root      20   0  439788     92      4 S   0.0  0.0   0:01.27 php-fpm: +
   952 root      20   0  261164   2968     32 S   0.0  0.1   0:06.46 cpsrvd (S+
   953 root      20   0  331088   4928   4316 S   0.0  0.2   0:14.09 /usr/sbin+
   959 root      20   0  389508     96      8 S   0.0  0.0   0:01.21 php-fpm: +
   969 cpanelc+  20   0   10516   2772   2064 R   0.0  0.1   0:35.28 /usr/loca+
   970 named     20   0  989260  29644    668 S   0.0  1.2   0:20.83 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.99 /usr/bin/+
   974 root      20   0 1277312   1432      4 S   0.0  0.1   0:23.05 /usr/bin/+
   980 systuser  20   0  114016   9228      0 S   0.0  0.4   0:10.85 /usr/loca+
   995 root      20   0  388892     80      4 S   0.0  0.0   0:01.13 php-fpm: +
  1053 dovenull  20   0   46984    376      0 S   0.0  0.0   0:01.58 dovecot/p+
  1054 dovenull  20   0   48008    928      0 S   0.0  0.0   0:00.43 dovecot/i+
  1055 dovecot   20   0   10320    120      0 S   0.0  0.0   0:00.30 dovecot/a+
  1056 root      20   0   10452    328    148 S   0.0  0.0   0:00.78 dovecot/l+
  1057 dovenull  20   0   47052    744    108 S   0.0  0.0   0:01.20 dovecot/p+
  1058 dovenull  20   0   47772    672      0 S   0.0  0.0   0:00.31 dovecot/i+
  1064 root      20   0   24700   1252      8 S   0.0  0.1   0:00.31 dovecot/c+
  1065 dovecot   20   0   13568    176      0 S   0.0  0.0   0:00.12 dovecot/s+
  1122 dovecot   20   0   41188    328     60 S   0.0  0.0   0:01.92 dovecot/a+
  1144 systuser  20   0  157704     52      0 S   0.0  0.0   0:00.21 SonarPush+
  1146 wp-tool+  20   0  412396   7168   1148 S   0.0  0.3   0:14.53 /usr/bin/+
  1147 wp-tool+  20   0  387556   1880      0 S   0.0  0.1   0:00.41 /usr/bin/+
  1174 root      20   0  248224  11280    408 S   0.0  0.5   0:08.19 /usr/loca+
  1239 root      20   0  167452    908    460 S   0.0  0.0   0:00.76 dnsadmin +
  1243 root      20   0  209476   6736     52 S   0.0  0.3   0:04.95 tailwatchd
  1244 root      20   0  183900   3236      0 S   0.0  0.1   0:03.26 cpdavd - +
  1676 root      38  18  130416    648      0 S   0.0  0.0   0:00.11 cpanellog+
  2037 root      20   0  267052   4712     56 S   0.0  0.2   0:02.91 /usr/sbin+
  2039 root      20   0   12796    296    112 S   0.0  0.0   0:04.16 /usr/loca+
  2040 root      20   0   12732     80      8 S   0.0  0.0   0:03.53 /usr/loca+
  2041 root      20   0   12824    300     88 S   0.0  0.0   0:03.83 /usr/loca+
  2045 root      20   0   53256      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2152 root      20   0  299272    292    128 S   0.0  0.0   0:01.36 php-fpm: +
  6714 root      20   0  266496  90356      0 S   0.0  3.7   0:06.59 spamd chi+
  6715 root      20   0  248224  10024      0 S   0.0  0.4   0:00.02 spamd chi+
 15361 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3152     28      0 S   0.0  0.0   0:00.86 [kworker]
 37707 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 60917 root      20   0  182512   6600    128 S   0.0  0.3   0:12.09 lfd - sle+
 63604 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67381 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 77665 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 78648 nobody    20   0  277884   8860   1308 S   0.0  0.4   0:01.84 /usr/sbin+
 78656 nobody    20   0  277560   8084    224 S   0.0  0.3   0:01.78 /usr/sbin+
 81980 nobody    20   0  277592   9220   1324 S   0.0  0.4   0:01.47 /usr/sbin+
 83015 nobody    20   0  277628  14816   1292 S   0.0  0.6   0:01.36 /usr/sbin+
 83322 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87832 nobody    20   0  277604  14732    276 S   0.0  0.6   0:00.92 /usr/sbin+
 89149 nobody    20   0  277592  14676    288 S   0.0  0.6   0:00.84 /usr/sbin+
 89694 nobody    20   0  277580  15384   1452 S   0.0  0.6   0:00.77 /usr/sbin+
 89825 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90381 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 90766 nobody    20   0  277488  15276   1232 S   0.0  0.6   0:00.77 /usr/sbin+
 91019 root      30  10  132964   3540      0 S   0.0  0.1   0:00.00 ConfigSer+
 91040 root      30  10  108056     76      0 S   0.0  0.0   0:00.00 sleep 5236
 91997 nobody    20   0  277900  15300   1368 S   0.0  0.6   0:00.69 /usr/sbin+
 92947 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93159 nobody    20   0  277568  14124    176 S   0.0  0.6   0:00.37 /usr/sbin+
 93629 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94285 nobody    20   0  277536  14912   1236 S   0.0  0.6   0:00.34 /usr/sbin+
 94328 nobody    20   0  277568  14472    276 S   0.0  0.6   0:00.35 /usr/sbin+
 94817 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 96171 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96607 root      20   0   60820    984      0 S   0.0  0.0   0:00.00 dovecot/l+
 96739 nobody    20   0  277536  13780    220 S   0.0  0.6   0:00.10 /usr/sbin+
 96926 mailnull  20   0   90272   3592      8 S   0.0  0.1   0:00.00 /usr/sbin+
 96935 root      20   0  111304   1020      0 S   0.0  0.0   0:00.00 sshd: [ac+
 97054 root      20   0  111304   1016      0 S   0.0  0.0   0:00.00 sshd: [ac+
 97055 sshd      20   0  115644   1068      0 S   0.0  0.0   0:00.00 sshd: [ne+
 97262 root      20   0   28936    424      0 S   0.0  0.0   0:00.00 dovecot/q+
 97291 root      20   0  111304   1024      0 S   0.0  0.0   0:00.00 sshd: [ac+
 97295 root      20   0       0      0      0 Z   0.0  0.0   0:00.05 [cpsrvd (+
 97351 nobody    20   0  277756  14732   1092 S   0.0  0.6   0:00.03 /usr/sbin+
 97357 nigeria   20   0  400460   2380    228 S   0.0  0.1   0:00.05 php-fpm: +
 97361 nobody    20   0  277536  15032   1636 S   0.0  0.6   0:00.01 /usr/sbin+
 97362 nobody    20   0  277416  14144    756 S   0.0  0.6   0:00.05 /usr/sbin+
 97364 cloudw    20   0  287616   5484    496 S   0.0  0.2   0:00.15 /opt/cpan+
 97372 root      20   0  183044    720    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97373 root      20   0  183044    720    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97374 root      20   0  183044    720    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97376 root      20   0  183044    720    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97378 root      20   0  183044    716    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97379 root      20   0  183044    716    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97381 root      20   0  183044    712    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97382 root      20   0  183044    712    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97383 root      20   0  183044    712    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97384 root      20   0  183044    712    160 S   0.0  0.0   0:00.00 /usr/sbin+
 97386 root      20   0  183044    908    344 S   0.0  0.0   0:00.00 /usr/sbin+
 97387 root      20   0  183044    908    344 S   0.0  0.0   0:00.00 /usr/sbin+
 97391 root      20   0       0      0      0 Z   0.0  0.0   0:00.04 [cpsrvd (+
 97402 root      20   0   20164    492    292 S   0.0  0.0   0:00.00 jailshell+
 97403 root      20   0   20164    492    292 S   0.0  0.0   0:00.00 jailshell+
 97404 root      20   0   20164    360    188 S   0.0  0.0   0:00.00 /usr/loca+
 97405 root      20   0   20164    360    188 S   0.0  0.0   0:00.00 /usr/loca+
 97406 root      20   0   20164    364    188 S   0.0  0.0   0:00.00 /usr/loca+
 97407 root      20   0   20164    624    424 S   0.0  0.0   0:00.00 jailshell+
 97409 root      20   0   20164    360    188 S   0.0  0.0   0:00.00 /usr/loca+
 97412 root      20   0  113284    432    252 S   0.0  0.0   0:00.00 /bin/sh -+
 97414 root      20   0   20164    360    188 S   0.0  0.0   0:00.00 /usr/loca+
 97415 root      20   0   20164    492    292 S   0.0  0.0   0:00.00 jailshell+
 97416 root      20   0   20164    364    188 S   0.0  0.0   0:00.00 /usr/loca+
 97417 root      20   0   20164    624    424 S   0.0  0.0   0:00.00 /usr/loca+
 97418 root      20   0  108052    140     68 S   0.0  0.0   0:00.00 /usr/bin/+
 97424 root      20   0  113288   1092    872 S   0.0  0.0   0:00.00 /bin/bash+
 97430 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97433 nigeria   20   0  400460    596    232 S   0.0  0.0   0:00.00 php-fpm: +
 97446 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97447 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97448 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97451 pactpay   20   0  480124   9292   3504 S   0.0  0.4   0:00.03 /opt/cpan+
 97454 saboakin  20   0  404052   8152   2680 S   0.0  0.3   0:00.03 /opt/cpan+
 97458 wp-tool+  20   0  445028    264    108 S   0.0  0.0   0:00.00 sw-engine+
 97484 root      20   0  160220   2056   1584 R   0.0  0.1   0:00.00 top -bcn1
 97485 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 97490 root      20   0   12696    192    120 R   0.0  0.0   0:00.00 /usr/loca+
100526 root      20   0  183048     52      0 S   0.0  0.0   0:00.00 /usr/sbin+
100564 root      20   0  113284      4      0 S   0.0  0.0   0:00.00 /bin/sh -+
100600 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov23   0:41  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov23   0:43  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   0:05  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   0:05  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   0:03  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      37707  0.0  0.0      0     0 ?        S    01:54   0:00  \_ [kworker/u200:2]
root      63604  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/1:1]
root      67381  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/1:2]
root      77665  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:1]
root      83322  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:0]
root      89825  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/1:3]
root      90381  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/0:4]
root      92947  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/u200:1]
root      93629  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:0]
root      94817  0.0  0.0      0     0 ?        D    03:14   0:00  \_ [kworker/0:2]
root      96171  0.0  0.0      0     0 ?        S    03:16   0:00  \_ [kworker/0:3]
root      97430  0.0  0.0      0     0 ?        D    03:18   0:00  \_ [kworker/u200:0]
root      97492  0.0  0.0      0     0 ?        R    03:18   0:00      \_ [kworker/u200:0]
root          1  0.1  0.1  44400  2712 ?        Ss   Nov23   1:04 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  4424 ?        Ss   Nov23   0:28 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   184 ?        S<sl Nov23   0:04 /sbin/auditd
root        487  0.0  0.0  21540   132 ?        Ss   Nov23   0:01 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24704   992 ?        Ss   Nov23   0:10 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610540  1068 ?        Ssl  Nov23   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.0 224144  1156 ?        Ss   Nov23   0:00 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852    92 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    48 ?        Ss   Nov23   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58716  1256 ?        Ss   Nov23   0:24 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.0  0.0 1336536  796 ?        Ssl  Nov23   0:28 /usr/sbin/nscd
rpc         511  0.0  0.0  69256    60 ?        Ss   Nov23   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208     4 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124476   180 ?        Ss   Nov23   0:01 /usr/sbin/crond -n
root     100526  0.0  0.0 183048    52 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root     100564  0.0  0.0 113284     4 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root     100600  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 23m
root      97372  0.0  0.0 183044   720 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97412  0.0  0.0 113284   432 ?        Ss   03:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      97418  0.0  0.0 108052   140 ?        S    03:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      97424  0.0  0.0 113288  1092 ?        S    03:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      97491  0.0  0.0 153840  2096 ?        R    03:18   0:00  |               \_ ps auxf
root      97373  0.0  0.0 183044   720 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97406  0.0  0.0  20164   364 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      97374  0.0  0.0 183044   720 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97417  0.0  0.0  20164   624 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      97490  0.0  0.0  37804  1436 ?        R    03:18   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      97376  0.0  0.0 183044   720 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97416  0.0  0.0  20164   364 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      97378  0.0  0.0 183044   716 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97405  0.0  0.0  20164   360 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      97381  0.0  0.0 183044   712 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97409  0.0  0.0  20164   360 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      97382  0.0  0.0 183044   712 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97404  0.0  0.0  20164   360 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      97383  0.0  0.0 183044   712 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97414  0.0  0.0  20164   360 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      97384  0.0  0.0 183044   712 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97415  0.0  0.0  20164   492 ?        Ss   03:18   0:00  |   \_ jailshell (pactpay) [97447] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97447  0.0  0.0  20164   260 ?        S    03:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97451  3.0  0.3 480124  9292 ?        S    03:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      97386  0.0  0.0 183044   908 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97402  0.0  0.0  20164   492 ?        Ss   03:18   0:00  |   \_ jailshell (nigeria) [97446] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97446  0.0  0.0  20164   260 ?        S    03:18   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97449  5.0  0.3 404052  8612 ?        S    03:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      97387  0.0  0.0 183044   908 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97403  0.0  0.0  20164   492 ?        Ss   03:18   0:00      \_ jailshell (saboakin) [97448] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  97448  0.0  0.0  20164   260 ?        S    03:18   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  97454  3.0  0.3 404052  8152 ?        S    03:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.0  89112   760 ?        Ss   Nov23   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  96926  0.0  0.1  90272  3592 ?        S    03:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51508   172 ?        Ss   Nov23   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1053  0.0  0.0  46984   376 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1054  0.0  0.0  48008   928 ?        S    Nov23   0:00  \_ dovecot/imap-login
dovecot    1055  0.0  0.0  10320   120 ?        S    Nov23   0:00  \_ dovecot/anvil
root       1056  0.0  0.0  10452   328 ?        S    Nov23   0:00  \_ dovecot/log
dovenull   1057  0.0  0.0  47052   744 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1058  0.0  0.0  47772   672 ?        S    Nov23   0:00  \_ dovecot/imap-login
root       1064  0.0  0.0  24700  1252 ?        S    Nov23   0:00  \_ dovecot/config
dovecot    1065  0.0  0.0  13568   176 ?        S    Nov23   0:00  \_ dovecot/stats
dovecot    1122  0.0  0.0  41188   328 ?        S    Nov23   0:01  \_ dovecot/auth
root      96607  0.0  0.0  60820   984 ?        S    03:16   0:00  \_ dovecot/lmtp
root      97262  0.0  0.0  28936   424 ?        S    03:17   0:00  \_ dovecot/quota-status -p postfix
systuser    928  0.0  0.0  11540     0 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756     0 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524     0 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608     8 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404    84 ?        Ss   Nov23   0:01 pure-ftpd (SERVER)
root        934  0.0  0.0 445028   220 ?        Ss   Nov23   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  97458  0.0  0.0 445028   264 ?        S    03:18   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        935  0.0  0.0 572372   448 ?        Ssl  Nov23   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    936  0.0  0.8 5654304 20012 ?       SLsl Nov23   0:24 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        937  0.0  0.0 111304   108 ?        Ss   Nov23   0:07 /usr/sbin/sshd -D
root      96935  0.0  0.0 111304  1020 ?        Ss   03:17   0:00  \_ sshd: [accepted]
root      97054  0.0  0.0 111304  1016 ?        Ss   03:17   0:00  \_ sshd: [accepted]
sshd      97055  0.0  0.0 115644  1068 ?        S    03:17   0:00  |   \_ sshd: [net]
root      97291  0.0  0.0 111304  1024 ?        Ss   03:17   0:00  \_ sshd: [accepted]
root        939  0.0  0.3 1350088 8264 ?        Ssl  Nov23   0:25 /usr/bin/cspdaemon
root        941  0.0  0.0 400740   316 ?        Ss   Nov23   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   97357  1.2  0.0 400460  2380 ?        S    03:17   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   97433  0.0  0.0 400460   596 ?        S    03:18   0:00  \_ php-fpm: pool nigeriadecide_org
root        946  0.0  0.0 396248   156 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        951  0.0  0.0 439788    92 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        952  0.0  0.1 261164  2968 ?        Ss   Nov23   0:06 cpsrvd (SSL) - waiting for connections                   
root      97295  0.4  0.0      0     0 ?        Z    03:17   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root      97391  2.0  0.0      0     0 ?        Z    03:18   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        953  0.0  0.2 331088  4928 ?        Ssl  Nov23   0:14 /usr/sbin/rsyslogd -n
root        959  0.0  0.0 389508    96 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        960  0.1 58.7 3326548 1422996 ?     Ssl  Nov23   0:46 /usr/local/cpanel/3rdparty/bin/clamd -F
cpanelc+    969  0.0  0.1  10516  2772 ?        Ss   Nov23   0:35 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
named       970  0.0  1.2 989260 29804 ?        Ssl  Nov23   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    972  0.0  0.0 342400     0 ?        Ssl  Nov23   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 1432 ?        Ssl  Nov23   0:23 /usr/bin/checkstatus
systuser    980  0.0  0.3 114016  9228 ?        Ssl  Nov23   0:10 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        995  0.0  0.0 388892    80 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1144  0.0  0.0 157704    52 ?        S    Nov23   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  0.2 412396  7168 ?        Ss   Nov23   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1147  0.0  0.0 387556  1880 ?        Ss   Nov23   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1174  0.0  0.4 248224 11280 ?        Ss   Nov23   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6714  0.0  3.7 266496 90356 ?        S    Nov23   0:06  \_ spamd child
root       6715  0.0  0.4 248224 10024 ?        S    Nov23   0:00  \_ spamd child
root       1239  0.0  0.0 167452   908 ?        Ss   Nov23   0:00 dnsadmin - dormant mode
root       1243  0.0  0.2 209476  6736 ?        Ss   Nov23   0:04 tailwatchd
root       1244  0.0  0.1 183900  3236 ?        Ss   Nov23   0:03 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1676  0.0  0.0 130416   648 ?        SN   Nov23   0:00 cpanellogd - sleeping for logs
mysql      1744  1.3  7.4 1462304 179596 ?      Sl   Nov23   9:59 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2037  0.0  0.1 267052  4712 ?        Ss   Nov23   0:02 /usr/sbin/httpd -k start
root       2039  0.0  0.0  12796   296 ?        S    Nov23   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2040  0.0  0.0  12732    80 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2041  0.0  0.0  12824   300 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2045  0.0  0.0  53256     4 ?        S    Nov23   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    78648  0.1  0.3 277884  8860 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    78656  0.1  0.3 277560  8084 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    81980  0.1  0.3 277592  9220 ?        S    02:56   0:01  \_ /usr/sbin/httpd -k start
nobody    83015  0.1  0.6 277628 14816 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    87832  0.1  0.6 277604 14732 ?        S    03:04   0:00  \_ /usr/sbin/httpd -k start
nobody    89149  0.1  0.6 277592 14676 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    89694  0.1  0.6 277580 15384 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    90766  0.1  0.6 277488 15276 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91997  0.1  0.6 277900 15300 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    93159  0.0  0.5 277568 14124 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94285  0.1  0.6 277536 14912 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    94328  0.1  0.5 277568 14472 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    96739  0.1  0.5 277536 13780 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    97351  0.6  0.6 277756 14732 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    97361  0.2  0.6 277536 15032 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    97362  1.2  0.5 277416 14144 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
root       2152  0.0  0.0 299272   292 ?        Ss   Nov23   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+  15361  0.0  0.0   3148     8 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3152    28 ?        S    Nov23   0:00  \_ [kworker]
root      60917  0.1  0.2 182512  6600 ?        Ss   00:00   0:12 lfd - sleeping
root      91019  0.0  0.1 132964  3540 ?        SN   03:09   0:00 ConfigServer Version Check
root      91040  0.0  0.0 108056    76 ?        SN   03:09   0:00  \_ sleep 5236
cloudw    97364  3.7  0.2 287616  5484 ?        S    03:17   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/ggppra.php
## mysql stats
Uptime: 45424  Threads: 5  Questions: 3866322  Slow queries: 0  Opens: 9845  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.116
*************************** 1. row ***************************
     Id: 63080
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 2. row ***************************
     Id: 63081
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 63082
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-24' LIMIT 1
*************************** 4. row ***************************
     Id: 63084
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 63090
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.120 TIME_WAIT
      1 142.252.248.108 TIME_WAIT
      1 15.235.27.111 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 4.151.241.247 TIME_WAIT
      1 74.7.228.47 TIME_WAIT
      1 74.7.241.171 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 24-Nov-2025 03:18:05 WAT
   Restart Time: Sunday, 23-Nov-2025 14:41:06 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 36 minutes 58 seconds
   Server load: 2.19 0.69 0.44
   Total accesses: 180239 - Total Traffic: 4.4 GB - Total Duration: 86762432
   CPU Usage: u8.36 s6.21 cu2133.73 cs1651.06 - 8.37% CPU load
   3.97 requests/sec - 100.8 kB/second - 25.4 kB/request - 481.374 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KRWKRKWRKKRWKK.._K..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req    Dur   Conn Child  Slot      Client     Protocol              VHost                             Request
   0-0  89149 1/143/10855 K 3.51 1     2297 4943243 36.9 3.74  262.11 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=1340020612 HTTP/1.1
   1-0  81980 0/291/10128 R 6.04 1     918  4920666 0.0  10.47 242.08 116.203.129.16 http/1.1 cloudsms.com.ng:443
   2-0  91997 0/111/10305 W 2.83 0     0    4921834 0.0  3.06  258.81 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue5.php HTTP/1.1
   3-0  87832 2/169/10008 K 3.85 2     2834 4671933 64.1 5.31  234.59 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=1705438493 HTTP/1.1
   4-0  93159 0/60/9542   R 1.45 32    10   4434106 0.0  1.53  238.42 105.119.35.238 http/1.1
   5-0  96739 3/13/10116  K 0.43 1     2098 5073112 95.2 0.29  250.21 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=3302626168 HTTP/1.1
   6-0  89694 0/135/9376  W 3.01 0     0    4467404 0.0  5.26  247.96 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue2.php HTTP/1.1
   7-0  78648 0/324/9557  R 7.53 2     1622 4620243 0.0  8.49  243.78 116.203.134.67 http/1.1 cloudsms.com.ng:443
   8-0  97351 1/2/8927    K 0.03 0     776  4505140 35.9 0.04  245.79 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=3840407645 HTTP/1.1
   9-0  90766 1/132/8736  K 3.28 0     1217 4239004 34.7 3.89  218.11 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=2485981118 HTTP/1.1
   10-0 97361 0/1/8862    R 0.01 1     858  4224149 0.0  0.01  200.74 128.140.8.200  http/1.1 cloudsms.com.ng:443
   11-0 94285 0/57/8294   W 1.36 0     0    3957175 0.0  1.39  206.47 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   12-0 94328 2/63/8014   K 1.45 1     2169 3731697 60.8 1.45  197.27 192.178.4.100  http/1.1 team.cloudware.ng:80            GET /?l=1694552102 HTTP/1.1
   13-0 97362 1/1/7066    K 0.05 1     2348 3447786 34.4 0.03  180.44 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=1997231061 HTTP/1.1
   14-0 -     0/0/8053    . 0.00 1074  0    3748542 0.0  0.00  192.68 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -     0/0/6606    . 0.00 1052  0    3179856 0.0  0.00  152.91 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 78656 0/312/6591  _ 7.69 0     10   3009403 0.0  11.37 165.79 74.7.228.47    http/1.1 callertunes.cloudsms.com.ng:443 GET /robots.txt HTTP/1.1
   17-0 83015 2/235/4986  K 5.68 0     793  2494141 64.4 6.75  135.22 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=3432326857 HTTP/1.1
   18-0 -     0/0/3568    . 0.00 280   0    1590650 0.0  0.00  90.66  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/2650    . 0.00 1031  0    1459659 0.0  0.00  69.42  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/3104    . 0.00 531   0    1607887 0.0  0.00  89.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/3069    . 0.00 1075  0    1544078 0.0  0.00  69.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/2707    . 0.00 1128  0    1425544 0.0  0.00  66.45  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/2134    . 0.00 353   0    1111016 0.0  0.00  49.54  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/559     . 0.00 1363  0    299273  0.0  0.00  12.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/315     . 0.00 1335  0    238794  0.0  0.00  10.44  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/140     . 0.00 1032  0    54141   0.0  0.00  5.50   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/711     . 0.00 1399  0    307114  0.0  0.00  16.50  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/16      . 0.00 4943  0    4063    0.0  0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/282     . 0.00 4760  0    132073  0.0  0.00  6.27   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/105     . 0.00 4775  0    51498   0.0  0.00  2.45   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/122     . 0.00 4967  0    43811   0.0  0.00  2.69   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/500     . 0.00 4974  0    254576  0.0  0.00  10.63  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/299     . 0.00 4938  0    138982  0.0  0.00  7.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/152     . 0.00 4965  0    65881   0.0  0.00  4.26   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/34      . 0.00 4776  0    20100   0.0  0.00  0.70   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/60      . 0.00 4942  0    21725   0.0  0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/201     . 0.00 4946  0    67939   0.0  0.00  4.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/22      . 0.00 4964  0    7976    0.0  0.00  0.40   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/269     . 0.00 4848  0    107484  0.0  0.00  5.78   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/109     . 0.00 4969  0    44874   0.0  0.00  2.62   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/511     . 0.00 4928  0    262372  0.0  0.00  12.48  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/24      . 0.00 4939  0    9556    0.0  0.00  0.56   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/20      . 0.00 4972  0    7953    0.0  0.00  0.62   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/340     . 0.00 4963  0    120248  0.0  0.00  6.33   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/402     . 0.00 3998  0    257575  0.0  0.00  12.63  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/19      . 0.00 4933  0    7165    0.0  0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/24      . 0.00 4960  0    8311    0.0  0.00  0.54   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/5       . 0.00 4920  0    31      0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/17      . 0.00 4959  0    4077    0.0  0.00  0.46   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00 4929  0    3020    0.0  0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/18      . 0.00 4932  0    3093    0.0  0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/16      . 0.00 4935  0    6251    0.0  0.00  0.44   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/5       . 0.00 4962  0    142     0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/3       . 0.00 4961  0    123     0.0  0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/3       . 0.00 4951  0    530     0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/2       . 0.00 4950  0    1       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/3       . 0.00 4948  0    8       0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/2       . 0.00 4958  0    1       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/11      . 0.00 4930  0    3270    0.0  0.00  0.20   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/3       . 0.00 4955  0    5       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/173     . 0.00 4188  0    100973  0.0  0.00  4.33   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/4       . 0.00 4931  0    18      0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/45      . 0.00 4769  0    30130   0.0  0.00  1.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/97      . 0.00 4489  0    51206   0.0  0.00  2.29   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/6       . 0.00 4947  0    1388    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/970     . 0.00 3289  0    524903  0.0  0.00  17.07  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/20      . 0.00 4949  0    8979    0.0  0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/2       . 0.00 4957  0    1       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/8       . 0.00 4916  0    3015    0.0  0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/18      . 0.00 4952  0    8604    0.0  0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/259     . 0.00 3962  0    136946  0.0  0.00  6.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/39      . 0.00 4956  0    11176   0.0  0.00  0.63   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/2       . 0.00 4953  0    1       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/2       . 0.00 4954  0    1       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/5       . 0.00 4918  0    1531    0.0  0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/4       . 0.00 15064 0    1217    0.0  0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 684
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...57)
   index usage: 12%, cache usage: 16%
   total entries stored since starting: 128952
   total entries replaced since starting: 0
   total entries expired since starting: 128235
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 48 hit, 327 miss
   total removes since starting: 34 hit, 22 miss
Youez - 2016 - github.com/yon3zu
LinuXploit