403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.03.42.txt
 ## swap threshold exceeded
## server overview
2025-11-11.03.42 load[0] mem[54/70] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1263         134           6         966         934
Swap:          1999        1574         425
 03:42:01 up  3:45,  0 users,  load average: 0.42, 0.29, 0.37
## system overview
top - 03:42:01 up  3:45,  0 users,  load average: 0.42, 0.29, 0.37
Tasks: 199 total,   6 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 55.9 us, 26.5 sy,  0.0 ni, 17.6 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   139692 free,  1291356 used,   989252 buff/cache
KiB Swap:  2047996 total,   436220 free,  1611776 used.   959012 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 222896   4368 S  64.7  9.2   3:34.86 /usr/sbin+
 61178 nigeria   20   0  400652  15940  10220 R  11.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44408   3324   1496 S   5.9  0.1   0:19.13 /usr/lib/+
 57126 nobody    20   0  277800  18312   4088 S   5.9  0.8   0:00.55 /usr/sbin+
 61195 cloudw    20   0  350316  16624  10324 S   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.19 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:16.62 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.53 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.69 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.39 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:03.17 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.90 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.82 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39496   4936   4772 S   0.0  0.2   0:06.04 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    112      0 S   0.0  0.0   0:00.93 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    348    252 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1156    792 S   0.0  0.0   0:03.23 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.30 /usr/sbin+
   517 root      20   0  224148   4524   1240 S   0.0  0.2   0:00.22 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   519 dbus      20   0   57028   1388    656 S   0.0  0.1   0:07.38 /usr/bin/+
   521 rpc       20   0   69256      8      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1484    764 S   0.0  0.1   0:10.16 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    928    568 S   0.0  0.0   0:01.95 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    420    288 S   0.0  0.0   0:00.38 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116    544    296 S   0.0  0.0   0:00.21 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.56 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016   8592   2684 S   0.0  0.4   0:03.32 /usr/loca+
   916 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.29 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.28 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.18 /usr/sbin+
   925 root      20   0  572372    700    252 S   0.0  0.0   0:01.26 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33812   6148 S   0.0  1.4   0:07.82 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.30 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  249168   3004   2656 S   0.0  0.1   0:03.16 /usr/sbin+
   946 root      20   0  261824   6260   1728 S   0.0  0.3   0:03.25 cpsrvd (S+
   954 named     20   0  784392  24444   1564 S   0.0  1.0   0:08.70 /usr/sbin+
   965 root      20   0  385496    184     96 S   0.0  0.0   0:00.54 php-fpm: +
   972 cpanelc+  20   0   10564   3496   2308 R   0.0  0.1   0:11.93 /usr/loca+
   973 root      20   0  397344   1868    588 S   0.0  0.1   0:02.23 php-fpm: +
   975 root      20   0  392856    332    252 S   0.0  0.0   0:00.48 php-fpm: +
   979 root      20   0  436392    296    216 S   0.0  0.0   0:00.59 php-fpm: +
   980 root      20   0 1901588 446324    168 S   0.0 18.4   0:50.75 /usr/loca+
   991 root      20   0  386112    168     84 S   0.0  0.0   0:00.46 php-fpm: +
  1070 dovenull  20   0   46912   2204   1644 S   0.0  0.1   0:00.24 dovecot/p+
  1071 dovenull  20   0   47648   2276   1632 S   0.0  0.1   0:00.21 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.04 dovecot/a+
  1073 root      20   0   10452    508    356 S   0.0  0.0   0:00.16 dovecot/l+
  1074 dovenull  20   0   46912   1964   1460 S   0.0  0.1   0:00.21 dovecot/p+
  1075 dovenull  20   0   47812   2376   1632 S   0.0  0.1   0:00.20 dovecot/i+
  1078 root      20   0   24528   1848    492 S   0.0  0.1   0:00.11 dovecot/c+
  1084 dovecot   20   0   13568    656    452 S   0.0  0.0   0:00.03 dovecot/s+
  1112 systuser  20   0  157704   2932    948 S   0.0  0.1   0:00.08 SonarPush+
  1127 root      20   0  248312   2704    712 S   0.0  0.1   0:04.46 /usr/loca+
  1152 dovecot   20   0   41180   1452   1004 S   0.0  0.1   0:00.31 dovecot/a+
  1157 wp-tool+  20   0  387556   2500   1228 S   0.0  0.1   0:00.19 /usr/bin/+
  1159 wp-tool+  20   0  410452   9380   1084 R   0.0  0.4   0:11.36 /usr/bin/+
  1210 root      20   0  209268   7860   1884 S   0.0  0.3   0:01.25 tailwatchd
  1211 root      20   0  183900     16     16 S   0.0  0.0   0:01.39 cpdavd - +
  1213 root      20   0  167452   1216    668 S   0.0  0.1   0:00.33 dnsadmin +
  1667 root      20   0  299272    488    328 S   0.0  0.0   0:00.37 php-fpm: +
  1700 root      38  18  130416   1356    692 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4768    516 S   0.0  0.2   0:01.09 /usr/sbin+
  1949 root      20   0   12816    324    212 S   0.0  0.0   0:01.57 /usr/loca+
  1950 root      20   0   12732    244    176 S   0.0  0.0   0:01.32 /usr/loca+
  1951 root      20   0   12848    344    216 S   0.0  0.0   0:01.44 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.28 [kworker]
  5071 root      20   0  181900   7144   1100 S   0.0  0.3   0:11.13 lfd - sle+
  7555 root      20   0  269756  44064   1196 S   0.0  1.8   0:03.58 spamd chi+
  7556 root      20   0  248312   1216    340 S   0.0  0.1   0:00.00 spamd chi+
 28672 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 31614 root      20   0 1275844    572     24 S   0.0  0.0   0:00.08 /usr/bin/+
 31652 root      20   0 1277312   2356     24 S   0.0  0.1   0:00.07 /usr/bin/+
 33932 nobody    20   0  277736  12500   4428 S   0.0  0.5   0:03.55 /usr/sbin+
 39472 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 39483 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 129+
 40431 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 43062 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 44563 nobody    20   0  277672  12804   4548 S   0.0  0.5   0:02.20 /usr/sbin+
 45402 nobody    20   0  277612  12104   4508 S   0.0  0.5   0:01.90 /usr/sbin+
 46358 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 47029 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 48267 root      20   0  183052      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 48316 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 49197 nobody    20   0  277800  18580   4312 S   0.0  0.8   0:01.40 /usr/sbin+
 49202 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 49250 nobody    20   0  277932  19180   4504 S   0.0  0.8   0:01.44 /usr/sbin+
 50391 nobody    20   0  277928  19172   4584 S   0.0  0.8   0:01.48 /usr/sbin+
 50412 nobody    20   0  277808  19320   4644 S   0.0  0.8   0:01.26 /usr/sbin+
 50869 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 52128 nobody    20   0  277996  19368   4460 S   0.0  0.8   0:01.22 /usr/sbin+
 52941 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 53101 nobody    20   0  277564  19084   4572 S   0.0  0.8   0:01.20 /usr/sbin+
 54076 nobody    20   0  277800  18784   4364 S   0.0  0.8   0:01.07 /usr/sbin+
 54116 nobody    20   0  277904  19056   4272 S   0.0  0.8   0:01.09 /usr/sbin+
 55990 nobody    20   0  277800  19052   4384 S   0.0  0.8   0:00.71 /usr/sbin+
 56875 nobody    20   0  277800  18392   4132 S   0.0  0.8   0:00.56 /usr/sbin+
 56876 nobody    20   0  277932  18924   4152 S   0.0  0.8   0:00.46 /usr/sbin+
 57460 nobody    20   0  277800  18056   4056 S   0.0  0.7   0:00.60 /usr/sbin+
 57716 nobody    20   0  277600  18452   4124 S   0.0  0.8   0:00.34 /usr/sbin+
 59071 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59820 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59858 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60539 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60875 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 61011 nigeria   20   0  397064   4476   2352 S   0.0  0.2   0:00.00 php-fpm: +
 61053 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 61104 root      20   0   41052   2776   2116 S   0.0  0.1   0:00.00 dovecot/a+
 61110 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 61118 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61119 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61120 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61122 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61123 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61124 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61125 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61126 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61127 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61128 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61130 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 61132 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 61135 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 61136 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 61137 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 61151 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61152 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 61153 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61154 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 61156 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 61162 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61163 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 61165 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 61166 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61167 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61169 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 61173 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61182 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 61190 pactpay   20   0  476724  17116  11408 S   0.0  0.7   0:00.01 /opt/cpan+
 61197 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 61206 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 61207 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 61208 cloudsms  20   0  400652  15676  10052 R   0.0  0.6   0:00.00 /opt/cpan+
 61209 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [setupvir+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov10   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      28672  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:3]
root      40431  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:4]
root      43062  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/u200:2]
root      46358  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:4]
root      47029  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:0]
root      49202  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/u200:1]
root      50869  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/0:1]
root      52941  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/1:0]
root      59071  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:2]
root      59820  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:1]
root      59858  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44408  3324 ?        Ss   Nov10   0:19 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39496  4936 ?        Ss   Nov10   0:06 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   112 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   348 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1156 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  4524 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1388 ?        Ss   Nov10   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256     8 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1484 ?        Ssl  Nov10   0:10 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   928 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   420 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052     0 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      61118  0.0  0.0 183048  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61135  0.0  0.0 113284  1212 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      61136  0.0  0.0 108052   356 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      61137  0.0  0.0 113288  1516 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      61210  0.0  0.0 153840  2092 ?        R    03:42   0:00  |               \_ ps auxf
root      61119  0.0  0.0 183048  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61163  0.0  0.0  20164   988 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [61211] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  61211  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  61212  0.0  0.0 113284  1212 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  61213  0.0  0.5 397544 13020 ?        R    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      61120  0.0  0.0 183048  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61169  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      61122  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61152  0.0  0.0  20164   992 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [61206] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  61206  0.0  0.0      0     0 ?        D    03:42   0:00  |       \_ [jailshell]
root      61123  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61153  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      61124  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61166  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      61125  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61162  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      61126  0.0  0.0 183048  2140 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61165  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      61127  0.0  0.0 183048  2140 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61151  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      61128  0.0  0.0 183048  2140 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61167  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      61130  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61156  0.0  0.0  20164   964 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [61182] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61182  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   61190  0.0  0.7 476724 17116 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      61132  0.0  0.0 183048  2140 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      61154  0.0  0.0  20164   964 ?        Ss   03:42   0:00      \_ jailshell (nigeria) [61173] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61173  0.0  0.0  20164   260 ?        S    03:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   61178  0.0  0.6 400652 15940 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.0  89116   544 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.3 114016  8592 ?        Ssl  Nov10   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root      60539  0.0  0.1 111304  4268 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root      60875  0.0  0.1 111304  4272 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root      61053  0.0  0.1 111304  4260 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  2204 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  47648  2276 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   508 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912  1964 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47812  2376 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1848 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   656 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1452 ?        S    Nov10   0:00  \_ dovecot/auth
root      61104  0.0  0.1  41052  2776 ?        S    03:41   0:00  \_ dovecot/auth -w
root        925  0.0  0.0 572372   700 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 33812 ?       SLsl Nov10   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.1 249168  3004 ?        Ssl  Nov10   0:03 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261824  6260 ?        Ss   Nov10   0:03 cpsrvd (SSL) - waiting for connections                   
root      61110  0.0  0.0      0     0 ?        Z    03:41   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.0 784392 24444 ?        Ssl  Nov10   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   184 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3496 ?        Rs   Nov10   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1868 ?        Ss   Nov10   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   61011  0.0  0.1 397064  4476 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   332 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   296 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.3 18.4 1901588 446324 ?      Ssl  Nov10   0:50 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   168 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2704 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  1.8 269756 44064 ?        S    00:03   0:03  \_ spamd child
root       7556  0.0  0.0 248312  1216 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  2500 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  0.3 410452  9380 ?        Ss   Nov10   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  7860 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  0.0 183900    16 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452  1216 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   488 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1356 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.5  9.2 1462284 222896 ?      Sl   Nov10   3:34 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4768 ?        Ss   Nov10   0:01 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12816   324 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   244 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12848   344 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    33932  0.1  0.5 277736 12500 ?        S    03:03   0:03  \_ /usr/sbin/httpd -k start
nobody    44563  0.1  0.5 277672 12804 ?        S    03:17   0:02  \_ /usr/sbin/httpd -k start
nobody    45402  0.1  0.5 277612 12104 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    49197  0.1  0.7 277800 18580 ?        S    03:24   0:01  \_ /usr/sbin/httpd -k start
nobody    49250  0.1  0.7 277932 19180 ?        S    03:24   0:01  \_ /usr/sbin/httpd -k start
cloudw    61195  0.0  0.6 350316 16624 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    50391  0.1  0.7 277928 19172 ?        S    03:26   0:01  \_ /usr/sbin/httpd -k start
nobody    50412  0.1  0.7 277808 19320 ?        S    03:26   0:01  \_ /usr/sbin/httpd -k start
nobody    52128  0.1  0.8 277996 19368 ?        S    03:28   0:01  \_ /usr/sbin/httpd -k start
nobody    53101  0.1  0.7 277564 19084 ?        S    03:30   0:01  \_ /usr/sbin/httpd -k start
nobody    54076  0.1  0.7 277800 18784 ?        S    03:31   0:01  \_ /usr/sbin/httpd -k start
nobody    54116  0.1  0.7 277904 19056 ?        S    03:31   0:01  \_ /usr/sbin/httpd -k start
nobody    55990  0.1  0.7 277800 19052 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    56875  0.1  0.7 277800 18392 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody    56876  0.1  0.7 277932 18924 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody    57126  0.1  0.7 277800 18312 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody    57460  0.2  0.7 277800 18056 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    57716  0.1  0.7 277600 18452 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.2 181900  7144 ?        Ss   00:00   0:11 lfd - sleeping
root      31614  0.0  0.0 1275844  572 ?        Ssl  03:00   0:00 /usr/bin/cspdaemon
root      31652  0.0  0.0 1277312 2356 ?        Ssl  03:00   0:00 /usr/bin/checkstatus
root      39472  0.0  0.0 132964     4 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056     0 ?        SN   03:11   0:00  \_ sleep 12937
## mysql stats
Uptime: 13505  Threads: 3  Questions: 1397866  Slow queries: 0  Opens: 6531  Flush tables: 1  Open tables: 2000  Queries per second avg: 103.507
*************************** 1. row ***************************
     Id: 18084
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 2. row ***************************
     Id: 18087
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-11' LIMIT 1
*************************** 3. row ***************************
     Id: 18093
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.48 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 128.199.157.207 TIME_WAIT
      1 142.44.225.101 TIME_WAIT
      1 142.44.225.171 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.33 TIME_WAIT
      1 74.7.230.2 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.135.211.148 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 03:42:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 44 minutes 59 seconds
   Server load: 0.42 0.29 0.37
   Total accesses: 65917 - Total Traffic: 1.7 GB - Total Duration: 34555816
   CPU Usage: u15.18 s6.94 cu887.92 cs680.22 - 11.8% CPU load
   4.88 requests/sec - 134.0 kB/second - 27.4 kB/request - 524.232 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

RWW.R_KK.K_KWKKKR..K.K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  49197 0/257/3452 R 6.35  8    295 1708020 0.0   5.87  85.97  197.210.77.59   http/1.1
   1-0  44563 1/502/3536 W 10.44 0    0   1730373 35.6  9.49  90.15  66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=1629917677 HTTP/1.1
   2-0  49250 1/293/3553 W 6.32  0    0   1692027 34.6  5.96  79.67  66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=3255310919 HTTP/1.1
   3-0  -     0/0/3272   . 0.00  203  0   1660802 0.0   0.00  76.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  50391 0/245/3431 R 6.90  2    273 2573579 0.0   8.15  116.47 128.199.157.207 http/1.1 health.oyostate.gov.ng:443
   5-0  52128 0/227/3419 _ 6.31  0    0   1787219 0.0   5.53  83.14  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  54076 4/192/3253 K 5.20  1    355 1774379 127.0 4.68  96.33  66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=3764962856 HTTP/1.1
   7-0  57460 1/111/3519 K 3.02  1    351 1642427 33.8  2.57  90.88  66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=2148814491 HTTP/1.1
   8-0  -     0/0/3170   . 0.00  171  0   1641544 0.0   0.00  93.86  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  53101 7/325/3215 K 5.29  3    256 1630247 220.2 5.00  76.19  66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=378741294 HTTP/1.1
   10-0 54116 0/199/3194 _ 5.10  0    18  1572520 0.0   4.83  89.81  52.44.229.124   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/2019elec
   11-0 55990 7/139/3175 K 3.67  1    409 1640801 214.6 2.99  94.13  66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=1892418208 HTTP/1.1
   12-0 56875 0/102/2578 W 2.63  0    0   1410993 0.0   2.86  66.69  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 57716 1/87/2210  K 1.57  0    21  1077450 10.0  1.17  59.31  87.250.224.73   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Enugu&lga=Ezeagu&ward=Agba
   14-0 56876 1/149/2467 K 2.39  0    256 1332052 34.5  1.74  58.66  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=466935931 HTTP/1.1
   15-0 57126 2/102/1839 K 2.67  0    345 929182  65.1  2.31  43.30  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=2060579907 HTTP/1.1
   16-0 50412 0/257/2850 R 6.22  1    258 1495446 0.0   5.38  69.07  185.191.171.1   http/1.1 nigeriadecide.org:443
   17-0 -     0/0/2566   . 0.00  160  0   1330217 0.0   0.00  68.18  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/1874   . 0.00  199  0   930003  0.0   0.00  48.32  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 45402 3/339/1735 K 9.33  1    346 848093  94.4  15.87 48.53  66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=1760313725 HTTP/1.1
   20-0 -     0/0/1047   . 0.00  884  0   525007  0.0   0.00  24.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 33932 4/645/1448 K 16.25 1    7   788828  22.1  15.39 34.51  144.76.19.157   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Oyo&lga=Ibadan%20south%20w
   22-0 -     0/0/394    . 0.00  2750 0   194426  0.0   0.00  10.27  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/427    . 0.00  3629 0   218307  0.0   0.00  10.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/493    . 0.00  7188 0   234804  0.0   0.00  11.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/201    . 0.00  7267 0   83585   0.0   0.00  3.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/132    . 0.00  7261 0   63977   0.0   0.00  3.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/725    . 0.00  5487 0   427451  0.0   0.00  20.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/117    . 0.00  7050 0   78945   0.0   0.00  4.86   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/496    . 0.00  5892 0   299300  0.0   0.00  13.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/67     . 0.00  7051 0   36690   0.0   0.00  1.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/239    . 0.00  7228 0   99496   0.0   0.00  4.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/4      . 0.00  7264 0   178     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00  7265 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/3      . 0.00  7266 0   4       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/3      . 0.00  7260 0   6       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/13     . 0.00  7221 0   5697    0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00  7259 0   236     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/281    . 0.00  6480 0   158846  0.0   0.00  19.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00  7262 0   264     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/725    . 0.00  4847 0   450086  0.0   0.00  35.37  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00  7252 0   1003    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/63     . 0.00  7030 0   33019   0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/159    . 0.00  6658 0   93527   0.0   0.00  19.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/9      . 0.00  7247 0   4423    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/18     . 0.00  7191 0   7447    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/13     . 0.00  7217 0   5454    0.0   0.00  0.65   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/513    . 0.00  5813 0   335229  0.0   0.00  11.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/6      . 0.00  7254 0   2176    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 752
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 1...36)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 36059
   total entries replaced since starting: 0
   total entries expired since starting: 35280
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 150 miss
   total removes since starting: 27 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit