403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.04.36.txt
 ## swap threshold exceeded
## server overview
2025-11-10.04.36 load[0] mem[69/67] mysql[1/26] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1505          92          25         765         646
Swap:          1999        1567         432
 04:36:01 up  3:42,  0 users,  load average: 0.32, 0.37, 0.39
## system overview
top - 04:36:01 up  3:42,  0 users,  load average: 0.32, 0.37, 0.39
Tasks: 205 total,   2 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 30.3 sy,  0.0 ni, 18.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    98936 free,  1537132 used,   784232 buff/cache
KiB Swap:  2047996 total,   442836 free,  1605160 used.   667552 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1466700 256908   4632 S  56.2 10.6   4:06.96 /usr/sbin+
 27329 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44420   3476   1544 S   6.2  0.1   0:18.55 /usr/lib/+
 23698 nobody    20   0  277596  18004   4052 S   6.2  0.7   0:00.39 /usr/sbin+
 27324 pactpay   20   0  476724  17480  11728 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.17 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.33 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:15.56 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.92 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [kworker/+
   357 root      20   0   39500   2208   1940 S   0.0  0.1   0:06.99 /usr/lib/+
   385 root      20   0   45352     56     52 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    208    108 S   0.0  0.0   0:01.12 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    824    552 S   0.0  0.0   0:01.88 /usr/lib/+
   482 dbus      20   0   58716   1352    612 S   0.0  0.1   0:07.32 /usr/bin/+
   494 rpc       20   0   69256     36     32 S   0.0  0.0   0:00.02 /sbin/rpc+
   521 root      20   0   52852    252    168 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    348    264 S   0.0  0.0   0:00.30 /usr/sbin+
   528 root      20   0  224276   3252    940 S   0.0  0.1   0:00.24 queueproc+
   533 root      20   0  152780    112     68 S   0.0  0.0   0:00.01 /usr/sbin+
   539 root      20   0   24896   1160    792 S   0.0  0.0   0:03.17 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1332    692 S   0.0  0.1   0:06.76 /usr/sbin+
   562 root      20   0   24208     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    424    292 S   0.0  0.0   0:00.38 /usr/sbin+
   583 root      20   0  108296     40     36 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3728    812 S   0.0  0.2   0:00.21 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:04.49 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  34524   5908 S   0.0  1.4   0:07.56 /usr/loca+
   941 root      20   0   51656    492    324 S   0.0  0.0   0:00.20 /usr/sbin+
   942 root      20   0  153404    264    180 S   0.0  0.0   0:00.28 pure-ftpd+
   943 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0  111304    372    268 S   0.0  0.0   0:01.54 /usr/sbin+
   945 systuser  20   0   13012      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1901856 343132    432 S   0.0 14.2   0:35.23 /usr/loca+
   950 root      20   0  436392    364    276 S   0.0  0.0   0:00.57 php-fpm: +
   952 named     20   0  718804  27192   1776 S   0.0  1.1   0:09.75 /usr/sbin+
   960 root      20   0  392856    396    312 S   0.0  0.0   0:00.50 php-fpm: +
   961 root      20   0  257360   2152   1672 S   0.0  0.1   0:03.50 /usr/sbin+
   962 root      20   0  397344   2544    608 S   0.0  0.1   0:02.58 php-fpm: +
   965 root      20   0  261416   6440   1740 S   0.0  0.3   0:02.93 cpsrvd (S+
   967 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.29 /usr/bin/+
   970 cpanelc+  20   0   10484   3468   2308 S   0.0  0.1   0:10.77 /usr/loca+
   982 root      20   0  385496    368    276 S   0.0  0.0   0:00.50 php-fpm: +
   985 root      20   0  386112    436    348 S   0.0  0.0   0:00.45 php-fpm: +
   986 systuser  20   0  113272     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 systuser  20   0  114016   9912   2888 S   0.0  0.4   0:03.21 /usr/loca+
   993 root      20   0  572372    744    272 S   0.0  0.0   0:01.24 /usr/bin/+
  1087 dovecot   20   0   10320    412    300 S   0.0  0.0   0:00.04 dovecot/a+
  1168 root      20   0  248160   2780    756 S   0.0  0.1   0:04.39 /usr/loca+
  1181 systuser  20   0  157704   2936    960 S   0.0  0.1   0:00.08 SonarPush+
  1219 wp-tool+  20   0  410452  10348   1408 S   0.0  0.4   0:11.20 /usr/bin/+
  1220 wp-tool+  20   0  387528   3284   1428 S   0.0  0.1   0:00.20 /usr/bin/+
  1249 root      20   0  209356   9856   2316 S   0.0  0.4   0:01.27 tailwatchd
  1252 root      20   0  183900   6096   2864 S   0.0  0.3   0:01.08 cpdavd - +
  1253 root      20   0  167452   1224    676 S   0.0  0.1   0:00.29 dnsadmin +
  1749 root      20   0  299272    508    344 S   0.0  0.0   0:00.37 php-fpm: +
  1799 root      38  18  130416   1364    704 S   0.0  0.1   0:00.03 cpanellog+
  1947 root      20   0  267112   5080    560 S   0.0  0.2   0:01.21 /usr/sbin+
  2095 root      20   0  182192   8668   1116 S   0.0  0.4   0:12.13 lfd - sle+
  5800 root      20   0  183048     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.29 [kworker]
  6471 root      20   0  265416  90248   2008 S   0.0  3.7   0:02.57 spamd chi+
  6472 root      20   0  248160   1352    444 S   0.0  0.1   0:00.00 spamd chi+
  8576 nobody    20   0  277728  19924   4772 S   0.0  0.8   0:02.18 /usr/sbin+
  8686 root      20   0 1275844  10340    596 S   0.0  0.4   0:00.07 /usr/bin/+
  8722 root      20   0 1277312  11696    596 S   0.0  0.5   0:00.07 /usr/bin/+
  9142 nobody    20   0  277984  20552   4900 S   0.0  0.8   0:02.73 /usr/sbin+
  9604 nobody    20   0  277688  20076   4676 S   0.0  0.8   0:01.87 /usr/sbin+
 12252 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 13182 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 16222 nobody    20   0  277660  19904   4752 S   0.0  0.8   0:01.51 /usr/sbin+
 16314 nobody    20   0  277856  20032   4648 S   0.0  0.8   0:01.50 /usr/sbin+
 17259 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 17499 nobody    20   0  277612  19608   4724 S   0.0  0.8   0:01.44 /usr/sbin+
 18164 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 19826 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 20280 nobody    20   0  277856  18900   4452 S   0.0  0.8   0:00.92 /usr/sbin+
 21119 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22574 root      20   0   12784    328    220 S   0.0  0.0   0:01.07 /usr/loca+
 22575 root      20   0   12732    292    216 S   0.0  0.0   0:00.90 /usr/loca+
 22576 root      20   0   12804    340    224 S   0.0  0.0   0:00.99 /usr/loca+
 22578 dovenull  20   0   46912   1928   1428 S   0.0  0.1   0:00.16 dovecot/p+
 22579 dovenull  20   0   48028   2764   1712 S   0.0  0.1   0:00.16 dovecot/i+
 22580 root      20   0   10452    480    316 S   0.0  0.0   0:00.13 dovecot/l+
 22581 dovenull  20   0   46912   1872   1364 S   0.0  0.1   0:00.20 dovecot/p+
 22582 dovenull  20   0   47896   2900   1812 S   0.0  0.1   0:00.18 dovecot/i+
 22583 root      20   0   24528   2060    512 S   0.0  0.1   0:00.08 dovecot/c+
 22584 dovecot   20   0   13572    632    440 S   0.0  0.0   0:00.03 dovecot/s+
 22588 dovecot   20   0   41144   1464   1020 S   0.0  0.1   0:00.29 dovecot/a+
 22589 root      20   0   53252     68     68 S   0.0  0.0   0:00.04 /usr/loca+
 22647 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22727 nobody    20   0  277984  19164   4324 S   0.0  0.8   0:00.52 /usr/sbin+
 24499 nobody    20   0  277988  18452   4096 S   0.0  0.8   0:00.36 /usr/sbin+
 24505 nobody    20   0  277988  18852   4232 S   0.0  0.8   0:00.40 /usr/sbin+
 24514 nobody    20   0  277856  18324   4072 S   0.0  0.8   0:00.46 /usr/sbin+
 24516 nobody    20   0  277992  18396   4056 S   0.0  0.8   0:00.46 /usr/sbin+
 24815 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 25277 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25748 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26768 healtho+  20   0  459288  69456   4216 S   0.0  2.9   0:05.67 php-fpm: +
 26818 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 26826 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 26948 nobody    20   0  277984  17564   3656 S   0.0  0.7   0:00.04 /usr/sbin+
 27007 healtho+  20   0  459424  69452   4216 S   0.0  2.9   0:03.36 php-fpm: +
 27015 nobody    20   0  277928  17412   3524 S   0.0  0.7   0:00.03 /usr/sbin+
 27079 nobody    20   0  277472  16844   3400 S   0.0  0.7   0:00.01 /usr/sbin+
 27086 nobody    20   0  277856  17440   3548 S   0.0  0.7   0:00.02 /usr/sbin+
 27120 nigeria   20   0  398104   9552   4040 S   0.0  0.4   0:00.20 php-fpm: +
 27170 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 27229 root      20   0  157100   4968   3680 S   0.0  0.2   0:00.00 sshd: unk+
 27230 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 27233 root      20   0  157100   4972   3676 S   0.0  0.2   0:00.00 sshd: unk+
 27234 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 27243 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 27246 cloudw    20   0  520948  59332   6652 S   0.0  2.5   0:00.47 php-fpm: +
 27255 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27256 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27257 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27259 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27260 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27261 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27262 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27263 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27264 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27265 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27266 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27267 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27269 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27272 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 27273 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 27274 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 27293 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27294 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 27295 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27296 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27297 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27298 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27299 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27300 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27301 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 27302 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27304 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27308 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27317 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 27326 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 27327 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 27335 root      20   0    6516    412    336 S   0.0  0.0   0:00.00 /usr/sbin+
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kworker/+
 92409 root      30  10  132964     28     24 S   0.0  0.0   0:00.00 ConfigSer+
 92420 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 8028
 96504 nobody    20   0  277912  20796   4916 S   0.0  0.9   0:03.79 /usr/sbin+
 98696 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:15  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:04  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      98696  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/u200:1]
root      12252  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:1]
root      13182  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/0:5]
root      17259  0.0  0.0      0     0 ?        S    04:16   0:00  \_ [kworker/1:3]
root      18164  0.0  0.0      0     0 ?        S    04:18   0:00  \_ [kworker/0:2]
root      19826  0.0  0.0      0     0 ?        S    04:21   0:00  \_ [kworker/1:0]
root      21119  0.0  0.0      0     0 ?        S    04:24   0:00  \_ [kworker/1:2]
root      22647  0.0  0.0      0     0 ?        S    04:27   0:00  \_ [kworker/0:3]
root      24815  0.0  0.0      0     0 ?        S    04:31   0:00  \_ [kworker/1:4]
root      25277  0.0  0.0      0     0 ?        S    04:32   0:00  \_ [kworker/0:0]
root      25748  0.0  0.0      0     0 ?        S    04:33   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44420  3476 ?        Ss   00:54   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  39500  2208 ?        Ss   00:54   0:06 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352    56 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   208 ?        S<sl 00:54   0:01 /sbin/auditd
polkitd     481  0.0  0.0 612240   824 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58716  1352 ?        Ss   00:54   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256    36 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   252 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   348 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.1 224276  3252 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   112 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1160 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    28 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1332 ?        Ssl  00:54   0:06 /usr/sbin/nscd
root        562  0.0  0.0  24208    16 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   424 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048    28 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      27255  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27272  0.0  0.0 113284  1212 ?        Ss   04:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      27273  0.0  0.0 108052   360 ?        S    04:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      27274  0.0  0.0 113288  1516 ?        S    04:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      27336  0.0  0.0 153840  2092 ?        R    04:36   0:00  |               \_ ps auxf
root      27256  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27302  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      27257  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27298  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      27259  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27297  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      27260  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27304  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      27261  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27300  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      27262  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27296  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      27263  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27293  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      27264  0.0  0.0 183044  2140 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27299  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      27265  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27295  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      27266  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27308  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      27267  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27301  0.0  0.0  20164   968 ?        Ss   04:36   0:00  |   \_ jailshell (pactpay) [27317] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   27317  0.0  0.0  20164   264 ?        S    04:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   27324  0.0  0.7 476724 17480 ?        S    04:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      27269  0.0  0.0 183044  2140 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      27294  0.0  0.0  20164   972 ?        Ss   04:36   0:00      \_ jailshell (nigeria) [27326] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   27326  0.0  0.0  20164   260 ?        S    04:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   27329  0.0  0.6 400652 15940 ?        S    04:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    40 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704     0 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3728 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.4 5654048 34524 ?       SLsl 00:54   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656   492 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   412 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.0  46912  1928 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  48028  2764 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452   480 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.0  46912  1872 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47896  2900 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.0  24528  2060 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572   632 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41144  1464 ?        S    01:28   0:00  \_ dovecot/auth
root      26818  0.0  0.1  60820  4512 ?        S    04:35   0:00  \_ dovecot/lmtp
root      26826  0.0  0.1  41052  2728 ?        S    04:35   0:00  \_ dovecot/auth -w
root        942  0.0  0.0 153404   264 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   372 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root      27170  0.0  0.1 111304  4264 ?        Ss   04:35   0:00  \_ sshd: [accepted]
root      27229  0.0  0.2 157100  4968 ?        Ss   04:35   0:00  \_ sshd: unknown [priv]
sshd      27230  0.0  0.1 115644  2628 ?        S    04:35   0:00  |   \_ sshd: unknown [net]
root      27233  0.0  0.2 157100  4972 ?        Ss   04:35   0:00  \_ sshd: unknown [priv]
sshd      27234  0.0  0.1 115644  2632 ?        S    04:35   0:00      \_ sshd: unknown [net]
systuser    945  0.0  0.0  13012     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.2 14.1 1901856 343132 ?      Ssl  00:54   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.0 436392   364 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.1 718804 27192 ?        Ssl  00:54   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   396 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.0 257360  2152 ?        Ssl  00:54   0:03 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  2544 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  26768 11.1  2.8 459288 69456 ?        S    04:35   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  27007 10.5  2.8 459424 69452 ?        S    04:35   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   27120  1.0  0.3 398104  9552 ?        S    04:35   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    27246 47.0  2.4 520948 59332 ?        S    04:35   0:00  \_ php-fpm: pool cloudware_ng
root        965  0.0  0.2 261416  6440 ?        Ss   00:54   0:02 cpsrvd (SSL) - waiting for connections                   
root      27243  0.0  0.0      0     0 ?        Z    04:35   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.0 445028     0 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3468 ?        Ss   00:54   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   368 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   436 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    56 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.4 114016  9912 ?        Ssl  00:54   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   744 ?        Ssl  00:54   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  0.1 248160  2780 ?        Ss   00:54   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  3.7 265416 90248 ?        S    01:00   0:02  \_ spamd child
root       6472  0.0  0.0 248160  1352 ?        S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2936 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  0.4 410452 10348 ?        Ss   00:54   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.1 387528  3284 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.4 209356  9856 ?        Ss   00:54   0:01 tailwatchd
root       1252  0.0  0.2 183900  6096 ?        Ss   00:54   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.0 167452  1224 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   508 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1364 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8 10.6 1466700 256908 ?      Sl   00:54   4:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.2 267112  5080 ?        Ss   00:54   0:01 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12784   328 ?        S    01:28   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732   292 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12804   340 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.0  53252    68 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    96504  0.1  0.8 277912 20796 ?        S    03:35   0:03  \_ /usr/sbin/httpd -k start
nobody     8576  0.1  0.8 277728 19924 ?        S    04:00   0:02  \_ /usr/sbin/httpd -k start
nobody     9142  0.1  0.8 277984 20552 ?        S    04:01   0:02  \_ /usr/sbin/httpd -k start
nobody     9604  0.0  0.8 277688 20076 ?        S    04:02   0:01  \_ /usr/sbin/httpd -k start
nobody    16222  0.1  0.8 277660 19904 ?        S    04:14   0:01  \_ /usr/sbin/httpd -k start
nobody    16314  0.1  0.8 277856 20032 ?        S    04:14   0:01  \_ /usr/sbin/httpd -k start
nobody    17499  0.1  0.8 277612 19608 ?        S    04:16   0:01  \_ /usr/sbin/httpd -k start
nobody    20280  0.1  0.7 277856 18900 ?        S    04:22   0:00  \_ /usr/sbin/httpd -k start
nobody    22727  0.0  0.7 277984 19164 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    23698  0.0  0.7 277596 18004 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    24499  0.1  0.7 277988 18452 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    24505  0.1  0.7 277988 18852 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
cloudw    27335  0.0  0.4 280780 11072 ?        R    04:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    24514  0.1  0.7 277856 18324 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    24516  0.1  0.7 277992 18396 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    26948  0.1  0.7 277984 17564 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    27015  0.0  0.7 277928 17412 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    27079  0.0  0.6 277472 16844 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    27086  0.0  0.7 277856 17440 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.3 182192  8668 ?        Ss   00:54   0:12 lfd - sleeping
oysipao+   5913  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152    36 ?        S    01:00   0:00  \_ [kworker]
root      92409  0.0  0.0 132964    28 ?        SN   03:29   0:00 ConfigServer Version Check
root      92420  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 8028
root       8686  0.0  0.4 1275844 10340 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root       8722  0.0  0.4 1277312 11696 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 13307  Threads: 3  Questions: 1579840  Slow queries: 0  Opens: 7122  Flush tables: 1  Open tables: 2000  Queries per second avg: 118.722
*************************** 1. row ***************************
     Id: 24829
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-10' LIMIT 1
*************************** 2. row ***************************
     Id: 24831
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 24833
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.207.33.20 TIME_WAIT
      1 114.119.128.35 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 114.119.154.89 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 194.165.16.8 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 4.151.241.248 TIME_WAIT
      1 54.39.136.166 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      4 127.0.0.1 TIME_WAIT
     42 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 04:36:01 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 3 hours 41 minutes 43 seconds
   Server load: 0.32 0.37 0.39
   Total accesses: 55016 - Total Traffic: 1.1 GB - Total Duration: 26809494
   CPU Usage: u14.36 s5.48 cu560.99 cs395.9 - 7.34% CPU load
   4.14 requests/sec - 86.3 kB/second - 20.9 kB/request - 487.304 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

W__KK.KK_W__K_W.KK__............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-2  26948 0/9/3371    W 0.08  0     0   1419489 0.0   0.17  62.64 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-2  27015 0/8/3135    _ 0.28  2     339 1464826 0.0   0.15  58.92 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-2  96504 0/857/3038  _ 15.25 0     303 2239112 0.0   30.00 71.46 66.249.70.36  http/1.1 support.cloudware.ng:443   GET /?c=1880380321 HTTP/1.1
   3-2  16222 2/395/2808  K 5.84  3     256 1330146 69.1  8.34  60.64 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=2051866245 HTTP/1.1
   4-2  20280 1/216/3145  K 3.55  2     340 1388124 36.9  3.90  55.60 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=4101470059 HTTP/1.1
   5-2  -     0/0/2893    . 0.00  13    0   1309070 0.0   0.00  51.38 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-2  8576  52/602/2809 K 8.59  0     17  1308325 270.3 8.73  58.87 144.76.19.157 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Anambra&lga=Oyi&ward=Nteje
   7-2  22727 1/118/2499  K 2.12  4     7   1178677 10.0  1.98  47.27 207.46.13.130 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=anambra&lga=Orumba%20north
   8-2  9142  0/557/2829  _ 11.81 2     273 1622643 0.0   11.50 72.14 66.249.70.37  http/1.1 support.cloudware.ng:443   GET /?c=701666486 HTTP/1.1
   9-2  16314 0/334/2715  W 5.76  0     0   1330152 0.0   6.06  52.24 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-2 17499 0/307/1916  _ 6.33  3     272 921644  0.0   5.92  36.55 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=346786685 HTTP/1.1
   11-2 24499 0/82/2428   _ 1.28  0     0   1101791 0.0   2.31  43.97 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-2 23698 1/97/1990   K 1.42  0     363 876880  35.1  1.51  35.45 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=3508950912 HTTP/1.1
   13-2 27079 0/7/1722    _ 0.01  0     340 804677  0.0   0.07  32.06 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-2 24505 6/85/1845   W 1.83  0     0   894827  190.0 1.88  37.27 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=1846267146 HTTP/1.1
   15-2 -     0/0/1480    . 0.00  12    0   681616  0.0   0.00  29.35 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-2 24514 1/81/1457   K 2.03  0     572 719527  25.2  2.12  41.67 20.11.8.5     http/1.1 cloudware.ng:80            GET /administrator/ HTTP/1.1
   17-2 9604  4/463/915   K 7.92  1     354 862820  130.9 21.19 28.79 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /resource/js/json/megadrop_2015new.json HTTP/1.1
   18-2 27086 0/4/984     _ 0.06  1     1   499347  0.0   0.07  19.16 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   19-2 24516 0/86/1222   _ 2.08  1     1   619291  0.0   1.96  23.98 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   20-2 -     0/0/1606    . 0.00  332   0   757315  0.0   0.00  32.71 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 -     0/0/1851    . 0.00  1288  0   773840  0.0   0.00  35.61 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 -     0/0/1466    . 0.00  1112  0   671561  0.0   0.00  38.59 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 -     0/0/755     . 0.00  1230  0   317090  0.0   0.00  12.56 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/279     . 0.00  1771  0   122067  0.0   0.00  5.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/890     . 0.00  361   0   446080  0.0   0.00  22.44 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/108     . 0.00  1767  0   34397   0.0   0.00  1.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/540     . 0.00  1774  0   233113  0.0   0.00  9.89  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/172     . 0.00  1754  0   71466   0.0   0.00  2.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/107     . 0.00  1777  0   30007   0.0   0.00  1.77  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/304     . 0.00  1775  0   139787  0.0   0.00  6.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/163     . 0.00  1776  0   84177   0.0   0.00  3.34  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/63      . 0.00  1762  0   20576   0.0   0.00  0.73  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/342     . 0.00  570   0   151592  0.0   0.00  5.64  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/199     . 0.00  1769  0   47054   0.0   0.00  5.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/43      . 0.00  1766  0   16061   0.0   0.00  0.75  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/42      . 0.00  11149 0   10575   0.0   0.00  0.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/316     . 0.00  10327 0   106128  0.0   0.00  8.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/59      . 0.00  11020 0   27054   0.0   0.00  0.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/22      . 0.00  11180 0   1654    0.0   0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/149     . 0.00  10852 0   69209   0.0   0.00  2.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/56      . 0.00  11157 0   11193   0.0   0.00  0.59  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/60      . 0.00  11179 0   33165   0.0   0.00  0.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/26      . 0.00  11160 0   1149    0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/36      . 0.00  11178 0   5070    0.0   0.00  0.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/30      . 0.00  11150 0   3132    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/32      . 0.00  11019 0   20691   0.0   0.00  0.65  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/34      . 0.00  11363 0   9383    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/8       . 0.00  11437 0   989     0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/57      . 0.00  11267 261 20913   0.0   0.00  0.84  66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 668
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...70)
   index usage: 11%, cache usage: 16%
   total entries stored since starting: 26475
   total entries replaced since starting: 0
   total entries expired since starting: 25799
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 100 miss
   total removes since starting: 9 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit