403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.20.30.txt
 ## swap threshold exceeded
## server overview
2025-11-15.20.30 load[0] mem[56/67] mysql[3/10] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1248         185          56         929         887
Swap:          1999        1457         542
 20:30:02 up  6:05,  0 users,  load average: 0.12, 0.19, 0.28
## system overview
top - 20:30:02 up  6:05,  0 users,  load average: 0.12, 0.19, 0.28
Tasks: 203 total,   4 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   186284 free,  1278180 used,   955836 buff/cache
KiB Swap:  2047996 total,   555452 free,  1492544 used.   909100 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 269900   4596 S 143.8 11.2   5:38.06 /usr/sbin+
 87293 nigeria   20   0  404052  16144  10384 R  18.8  0.7   0:00.08 /opt/cpan+
   978 cpanelc+  20   0   10456   3688   2436 S   6.2  0.2   0:17.88 /usr/loca+
 87276 root      20   0  188860  12948   5544 R   6.2  0.5   0:00.05 /usr/loca+
 87381 root      20   0  160220   2064   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44280   3572   1720 S   0.0  0.1   0:30.81 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.05 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:23.18 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.96 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.36 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.90 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.58 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:01.76 [kworker/+
   358 root      20   0   39500   8144   7840 S   0.0  0.3   0:11.13 /usr/lib/+
   385 root      20   0   45444    620    552 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    628    500 S   0.0  0.0   0:01.67 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    608    520 S   0.0  0.0   0:00.49 /usr/sbin+
   516 root      20   0  152780    432    388 S   0.0  0.0   0:00.01 /usr/sbin+
   521 root      20   0   24708   1408   1040 S   0.0  0.1   0:05.08 /usr/lib/+
   523 nscd      20   0 1264844   1916    924 S   0.0  0.1   0:17.95 /usr/sbin+
   524 root      20   0   52852    564    456 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1056    672 S   0.0  0.0   0:03.01 /usr/lib/+
   529 root      20   0  224148   6124   1540 S   0.0  0.3   0:00.30 queueproc+
   531 dbus      20   0   58740   1624    900 S   0.0  0.1   0:11.50 /usr/bin/+
   539 rpc       20   0   69256    248    188 S   0.0  0.0   0:00.02 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    216    216 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    668    532 S   0.0  0.0   0:00.62 /usr/sbin+
   577 root      20   0   24208    272    244 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    264    260 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    276    276 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4284   1252 S   0.0  0.2   0:00.41 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.48 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    728    628 S   0.0  0.0   0:02.33 /usr/sbin+
   919 root      20   0 1350088   8140    276 S   0.0  0.3   0:19.88 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  37204   6124 S   0.0  1.5   0:12.24 /usr/loca+
   922 memcach+  20   0  342400    300    300 S   0.0  0.0   0:00.47 /usr/bin/+
   924 root      20   0  153404    600    516 S   0.0  0.0   0:00.46 pure-ftpd+
   926 root      20   0  572372   1152    576 S   0.0  0.0   0:01.94 /usr/bin/+
   927 systuser  20   0  114016  15476   2968 S   0.0  0.6   0:05.28 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    788    624 S   0.0  0.0   0:00.27 /usr/sbin+
   932 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  445028    280    280 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   8984    296 S   0.0  0.4   0:24.24 /usr/bin/+
   946 root      20   0  396248   1036    852 S   0.0  0.0   0:00.59 php-fpm: +
   954 named     20   0 1055796  34936   2252 S   0.0  1.4   0:10.80 /usr/sbin+
   957 root      20   0  273744   7976   7032 S   0.0  0.3   0:05.58 /usr/sbin+
   973 root      20   0  400740   3208   1044 S   0.0  0.1   0:03.57 php-fpm: +
   975 root      20   0  439788   1916   1708 S   0.0  0.1   0:00.70 php-fpm: +
   980 root      20   0  388892   1084    868 S   0.0  0.0   0:00.66 php-fpm: +
   991 root      20   0  389508    996    756 S   0.0  0.0   0:00.63 php-fpm: +
   992 root      20   0 1763124 203528   1380 S   0.0  8.4   0:14.01 /usr/loca+
   993 root      20   0  261288   7084   2008 S   0.0  0.3   0:04.61 cpsrvd (S+
  1065 dovenull  20   0   47524   3744   2476 S   0.0  0.2   0:00.39 dovecot/p+
  1066 dovenull  20   0   47612   4064   2684 S   0.0  0.2   0:00.27 dovecot/i+
  1067 dovecot   20   0   10320    600    488 S   0.0  0.0   0:00.07 dovecot/a+
  1068 root      20   0   10452    632    456 S   0.0  0.0   0:00.24 dovecot/l+
  1069 dovenull  20   0   47456   3852   2604 S   0.0  0.2   0:00.32 dovecot/p+
  1070 dovenull  20   0   47548   3468   2240 S   0.0  0.1   0:00.21 dovecot/i+
  1077 root      20   0   24528   2772    716 S   0.0  0.1   0:00.15 dovecot/c+
  1078 dovecot   20   0   13568    752    520 S   0.0  0.0   0:00.05 dovecot/s+
  1150 root      20   0  248140 119248   2816 S   0.0  4.9   0:05.42 /usr/loca+
  1151 systuser  20   0  157704   3080   1036 S   0.0  0.1   0:00.11 SonarPush+
  1152 dovecot   20   0   41180   1632   1176 S   0.0  0.1   0:00.54 dovecot/a+
  1153 wp-tool+  20   0  387528   5044   1768 S   0.0  0.2   0:00.25 /usr/bin/+
  1154 wp-tool+  20   0  410452  30812   1840 S   0.0  1.3   0:18.47 /usr/bin/+
  1229 root      20   0  183900   6688   3460 S   0.0  0.3   0:01.53 cpdavd - +
  1231 root      20   0  209616  12552   2684 S   0.0  0.5   0:02.57 tailwatchd
  1232 root      20   0  167452   1592    992 S   0.0  0.1   0:00.34 dnsadmin +
  1638 root      20   0  299272    956    576 S   0.0  0.0   0:00.59 php-fpm: +
  1681 root      38  18  130416   1600    828 S   0.0  0.1   0:00.05 cpanellog+
  1909 root      20   0  266984   8896    832 S   0.0  0.4   0:02.14 /usr/sbin+
  1911 root      20   0   12844    588    452 S   0.0  0.0   0:02.68 /usr/loca+
  1912 root      20   0   12732    572    464 S   0.0  0.0   0:02.34 /usr/loca+
  1913 root      20   0   12888    592    448 S   0.0  0.0   0:02.55 /usr/loca+
  1918 root      20   0   53344    360    360 S   0.0  0.0   0:00.04 /usr/loca+
  2012 root      20   0  183280  12300   1336 S   0.0  0.5   0:20.40 lfd - sle+
  8198 root      20   0  262088 129276   3400 S   0.0  5.3   0:02.49 spamd chi+
  8199 root      20   0  249268 118736   1192 S   0.0  4.9   0:00.04 spamd chi+
 23796 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.37 [kworker]
 55671 nobody    20   0  277880  21420   4988 S   0.0  0.9   0:03.56 /usr/sbin+
 58106 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 61020 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 67642 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 73591 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 74342 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80317 nobody    20   0  277512  20140   4392 S   0.0  0.8   0:00.80 /usr/sbin+
 81153 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81176 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 81413 nobody    20   0  277584  20004   4248 S   0.0  0.8   0:00.76 /usr/sbin+
 82384 nobody    20   0  277668  20200   4304 S   0.0  0.8   0:00.34 /usr/sbin+
 82728 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83265 nobody    20   0  277520  19888   4208 S   0.0  0.8   0:00.54 /usr/sbin+
 83830 nobody    20   0  277880  19980   4164 S   0.0  0.8   0:00.45 /usr/sbin+
 83952 nobody    20   0  277732  20188   4248 S   0.0  0.8   0:00.33 /usr/sbin+
 84270 nobody    20   0  277840  19912   4060 S   0.0  0.8   0:00.23 /usr/sbin+
 84611 nobody    20   0  277880  20040   4240 S   0.0  0.8   0:00.27 /usr/sbin+
 84616 nobody    20   0  277744  19856   4028 S   0.0  0.8   0:00.40 /usr/sbin+
 84625 nobody    20   0  277864  19892   4096 S   0.0  0.8   0:00.29 /usr/sbin+
 84627 nobody    20   0  277732  19812   3976 S   0.0  0.8   0:00.38 /usr/sbin+
 85138 nobody    20   0  277732  20000   4188 S   0.0  0.8   0:00.27 /usr/sbin+
 85207 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85213 nobody    20   0  277524  19644   4012 S   0.0  0.8   0:00.25 /usr/sbin+
 85214 nobody    20   0  277740  19792   3976 S   0.0  0.8   0:00.30 /usr/sbin+
 86131 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 86674 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 86675 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 86824 nigeria   20   0  401500   9604   4084 S   0.0  0.4   0:00.40 php-fpm: +
 86828 nobody    20   0  277876  19532   3784 S   0.0  0.8   0:00.03 /usr/sbin+
 87151 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 87152 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 87193 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 87218 root      20   0  183052   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87220 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87222 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87223 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87226 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87227 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87228 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87229 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87230 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87233 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87234 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87235 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87236 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87238 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87249 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87250 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87251 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 87252 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 87253 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 87255 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 87256 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87257 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 87259 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 87264 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87266 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87267 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 87270 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87271 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87273 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 87275 root      20   0  188224  11116   5148 S   0.0  0.5   0:00.01 /usr/loca+
 87282 root      20   0  114252   2216   1264 S   0.0  0.1   0:00.00 bash /usr+
 87284 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 87286 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87287 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87292 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 87294 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 87308 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 87323 root      20   0  160224   2340   1636 S   0.0  0.1   0:00.00 top -n 2 +
 87353 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87356 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 87358 cloudsms  20   0  404052  15348  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 87398 root      20   0    6516    416    336 S   0.0  0.0   0:00.00 /usr/sbin+
 87399 root      20   0  114252   1144      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    14:24   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    14:24   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    14:24   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    14:24   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   14:24   0:01  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root      23796  0.0  0.0      0     0 ?        S    19:04   0:00  \_ [kworker/u200:0]
root      58106  0.0  0.0      0     0 ?        S    19:52   0:00  \_ [kworker/1:5]
root      61020  0.0  0.0      0     0 ?        S    19:56   0:00  \_ [kworker/0:0]
root      67642  0.0  0.0      0     0 ?        S    20:04   0:00  \_ [kworker/0:4]
root      73591  0.0  0.0      0     0 ?        S    20:12   0:00  \_ [kworker/1:0]
root      74342  0.0  0.0      0     0 ?        S    20:13   0:00  \_ [kworker/0:2]
root      81153  0.0  0.0      0     0 ?        S    20:22   0:00  \_ [kworker/0:1]
root      81176  0.0  0.0      0     0 ?        S    20:22   0:00  \_ [kworker/1:2]
root      82728  0.0  0.0      0     0 ?        S    20:24   0:00  \_ [kworker/u200:2]
root      85207  0.0  0.0      0     0 ?        S    20:27   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44280  3572 ?        Ss   14:24   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  39500  8144 ?        Ss   14:24   0:11 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   620 ?        Ss   14:24   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   628 ?        S<sl 14:24   0:01 /sbin/auditd
root        512  0.0  0.0  21540   608 ?        Ss   14:24   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   432 ?        Ss   14:24   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1408 ?        Ss   14:24   0:05 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1916 ?        Ssl  14:24   0:17 /usr/sbin/nscd
root        524  0.0  0.0  52852   564 ?        Ss   14:24   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1056 ?        Ssl  14:24   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  6124 ?        Ss   14:24   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1624 ?        Ss   14:24   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   248 ?        Ss   14:24   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   14:24   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   216 ?        Ssl  14:24   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   668 ?        Ss   14:24   0:00 /usr/sbin/crond -n
root      87218  0.0  0.0 183052  2148 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87257  0.0  0.0 113284  1208 ?        Ss   20:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      87282  0.0  0.0 114252  2412 ?        S    20:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      87220  0.0  0.0 183048  2152 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87252  0.0  0.0 113284  1208 ?        Ss   20:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      87273  0.0  0.0 108052   356 ?        S    20:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      87284  0.0  0.0 113288  1516 ?        S    20:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      87400  0.0  0.0 153840  2096 ?        R    20:30   0:00  |               \_ ps auxf
root      87222  0.0  0.0 183048  2156 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87250  0.0  0.0  20164   808 ?        Ss   20:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      87223  0.0  0.0 183048  2156 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87271  0.0  0.0  20164   804 ?        Ss   20:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      87226  0.0  0.0 183048  2156 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87249  0.0  0.0  20164   804 ?        Ss   20:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      87227  0.0  0.0 183048  2156 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87270  0.0  0.0  20164   808 ?        Ss   20:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      87228  0.0  0.0 183048  2156 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87256  0.0  0.0  20164   808 ?        Ss   20:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      87229  0.0  0.0 183048  2156 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87267  0.0  0.0  20164   984 ?        Ss   20:30   0:00  |   \_ jailshell (cloudsms) [87353] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  87353  0.0  0.0  20164   260 ?        S    20:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  87356  0.0  0.0 113284  1212 ?        S    20:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  87358  0.0  0.6 404052 15348 ?        S    20:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      87230  0.0  0.0 183048  2152 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87264  0.0  0.0  20164   808 ?        Ss   20:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      87233  0.0  0.0 183048  2148 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87266  0.0  0.0  20164   808 ?        Ss   20:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      87234  0.0  0.0 183048  2148 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87251  0.0  0.0 113284  1212 ?        Ss   20:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root      87276  5.0  0.5 188860 12948 ?        R    20:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root      87235  0.0  0.0 183048  2144 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87259  0.0  0.0 113284  1212 ?        Ss   20:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      87275  1.0  0.4 188224 11116 ?        S    20:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      87323  0.0  0.0 160224  2340 ?        S    20:30   0:00  |           \_ top -n 2 -b -c
root      87236  0.0  0.0 183048  2152 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87253  0.0  0.0  20164   968 ?        Ss   20:30   0:00  |   \_ jailshell (pactpay) [87286] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87286  0.0  0.0  20164   260 ?        S    20:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87294  2.0  0.7 480124 17684 ?        S    20:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      87238  0.0  0.0 183048  2148 ?        S    20:30   0:00  \_ /usr/sbin/CROND -n
root      87255  0.0  0.0  20164   968 ?        Ss   20:30   0:00      \_ jailshell (nigeria) [87287] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87287  0.0  0.0  20164   260 ?        S    20:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87293  8.0  0.6 404052 16144 ?        S    20:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   272 ?        Ss   14:24   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   264 tty1     Ss+  14:24   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   276 ttyS0    Ss+  14:24   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4284 ?        Ss   14:24   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   728 ?        Ss   14:24   0:02 /usr/sbin/sshd -D
root      86674  0.0  0.1 111304  4268 ?        Ss   20:29   0:00  \_ sshd: [accepted]
sshd      86675  0.0  0.1 115644  2628 ?        S    20:29   0:00  |   \_ sshd: [net]
root      87151  0.0  0.1 111304  4264 ?        Ss   20:29   0:00  \_ sshd: [accepted]
sshd      87152  0.0  0.1 115644  2628 ?        S    20:29   0:00  |   \_ sshd: [net]
root      87292  0.0  0.1 111304  4440 ?        Ss   20:30   0:00  \_ sshd: [accepted]
sshd      87308  0.0  0.1 115644  2624 ?        S    20:30   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 8140 ?        Ssl  14:24   0:19 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.5 5654304 37204 ?       SLsl 14:24   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   300 ?        Ssl  14:24   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   600 ?        Ss   14:24   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1152 ?        Ssl  14:24   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15476 ?        Ssl  14:24   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   788 ?        Ss   14:24   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3744 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47612  4064 ?        S    14:24   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   600 ?        S    14:24   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    14:24   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47456  3852 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47548  3468 ?        S    14:24   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2772 ?        S    14:24   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   752 ?        S    14:24   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1632 ?        S    14:24   0:00  \_ dovecot/auth
root      86131  0.0  0.1  60820  4512 ?        S    20:28   0:00  \_ dovecot/lmtp
systuser    932  0.0  0.0 113932    68 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   280 ?        Ss   14:24   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.1  0.3 1277312 8984 ?        Ssl  14:24   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248  1036 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.4 1055796 34936 ?       Ssl  14:24   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.3 273744  7976 ?        Ssl  14:24   0:05 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3208 ?        Ss   14:24   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   86824  1.0  0.3 401500  9604 ?        S    20:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1916 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3688 ?        Ss   14:24   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892  1084 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   996 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  8.4 1763124 203528 ?      Ssl  14:24   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7084 ?        Ss   14:24   0:04 cpsrvd (SSL) - waiting for connections                   
root      87193  0.0  0.0      0     0 ?        Z    20:29   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  4.9 248140 119248 ?       Ss   14:24   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  5.3 262088 129276 ?       S    14:30   0:02  \_ spamd child
root       8199  0.0  4.9 249268 118736 ?       S    14:30   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3080 ?        S    14:24   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387528  5044 ?        Ss   14:24   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410452 30812 ?        Ss   14:24   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  6688 ?        Ss   14:24   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.5 209616 12552 ?        Ss   14:24   0:02 tailwatchd
root       1232  0.0  0.0 167452  1592 ?        Ss   14:24   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   956 ?        Ss   14:24   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1600 ?        SN   14:24   0:00 cpanellogd - sleeping for logs
mysql      1785  1.5 11.1 1458332 269900 ?      Sl   14:24   5:38 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8896 ?        Ss   14:24   0:02 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12844   588 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   572 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12888   592 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   360 ?        S    14:24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    55671  0.1  0.8 277880 21420 ?        S    19:48   0:03  \_ /usr/sbin/httpd -k start
nobody    80317  0.1  0.8 277512 20140 ?        S    20:20   0:00  \_ /usr/sbin/httpd -k start
nobody    81413  0.1  0.8 277584 20004 ?        S    20:22   0:00  \_ /usr/sbin/httpd -k start
nobody    82384  0.0  0.8 277668 20200 ?        S    20:23   0:00  \_ /usr/sbin/httpd -k start
nobody    83265  0.1  0.8 277520 19888 ?        S    20:24   0:00  \_ /usr/sbin/httpd -k start
nobody    83830  0.1  0.8 277880 19980 ?        S    20:25   0:00  \_ /usr/sbin/httpd -k start
nobody    83952  0.1  0.8 277732 20188 ?        S    20:25   0:00  \_ /usr/sbin/httpd -k start
nobody    84270  0.0  0.8 277840 19912 ?        S    20:25   0:00  \_ /usr/sbin/httpd -k start
nobody    84611  0.1  0.8 277880 20040 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84616  0.1  0.8 277744 19856 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84625  0.1  0.8 277864 19892 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84627  0.1  0.8 277732 19812 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    85138  0.1  0.8 277732 20000 ?        S    20:27   0:00  \_ /usr/sbin/httpd -k start
nobody    85213  0.1  0.8 277524 19644 ?        S    20:27   0:00  \_ /usr/sbin/httpd -k start
nobody    85214  0.1  0.8 277740 19792 ?        S    20:27   0:00  \_ /usr/sbin/httpd -k start
nobody    86828  0.0  0.8 277876 19532 ?        S    20:29   0:00  \_ /usr/sbin/httpd -k start
cloudw    87398  0.0  0.4 296092 11176 ?        R    20:30   0:00      \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
root       2012  0.0  0.5 183280 12300 ?        Ss   14:24   0:20 lfd - sleeping
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   15:00   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   424 ?        S    15:00   0:00  \_ [kworker]
## mysql stats
Uptime: 21936  Threads: 2  Questions: 2199736  Slow queries: 0  Opens: 6520  Flush tables: 1  Open tables: 2000  Queries per second avg: 100.279
*************************** 1. row ***************************
     Id: 31177
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 31190
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 170.106.11.141 TIME_WAIT
      1 17.22.245.54 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.195.232.132 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 20:30:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 5 minutes 32 seconds
   Server load: 0.12 0.19 0.28
   Total accesses: 122809 - Total Traffic: 2.7 GB - Total Duration: 67431028
   CPU Usage: u6.64 s4.7 cu1441.59 cs1233.64 - 12.2% CPU load
   5.6 requests/sec - 129.0 kB/second - 23.0 kB/request - 549.072 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

W.___RKK_.KKW_._W....K._........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  86828 0/7/5805   W 0.11  0     0   3242018 0.0   0.18  131.17 66.249.70.1   http/1.1 test.cloudware.ng:443      GET /3007865407?goodscode=3003924014 HTTP/1.1
   1-0  -     0/0/5867   . 0.00  98    0   3481413 0.0   0.00  134.91 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  85138 0/53/5735  _ 1.26  0     5   3198468 0.0   1.25  129.93 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-0  83830 0/83/5607  _ 2.12  2     1   3111593 0.0   2.13  128.44 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   4-0  85213 0/43/6030  _ 1.16  2     1   3246546 0.0   1.10  131.96 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   5-0  84270 0/41/5743  R 0.96  16    896 3044179 0.0   0.97  123.24 194.233.93.96 http/1.1 health.oyostate.gov.ng:443
   6-0  85214 3/55/5773  K 1.38  0     510 3084666 84.1  1.28  128.63 66.249.70.3   http/1.1 test.cloudware.ng:443      GET /200272779?goodscode=0200011062 HTTP/1.1
   7-0  55671 4/643/5694 K 16.31 1     386 3024983 115.9 16.03 123.04 66.249.70.6   http/1.1 test.cloudware.ng:443      GET /1267548071?goodscode=1265887566 HTTP/1.1
   8-0  82384 0/62/5392  _ 1.53  0     350 2895876 0.0   1.77  118.06 66.249.70.1   http/1.1 test.cloudware.ng:443      GET /1428819429?goodscode=1426947558 HTTP/1.1
   9-0  -     0/0/5370   . 0.00  130   0   2908245 0.0   0.00  140.49 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 83952 1/68/5206  K 1.36  2     369 2882003 30.8  1.51  116.39 66.249.70.4   http/1.1 test.cloudware.ng:443      GET /13854894?goodscode=0013837498 HTTP/1.1
   11-0 83265 17/94/5462 K 2.48  0     346 2841983 471.3 2.33  118.96 66.249.70.5   http/1.1 test.cloudware.ng:443      GET /1267441379?goodscode=1265781014 HTTP/1.1
   12-0 80317 0/146/5083 W 3.71  0     0   2983612 0.0   4.13  111.85 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 81413 0/137/5435 _ 3.48  2     5   2984752 0.0   5.21  123.50 52.23.112.144 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/2019elections/blog/blog/blo
   14-0 -     0/0/4717   . 0.00  2     0   2522479 0.0   0.00  105.37 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 84611 0/54/4890  _ 1.10  0     0   2744201 0.0   1.32  106.03 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   16-0 84616 0/66/4719  W 1.75  0     0   2425335 0.0   1.64  101.90 66.249.70.8   http/1.1 test.cloudware.ng:443      GET /1428830755?goodscode=1426958870 HTTP/1.1
   17-0 -     0/0/3967   . 0.00  196   0   2188328 0.0   0.00  87.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/3917   . 0.00  173   0   2078611 0.0   0.00  89.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/4035   . 0.00  171   0   2063688 0.0   0.00  84.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/2619   . 0.00  74    0   1503025 0.0   0.00  59.40  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 84625 2/55/2997  K 1.25  4     289 1647259 61.3  1.24  67.66  66.249.70.2   http/1.1 test.cloudware.ng:443      GET /1267551685?goodscode=1265891174 HTTP/1.1
   22-0 -     0/0/2930   . 0.00  82    0   1727197 0.0   0.00  74.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 84627 0/69/3109  _ 1.82  1     348 1680089 0.0   1.75  69.38  66.249.70.7   http/1.1 test.cloudware.ng:443      GET /2994432870?goodscode=2990509082 HTTP/1.1
   24-0 -     0/0/1255   . 0.00  197   0   964948  0.0   0.00  34.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1073   . 0.00  4231  0   578853  0.0   0.00  24.79  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/340    . 0.00  4658  0   191122  0.0   0.00  7.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/229    . 0.00  4576  0   131368  0.0   0.00  4.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/451    . 0.00  4577  0   249299  0.0   0.00  10.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/208    . 0.00  4668  0   110983  0.0   0.00  4.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/135    . 0.00  4649  0   70455   0.0   0.00  2.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/334    . 0.00  4640  0   138424  0.0   0.00  5.74   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/186    . 0.00  4662  0   108063  0.0   0.00  3.91   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/133    . 0.00  4372  0   66770   0.0   0.00  2.59   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/570    . 0.00  4544  0   335795  0.0   0.00  10.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/198    . 0.00  4276  0   110788  0.0   0.00  2.36   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/2      . 0.00  10961 0   2       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00  10959 0   2       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00  10927 0   1546    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  10954 0   5       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00  10925 0   848     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/12     . 0.00  10908 0   7059    0.0   0.00  0.29   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00  10953 0   2       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/97     . 0.00  10679 0   53562   0.0   0.00  2.39   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/23     . 0.00  10865 0   3814    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/3      . 0.00  10932 0   23      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/3      . 0.00  10929 0   832     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/2      . 0.00  10955 0   6       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00  10916 0   921     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/13     . 0.00  10731 0   14143   0.0   0.00  1.65   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/429    . 0.00  9442  0   249693  0.0   0.00  9.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00  10913 0   3943    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  10956 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/74     . 0.00  10677 0   38750   0.0   0.00  1.65   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  10942 0   9       0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/300    . 0.00  9890  0   179725  0.0   0.00  11.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/25     . 0.00  10863 0   15231   0.0   0.00  0.63   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00  10950 0   2       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/4      . 0.00  10914 0   50      0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00  10917 0   1352    0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/130    . 0.00  10463 0   67696   0.0   0.00  3.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/4      . 0.00  10940 0   12      0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/3      . 0.00  10944 0   12      0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/3      . 0.00  10930 0   17      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/2      . 0.00  10965 0   70      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/3      . 0.00  10923 0   542     0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00  10943 0   4       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  10949 0   2       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/2      . 0.00  10951 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/77     . 0.00  10665 0   33074   0.0   0.00  1.77   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00  10952 0   2       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/99     . 0.00  10670 0   56987   0.0   0.00  2.35   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/53     . 0.00  10761 0   30095   0.0   0.00  1.25   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/114    . 0.00  10576 0   66491   0.0   0.00  2.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/23     . 0.00  10899 0   14782   0.0   0.00  0.59   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/3      . 0.00  10926 0   17      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  10966 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/4      . 0.00  10933 0   1899    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/10     . 0.00  10910 0   5029    0.0   0.00  0.20   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/4      . 0.00  10911 0   1613    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/11     . 0.00  10912 0   6686    0.0   0.00  0.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/4      . 0.00  10938 0   2480    0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/3      . 0.00  10945 0   23      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/3      . 0.00  10919 0   644     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/2      . 0.00  10937 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7      . 0.00  10904 0   3861    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 894
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...30)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 64978
   total entries replaced since starting: 0
   total entries expired since starting: 64059
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 56 miss
   total removes since starting: 25 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit