403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.04.09.txt
 ## swap threshold exceeded
## server overview
2025-11-11.04.09 load[0] mem[62/63] mysql[1/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1424         306          18         633         757
Swap:          1999        1502         497
 04:09:01 up  4:12,  0 users,  load average: 0.38, 0.35, 0.32
## system overview
top - 04:09:01 up  4:12,  0 users,  load average: 0.38, 0.35, 0.32
Tasks: 207 total,   2 running, 203 sleeping,   0 stopped,   2 zombie
%Cpu(s): 64.5 us, 25.8 sy,  0.0 ni,  3.2 id,  6.5 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   289000 free,  1477720 used,   653580 buff/cache
KiB Swap:  2047996 total,   509632 free,  1538364 used.   756204 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 234052   4244 S  43.8  9.7   3:56.47 /usr/sbin+
 80558 root      20   0  169868  16852   2880 S  37.5  0.7   0:00.08 /usr/loca+
 80576 nigeria   20   0  400652  15940  10220 R  18.8  0.7   0:00.03 /opt/cpan+
 80578 cloudw    20   0  350316  16620  10324 S  12.5  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44408   3448   1516 S   6.2  0.1   0:21.34 /usr/lib/+
   355 root      20   0   40240   2048   1800 S   6.2  0.1   0:06.73 /usr/lib/+
   519 dbus      20   0   57028   1388    656 S   6.2  0.1   0:08.27 /usr/bin/+
 77382 nobody    20   0  277796  18248   4056 S   6.2  0.8   0:00.49 /usr/sbin+
 80568 pactpay   20   0  476460  15968  10408 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.30 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.62 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:18.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.99 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.93 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:03.27 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.98 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.90 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    112      0 S   0.0  0.0   0:01.03 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    268    172 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1464    792 S   0.0  0.1   0:03.62 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.34 /usr/sbin+
   517 root      20   0  224148   4332   1048 S   0.0  0.2   0:00.24 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   521 rpc       20   0   69256      8      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1488    760 S   0.0  0.1   0:11.42 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    928    568 S   0.0  0.0   0:02.17 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    424    292 S   0.0  0.0   0:00.44 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3856    864 S   0.0  0.2   0:00.25 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.58 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016   8860   2504 S   0.0  0.4   0:03.71 /usr/loca+
   916 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.32 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.42 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.20 /usr/sbin+
   925 root      20   0  572372    696    248 S   0.0  0.0   0:01.40 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33032   5012 S   0.0  1.4   0:08.68 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.33 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  257360   2148   1692 S   0.0  0.1   0:03.51 /usr/sbin+
   946 root      20   0  261824   6384   1684 S   0.0  0.3   0:03.57 cpsrvd (S+
   954 named     20   0  784392  26712   1572 S   0.0  1.1   0:10.15 /usr/sbin+
   965 root      20   0  385496    308    220 S   0.0  0.0   0:00.58 php-fpm: +
   972 cpanelc+  20   0   10564   3492   2304 S   0.0  0.1   0:13.33 /usr/loca+
   973 root      20   0  397344   1884    604 S   0.0  0.1   0:02.44 php-fpm: +
   975 root      20   0  392856    280    200 S   0.0  0.0   0:00.51 php-fpm: +
   979 root      20   0  436392    400    312 S   0.0  0.0   0:00.63 php-fpm: +
   980 root      20   0 1901588 441096   1096 S   0.0 18.2   0:51.09 /usr/loca+
   991 root      20   0  386112    316    232 S   0.0  0.0   0:00.50 php-fpm: +
  1070 dovenull  20   0   46912   2172   1612 S   0.0  0.1   0:00.27 dovecot/p+
  1071 dovenull  20   0   47648   2444   1676 S   0.0  0.1   0:00.23 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.04 dovecot/a+
  1073 root      20   0   10452    508    356 S   0.0  0.0   0:00.18 dovecot/l+
  1074 dovenull  20   0   46912   1964   1460 S   0.0  0.1   0:00.22 dovecot/p+
  1075 dovenull  20   0   47812   2560   1692 S   0.0  0.1   0:00.21 dovecot/i+
  1078 root      20   0   24528   1848    492 S   0.0  0.1   0:00.12 dovecot/c+
  1084 dovecot   20   0   13568    656    452 S   0.0  0.0   0:00.04 dovecot/s+
  1112 systuser  20   0  157704   2932    948 S   0.0  0.1   0:00.09 SonarPush+
  1127 root      20   0  248312   2704    712 S   0.0  0.1   0:04.65 /usr/loca+
  1152 dovecot   20   0   41180   1460   1012 S   0.0  0.1   0:00.36 dovecot/a+
  1157 wp-tool+  20   0  387556   3504   1648 S   0.0  0.1   0:00.21 /usr/bin/+
  1159 wp-tool+  20   0  410452  10684   1632 S   0.0  0.4   0:12.70 /usr/bin/+
  1210 root      20   0  209268   8424   1668 S   0.0  0.3   0:01.40 tailwatchd
  1211 root      20   0  183900   6436   3200 S   0.0  0.3   0:01.49 cpdavd - +
  1213 root      20   0  167452   1216    668 S   0.0  0.1   0:00.35 dnsadmin +
  1667 root      20   0  299272    488    328 S   0.0  0.0   0:00.42 php-fpm: +
  1700 root      38  18  130416   1364    692 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4768    516 S   0.0  0.2   0:01.21 /usr/sbin+
  1949 root      20   0   12768    324    212 S   0.0  0.0   0:01.75 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:01.47 /usr/loca+
  1951 root      20   0   12780    344    216 S   0.0  0.0   0:01.61 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.31 [kworker]
  5071 root      20   0  182004   7944   1100 S   0.0  0.3   0:12.43 lfd - sle+
  7555 root      20   0  269756  93756   2268 S   0.0  3.9   0:04.05 spamd chi+
  7556 root      20   0  248312   1216    340 S   0.0  0.1   0:00.00 spamd chi+
 39472 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 39483 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 129+
 40431 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 43062 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 44563 nobody    20   0  277744  14360   4896 S   0.0  0.6   0:04.31 /usr/sbin+
 48267 root      20   0  183052      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 48316 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 50391 nobody    20   0  277928  20408   5028 S   0.0  0.8   0:03.93 /usr/sbin+
 59858 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 62262 nobody    20   0  277736  19804   4828 S   0.0  0.8   0:01.71 /usr/sbin+
 64105 nobody    20   0  277636  20016   4820 S   0.0  0.8   0:02.36 /usr/sbin+
 65047 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 67282 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 67427 nobody    20   0  277672  19116   4584 S   0.0  0.8   0:01.52 /usr/sbin+
 67935 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 68048 nobody    20   0  277564  19272   4768 S   0.0  0.8   0:01.61 /usr/sbin+
 72380 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72394 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 74166 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 74469 root      20   0 1341636  10356    600 S   0.0  0.4   0:00.06 /usr/bin/+
 74505 root      20   0 1277312  11612    596 S   0.0  0.5   0:00.06 /usr/bin/+
 77192 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77343 nobody    20   0  277528  17756   3884 S   0.0  0.7   0:00.09 /usr/sbin+
 77363 nobody    20   0  277800  18020   3916 S   0.0  0.7   0:00.27 /usr/sbin+
 77375 nobody    20   0  277936  18628   4208 S   0.0  0.8   0:00.49 /usr/sbin+
 77911 nobody    20   0  277936  18788   4264 S   0.0  0.8   0:00.25 /usr/sbin+
 77938 nobody    20   0  277932  17788   3876 S   0.0  0.7   0:00.08 /usr/sbin+
 78119 nobody    20   0  277932  17680   3744 S   0.0  0.7   0:00.14 /usr/sbin+
 78120 nobody    20   0  277800  18068   3960 S   0.0  0.7   0:00.45 /usr/sbin+
 78517 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78974 nobody    20   0  277936  17484   3636 S   0.0  0.7   0:00.03 /usr/sbin+
 79318 nobody    20   0  277936  18136   3888 S   0.0  0.7   0:00.11 /usr/sbin+
 79319 nobody    20   0  277804  17744   3788 S   0.0  0.7   0:00.20 /usr/sbin+
 79928 mailnull  20   0   89492   4908   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 79937 nobody    20   0  277800  17428   3656 S   0.0  0.7   0:00.07 /usr/sbin+
 80079 mailnull  20   0   89308   6576   3276 S   0.0  0.3   0:00.00 /usr/sbin+
 80196 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80260 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80267 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 80402 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 80410 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 80437 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [dnsadmin+
 80454 cpanelp+  20   0  298280   2352   1508 S   0.0  0.1   0:00.00 php-fpm: +
 80483 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80490 nigeria   20   0  397064   4476   2352 S   0.0  0.2   0:00.00 php-fpm: +
 80492 workflo+  20   0  422952  33116   4156 S   0.0  1.4   0:00.25 php-fpm: +
 80498 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 80503 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80504 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80505 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80506 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80507 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80509 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80510 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80511 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80512 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80513 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80514 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80516 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80519 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 80520 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 80521 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 80541 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 80542 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 80544 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80545 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80546 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80547 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80548 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80549 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 80550 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80551 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80552 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80563 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 80574 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 80575 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 80580 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80584 root      20   0  113496   1424   1236 S   0.0  0.1   0:00.00 bash /usr+
 80585 root      20   0  176644   6016   2756 S   0.0  0.2   0:00.00 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:18  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      40431  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:4]
root      43062  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/u200:2]
root      59858  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:2]
root      65047  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/u200:0]
root      67282  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/1:4]
root      67935  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:0]
root      72380  0.0  0.0      0     0 ?        S    03:58   0:00  \_ [kworker/0:2]
root      72394  0.0  0.0      0     0 ?        S    03:58   0:00  \_ [kworker/1:0]
root      74166  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/1:3]
root      77192  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/0:1]
root      78517  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/0:3]
root      80580  0.0  0.0      0     0 ?        S    04:09   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44408  3448 ?        Ss   Nov10   0:21 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40240  2048 ?        Ss   Nov10   0:06 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   112 ?        S<sl Nov10   0:01 /sbin/auditd
root        505  0.0  0.0  52852   268 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1464 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  4332 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1388 ?        Ss   Nov10   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256     8 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1488 ?        Ssl  Nov10   0:11 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   928 ?        Ssl  Nov10   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   424 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052     0 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      80503  0.0  0.0 183048  2152 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80519  0.0  0.0 113284  1212 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      80520  0.0  0.0 108052   360 ?        S    04:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      80521  0.0  0.0 113288  1516 ?        S    04:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      80586  0.0  0.0 153840  2100 ?        R    04:09   0:00  |               \_ ps auxf
root      80504  0.0  0.0 183048  2152 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80547  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      80505  0.0  0.0 183048  2152 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80546  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      80506  0.0  0.0 183048  2152 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80545  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      80507  0.0  0.0 183048  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80548  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      80509  0.0  0.0 183048  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80544  0.0  0.0  20164   980 ?        Rs   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      80510  0.0  0.0 183048  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80550  0.0  0.0  20164   808 ?        Rs   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      80511  0.0  0.0 183048  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80551  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      80512  0.0  0.0 183048  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80552  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      80513  0.0  0.0 183048  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80549  0.0  0.0 113284  1212 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      80558  0.0  0.6 169868 16852 ?        S    04:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      80584  0.0  0.0 113496  1424 ?        S    04:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      80585  0.0  0.3 185492  7816 ?        R    04:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      80514  0.0  0.0 183048  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80542  0.0  0.0  20164   964 ?        Ss   04:09   0:00  |   \_ jailshell (pactpay) [80563] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80563  0.0  0.0  20164   260 ?        S    04:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80568  0.0  0.6 476460 16056 ?        S    04:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      80516  0.0  0.0 183048  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      80541  0.0  0.0  20164   968 ?        Ss   04:09   0:00      \_ jailshell (nigeria) [80575] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80575  0.0  0.0  20164   260 ?        S    04:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80576  0.0  0.6 400652 15940 ?        R    04:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3856 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  79928  0.0  0.2  89492  4908 ?        S    04:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  80079  0.0  0.2  89308  6576 ?        S    04:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.3 114016  8860 ?        Ssl  Nov10   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root      80196  0.0  0.1 111304  4268 ?        Ss   04:08   0:00  \_ sshd: [accepted]
root      80260  0.0  0.1 111304  4264 ?        Ss   04:08   0:00  \_ sshd: [accepted]
sshd      80267  0.0  0.1 115644  2628 ?        S    04:08   0:00  |   \_ sshd: [net]
root      80483  0.0  0.1 111304  4268 ?        Ss   04:08   0:00  \_ sshd: [accepted]
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  2172 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.1  47648  2444 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   508 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912  1964 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.1  47812  2560 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1848 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   656 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1460 ?        S    Nov10   0:00  \_ dovecot/auth
root      80402  0.0  0.1  60820  4512 ?        S    04:08   0:00  \_ dovecot/lmtp
root      80410  0.0  0.1  41052  2728 ?        S    04:08   0:00  \_ dovecot/auth -w
root        925  0.0  0.0 572372   696 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 33032 ?       SLsl Nov10   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.0 257360  2148 ?        Ssl  Nov10   0:03 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261824  6384 ?        Ss   Nov10   0:03 cpsrvd (SSL) - waiting for connections                   
root      80498  0.0  0.0      0     0 ?        Z    04:08   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.1 784392 26712 ?        Ssl  Nov10   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   308 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3492 ?        Ss   Nov10   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1884 ?        Ss   Nov10   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   80490  0.0  0.1 397064  4476 ?        S    04:08   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  80492 12.5  1.3 422952 33116 ?        S    04:08   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root        975  0.0  0.0 392856   280 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   400 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.3 18.2 1901588 441096 ?      Ssl  Nov10   0:51 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   316 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2704 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  3.8 269756 93756 ?        S    00:03   0:04  \_ spamd child
root       7556  0.0  0.0 248312  1216 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3504 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  0.4 410452 10684 ?        Ss   Nov10   0:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  8424 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  0.2 183900  6436 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452  1216 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root      80437  0.0  0.0      0     0 ?        Z    04:08   0:00  \_ [dnsadmin - dorm] <defunct>
root       1667  0.0  0.0 299272   488 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  80454  0.0  0.0 298280  2352 ?        S    04:08   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1700  0.0  0.0 130416  1364 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.5  9.6 1462284 234052 ?      Sl   Nov10   3:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4768 ?        Ss   Nov10   0:01 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12768   324 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12780   344 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    44563  0.1  0.5 277744 14360 ?        S    03:17   0:04  \_ /usr/sbin/httpd -k start
nobody    50391  0.1  0.8 277928 20408 ?        S    03:26   0:03  \_ /usr/sbin/httpd -k start
nobody    62262  0.1  0.8 277736 19804 ?        S    03:43   0:01  \_ /usr/sbin/httpd -k start
nobody    64105  0.1  0.8 277636 20016 ?        S    03:46   0:02  \_ /usr/sbin/httpd -k start
nobody    67427  0.1  0.7 277672 19116 ?        S    03:51   0:01  \_ /usr/sbin/httpd -k start
nobody    68048  0.1  0.7 277564 19272 ?        S    03:52   0:01  \_ /usr/sbin/httpd -k start
nobody    77343  0.0  0.7 277528 17756 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    77363  0.0  0.7 277800 18020 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    77375  0.1  0.7 277936 18628 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    77382  0.1  0.7 277796 18248 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
cloudw    80578  0.0  0.6 350316 16620 ?        S    04:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    77911  0.1  0.7 277936 18788 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    77938  0.0  0.7 277932 17788 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    78119  0.0  0.7 277932 17680 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    78120  0.2  0.7 277800 18068 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    78974  0.0  0.7 277936 17484 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    79318  0.0  0.7 277936 18136 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    79319  0.1  0.7 277804 17744 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    79937  0.1  0.7 277800 17428 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.3 182004  7944 ?        Ss   00:00   0:12 lfd - sleeping
root      39472  0.0  0.0 132964     4 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056     0 ?        SN   03:11   0:00  \_ sleep 12937
root      74469  0.0  0.4 1341636 10356 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root      74505  0.0  0.4 1277312 11612 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 15125  Threads: 3  Questions: 1508458  Slow queries: 0  Opens: 7072  Flush tables: 1  Open tables: 2000  Queries per second avg: 99.732
*************************** 1. row ***************************
     Id: 19966
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 19970
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 19972
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 144.76.19.157 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.156.128.116 TIME_WAIT
      1 47.128.126.161 TIME_WAIT
      1 66.249.70.32 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 103.109.180.104 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 207.180.250.25 TIME_WAIT
      3 45.156.128.117 TIME_WAIT
      3 45.156.128.118 TIME_WAIT
      4 45.156.128.119 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 04:09:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 11 minutes 59 seconds
   Server load: 0.38 0.35 0.32
   Total accesses: 73426 - Total Traffic: 1.9 GB - Total Duration: 38796675
   CPU Usage: u13.16 s6.15 cu1002.83 cs767.81 - 11.8% CPU load
   4.86 requests/sec - 135.1 kB/second - 27.8 kB/request - 528.378 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

W_KK_..K_KKK.K._..K.K..W_........KK.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client     Protocol              VHost                                          Request
   0-0  79937 0/13/3819   W 0.32  0    0   1900660 0.0   0.35  95.88  ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   1-0  44563 0/869/3903  _ 20.75 1    1   1929660 0.0   19.48 100.14 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   2-0  77343 2/32/3873   K 0.23  3    401 1862930 66.0  0.34  88.74  66.249.70.34   http/1.1 support.cloudware.ng:443        GET /?c=951410270 HTTP/1.1
   3-0  78974 1/5/3551    K 0.10  1    270 1790960 17.3  0.12  84.50  45.156.128.117 http/1.1 blog.workflow-management-softwa GET /wp-content/plugins/wordpress-database-reset/readme.txt HTT
   4-0  50391 0/666/3852  _ 18.19 1    7   2828203 0.0   28.04 136.35 54.84.161.62   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/blog/images/images/blog/blog/201
   5-0  -     0/0/3764    . 0.00  101  0   2013462 0.0   0.00  99.34  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   6-0  -     0/0/3594    . 0.00  109  0   1961124 0.0   0.00  106.98 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-0  64105 4/395/3968  K 11.07 1    341 1884911 127.3 11.03 103.20 66.249.70.32   http/1.1 support.cloudware.ng:443        GET /?c=2294446496 HTTP/1.1
   8-0  77911 0/52/3550   _ 1.04  0    0   1862404 0.0   1.11  103.36 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   9-0  77938 1/24/3595   K 0.20  2    0   1804401 0.8   0.26  85.64  45.156.128.118 http/1.1 workflow-management-software.co GET /wp-content/plugins/wordpress-database-reset/readme.txt HTT
   10-0 62262 13/304/3514 K 7.50  0    342 1746300 409.5 9.21  99.43  66.249.70.35   http/1.1 support.cloudware.ng:443        GET /?c=3157682218 HTTP/1.1
   11-0 77363 1/42/3533   K 1.24  2    401 1834072 36.6  1.19  105.45 66.249.70.37   http/1.1 support.cloudware.ng:443        GET /?c=2633411631 HTTP/1.1
   12-0 -     0/0/2933    . 0.00  104  0   1593920 0.0   0.00  76.42  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-0 77375 2/82/2588   K 2.50  0    395 1281440 68.3  2.38  70.41  66.249.70.36   http/1.1 support.cloudware.ng:443        GET /?c=2147104140 HTTP/1.1
   14-0 -     0/0/2821    . 0.00  48   0   1522431 0.0   0.00  67.51  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 67427 0/262/2167  _ 7.02  1    1   1109331 0.0   6.83  51.70  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   16-0 -     0/0/3140    . 0.00  108  0   1654290 0.0   0.00  77.90  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/2753    . 0.00  105  0   1460274 0.0   0.00  72.87  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 68048 2/271/2145  K 7.37  0    399 1086380 65.4  7.54  55.86  66.249.70.34   http/1.1 support.cloudware.ng:443        GET /?c=1266080044 HTTP/1.1
   19-0 -     0/0/2030    . 0.00  102  0   1023703 0.0   0.00  57.53  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 78119 8/24/1113   K 0.61  2    392 558487  250.1 0.62  26.30  66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=1119443066 HTTP/1.1
   21-0 -     0/0/1697    . 0.00  98   1   921315  0.0   0.00  43.71  5.181.27.149   http/1.1
   22-0 -     0/0/466     . 0.00  71   0   244638  0.0   0.00  12.12  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 77382 4/83/510    W 2.28  0    0   271295  128.8 2.32  13.24  66.249.70.33   http/1.1 support.cloudware.ng:443        GET /?c=2599989912 HTTP/1.1
   24-0 78120 0/73/567    _ 2.10  2    406 286886  0.0   2.05  13.20  66.249.70.32   http/1.1 support.cloudware.ng:443        GET /?c=2153188422 HTTP/1.1
   25-0 -     0/0/242     . 0.00  103  0   148548  0.0   0.00  5.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/140     . 0.00  106  0   68669   0.0   0.00  3.32   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/736     . 0.00  83   0   440838  0.0   0.00  20.84  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/123     . 0.00  107  0   84656   0.0   0.00  5.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/511     . 0.00  62   0   326710  0.0   0.00  14.52  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/90      . 0.00  70   0   55305   0.0   0.00  2.52   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/241     . 0.00  100  0   100367  0.0   0.00  4.68   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/19      . 0.00  49   0   8270    0.0   0.00  0.46   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 79318 3/24/26     K 0.41  0    8   12707   18.6  0.56  0.57   144.76.19.157  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Delta&lga=Aniocha%20-%20so
   34-0 79319 1/35/38     K 0.91  0    314 19689   35.2  0.92  0.93   66.249.70.35   http/1.1 support.cloudware.ng:443        GET /?c=2547805532 HTTP/1.1
   35-0 -     0/0/3       . 0.00  8880 0   6       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/13      . 0.00  8841 0   5697    0.0   0.00  0.29   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00  8879 0   236     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/281     . 0.00  8100 0   158846  0.0   0.00  19.22  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/4       . 0.00  8882 0   264     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/725     . 0.00  6467 0   450086  0.0   0.00  35.37  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00  8872 0   1003    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/63      . 0.00  8650 0   33019   0.0   0.00  1.62   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/159     . 0.00  8278 0   93527   0.0   0.00  19.16  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/9       . 0.00  8867 0   4423    0.0   0.00  0.20   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/18      . 0.00  8811 0   7447    0.0   0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/13      . 0.00  8837 0   5454    0.0   0.00  0.65   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/513     . 0.00  7433 0   335229  0.0   0.00  11.08  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/6       . 0.00  8874 0   2176    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 925
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...77)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 40705
   total entries replaced since starting: 0
   total entries expired since starting: 39752
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 169 miss
   total removes since starting: 32 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit