403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.01.54.txt
 ## swap threshold exceeded
## server overview
2025-11-16.01.54 load[0] mem[44/80] mysql[1/10] httpd[3]
              total        used        free      shared  buff/cache   available
Mem:           2363        1004         391          98         966        1093
Swap:          1999        1695         304
 01:54:01 up 11:29,  0 users,  load average: 0.21, 0.45, 0.56
## system overview
top - 01:54:01 up 11:29,  0 users,  load average: 0.21, 0.45, 0.56
Tasks: 202 total,   5 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.5 us, 18.2 sy,  0.0 ni, 27.3 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   399444 free,  1030736 used,   990120 buff/cache
KiB Swap:  2047996 total,   312076 free,  1735920 used.  1117860 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 267284   4084 S  75.0 11.0   9:50.19 /usr/sbin+
 10008 nigeria   20   0  404052  16144  10384 S  18.8  0.7   0:00.04 /opt/cpan+
 10029 cloudsms  20   0  404184  15752  10180 R   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44412   3492   1628 S   0.0  0.1   0:56.94 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.50 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.96 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:41.80 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.83 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:07.25 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.04 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.11 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.67 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.54 [kworker/+
   358 root      20   0   40244   5684   5432 S   0.0  0.2   0:20.46 /usr/lib/+
   385 root      20   0   45444    396    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    536    408 S   0.0  0.0   0:03.04 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.93 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1336    956 S   0.0  0.1   0:09.55 /usr/lib/+
   523 nscd      20   0 1264844   1944    916 S   0.0  0.1   0:33.27 /usr/sbin+
   524 root      20   0   52852    508    396 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1192    796 S   0.0  0.0   0:05.61 /usr/lib/+
   529 root      20   0  224148   3900    984 S   0.0  0.2   0:00.47 queueproc+
   531 dbus      20   0   58740   1532    788 S   0.0  0.1   0:21.70 /usr/bin/+
   539 rpc       20   0   69256    132     72 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.17 /usr/sbin+
   577 root      20   0   24208     92     64 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   3920    976 S   0.0  0.2   0:00.76 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:04.21 /usr/sbin+
   919 root      20   0 1350088   7416    200 S   0.0  0.3   0:20.09 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  35784   5852 S   0.0  1.5   0:22.58 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.91 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.85 pure-ftpd+
   926 root      20   0  572372   1076    500 S   0.0  0.0   0:03.57 /usr/bin/+
   927 systuser  20   0  114016  15792   2736 S   0.0  0.7   0:09.77 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.49 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   6304    220 S   0.0  0.3   0:24.31 /usr/bin/+
   946 root      20   0  396248    816    632 S   0.0  0.0   0:01.04 php-fpm: +
   954 named     20   0 1185864  43524   2480 S   0.0  1.8   0:21.04 /usr/sbin+
   957 root      20   0  331088   6756   5448 S   0.0  0.3   0:10.51 /usr/sbin+
   973 root      20   0  400740   3000    888 S   0.0  0.1   0:06.40 php-fpm: +
   975 root      20   0  439788   1784   1576 S   0.0  0.1   0:01.22 php-fpm: +
   978 cpanelc+  20   0   10456   3696   2432 S   0.0  0.2   0:32.96 /usr/loca+
   980 root      20   0  388892    912    696 S   0.0  0.0   0:01.26 php-fpm: +
   991 root      20   0  389508    688    596 S   0.0  0.0   0:01.13 php-fpm: +
   992 root      20   0 1763124  74404    612 S   0.0  3.1   0:14.15 /usr/loca+
   993 root      20   0  261288   6972   1864 S   0.0  0.3   0:08.40 cpsrvd (S+
  1065 dovenull  20   0   47524   2936   1648 S   0.0  0.1   0:00.76 dovecot/p+
  1066 dovenull  20   0   47948   3412   1924 S   0.0  0.1   0:00.43 dovecot/i+
  1067 dovecot   20   0   10320    548    432 S   0.0  0.0   0:00.13 dovecot/a+
  1068 root      20   0   10452    632    436 S   0.0  0.0   0:00.46 dovecot/l+
  1069 dovenull  20   0   47600   3044   1648 S   0.0  0.1   0:00.61 dovecot/p+
  1070 dovenull  20   0   47848   3392   1968 S   0.0  0.1   0:00.39 dovecot/i+
  1077 root      20   0   24528   2556    500 S   0.0  0.1   0:00.24 dovecot/c+
  1078 dovecot   20   0   13568    804    572 S   0.0  0.0   0:00.09 dovecot/s+
  1150 root      20   0  248140  23500   1104 S   0.0  1.0   0:07.74 /usr/loca+
  1151 systuser  20   0  157704   2996    952 S   0.0  0.1   0:00.19 SonarPush+
  1152 dovecot   20   0   41180   1628   1132 S   0.0  0.1   0:00.97 dovecot/a+
  1153 wp-tool+  20   0  387556   5060   1732 S   0.0  0.2   0:00.37 /usr/bin/+
  1154 wp-tool+  20   0  410480  30660   1640 S   0.0  1.3   0:34.91 /usr/bin/+
  1229 root      20   0  183900   5244   2016 S   0.0  0.2   0:02.39 cpdavd - +
  1231 root      20   0  210052  10720   1968 S   0.0  0.4   0:05.26 tailwatchd
  1232 root      20   0  167452   3400   2024 S   0.0  0.1   0:00.68 dnsadmin +
  1638 root      20   0  299272    880    500 S   0.0  0.0   0:01.11 php-fpm: +
  1681 root      38  18  130416   1488    808 S   0.0  0.1   0:00.09 cpanellog+
  1909 root      20   0  266984   8220    804 S   0.0  0.3   0:04.09 /usr/sbin+
  1911 root      20   0   12824    476    364 S   0.0  0.0   0:04.73 /usr/loca+
  1912 root      20   0   12732    432    356 S   0.0  0.0   0:04.13 /usr/loca+
  1913 root      20   0   12844    484    360 S   0.0  0.0   0:04.53 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  5221 nobody    20   0  277876  20140   4548 S   0.0  0.8   0:00.82 /usr/sbin+
  6108 nobody    20   0  277888  20084   4468 S   0.0  0.8   0:00.44 /usr/sbin+
  6129 nobody    20   0  277744  20128   4596 S   0.0  0.8   0:00.44 /usr/sbin+
  6143 nobody    20   0  277888  19932   4416 S   0.0  0.8   0:00.62 /usr/sbin+
  6673 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6926 nobody    20   0  277680  19600   4308 S   0.0  0.8   0:00.51 /usr/sbin+
  7798 nobody    20   0  277668  20076   4544 S   0.0  0.8   0:00.74 /usr/sbin+
  8198 root      20   0  268280  96256   1836 S   0.0  4.0   0:04.71 spamd chi+
  8199 root      20   0  249268  44376    696 S   0.0  1.8   0:00.06 spamd chi+
  8220 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8595 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9043 nobody    20   0  277568  19128   3980 S   0.0  0.8   0:00.09 /usr/sbin+
  9220 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9314 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  9400 nobody    20   0  277340  18896   4012 S   0.0  0.8   0:00.05 /usr/sbin+
  9478 nigeria   20   0  400460   5304   2344 S   0.0  0.2   0:00.01 php-fpm: +
  9491 nobody    20   0  277436  18320   3536 S   0.0  0.8   0:00.09 /usr/sbin+
  9492 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
  9493 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
  9513 nobody    20   0  277748  18828   3640 S   0.0  0.8   0:00.05 /usr/sbin+
  9707 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  9730 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  9774 nobody    20   0  277464  18420   3548 S   0.0  0.8   0:00.02 /usr/sbin+
  9813 nobody    20   0  277320  18460   3780 S   0.0  0.8   0:00.01 /usr/sbin+
  9828 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  9847 root      20   0  111304   4256   3244 S   0.0  0.2   0:00.00 sshd: [ac+
  9852 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  9902 root      20   0  162436   5840   4344 S   0.0  0.2   0:00.01 sshd: roo+
  9903 sshd      20   0  115644   2632   1564 R   0.0  0.1   0:00.00 sshd: roo+
  9921 mailnull  20   0   89500   4516   1328 S   0.0  0.2   0:00.00 /usr/sbin+
  9923 root      20   0  157100   4968   3676 S   0.0  0.2   0:00.00 sshd: unk+
  9924 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
  9925 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  9926 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  9942 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9943 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9944 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9945 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9947 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9948 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9949 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9950 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9951 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9952 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9954 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9956 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9958 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  9960 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  9961 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  9977 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  9978 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  9979 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9981 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9982 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9984 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9985 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9986 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9987 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
  9989 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  9991 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10005 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 10011 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 10014 pactpay   20   0  480124  17320  11580 S   0.0  0.7   0:00.01 /opt/cpan+
 10020 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 10027 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 10028 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 10030 root      20   0   38648   6056   2988 R   0.0  0.3   0:00.00 /usr/loca+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.74 [kworker]
 48777 root      20   0  181812  29332   1828 S   0.0  1.2   0:07.48 lfd - sle+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kworker/+
 81352 root      20   0  183052   1652   1084 S   0.0  0.1   0:00.00 /usr/sbin+
 81404 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056    292    216 S   0.0  0.0   0:00.00 sleep 3h +
 89675 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89760 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96121 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96688 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 99359 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100051 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov15   0:41  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov15   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      56928  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      89675  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:2]
root      89760  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/1:2]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root      96121  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:0]
root      96688  0.0  0.0      0     0 ?        S    01:30   0:00  \_ [kworker/1:0]
root      99359  0.0  0.0      0     0 ?        S    01:35   0:00  \_ [kworker/0:3]
root     100051  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:1]
root       6673  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:1]
root       8220  0.0  0.0      0     0 ?        S    01:51   0:00  \_ [kworker/1:3]
root       8595  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:4]
root       9220  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44412  3492 ?        Ss   Nov15   0:56 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5684 ?        Ss   Nov15   0:20 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   396 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   536 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1336 ?        Ss   Nov15   0:09 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1944 ?        Ssl  Nov15   0:33 /usr/sbin/nscd
root        524  0.0  0.0  52852   508 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1192 ?        Ssl  Nov15   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.1 224148  3900 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1532 ?        Ss   Nov15   0:21 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   132 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052  1652 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056   292 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root       9942  0.0  0.0 183048  2160 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9958  0.0  0.0 113284  1208 ?        Ss   01:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       9960  0.0  0.0 108052   356 ?        S    01:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       9961  0.0  0.0 113288  1520 ?        S    01:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      10031  0.0  0.0 153840  2092 ?        R    01:54   0:00  |               \_ ps auxf
root       9943  0.0  0.0 183048  2156 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9989  0.0  0.0  20164   984 ?        Ss   01:54   0:00  |   \_ jailshell (cloudsms) [10027] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  10027  0.0  0.0      0     0 ?        D    01:54   0:00  |       \_ [jailshell]
root       9944  0.0  0.0 183048  2156 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9981  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       9945  0.0  0.0 183048  2156 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9986  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       9947  0.0  0.0 183048  2156 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9991  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       9948  0.0  0.0 183048  2152 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9987  0.0  0.0  20164   984 ?        Ss   01:54   0:00  |   \_ jailshell (cloudsms) [10032] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  10032  0.0  0.0  20164   260 ?        S    01:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  10033  0.0  0.0 113284  1212 ?        S    01:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  10034  0.0  0.2 264972  6616 ?        R    01:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       9949  0.0  0.0 183048  2152 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9985  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       9950  0.0  0.0 183048  2148 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9982  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       9951  0.0  0.0 183048  2148 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9984  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       9952  0.0  0.0 183048  2148 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9979  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       9954  0.0  0.0 183048  2152 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9978  0.0  0.0  20164   968 ?        Ss   01:54   0:00  |   \_ jailshell (pactpay) [10011] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10011  0.0  0.0  20164   264 ?        S    01:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10014  0.0  0.7 480124 17692 ?        S    01:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       9956  0.0  0.0 183048  2148 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root       9977  0.0  0.0  20164   968 ?        Ss   01:54   0:00      \_ jailshell (nigeria) [10005] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10005  0.0  0.0  20164   264 ?        S    01:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10008  0.0  0.6 404052 16144 ?        S    01:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    92 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  3920 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   9921  0.0  0.1  89500  4516 ?        S    01:53   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root       9314  0.0  0.1 111304  4264 ?        Ss   01:53   0:00  \_ sshd: [accepted]
root       9492  0.0  0.1 111304  4440 ?        Ss   01:53   0:00  \_ sshd: [accepted]
sshd       9493  0.0  0.1 115644  2624 ?        S    01:53   0:00  |   \_ sshd: [net]
root       9707  0.0  0.1 111304  4272 ?        Ss   01:53   0:00  \_ sshd: [accepted]
root       9730  0.0  0.1 111304  4268 ?        Ss   01:53   0:00  \_ sshd: [accepted]
root       9828  0.0  0.1 111304  4272 ?        Ss   01:53   0:00  \_ sshd: [accepted]
root       9847  0.0  0.1 111304  4256 ?        Ss   01:53   0:00  \_ sshd: [accepted]
sshd       9852  0.0  0.1 115644  2624 ?        S    01:53   0:00  |   \_ sshd: [net]
root       9902  0.1  0.2 162436  5840 ?        Ss   01:53   0:00  \_ sshd: root [priv]
sshd       9903  0.0  0.1 115644  2632 ?        S    01:53   0:00  |   \_ sshd: root [net]
root       9923  0.0  0.2 157100  4968 ?        Ss   01:53   0:00  \_ sshd: unknown [priv]
sshd       9924  0.0  0.1 115644  2628 ?        S    01:53   0:00  |   \_ sshd: unknown [net]
root       9926  0.0  0.1 111304  4268 ?        Ss   01:53   0:00  \_ sshd: [accepted]
root        919  0.0  0.3 1350088 7416 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35784 ?       SLsl Nov15   0:22 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1076 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15792 ?        Ssl  Nov15   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  2936 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3412 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   548 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3044 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47848  3392 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2556 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   804 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1628 ?        S    Nov15   0:00  \_ dovecot/auth
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 6304 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   816 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.7 1185864 43524 ?       Ssl  Nov15   0:21 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.2 331088  6756 ?        Ssl  Nov15   0:10 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3000 ?        Ss   Nov15   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    9478  0.0  0.2 400460  5304 ?        S    01:53   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1784 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3696 ?        Rs   Nov15   0:32 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   912 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   688 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 74404 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  6972 ?        Ss   Nov15   0:08 cpsrvd (SSL) - waiting for connections                   
root       9925  0.0  0.0      0     0 ?        Z    01:53   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.9 248140 23500 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  3.9 268280 96256 ?        S    Nov15   0:04  \_ spamd child
root       8199  0.0  1.8 249268 44376 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2996 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5060 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 30660 ?        Ss   Nov15   0:34 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  5244 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.4 210052 10720 ?        Ss   Nov15   0:05 tailwatchd
root       1232  0.0  0.1 167452  3400 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   880 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1488 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.0 1458332 267284 ?      Sl   Nov15   9:50 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8220 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12824   476 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   432 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12844   484 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     5221  0.1  0.8 277876 20140 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody     6108  0.1  0.8 277888 20084 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody     6129  0.1  0.8 277744 20128 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody     6143  0.1  0.8 277888 19932 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody     6926  0.1  0.8 277680 19600 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody     7798  0.3  0.8 277668 20076 ?        S    01:50   0:00  \_ /usr/sbin/httpd -k start
nobody     9043  0.1  0.7 277568 19128 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
nobody     9400  0.1  0.7 277340 18896 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
nobody     9491  0.2  0.7 277436 18320 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
nobody     9513  0.1  0.7 277748 18828 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
nobody     9774  0.1  0.7 277464 18420 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
nobody     9813  0.0  0.7 277320 18460 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   492 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181812 29332 ?        Ss   00:00   0:07 lfd - sleeping
## mysql stats
Uptime: 41375  Threads: 3  Questions: 3757418  Slow queries: 0  Opens: 11837  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.813
*************************** 1. row ***************************
     Id: 52775
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 52778
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 52783
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 52784
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 52785
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 114.119.153.191 TIME_WAIT
      1 ::1 TIME_WAIT
      1 202.37.40.108 TIME_WAIT
      1 43.155.188.157 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 84.37.168.126 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.248.90.230 TIME_WAIT
      5 40.113.19.56 TIME_WAIT
     59 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 01:54:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 29 minutes 30 seconds
   Server load: 0.21 0.45 0.56
   Total accesses: 218381 - Total Traffic: 4.5 GB - Total Duration: 112340553
   CPU Usage: u2.87 s5.1 cu2624.02 cs2235.87 - 11.8% CPU load
   5.28 requests/sec - 114.4 kB/second - 21.7 kB/request - 514.425 ms/request
   2 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

___.W__K___................._................_..................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID      Acc     M CPU   SS   Req   Dur   Conn Child  Slot      Client     Protocol          VHost                                       Request
   0-0  7798 0/126/10823 _ 2.36 0     24  5318048 0.0  0.37  218.22 66.249.70.7    http/1.1 test.cloudware.ng:443    GET /895500293?goodscode=0894327398 HTTP/1.1
   1-0  5221 0/255/11013 _ 5.55 5     130 5573987 0.0  2.19  223.68 13.236.153.199 http/1.1 support.cloudware.ng:443 GET /.git/config HTTP/1.1
   2-0  9774 0/7/10436   _ 0.13 1     1   5269064 0.0  0.03  217.87 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   3-0  -    0/0/10834   . 0.00 2     0   5160318 0.0  0.00  215.70 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   4-0  9043 0/28/11553  W 0.78 0     0   5980275 0.0  1.00  224.41 ::1            http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   5-0  6926 0/173/10146 _ 3.53 5     5   5180566 0.0  1.04  209.55 52.3.26.180    http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/blog/blog/blog/2019elections/blo
   6-0  9400 0/22/10651  _ 0.39 1     5   5240547 0.0  0.12  218.49 184.72.84.154  http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/blog/blog/blog/2019elections/blo
   7-0  9491 26/33/9679  K 0.75 1     22  4836534 26.9 0.06  199.61 66.249.70.7    http/1.1 test.cloudware.ng:443    GET /2980274165?goodscode=2976368934 HTTP/1.1
   8-0  9513 0/12/9519   _ 0.25 5     128 4839734 0.0  0.10  199.90 13.236.153.199 http/1.1 support.cloudware.ng:443 GET /site/info.php HTTP/1.1
   9-0  6108 0/143/9279  _ 3.03 4     328 4602691 0.0  1.64  216.88 192.178.4.98   http/1.1 team.cloudware.ng:443    GET /vendor/symfony/cache/Tests/Adapter/ HTTP/1.1
   10-0 9813 0/6/9689    _ 0.07 2     128 4715495 0.0  0.02  210.33 43.155.188.157 http/1.1 nigeriadecide.org:443    GET / HTTP/1.0
   11-0 -    0/0/8807    . 0.00 0     0   4635743 0.0  0.00  199.27 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   12-0 -    0/0/8448    . 0.00 3     0   4757299 0.0  0.00  181.95 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   13-0 -    0/0/8857    . 0.00 394   0   4605392 0.0  0.00  190.12 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   14-0 -    0/0/7910    . 0.00 356   0   3960093 0.0  0.00  169.36 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   15-0 -    0/0/7881    . 0.00 393   0   4227234 0.0  0.00  170.81 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 -    0/0/7061    . 0.00 392   0   3684026 0.0  0.00  156.12 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   17-0 -    0/0/6996    . 0.00 29    0   3374024 0.0  0.00  140.98 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-0 -    0/0/6170    . 0.00 397   0   3363946 0.0  0.00  144.27 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   19-0 -    0/0/6778    . 0.00 395   0   3310478 0.0  0.00  135.15 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   20-0 -    0/0/4110    . 0.00 402   0   2311696 0.0  0.00  93.97  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 -    0/0/4399    . 0.00 27    0   2328964 0.0  0.00  96.12  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-0 -    0/0/4090    . 0.00 9     0   2336913 0.0  0.00  99.49  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -    0/0/4172    . 0.00 377   0   2328609 0.0  0.00  97.76  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -    0/0/2508    . 0.00 400   0   1547389 0.0  0.00  60.62  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -    0/0/1318    . 0.00 406   0   711217  0.0  0.00  29.87  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -    0/0/1179    . 0.00 340   0   637639  0.0  0.00  26.96  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -    0/0/742     . 0.00 321   0   405485  0.0  0.00  15.53  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 6129 0/222/762   _ 3.49 0     0   354015  0.0  0.61  13.11  ::1            http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   29-0 -    0/0/520     . 0.00 360   0   302163  0.0  0.00  11.61  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -    0/0/1231    . 0.00 364   0   717523  0.0  0.00  28.66  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -    0/0/629     . 0.00 32    0   242270  0.0  0.00  9.06   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -    0/0/391     . 0.00 409   0   182151  0.0  0.00  5.85   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -    0/0/210     . 0.00 317   0   116315  0.0  0.00  3.75   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -    0/0/774     . 0.00 408   0   421442  0.0  0.00  13.47  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -    0/0/252     . 0.00 404   0   157070  0.0  0.00  3.05   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -    0/0/239     . 0.00 399   0   198534  0.0  0.00  5.26   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -    0/0/265     . 0.00 355   0   115347  0.0  0.00  3.19   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -    0/0/85      . 0.00 405   0   41529   0.0  0.00  0.97   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -    0/0/676     . 0.00 230   0   322135  0.0  0.00  13.43  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -    0/0/141     . 0.00 388   0   132784  0.0  0.00  2.26   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -    0/0/186     . 0.00 401   0   83172   0.0  0.00  2.18   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -    0/0/164     . 0.00 361   0   99284   0.0  0.00  10.52  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -    0/0/139     . 0.00 407   0   75921   0.0  0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -    0/0/94      . 0.00 398   0   28630   0.0  0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 6143 0/62/421    _ 1.87 1     5   209540  0.0  0.42  8.98   127.0.0.1      http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   46-0 -    0/0/27      . 0.00 832   0   35819   0.0  0.00  0.27   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -    0/0/155     . 0.00 790   0   39300   0.0  0.00  1.58   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -    0/0/200     . 0.00 811   0   42286   0.0  0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -    0/0/84      . 0.00 665   0   75619   0.0  0.00  3.20   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -    0/0/447     . 0.00 824   0   253172  0.0  0.00  9.86   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -    0/0/40      . 0.00 806   0   12768   0.0  0.00  0.60   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -    0/0/29      . 0.00 844   0   8951    0.0  0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -    0/0/125     . 0.00 804   0   81098   0.0  0.00  2.15   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -    0/0/286     . 0.00 798   0   153536  0.0  0.00  5.93   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -    0/0/422     . 0.00 780   0   320901  0.0  0.00  13.81  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -    0/0/79      . 0.00 828   0   50774   0.0  0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -    0/0/30      . 0.00 829   0   8201    0.0  0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -    0/0/345     . 0.00 664   0   224672  0.0  0.00  7.04   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -    0/0/211     . 0.00 668   0   85306   0.0  0.00  3.87   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -    0/0/257     . 0.00 411   0   154505  0.0  0.00  5.37   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -    0/0/210     . 0.00 683   0   75311   0.0  0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -    0/0/225     . 0.00 823   0   116672  0.0  0.00  4.21   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -    0/0/53      . 0.00 670   0   41973   0.0  0.00  0.90   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -    0/0/234     . 0.00 791   0   61300   0.0  0.00  1.81   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -    0/0/104     . 0.00 671   0   43929   0.0  0.00  1.17   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -    0/0/54      . 0.00 789   0   37444   0.0  0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -    0/0/137     . 0.00 389   0   63130   0.0  0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -    0/0/21      . 0.00 820   0   40095   0.0  0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -    0/0/201     . 0.00 799   0   93119   0.0  0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -    0/0/66      . 0.00 808   0   66683   0.0  0.00  1.28   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -    0/0/931     . 0.00 782   0   498006  0.0  0.00  20.96  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -    0/0/182     . 0.00 659   0   69161   0.0  0.00  2.55   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -    0/0/263     . 0.00 786   0   128005  0.0  0.00  4.46   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -    0/0/95      . 0.00 656   0   55142   0.0  0.00  2.51   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -    0/0/15      . 0.00 816   0   12842   0.0  0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -    0/0/151     . 0.00 819   0   87735   0.0  0.00  3.29   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -    0/0/15      . 0.00 818   0   2685    0.0  0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -    0/0/17      . 0.00 842   0   16053   0.0  0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   79-0 -    0/0/43      . 0.00 830   0   30142   0.0  0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   80-0 -    0/0/21      . 0.00 826   0   6790    0.0  0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   81-0 -    0/0/361     . 0.00 825   0   198769  0.0  0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   82-0 -    0/0/6       . 0.00 801   0   876     0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   83-0 -    0/0/3       . 0.00 30358 0   644     0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   84-0 -    0/0/2       . 0.00 30376 0   3       0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   85-0 -    0/0/7       . 0.00 30343 0   3861    0.0  0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 863
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 1...56)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 117789
   total entries replaced since starting: 0
   total entries expired since starting: 116878
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 553 miss
   total removes since starting: 48 hit, 56 miss
Youez - 2016 - github.com/yon3zu
LinuXploit