403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.03.12.txt
 ## swap threshold exceeded
## server overview
2025-11-11.03.12 load[0] mem[63/59] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1452         102          28         808         717
Swap:          1999        1316         683
 03:12:01 up  3:15,  0 users,  load average: 0.14, 0.31, 0.39
## system overview
top - 03:12:01 up  3:15,  0 users,  load average: 0.14, 0.31, 0.39
Tasks: 208 total,   4 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 44.1 us, 29.4 sy,  0.0 ni, 20.6 id,  2.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   108012 free,  1481424 used,   830864 buff/cache
KiB Swap:  2047996 total,   699900 free,  1348096 used.   740544 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 282828   4080 S  66.7 11.7   3:07.08 /usr/sbin+
 40369 nigeria   20   0  400652  15936  10220 R  20.0  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44408   3464   1516 S   6.7  0.1   0:16.90 /usr/lib/+
 39069 nobody    20   0  277800  17616   3776 S   6.7  0.7   0:00.18 /usr/sbin+
 40378 pactpay   20   0  476724  17108  11408 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.00 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.46 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:14.46 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.46 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.28 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.03 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:02.12 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.88 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40240   1560   1312 S   0.0  0.1   0:05.27 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    452    320 S   0.0  0.0   0:00.81 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    260    168 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1468    800 S   0.0  0.1   0:02.83 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.26 /usr/sbin+
   517 root      20   0  224148   3080    820 S   0.0  0.1   0:00.20 queueproc+
   518 root      20   0  152780     48      4 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1324    600 S   0.0  0.1   0:06.44 /usr/bin/+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1472    704 S   0.0  0.1   0:08.80 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    764    428 S   0.0  0.0   0:01.70 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    428    296 S   0.0  0.0   0:00.34 /usr/sbin+
   577 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3892    868 S   0.0  0.2   0:00.18 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.00 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  13000   2680 S   0.0  0.5   0:02.88 /usr/loca+
   916 systuser  20   0   14068     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.25 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.11 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.16 /usr/sbin+
   925 root      20   0  572372    680    116 S   0.0  0.0   0:01.10 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  34004   5712 S   0.0  1.4   0:06.74 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.26 /usr/bin/+
   930 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  249168   1664   1076 S   0.0  0.1   0:02.75 /usr/sbin+
   946 root      20   0  261824   9204   2384 S   0.0  0.4   0:02.81 cpsrvd (S+
   954 named     20   0  784392  38748   1856 S   0.0  1.6   0:07.35 /usr/sbin+
   965 root      20   0  385496    472    376 S   0.0  0.0   0:00.47 php-fpm: +
   972 cpanelc+  20   0   10564   3508   2312 R   0.0  0.1   0:10.35 /usr/loca+
   973 root      20   0  397344   1932    600 S   0.0  0.1   0:01.95 php-fpm: +
   975 root      20   0  392856    564    380 S   0.0  0.0   0:00.41 php-fpm: +
   979 root      20   0  436392    396    308 S   0.0  0.0   0:00.49 php-fpm: +
   980 root      20   0 1828116 478836    532 S   0.0 19.8   0:29.93 /usr/loca+
   991 root      20   0  386112    456    252 S   0.0  0.0   0:00.39 php-fpm: +
  1070 dovenull  20   0   46912   2344   1772 S   0.0  0.1   0:00.20 dovecot/p+
  1071 dovenull  20   0   47648   3104   1840 S   0.0  0.1   0:00.21 dovecot/i+
  1072 dovecot   20   0   10320    360    256 S   0.0  0.0   0:00.03 dovecot/a+
  1073 root      20   0   10452    584    416 S   0.0  0.0   0:00.14 dovecot/l+
  1074 dovenull  20   0   46912   2288   1720 S   0.0  0.1   0:00.17 dovecot/p+
  1075 dovenull  20   0   47668   3024   1852 S   0.0  0.1   0:00.17 dovecot/i+
  1078 root      20   0   24528   1988    428 S   0.0  0.1   0:00.10 dovecot/c+
  1084 dovecot   20   0   13568    552    368 S   0.0  0.0   0:00.03 dovecot/s+
  1112 systuser  20   0  157704   2876    892 S   0.0  0.1   0:00.07 SonarPush+
  1127 root      20   0  248312   2712    696 S   0.0  0.1   0:04.24 /usr/loca+
  1152 dovecot   20   0   41180   1512   1020 S   0.0  0.1   0:00.27 dovecot/a+
  1157 wp-tool+  20   0  387556   3476   1612 S   0.0  0.1   0:00.18 /usr/bin/+
  1159 wp-tool+  20   0  410452  28568   1852 S   0.0  1.2   0:09.83 /usr/bin/+
  1210 root      20   0  209268   9976   2008 S   0.0  0.4   0:01.10 tailwatchd
  1211 root      20   0  262224  21860   3936 S   0.0  0.9   0:01.38 cpdavd - +
  1213 root      20   0  167452   3664   2292 S   0.0  0.2   0:00.30 dnsadmin +
  1667 root      20   0  299272    488    328 S   0.0  0.0   0:00.32 php-fpm: +
  1700 root      38  18  130416   1372    688 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4792    532 S   0.0  0.2   0:00.96 /usr/sbin+
  1949 root      20   0   12816    324    212 S   0.0  0.0   0:01.36 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:01.15 /usr/loca+
  1951 root      20   0   12848    344    216 S   0.0  0.0   0:01.25 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     72     36 S   0.0  0.0   0:00.23 [kworker]
  5071 root      20   0  181800   9032   1100 S   0.0  0.4   0:09.70 lfd - sle+
  7555 root      20   0  269756 105108   2676 S   0.0  4.3   0:03.03 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 15112 nobody    20   0  277932  20680   4872 S   0.0  0.9   0:02.99 /usr/sbin+
 18725 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22178 nobody    20   0  277668  20164   4800 S   0.0  0.8   0:02.22 /usr/sbin+
 23290 nobody    20   0  277628  19944   4832 S   0.0  0.8   0:02.11 /usr/sbin+
 27864 nobody    20   0  277800  19556   4696 S   0.0  0.8   0:01.30 /usr/sbin+
 27949 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 28672 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 29155 nobody    20   0  277816  19444   4652 S   0.0  0.8   0:01.49 /usr/sbin+
 30173 nobody    20   0  277540  19608   4624 S   0.0  0.8   0:01.17 /usr/sbin+
 31594 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 31614 root      20   0 1275844  10336    600 S   0.0  0.4   0:00.06 /usr/bin/+
 31652 root      20   0 1277312  11868    600 S   0.0  0.5   0:00.06 /usr/bin/+
 32145 root      20   0  123576    656    428 S   0.0  0.0   0:00.00 /usr/sbin+
 32285 nobody    20   0  277736  19344   4604 S   0.0  0.8   0:01.14 /usr/sbin+
 32524 nobody    20   0  277532  19080   4512 S   0.0  0.8   0:01.22 /usr/sbin+
 32947 nobody    20   0  277960  18744   4280 S   0.0  0.8   0:00.60 /usr/sbin+
 33832 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33932 nobody    20   0  277800  19044   4332 S   0.0  0.8   0:00.71 /usr/sbin+
 34689 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 34691 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35918 nobody    20   0  277812  18824   4260 S   0.0  0.8   0:00.54 /usr/sbin+
 36537 nobody    20   0  277536  18240   4084 S   0.0  0.8   0:00.61 /usr/sbin+
 38184 nobody    20   0  277528  17796   4012 S   0.0  0.7   0:00.25 /usr/sbin+
 38185 nobody    20   0  277800  17736   3776 S   0.0  0.7   0:00.34 /usr/sbin+
 38388 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [kworker/+
 38571 nobody    20   0  277800  17288   3392 S   0.0  0.7   0:00.10 /usr/sbin+
 38785 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38791 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38904 nobody    20   0  277800  17816   3788 S   0.0  0.7   0:00.22 /usr/sbin+
 39466 root      30  10  113284   1484   1276 S   0.0  0.1   0:00.00 /bin/bash+
 39472 root      30  10  132964   4548   1012 S   0.0  0.2   0:00.00 ConfigSer+
 39483 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 129+
 39560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39584 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 39586 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 39753 root      30  10  113284   1492   1256 S   0.0  0.1   0:00.00 bash /etc+
 39754 root      30  10  113644    980    832 S   0.0  0.0   0:00.00 awk -v pr+
 39795 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 39808 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 248
 39813 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 39842 nigeria   20   0  397784   8844   3900 S   0.0  0.4   0:00.20 php-fpm: +
 39911 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 39941 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 40031 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 40129 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 40130 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 40164 nigeria   20   0  397064   4528   2400 S   0.0  0.2   0:00.00 php-fpm: +
 40293 root      20   0       0      0      0 Z   0.0  0.0   0:00.01 [cpaneld +
 40301 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40302 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40303 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40305 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40306 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40307 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40308 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40309 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40310 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40311 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40312 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40313 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40315 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40318 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 40320 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 40321 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 40340 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40341 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40342 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 40344 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40345 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40346 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40347 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40348 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40349 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40350 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40351 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40356 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 40362 cloudw    20   0  350316  16624  10324 S   0.0  0.7   0:00.01 /opt/cpan+
 40364 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 40375 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 40376 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 48267 root      20   0  183052   1656   1112 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  113284    696    520 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056    304    228 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov10   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      38388  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/u200:1]
root      18725  0.0  0.0      0     0 ?        S    02:45   0:00  \_ [kworker/0:3]
root      27949  0.0  0.0      0     0 ?        S    02:56   0:00  \_ [kworker/1:0]
root      28672  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:3]
root      31594  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      33832  0.0  0.0      0     0 ?        S    03:03   0:00  \_ [kworker/0:0]
root      34689  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/0:2]
root      34691  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/1:2]
root      38785  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/0:1]
root      38791  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:1]
root      39560  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44408  3464 ?        Ss   Nov10   0:16 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40240  1560 ?        Ss   Nov10   0:05 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   452 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   260 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1468 ?        Ss   Nov10   0:02 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3080 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    48 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Ss   Nov10   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1472 ?        Ssl  Nov10   0:08 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   764 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   428 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052  1656 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284   696 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      40301  0.0  0.0 183048  2152 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40318  0.0  0.0 113284  1208 ?        Ss   03:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      40320  0.0  0.0 108052   356 ?        S    03:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      40321  0.0  0.0 113288  1520 ?        S    03:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      40385  0.0  0.0 153840  2092 ?        R    03:12   0:00  |               \_ ps auxf
root      40302  0.0  0.0 183048  2152 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40341  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      40303  0.0  0.0 183048  2152 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40345  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      40305  0.0  0.0 183048  2152 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40340  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      40306  0.0  0.0 183048  2152 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40350  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      40307  0.0  0.0 183048  2148 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40346  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      40308  0.0  0.0 183048  2148 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40351  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      40309  0.0  0.0 183048  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40347  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      40310  0.0  0.0 183048  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40344  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      40311  0.0  0.0 183048  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40349  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      40312  0.0  0.0 183048  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40348  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      40313  0.0  0.0 183048  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40356  0.0  0.0  20164   968 ?        Ss   03:12   0:00  |   \_ jailshell (pactpay) [40376] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40376  0.0  0.0  20164   260 ?        S    03:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40378  0.0  0.7 476724 17108 ?        S    03:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      40315  0.0  0.0 183048  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      40342  0.0  0.0  20164   964 ?        Ss   03:12   0:00      \_ jailshell (nigeria) [40364] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40364  0.0  0.0  20164   260 ?        S    03:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40369  0.0  0.6 400652 15936 ?        S    03:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    24 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3892 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.5 114016 13000 ?        Ssl  Nov10   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    32 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    68 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root      39584  0.0  0.1 111304  4268 ?        Ss   03:11   0:00  \_ sshd: [accepted]
sshd      39586  0.0  0.1 115644  2628 ?        S    03:11   0:00  |   \_ sshd: [net]
root      39795  0.0  0.1 111304  4264 ?        Ss   03:11   0:00  \_ sshd: [accepted]
sshd      39813  0.0  0.1 115644  2624 ?        S    03:11   0:00  |   \_ sshd: [net]
root      39911  0.0  0.1 111304  4264 ?        Ss   03:11   0:00  \_ sshd: [accepted]
root      40031  0.0  0.1 111304  4268 ?        Ss   03:11   0:00  \_ sshd: [accepted]
root      40129  0.0  0.1 111304  4268 ?        Ss   03:11   0:00  \_ sshd: [accepted]
sshd      40130  0.0  0.1 115644  2632 ?        S    03:11   0:00      \_ sshd: [net]
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  2344 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.1  47648  3104 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   360 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   584 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912  2288 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.1  47668  3024 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1988 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   552 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1512 ?        S    Nov10   0:00  \_ dovecot/auth
root      39941  0.0  0.1  41052  2724 ?        S    03:11   0:00  \_ dovecot/auth -w
root        925  0.0  0.0 572372   680 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.4 5654048 34004 ?       SLsl Nov10   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    72 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.0 249168  1664 ?        Ssl  Nov10   0:02 /usr/sbin/rsyslogd -n
root        946  0.0  0.3 261824  9204 ?        Ss   Nov10   0:02 cpsrvd (SSL) - waiting for connections                   
root      40293  1.0  0.0      0     0 ?        Z    03:11   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.6 784392 38748 ?        Ssl  Nov10   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   472 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3508 ?        Ss   Nov10   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1932 ?        Ss   Nov10   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   39842  0.3  0.3 397784  8844 ?        S    03:11   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   40164  0.0  0.1 397064  4528 ?        S    03:11   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   564 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   396 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.2 19.7 1828116 478836 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   456 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2876 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2712 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  4.3 269756 105108 ?       S    00:03   0:03  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3476 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 28568 ?        Ss   Nov10   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.4 209268  9976 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  0.9 262224 21860 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1213  0.0  0.1 167452  3664 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   488 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1372 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.5 11.6 1462284 282828 ?      Sl   Nov10   3:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4792 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12816   324 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12848   344 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    15112  0.1  0.8 277932 20680 ?        S    02:40   0:02  \_ /usr/sbin/httpd -k start
nobody    22178  0.1  0.8 277668 20164 ?        S    02:48   0:02  \_ /usr/sbin/httpd -k start
nobody    23290  0.1  0.8 277628 19944 ?        S    02:49   0:02  \_ /usr/sbin/httpd -k start
nobody    27864  0.1  0.8 277800 19556 ?        S    02:55   0:01  \_ /usr/sbin/httpd -k start
nobody    29155  0.1  0.8 277816 19444 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    30173  0.1  0.8 277540 19608 ?        S    02:59   0:01  \_ /usr/sbin/httpd -k start
nobody    32285  0.1  0.7 277736 19344 ?        S    03:01   0:01  \_ /usr/sbin/httpd -k start
nobody    32524  0.1  0.7 277532 19080 ?        S    03:01   0:01  \_ /usr/sbin/httpd -k start
nobody    32947  0.1  0.7 277960 18744 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    33932  0.1  0.7 277800 19044 ?        S    03:03   0:00  \_ /usr/sbin/httpd -k start
nobody    35918  0.1  0.7 277812 18824 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    36537  0.1  0.7 277536 18240 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    40362  0.0  0.6 350316 16624 ?        S    03:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    38184  0.1  0.7 277528 17796 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    38185  0.1  0.7 277800 17736 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    38571  0.0  0.7 277800 17288 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    38904  0.1  0.7 277800 17816 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    39069  0.1  0.7 277800 17616 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    72 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.3 181800  9032 ?        Ss   00:00   0:09 lfd - sleeping
root      31614  0.0  0.4 1275844 10336 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      31652  0.0  0.4 1277312 11868 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      32145  0.0  0.0 123576   656 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      39466  0.0  0.0 113284  1484 ?        SN   03:11   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      39753  0.0  0.0 113284  1492 ?        SN   03:11   0:00      \_ bash /etc/cron.daily/maldet
root      39808  0.0  0.0 108056   360 ?        SN   03:11   0:00      |   \_ sleep 248
root      39754  0.0  0.0 113644   980 ?        SN   03:11   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      39472  0.0  0.1 132964  4548 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056   356 ?        SN   03:11   0:00  \_ sleep 12937
## mysql stats
Uptime: 11705  Threads: 3  Questions: 1257362  Slow queries: 0  Opens: 5525  Flush tables: 1  Open tables: 2000  Queries per second avg: 107.420
*************************** 1. row ***************************
     Id: 15802
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-11' LIMIT 1
*************************** 2. row ***************************
     Id: 15805
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 15807
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 142.111.39.107 TIME_WAIT
      1 142.44.225.242 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.239.185.88 TIME_WAIT
      1 45.41.133.68 TIME_WAIT
      1 92.71.41.237 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 03:12:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 14 minutes 59 seconds
   Server load: 0.14 0.31 0.39
   Total accesses: 57111 - Total Traffic: 1.5 GB - Total Duration: 30273913
   CPU Usage: u12.42 s5.73 cu767.41 cs584.61 - 11.7% CPU load
   4.88 requests/sec - 134.3 kB/second - 27.5 kB/request - 530.089 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KKKKK_KK_WWK._..KW.K.K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol          VHost                                       Request
   0-0  23290 4/489/3051 K 9.09  1    260 1510125 125.3 8.77  75.31 66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=2326668456 HTTP/1.1
   1-0  15112 2/621/2948 K 14.25 0    398 1490152 64.0  12.70 78.38 66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=3183187420 HTTP/1.1
   2-0  38571 24/35/3139 K 0.32  2    6   1529133 127.1 0.39  71.69 144.76.19.157   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Sokoto&lga=Sokoto%20south&
   3-0  29155 1/284/2829 K 7.42  1    273 1447301 35.0  6.20  66.25 66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=158197731 HTTP/1.1
   4-0  35918 1/88/2916  K 2.38  3    10  2262455 10.8  2.32  95.08 192.178.4.103   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Kaduna&lga=Kudan&ward=Kuda
   5-0  38904 0/38/2968  _ 1.04  0    6   1567456 0.0   1.01  72.21 44.223.193.255  http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/blog/blog/2019elections/images/b
   6-0  39069 2/30/2793  K 0.76  0    368 1538525 66.1  0.78  84.83 66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=2640620666 HTTP/1.1
   7-0  32947 1/171/3039 K 2.16  1    258 1388405 34.5  2.26  78.51 66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=3898382376 HTTP/1.1
   8-0  22178 0/427/2792 _ 10.41 1    7   1462653 0.0   12.07 84.87 103.178.186.172 http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?lga=Kajola&state=Oyo&ward=Ayetor
   9-0  32285 1/229/2648 W 4.95  0    0   1399754 36.6  4.99  63.27 66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=995127762 HTTP/1.1
   10-0 36537 8/98/2798  W 2.74  0    0   1364347 245.4 2.66  79.93 66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=217155968 HTTP/1.1
   11-0 32524 4/279/2805 K 5.87  3    291 1469652 126.3 5.02  85.57 66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=1772894809 HTTP/1.1
   12-0 -     0/0/2208   . 0.00  156  0   1216371 0.0   0.00  57.04 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   13-0 27864 0/252/1849 _ 5.51  0    0   884384  0.0   5.55  44.16 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   14-0 -     0/0/2065   . 0.00  155  0   1160282 0.0   0.00  50.30 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   15-0 -     0/0/1545   . 0.00  153  0   775369  0.0   0.00  36.05 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 30173 6/238/2438 K 4.98  3    254 1325259 186.1 4.75  60.53 66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=1201626316 HTTP/1.1
   17-0 38184 0/42/2250  W 1.10  0    0   1178779 0.0   1.11  60.53 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   18-0 -     0/0/1693   . 0.00  160  0   834430  0.0   0.00  42.29 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   19-0 38185 4/56/1366  K 1.60  4    266 661230  126.8 1.54  31.88 66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=2580097129 HTTP/1.1
   20-0 -     0/0/917    . 0.00  470  0   447776  0.0   0.00  21.21 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 33932 7/137/940  K 2.96  2    254 525470  216.9 2.96  22.08 66.249.70.37    http/1.1 support.cloudware.ng:443 GET /?c=4097369488 HTTP/1.1
   22-0 -     0/0/394    . 0.00  950  0   194426  0.0   0.00  10.27 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/427    . 0.00  1829 0   218307  0.0   0.00  10.92 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/493    . 0.00  5388 0   234804  0.0   0.00  11.14 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/201    . 0.00  5467 0   83585   0.0   0.00  3.46  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/132    . 0.00  5461 0   63977   0.0   0.00  3.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/725    . 0.00  3687 0   427451  0.0   0.00  20.36 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/117    . 0.00  5250 0   78945   0.0   0.00  4.86  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/496    . 0.00  4092 0   299300  0.0   0.00  13.92 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/67     . 0.00  5251 0   36690   0.0   0.00  1.77  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/239    . 0.00  5428 0   99496   0.0   0.00  4.64  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/4      . 0.00  5464 0   178     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00  5465 0   3       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/3      . 0.00  5466 0   4       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/3      . 0.00  5460 0   6       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/13     . 0.00  5421 0   5697    0.0   0.00  0.29  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00  5459 0   236     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/281    . 0.00  4680 0   158846  0.0   0.00  19.22 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00  5462 0   264     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/725    . 0.00  3047 0   450086  0.0   0.00  35.37 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00  5452 0   1003    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/63     . 0.00  5230 0   33019   0.0   0.00  1.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/159    . 0.00  4858 0   93527   0.0   0.00  19.16 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/9      . 0.00  5447 0   4423    0.0   0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/18     . 0.00  5391 0   7447    0.0   0.00  0.41  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/13     . 0.00  5417 0   5454    0.0   0.00  0.65  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/513    . 0.00  4013 0   335229  0.0   0.00  11.08 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/6      . 0.00  5454 0   2176    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 755
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...63)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 31473
   total entries replaced since starting: 0
   total entries expired since starting: 30695
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 145 miss
   total removes since starting: 23 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit