403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /proc/15368/root/var/log/loadwatch/
Upload File :
[ Back ]
Current File : /proc/15368/root/var/log/loadwatch/2025-11-18.01.27.txt
 ## swap threshold exceeded
## server overview
2025-11-18.01.27 load[0] mem[50/83] mysql[6/11] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1135         329          64         898        1001
Swap:          1999        1708         291
 01:27:01 up  6:39,  0 users,  load average: 0.74, 1.00, 0.67
## system overview
top - 01:27:02 up  6:39,  0 users,  load average: 0.74, 1.00, 0.67
Tasks: 212 total,   3 running, 207 sleeping,   0 stopped,   2 zombie
%Cpu(s): 68.6 us, 17.1 sy,  0.0 ni, 11.4 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   323976 free,  1173472 used,   922852 buff/cache
KiB Swap:  2047996 total,   298132 free,  1749864 used.  1014844 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 260452   1360 S 125.0 10.8   5:32.96 /usr/sbin+
 87701 nigeria   20   0  404052  16136  10384 S  12.5  0.7   0:00.04 /opt/cpan+
 87715 cloudsms  20   0  248384  11212   6708 R   6.2  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44412   3316   1452 S   0.0  0.1   0:32.93 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.44 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.04 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:24.32 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.10 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.51 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.52 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.79 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.34 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   3004   2752 S   0.0  0.1   0:11.67 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    320    204 S   0.0  0.0   0:01.65 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    908    504 S   0.0  0.0   0:03.20 /usr/lib/+
   514 root      20   0  224148   3524   1024 S   0.0  0.1   0:00.30 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.02 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.54 /usr/sbin+
   521 root      20   0  152780    192    152 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    196     92 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1400    668 S   0.0  0.1   0:12.52 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1220    864 S   0.0  0.1   0:05.52 /usr/lib/+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:00.77 /usr/sbin+
   558 root      20   0   25908      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1688    640 S   0.0  0.1   0:19.81 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   3480    396 S   0.0  0.1   0:00.49 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.54 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.52 pure-ftpd+
  1062 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  12976   2116 S   0.0  0.5   0:05.69 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.53 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:26.96 /usr/bin/+
  1069 telegraf  20   0 5654304  39400   5888 S   0.0  1.6   0:12.94 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.09 /usr/bin/+
  1072 root      20   0   51508    552    388 S   0.0  0.0   0:00.29 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.11 /usr/bin/+
  1085 systuser  20   0   12756     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.22 /usr/sbin+
  1087 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1392   1280 S   0.0  0.1   0:01.01 sw-engine+
  1091 root      20   0  389508    572    472 S   0.0  0.0   0:00.70 php-fpm: +
  1098 named     20   0 1054792  41900   1500 S   0.0  1.7   0:13.05 /usr/sbin+
  1109 root      20   0  388892    488    276 S   0.0  0.0   0:00.64 php-fpm: +
  1113 root      20   0  281936   3696   2744 S   0.0  0.2   0:05.84 /usr/sbin+
  1117 root      20   0 1763304  66396    260 S   0.0  2.7   0:13.84 /usr/loca+
  1123 root      20   0  439788   1008    916 S   0.0  0.0   0:00.72 php-fpm: +
  1131 root      20   0  400740   2036    724 S   0.0  0.1   0:03.47 php-fpm: +
  1134 root      20   0  261152   6024    916 S   0.0  0.2   0:02.63 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3540   2168 S   0.0  0.1   0:19.16 /usr/loca+
  1149 root      20   0  396248    460    288 S   0.0  0.0   0:00.65 php-fpm: +
  1213 dovenull  20   0   46984   1380    668 S   0.0  0.1   0:00.38 dovecot/p+
  1214 dovenull  20   0   47936   1776    284 S   0.0  0.1   0:00.32 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.06 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.29 dovecot/l+
  1217 dovenull  20   0   47056   1368    568 S   0.0  0.1   0:00.53 dovecot/p+
  1218 dovenull  20   0   47752   1464    284 S   0.0  0.1   0:00.23 dovecot/i+
  1226 root      20   0   24528   2232    360 S   0.0  0.1   0:00.14 dovecot/c+
  1227 dovecot   20   0   13568    468    256 S   0.0  0.0   0:00.05 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.11 SonarPush+
  1297 dovecot   20   0   41188   1052    540 S   0.0  0.0   0:00.51 dovecot/a+
  1300 wp-tool+  20   0  412396  31936   1152 S   0.0  1.3   0:07.72 /usr/bin/+
  1301 wp-tool+  20   0  387556  13048   1404 S   0.0  0.5   0:00.26 /usr/bin/+
  1308 root      20   0  248116   4208    684 S   0.0  0.2   0:05.65 /usr/loca+
  1409 root      20   0  210048   9664   1312 S   0.0  0.4   0:03.04 tailwatchd
  1412 root      20   0  262224  18888   1024 S   0.0  0.8   0:01.35 cpdavd - +
  1413 root      20   0  228228  13344    436 S   0.0  0.6   0:00.43 dnsadmin +
  1836 root      20   0  299272    688    308 S   0.0  0.0   0:00.64 php-fpm: +
  1853 root      38  18  130416    912    236 S   0.0  0.0   0:00.05 cpanellog+
  2063 root      20   0  266984   7764    724 S   0.0  0.3   0:03.45 /usr/sbin+
  2067 root      20   0   12868    500    256 S   0.0  0.0   0:02.67 /usr/loca+
  2068 root      20   0   12732    224    148 S   0.0  0.0   0:02.31 /usr/loca+
  2069 root      20   0   12908    512    224 S   0.0  0.0   0:02.48 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  264072  50436    596 S   0.0  2.1   0:02.62 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
 13053 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.43 [kworker]
 14140 root      20   0  181620  28628   1240 S   0.0  1.2   0:05.26 lfd - sle+
 38740 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 51192 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 51258 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 51661 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 62775 root      20   0  182832    840    300 S   0.0  0.0   0:00.00 /usr/sbin+
 62833 root      20   0  113284    280    104 S   0.0  0.0   0:00.00 /bin/sh -+
 62852 root      20   0  108056     72      0 S   0.0  0.0   0:00.00 sleep 1h +
 68263 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 69069 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72384 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75248 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 77381 nobody    20   0  277676  19832   4416 S   0.0  0.8   0:01.08 /usr/sbin+
 80271 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 80347 nobody    20   0  277676  19048   4028 S   0.0  0.8   0:00.86 /usr/sbin+
 83036 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83039 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 83879 nobody    20   0  277680  19228   4272 S   0.0  0.8   0:00.39 /usr/sbin+
 83889 root      20   0  182864   1120    300 S   0.0  0.0   0:00.00 /usr/sbin+
 83898 root      20   0  178148  23836    348 S   0.0  1.0   0:00.12 /usr/loca+
 83928 root      20   0  158824  12936    344 S   0.0  0.5   0:00.07 /usr/loca+
 83934 root      20   0  195348  32016    500 S   0.0  1.3   0:00.19 /usr/loca+
 83960 root      20   0   76780  15496   1532 S   0.0  0.6   0:00.14 /usr/loca+
 84900 nobody    20   0  277744  18544   3568 S   0.0  0.8   0:00.11 /usr/sbin+
 84901 nobody    20   0  277936  18600   3576 S   0.0  0.8   0:00.39 /usr/sbin+
 84902 nobody    20   0  277752  18712   3744 S   0.0  0.8   0:00.38 /usr/sbin+
 85211 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 85235 nobody    20   0  277848  18836   3692 S   0.0  0.8   0:00.29 /usr/sbin+
 85267 nobody    20   0  277920  18688   3780 S   0.0  0.8   0:00.32 /usr/sbin+
 85269 nobody    20   0  277668  19076   4148 S   0.0  0.8   0:00.15 /usr/sbin+
 85274 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.30 [httpd] <+
 85275 nobody    20   0  277972  18876   3804 S   0.0  0.8   0:00.20 /usr/sbin+
 85277 nobody    20   0  277880  18564   3504 S   0.0  0.8   0:00.11 /usr/sbin+
 85281 nobody    20   0  277656  18972   4076 S   0.0  0.8   0:00.26 /usr/sbin+
 86513 nobody    20   0  277744  18540   3676 S   0.0  0.8   0:00.12 /usr/sbin+
 86527 nobody    20   0  277576  18352   3656 S   0.0  0.8   0:00.11 /usr/sbin+
 86540 nobody    20   0  277744  18244   3440 S   0.0  0.8   0:00.13 /usr/sbin+
 86545 nobody    20   0  277868  18532   3792 S   0.0  0.8   0:00.23 /usr/sbin+
 86876 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86972 nobody    20   0  277896  18708   3904 S   0.0  0.8   0:00.08 /usr/sbin+
 86989 nobody    20   0  277744  18680   3832 S   0.0  0.8   0:00.06 /usr/sbin+
 87361 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 87458 nigeria   20   0  403232   9756   3920 S   0.0  0.4   0:00.19 php-fpm: +
 87461 nobody    20   0  277744  17964   3220 S   0.0  0.7   0:00.02 /usr/sbin+
 87477 nobody    20   0  277744  17904   3164 S   0.0  0.7   0:00.04 /usr/sbin+
 87478 nobody    20   0  277744  18396   3628 S   0.0  0.8   0:00.03 /usr/sbin+
 87499 nobody    20   0  277744  17900   3160 S   0.0  0.7   0:00.04 /usr/sbin+
 87500 nobody    20   0  277876  18268   3620 S   0.0  0.8   0:00.01 /usr/sbin+
 87502 nobody    20   0  277448  17512   3136 S   0.0  0.7   0:00.01 /usr/sbin+
 87530 nobody    20   0  277352  17492   3208 S   0.0  0.7   0:00.00 /usr/sbin+
 87540 mailnull  20   0   89296   4992   1792 S   0.0  0.2   0:00.00 /usr/sbin+
 87574 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 87621 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 87634 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87635 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87636 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87637 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87638 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87640 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87641 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87642 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87643 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87644 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87645 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87647 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87649 root      20   0  228412  28500   8092 S   0.0  1.2   0:00.06 /usr/loca+
 87650 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 87651 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 87652 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 87658 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87659 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87660 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 87661 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 87662 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87664 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87666 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87667 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87668 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87669 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 87684 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87686 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 87693 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 87695 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 87710 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 87712 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87713 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 87714 cloudw    20   0  284304  11252   7840 R   0.0  0.5   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov17   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      38740  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:2]
root      51192  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/0:1]
root      51258  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/1:2]
root      51661  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root      69069  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:3]
root      72384  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:3]
root      75248  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:4]
root      80271  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/1:0]
root      83036  0.0  0.0      0     0 ?        D    01:22   0:00  \_ [kworker/1:1]
root      83039  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/0:0]
root      85211  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:1]
root      86876  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44412  3316 ?        Ss   Nov17   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.1  40244  3004 ?        Ss   Nov17   0:11 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   320 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3524 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   192 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   196 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1400 ?        Ss   Nov17   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1220 ?        Ss   Nov17   0:05 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      62775  0.0  0.0 182832   840 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      62833  0.0  0.0 113284   280 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      62852  0.0  0.0 108056    72 ?        S    01:00   0:00  |       \_ sleep 1h 4m
root      83889  0.0  0.0 182864  1120 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      83898  0.0  0.9 178148 23836 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      83928  0.0  0.5 158824 12936 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      83934  0.0  1.3 195348 32016 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      83960  0.0  0.6  76780 15496 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      87634  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87649  6.0  1.1 228412 28860 ?        Rs   01:27   0:00  |   \_ /usr/local/cpanel/bin/autossl_check_cpstore_queue
root      87635  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87650  0.0  0.0 113284  1212 ?        Ss   01:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      87651  0.0  0.0 108052   360 ?        S    01:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      87652  0.0  0.0 113288  1516 ?        S    01:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      87717  0.0  0.0 153840  2096 ?        R    01:27   0:00  |               \_ ps auxf
root      87636  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87664  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      87637  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87666  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      87638  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87662  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      87641  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87667  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      87642  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87668  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      87643  0.0  0.0 182864  2412 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87659  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      87644  0.0  0.0 182864  2408 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87658  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      87645  0.0  0.0 182864  2408 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87669  0.0  0.0  20164   964 ?        Ss   01:27   0:00  |   \_ jailshell (pactpay) [87684] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87684  0.0  0.0  20164   260 ?        S    01:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87686  2.0  0.7 480124 17688 ?        S    01:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      87647  0.0  0.0 182864  2408 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      87661  0.0  0.0  20164   964 ?        Ss   01:27   0:00      \_ jailshell (nigeria) [87695] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87695  0.0  0.0  20164   256 ?        S    01:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87701  4.0  0.6 404052 16136 ?        S    01:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908     0 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1688 ?        Ssl  Nov17   0:19 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  3480 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  87540  0.0  0.2  89296  4992 ?        S    01:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 12976 ?        Ssl  Nov17   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.1  0.3 1276356 8572 ?        Ssl  Nov17   0:26 /usr/bin/cspdaemon
telegraf   1069  0.0  1.6 5654304 39400 ?       SLsl Nov17   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   552 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  1380 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.0  47936  1776 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.0  47056  1368 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.0  47752  1464 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2232 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   468 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1052 ?        S    Nov17   0:00  \_ dovecot/auth
root      87361  0.0  0.1  41052  2728 ?        S    01:26   0:00  \_ dovecot/auth -w
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    48 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
systuser   1087  0.0  0.0 111864    76 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1392 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  87574  0.0  0.0 445028   320 ?        S    01:26   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   572 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 41900 ?       Ssl  Nov17   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   488 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.1 281936  3696 ?        Ssl  Nov17   0:05 /usr/sbin/rsyslogd -n
root       1117  0.0  2.7 1763304 66396 ?       Ssl  Nov17   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788  1008 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2036 ?        Ss   Nov17   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   87458  1.3  0.4 403232  9756 ?        S    01:26   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.2 261152  6024 ?        Ss   Nov17   0:02 cpsrvd (SSL) - waiting for connections                   
root      87621  0.0  0.0      0     0 ?        Z    01:26   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3540 ?        Ss   Nov17   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   460 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.3 412396 31936 ?        Ss   Nov17   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.5 387556 13048 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4208 ?        Ss   Nov17   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  2.0 264072 50436 ?        S    Nov17   0:02  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.3 210048  9664 ?        Ss   Nov17   0:03 tailwatchd
root       1412  0.0  0.7 262224 18888 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.5 228228 13344 ?        Ss   Nov17   0:00 dnsadmin - server mode
root       1836  0.0  0.0 299272   688 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416   912 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.3 10.7 1458600 260452 ?      Sl   Nov17   5:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7764 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12868   500 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   224 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12908   512 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    77381  0.1  0.8 277676 19832 ?        S    01:16   0:01  \_ /usr/sbin/httpd -k start
nobody    80347  0.1  0.7 277676 19048 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    83879  0.1  0.7 277680 19228 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    84900  0.0  0.7 277744 18544 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    84901  0.2  0.7 277936 18600 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    84902  0.2  0.7 277752 18712 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    85235  0.1  0.7 277848 18836 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    85267  0.1  0.7 277920 18688 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    87716  0.0  0.4 284436 11512 ?        R    01:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    85269  0.0  0.7 277668 19076 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    85274  0.1  0.0      0     0 ?        Z    01:24   0:00  \_ [httpd] <defunct>
nobody    85275  0.1  0.7 277972 18876 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    85277  0.0  0.7 277880 18564 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    85281  0.1  0.7 277656 18972 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    86513  0.1  0.7 277744 18540 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    86527  0.1  0.7 277576 18352 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    86540  0.1  0.7 277744 18244 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    86545  0.2  0.7 277868 18532 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    87714  0.0  0.6 288176 15948 ?        Rl   01:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    86972  0.1  0.7 277896 18708 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    86989  0.1  0.7 277744 18680 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    87461  0.1  0.7 277744 17964 ?        R    01:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    87693  2.0  0.3 142040  8556 ?        R    01:27   0:00  |   \_ [php-cgi]
nobody    87477  0.3  0.7 277744 17904 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    87478  0.2  0.7 277744 18396 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    87499  0.3  0.7 277744 17900 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    87500  0.0  0.7 277876 18268 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    87502  0.0  0.7 277448 17512 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    87530  0.0  0.7 277352 17492 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148   416 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152   492 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.1 181620 28628 ?        Ss   00:00   0:05 lfd - sleeping
## mysql stats
Uptime: 23936  Threads: 3  Questions: 2100542  Slow queries: 0  Opens: 7477  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.756
*************************** 1. row ***************************
     Id: 31863
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 31870
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29_19_05_001' LIMIT 1
*************************** 3. row ***************************
     Id: 31873
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.197.69.115 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 142.44.220.191 TIME_WAIT
      1 15.235.27.183 TIME_WAIT
      1 15.235.96.229 TIME_WAIT
      1 170.23.18.78 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 205.169.39.66 TIME_WAIT
      1 34.122.147.229 TIME_WAIT
      1 50.114.106.111 TIME_WAIT
      1 54.39.210.109 TIME_WAIT
      1 84.37.11.149 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
      2 51.222.204.143 TIME_WAIT
      3 185.241.206.44 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 01:27:02 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 38 minutes 49 seconds
   Server load: 0.74 1.00 0.67
   Total accesses: 122419 - Total Traffic: 2.9 GB - Total Duration: 63048446
   CPU Usage: u4.32 s4.85 cu1582.24 cs1244.54 - 11.9% CPU load
   5.12 requests/sec - 127.0 kB/second - 24.8 kB/request - 515.022 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 11 idle workers

KK._K_K_K__K_.__..W........K__K........._.....W.W....CK.R...W...
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol         VHost                                      Request
   0-0  87461 3/4/5479   K 0.07 0     340 3177142 97.6  0.13  127.32 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=2085276392 HTTP/1.1
   1-0  86972 8/16/5649  K 0.27 2     261 2794961 251.3 0.34  130.35 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=1925325613 HTTP/1.1
   2-0  -     0/0/5352   . 0.00 2     0   2666232 0.0   0.00  126.11 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  87477 0/6/4978   _ 0.14 1     298 2587432 0.0   0.18  119.67 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=3115523057 HTTP/1.1
   4-0  86513 1/29/5488  K 0.46 0     344 2652054 212.3 1.01  126.09 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /var/cache/dev/pools/AcsHjSlfaz/Y/V/ HTTP/1.1
   5-0  86989 0/11/5294  _ 0.23 2     1   2633471 0.0   0.28  129.21 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   6-0  87478 3/5/5213   K 0.08 1     266 2646465 95.9  0.14  129.53 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=94541293 HTTP/1.1
   7-0  86527 0/24/4897  _ 0.37 3     277 2394964 0.0   1.40  122.44 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=2706950304 HTTP/1.1
   8-0  87499 6/6/4607   K 0.15 2     259 2249252 187.8 0.18  108.34 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=2825745830 HTTP/1.1
   9-0  87500 0/3/4711   _ 0.02 2     1   2324937 0.0   0.04  113.46 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   10-0 86540 0/24/4676  _ 0.49 1     266 2308432 0.0   0.65  114.46 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=2238051197 HTTP/1.1
   11-0 83879 2/85/4973  K 1.55 1     292 2393756 66.6  1.77  122.09 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=3456787618 HTTP/1.1
   12-0 77381 0/287/4151 _ 4.89 0     5   2232505 0.0   4.48  101.25 102.209.220.154 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?lga=Umu+-+nneochi&state=Abia&war
   13-0 -     0/0/4222   . 0.00 1     0   2012934 0.0   0.00  102.18 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 87502 0/3/4211   _ 0.03 0     305 2179276 0.0   0.44  99.82  192.178.4.98    http/1.1 team.cloudware.ng:443  GET /vendor/symfony/http-kernel/Profiler/ HTTP/1.1
   15-0 87530 0/2/4306   _ 0.00 0     0   2162045 0.0   0.03  102.48 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   16-0 -     0/0/3996   . 0.00 78    0   2808164 0.0   0.00  110.29 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/4061   . 0.00 75    0   1984339 0.0   0.00  104.41 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 86545 25/37/3354 W 1.01 0     0   1716190 768.8 1.07  75.93  192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=277996497 HTTP/1.1
   19-0 -     0/0/3156   . 0.00 82    0   1533991 0.0   0.00  74.92  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/3533   . 0.00 125   0   1755718 0.0   0.00  86.19  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/2486   . 0.00 144   0   1289144 0.0   0.00  59.97  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2418   . 0.00 141   0   1165083 0.0   0.00  55.40  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/2461   . 0.00 146   0   1186447 0.0   0.00  53.61  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2391   . 0.00 114   0   1311422 0.0   0.00  62.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1581   . 0.00 137   0   876844  0.0   0.00  38.66  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1358   . 0.00 135   0   773398  0.0   0.00  33.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 84900 1/31/1428  K 0.45 0     299 816376  35.8  0.60  33.71  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=1204528861 HTTP/1.1
   28-0 80347 0/151/1397 _ 4.14 0     0   759861  0.0   4.27  31.17  185.241.206.44  http/1.1 nigeriadecide.org:443  POST /api/send/sms HTTP/1.1
   29-0 84901 0/157/1306 _ 1.47 1     260 727226  0.0   1.50  31.70  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=3202971356 HTTP/1.1
   30-0 84902 2/67/1028  K 1.79 0     257 585850  66.7  1.73  26.36  192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=2987039022 HTTP/1.1
   31-0 -     0/0/1234   . 0.00 112   0   555507  0.0   0.00  33.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/683    . 0.00 71    0   379152  0.0   0.00  18.95  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/1034   . 0.00 72    0   638497  0.0   0.00  28.91  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/570    . 0.00 145   0   301126  0.0   0.00  14.19  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/485    . 0.00 66    0   269474  0.0   0.00  13.08  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/536    . 0.00 138   0   285304  0.0   0.00  14.21  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/571    . 0.00 151   0   312680  0.0   0.00  17.39  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/393    . 0.00 81    0   210032  0.0   0.00  11.22  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/117    . 0.00 147   0   55834   0.0   0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 85235 0/142/507  _ 0.70 1     599 281166  0.0   2.08  11.47  205.169.39.66   http/1.1 cloudware.ng:443       POST /wp-admin/admin-ajax.php HTTP/1.1
   41-0 -     0/0/92     . 0.00 124   0   46762   0.0   0.00  2.01   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/133    . 0.00 130   0   70946   0.0   0.00  3.30   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/261    . 0.00 126   0   98531   0.0   0.00  3.86   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/204    . 0.00 127   0   109910  0.0   0.00  5.24   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/101    . 0.00 80    4   55382   0.0   0.00  2.76   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 85267 3/61/286   W 1.37 0     0   150152  94.6  1.52  6.93   192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=2793238532 HTTP/1.1
   47-0 -     0/0/68     . 0.00 155   0   35210   0.0   0.00  1.49   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 85269 1/32/275   W 0.61 0     0   132149  33.6  0.86  6.46   192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=4265484269 HTTP/1.1
   49-0 -     0/0/30     . 0.00 121   0   16178   0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00 129   0   37294   0.0   0.00  1.37   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/78     . 0.00 133   0   38474   0.0   0.00  1.77   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00 149   0   12911   0.0   0.00  0.88   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 85274 1/57/79    C 1.36 0     0   38738   0.2   1.35  2.05   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 85275 15/51/172  K 0.75 3     0   91989   612.6 1.56  5.07   205.169.39.66   http/1.1 cloudware.ng:443       GET /wp-content/uploads/2019/07/slide-3.jpg HTTP/1.1
   55-0 -     0/0/74     . 0.00 158   0   40667   0.0   0.00  2.04   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 85277 0/23/30    R 0.45 66    1   13125   0.0   0.52  0.63   167.172.89.14   http/1.1
   57-0 -     0/0/10     . 0.00 156   0   3025    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/11     . 0.00 154   0   599     0.0   0.00  0.87   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 159   0   13      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 85281 0/52/94    W 1.12 0     0   48195   0.0   1.37  2.40   ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   61-0 -     0/0/11     . 0.00 122   0   5546    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/19     . 0.00 10154 0   7935    0.0   0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1439
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...49)
   index usage: 25%, cache usage: 34%
   total entries stored since starting: 87980
   total entries replaced since starting: 0
   total entries expired since starting: 86520
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 9 hit, 203 miss
   total removes since starting: 27 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit