403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.02.54.txt
 ## swap threshold exceeded
## server overview
2025-11-16.02.54 load[0] mem[49/80] mysql[1/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1026         152          96        1184        1055
Swap:          1999        1704         295
 02:54:01 up 12:29,  0 users,  load average: 0.17, 0.27, 0.30
## system overview
top - 02:54:01 up 12:29,  0 users,  load average: 0.17, 0.27, 0.30
Tasks: 203 total,   1 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 60.6 us, 36.4 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   140668 free,  1067024 used,  1212608 buff/cache
KiB Swap:  2047996 total,   302844 free,  1745152 used.  1065316 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 265260   3580 S  56.2 11.0  10:37.98 /usr/sbin+
 50600 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44412   3472   1620 S   6.2  0.1   1:01.58 /usr/lib/+
 50607 pactpay   20   0  479860  16172  10576 S   6.2  0.7   0:00.01 /opt/cpan+
 50612 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.69 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.11 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:45.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.98 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.78 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.17 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.79 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.34 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.98 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.75 [kworker/+
   358 root      20   0   40244   7924   7672 S   0.0  0.3   0:22.35 /usr/lib/+
   385 root      20   0   45444    396    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    608    480 S   0.0  0.0   0:03.31 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:01.01 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.03 /usr/sbin+
   521 root      20   0   24708   1332    956 S   0.0  0.1   0:10.45 /usr/lib/+
   523 nscd      20   0 1264844   1956    916 S   0.0  0.1   0:36.00 /usr/sbin+
   524 root      20   0   52852    464    356 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1184    792 S   0.0  0.0   0:06.16 /usr/lib/+
   529 root      20   0  224148   3944   1028 S   0.0  0.2   0:00.50 queueproc+
   531 dbus      20   0   58740   1536    788 S   0.0  0.1   0:23.78 /usr/bin/+
   539 rpc       20   0   69256    132     72 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.27 /usr/sbin+
   577 root      20   0   24208     76     48 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   3896    964 S   0.0  0.2   0:00.83 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:03.43 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:04.58 /usr/sbin+
   919 root      20   0 1350088   7564    200 S   0.0  0.3   0:20.13 /usr/bin/+
   920 systuser  20   0  111864     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  35516   5676 S   0.0  1.5   0:24.52 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.99 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.93 pure-ftpd+
   926 root      20   0  572372   1072    496 S   0.0  0.0   0:03.89 /usr/bin/+
   927 systuser  20   0  114016  15620   2664 S   0.0  0.6   0:10.64 /usr/loca+
   928 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508    820    640 S   0.0  0.0   0:00.53 /usr/sbin+
   932 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   6304    220 S   0.0  0.3   0:24.33 /usr/bin/+
   946 root      20   0  396248    660    580 S   0.0  0.0   0:01.11 php-fpm: +
   954 named     20   0 1185864  43060   2300 S   0.0  1.8   0:22.92 /usr/sbin+
   957 root      20   0  331088   8704   7396 S   0.0  0.4   0:11.48 /usr/sbin+
   973 root      20   0  400740   3000    888 S   0.0  0.1   0:06.90 php-fpm: +
   975 root      20   0  439788   1620   1528 S   0.0  0.1   0:01.32 php-fpm: +
   978 cpanelc+  20   0   10456   3576   2416 S   0.0  0.1   0:35.76 /usr/loca+
   980 root      20   0  388892    720    620 S   0.0  0.0   0:01.35 php-fpm: +
   991 root      20   0  389508    588    496 S   0.0  0.0   0:01.22 php-fpm: +
   992 root      20   0 1763124  75960    608 S   0.0  3.1   0:14.35 /usr/loca+
   993 root      20   0  261288   6912   1848 S   0.0  0.3   0:09.06 cpsrvd (S+
  1065 dovenull  20   0   47524   2996   1800 S   0.0  0.1   0:00.82 dovecot/p+
  1066 dovenull  20   0   47948   3120   1740 S   0.0  0.1   0:00.47 dovecot/i+
  1067 dovecot   20   0   10320    548    432 S   0.0  0.0   0:00.14 dovecot/a+
  1068 root      20   0   10452    632    436 S   0.0  0.0   0:00.50 dovecot/l+
  1069 dovenull  20   0   47600   2904   1564 S   0.0  0.1   0:00.66 dovecot/p+
  1070 dovenull  20   0   47848   3064   1780 S   0.0  0.1   0:00.41 dovecot/i+
  1077 root      20   0   24528   2452    564 S   0.0  0.1   0:00.27 dovecot/c+
  1078 dovecot   20   0   13568    776    560 S   0.0  0.0   0:00.10 dovecot/s+
  1150 root      20   0  248140  23500   1104 S   0.0  1.0   0:08.18 /usr/loca+
  1151 systuser  20   0  157704   2980    952 S   0.0  0.1   0:00.20 SonarPush+
  1152 dovecot   20   0   41180   1596   1092 S   0.0  0.1   0:01.05 dovecot/a+
  1153 wp-tool+  20   0  387556   5032   1736 S   0.0  0.2   0:00.40 /usr/bin/+
  1154 wp-tool+  20   0  410480  28052   1748 S   0.0  1.2   0:37.99 /usr/bin/+
  1229 root      20   0  183900   5124   1888 S   0.0  0.2   0:02.48 cpdavd - +
  1231 root      20   0  210204  10728   1940 S   0.0  0.4   0:05.80 tailwatchd
  1232 root      20   0  167452   3204   1828 S   0.0  0.1   0:00.72 dnsadmin +
  1638 root      20   0  299272    656    492 S   0.0  0.0   0:01.20 php-fpm: +
  1681 root      38  18  130416   1480    800 S   0.0  0.1   0:00.11 cpanellog+
  1909 root      20   0  266984   8220    804 S   0.0  0.3   0:04.41 /usr/sbin+
  1911 root      20   0   12848    476    364 S   0.0  0.0   0:05.09 /usr/loca+
  1912 root      20   0   12732    432    356 S   0.0  0.0   0:04.45 /usr/loca+
  1913 root      20   0   12896    484    360 S   0.0  0.0   0:04.87 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  268280  98532   2260 S   0.0  4.1   0:07.05 spamd chi+
  8199 root      20   0  249268  35432    696 S   0.0  1.5   0:00.06 spamd chi+
  9220 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 14089 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 26671 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 31033 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.82 [kworker]
 31916 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 33619 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 33635 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35434 nobody    20   0  277888  20800   5052 S   0.0  0.9   0:01.91 /usr/sbin+
 35548 nobody    20   0  277884  20736   5020 S   0.0  0.9   0:01.65 /usr/sbin+
 39557 nobody    20   0  277680  20276   4668 S   0.0  0.8   0:01.17 /usr/sbin+
 40215 nobody    20   0  277688  20268   4824 S   0.0  0.8   0:00.91 /usr/sbin+
 41687 nobody    20   0  277560  20008   4536 S   0.0  0.8   0:00.98 /usr/sbin+
 42147 nobody    20   0  277888  19952   4484 S   0.0  0.8   0:00.99 /usr/sbin+
 42148 nobody    20   0  277876  19744   4408 S   0.0  0.8   0:00.79 /usr/sbin+
 44610 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46331 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46403 nobody    20   0  277748  19436   4152 S   0.0  0.8   0:00.46 /usr/sbin+
 46794 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47526 nobody    20   0  277512  19316   4272 S   0.0  0.8   0:00.38 /usr/sbin+
 47527 nobody    20   0  277744  19460   4204 S   0.0  0.8   0:00.35 /usr/sbin+
 47662 nobody    20   0  277744  19288   4052 S   0.0  0.8   0:00.35 /usr/sbin+
 48235 nobody    20   0  277744  19148   3968 S   0.0  0.8   0:00.30 /usr/sbin+
 48463 nobody    20   0  277888  19256   4036 S   0.0  0.8   0:00.31 /usr/sbin+
 48726 nobody    20   0  277872  19200   3956 S   0.0  0.8   0:00.24 /usr/sbin+
 48777 root      20   0  182208  29572   1696 S   0.0  1.2   0:11.50 lfd - sle+
 49053 mailnull  20   0   89504   4264   1148 S   0.0  0.2   0:00.00 /usr/sbin+
 49383 nobody    20   0  277744  19116   3940 S   0.0  0.8   0:00.14 /usr/sbin+
 49807 nobody    20   0  277744  18656   3500 S   0.0  0.8   0:00.10 /usr/sbin+
 49818 mailnull  20   0   89316   5140   1928 S   0.0  0.2   0:00.00 /usr/sbin+
 49823 nobody    20   0  277876  19392   4032 S   0.0  0.8   0:00.06 /usr/sbin+
 49977 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 49984 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 49996 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 50337 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 50501 mailnull  20   0   89304   5756   2508 S   0.0  0.2   0:00.00 /usr/sbin+
 50508 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 50509 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: unk+
 50512 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 50515 nigeria   20   0  400460   5304   2344 S   0.0  0.2   0:00.00 php-fpm: +
 50523 root      20   0  111304   4436   3400 S   0.0  0.2   0:00.00 sshd: [ac+
 50524 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 50531 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50532 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50533 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50534 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50535 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50537 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50538 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50539 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50540 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50541 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50542 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 50543 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50545 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 50548 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 50549 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 50550 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 50552 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 50574 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 50575 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50576 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 50577 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50578 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 50581 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50583 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 50584 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 50585 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 50586 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 50587 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50589 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 50590 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 50596 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 50604 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81352 root      20   0  183052   1616   1048 S   0.0  0.1   0:00.00 /usr/sbin+
 81404 root      20   0  113284    692    516 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056    292    216 S   0.0  0.0   0:00.00 sleep 3h +
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov15   0:45  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root       9220  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:5]
root      14089  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/0:3]
root      26671  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:1]
root      31916  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/u200:2]
root      33619  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:0]
root      33635  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/0:2]
root      44610  0.0  0.0      0     0 ?        S    02:45   0:00  \_ [kworker/0:0]
root      46331  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:2]
root      46794  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/0:4]
root      47250  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44412  3472 ?        Ss   Nov15   1:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  40244  7924 ?        Ss   Nov15   0:22 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   396 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   608 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:01 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1332 ?        Ss   Nov15   0:10 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1956 ?        Ssl  Nov15   0:36 /usr/sbin/nscd
root        524  0.0  0.0  52852   464 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1184 ?        Ssl  Nov15   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.1 224148  3944 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1536 ?        Ss   Nov15   0:23 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   132 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052  1616 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284   692 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056   292 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root      50531  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50548  0.0  0.0 113284  1212 ?        Ss   02:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      50550  0.0  0.0 108052   356 ?        S    02:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      50552  0.0  0.0 113288  1516 ?        S    02:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      50614  0.0  0.0 153840  2092 ?        R    02:54   0:00  |               \_ ps auxf
root      50532  0.0  0.0 183048  2164 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50590  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      50533  0.0  0.0 183048  2164 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50586  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      50534  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50575  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      50535  0.0  0.0 183048  2164 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50589  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      50537  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50583  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      50538  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50578  0.0  0.0  20164   812 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      50539  0.0  0.0 183048  2160 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50587  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      50540  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50576  0.0  0.0  20164   812 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      50541  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50581  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      50542  0.0  0.0 183048  2156 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50577  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      50543  0.0  0.0 183048  2152 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50584  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (pactpay) [50604] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   50604  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   50607  0.0  0.6 479860 16172 ?        Sl   02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      50545  0.0  0.0 183048  2152 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      50585  0.0  0.0  20164   968 ?        Ss   02:54   0:00      \_ jailshell (nigeria) [50596] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   50596  0.0  0.0  20164   256 ?        S    02:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   50600  0.0  0.6 404052 16136 ?        S    02:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    76 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  3896 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  49053  0.0  0.1  89504  4264 ?        S    02:51   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  49818  0.0  0.2  89316  5140 ?        S    02:52   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  50501  0.0  0.2  89304  5756 ?        S    02:53   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root      49977  0.0  0.1 111304  4268 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      49984  0.0  0.1 115644  2632 ?        S    02:53   0:00  |   \_ sshd: [net]
root      49996  0.0  0.1 111304  4268 ?        Ss   02:53   0:00  \_ sshd: [accepted]
root      50337  0.0  0.1 111304  4268 ?        Ss   02:53   0:00  \_ sshd: [accepted]
root      50508  0.0  0.2 157100  5072 ?        Ss   02:53   0:00  \_ sshd: unknown [priv]
sshd      50509  0.0  0.1 115644  2624 ?        S    02:53   0:00  |   \_ sshd: unknown [net]
root      50523  0.0  0.1 111304  4436 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      50524  0.0  0.1 115644  2628 ?        S    02:53   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 7564 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    68 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35516 ?       SLsl Nov15   0:24 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1072 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15620 ?        Ssl  Nov15   0:10 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    52 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   820 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  2996 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3120 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   548 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  2904 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47848  3064 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2452 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   776 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1596 ?        S    Nov15   0:01  \_ dovecot/auth
systuser    932  0.0  0.0 113932    68 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 6304 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   660 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.7 1185864 43060 ?       Ssl  Nov15   0:22 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.3 331088  8704 ?        Ssl  Nov15   0:11 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3000 ?        Ss   Nov15   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   50515  0.0  0.2 400460  5304 ?        S    02:53   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1620 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3576 ?        Ss   Nov15   0:35 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   720 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   588 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.1 1763124 75960 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  6912 ?        Ss   Nov15   0:09 cpsrvd (SSL) - waiting for connections                   
root      50512  0.0  0.0      0     0 ?        Z    02:53   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.9 248140 23500 ?        Ss   Nov15   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  4.0 268280 98532 ?        S    Nov15   0:07  \_ spamd child
root       8199  0.0  1.4 249268 35432 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2980 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5032 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.1 410480 28052 ?        Ss   Nov15   0:37 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  5124 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.4 210204 10728 ?        Ss   Nov15   0:05 tailwatchd
root       1232  0.0  0.1 167452  3204 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   656 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1480 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 10.9 1458332 265260 ?      Sl   Nov15  10:37 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8220 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12848   476 ?        S    Nov15   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   432 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12896   484 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    35434  0.1  0.8 277888 20800 ?        S    02:31   0:01  \_ /usr/sbin/httpd -k start
nobody    35548  0.1  0.8 277884 20736 ?        S    02:31   0:01  \_ /usr/sbin/httpd -k start
nobody    39557  0.1  0.8 277680 20276 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    40215  0.0  0.8 277688 20268 ?        S    02:38   0:00  \_ /usr/sbin/httpd -k start
nobody    41687  0.1  0.8 277560 20008 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    42147  0.1  0.8 277888 19952 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    42148  0.1  0.8 277876 19744 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    46403  0.1  0.8 277748 19436 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    47526  0.1  0.7 277512 19316 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    47527  0.1  0.8 277744 19460 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    47662  0.1  0.7 277744 19288 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    48235  0.1  0.7 277744 19148 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    50549  0.0  0.6 353712 15980 ?        S    02:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    48463  0.1  0.7 277888 19256 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    50612  0.0  0.6 353712 15976 ?        S    02:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    48726  0.1  0.7 277872 19200 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    49383  0.1  0.7 277744 19116 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    49807  0.1  0.7 277744 18656 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    49823  0.0  0.8 277876 19392 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148     8 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152    36 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 182208 29572 ?        Ss   00:00   0:11 lfd - sleeping
## mysql stats
Uptime: 44975  Threads: 3  Questions: 4029530  Slow queries: 0  Opens: 12651  Flush tables: 1  Open tables: 2000  Queries per second avg: 89.594
*************************** 1. row ***************************
     Id: 56684
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 56686
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 56690
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.201.8 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 114.119.144.127 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.6.146 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 121.229.185.160 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 02:54:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 29 minutes 31 seconds
   Server load: 0.17 0.27 0.30
   Total accesses: 234228 - Total Traffic: 4.8 GB - Total Duration: 118815259
   CPU Usage: u7.89 s7.6 cu2831.99 cs2402.83 - 11.7% CPU load
   5.21 requests/sec - 112.6 kB/second - 21.6 kB/request - 507.263 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

__.__WKWKK__KKW_KK..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  46403 0/81/11670  _ 2.39  1     261 5647151 0.0  2.49  237.48 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=1804845999 HTTP/1.1
   1-0  35548 0/391/11969 _ 7.34  2     1   5956453 0.0  6.65  240.61 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   2-0  -     0/0/11356   . 0.00  49    0   5576521 0.0  0.00  235.19 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  41687 0/233/11657 _ 5.83  0     352 5470426 0.0  2.84  231.46 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=708820192 HTTP/1.1
   4-0  49807 0/17/12331  _ 0.41  0     394 6383807 0.0  0.45  237.91 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=3133649495 HTTP/1.1
   5-0  48463 2/89/10762  W 1.06  0     0   5440165 64.2 1.31  225.98 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=2206442977 HTTP/1.1
   6-0  47526 1/71/11423  K 2.01  0     22  5539256 5.5  1.81  234.73 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /875706711?goodscode=0874559758 HTTP/1.1
   7-0  48726 0/41/10411  W 1.02  0     0   5127446 0.0  1.07  213.77 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  47527 1/59/10078  K 1.98  0     399 5081291 34.3 1.66  213.16 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=706413908 HTTP/1.1
   9-0  42147 1/316/10245 K 5.40  1     342 4959250 33.2 2.88  234.59 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=4038805392 HTTP/1.1
   10-0 47662 0/58/10363  _ 1.51  2     260 4981078 0.0  1.81  225.04 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=3415498441 HTTP/1.1
   11-0 39557 0/242/9636  _ 5.45  1     6   5007157 0.0  4.94  218.89 34.192.67.98  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/images/blog/b
   12-0 40215 1/206/9151  K 4.05  2     342 5152710 34.3 3.72  196.72 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=1025022406 HTTP/1.1
   13-0 42148 2/169/9555  K 3.68  0     269 4856748 65.1 3.16  203.96 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=1883171387 HTTP/1.1
   14-0 48235 1/50/8366   W 1.28  0     0   4134997 35.1 1.38  178.27 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=2401313260 HTTP/1.1
   15-0 35434 0/446/8668  _ 10.68 0     0   4501976 0.0  6.15  185.01 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 49383 1/24/7471   K 0.56  1     348 3857248 30.2 0.63  165.38 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1901447461 HTTP/1.1
   17-0 49823 1/17/7254   K 0.23  2     354 3510088 33.7 0.41  148.10 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=541304204 HTTP/1.1
   18-0 -     0/0/6520    . 0.00  881   0   3534689 0.0  0.00  151.62 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/6896    . 0.00  870   0   3359829 0.0  0.00  137.98 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/4663    . 0.00  647   0   2443177 0.0  0.00  100.91 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/4542    . 0.00  334   0   2378014 0.0  0.00  98.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/4404    . 0.00  1631  0   2469879 0.0  0.00  106.50 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/4489    . 0.00  1520  0   2501107 0.0  0.00  103.64 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/2551    . 0.00  1462  0   1571717 0.0  0.00  61.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1320    . 0.00  1629  0   715687  0.0  0.00  29.88  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1182    . 0.00  1625  0   641835  0.0  0.00  26.97  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/767     . 0.00  1537  0   421900  0.0  0.00  15.98  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/967     . 0.00  1606  0   448661  0.0  0.00  17.56  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/522     . 0.00  1619  0   306534  0.0  0.00  11.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1233    . 0.00  1628  0   719887  0.0  0.00  28.67  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/632     . 0.00  1618  0   244800  0.0  0.00  9.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/399     . 0.00  1604  0   188326  0.0  0.00  6.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/212     . 0.00  1627  0   119093  0.0  0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/839     . 0.00  1357  0   454966  0.0  0.00  14.68  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/256     . 0.00  1615  0   159053  0.0  0.00  3.08   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/249     . 0.00  1591  0   209399  0.0  0.00  5.47   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/269     . 0.00  1611  0   116246  0.0  0.00  3.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/87      . 0.00  1624  0   41995   0.0  0.00  0.97   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/679     . 0.00  1609  0   324717  0.0  0.00  13.47  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/146     . 0.00  1614  0   134902  0.0  0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/303     . 0.00  1162  0   130078  0.0  0.00  4.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/169     . 0.00  1602  0   102387  0.0  0.00  10.66  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/140     . 0.00  1633  0   75922   0.0  0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/638     . 0.00  70    0   199834  0.0  0.00  13.45  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/534     . 0.00  1607  0   268130  0.0  0.00  12.15  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/31      . 0.00  1608  0   37248   0.0  0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/157     . 0.00  1622  0   39861   0.0  0.00  1.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/253     . 0.00  1428  0   72401   0.0  0.00  3.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/115     . 0.00  1514  0   85640   0.0  0.00  3.68   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/448     . 0.00  1634  0   253173  0.0  0.00  9.86   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/48      . 0.00  1590  0   22050   0.0  0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/30      . 0.00  1632  0   8952    0.0  0.00  0.37   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/125     . 0.00  4404  0   81098   0.0  0.00  2.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/286     . 0.00  4398  0   153536  0.0  0.00  5.93   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/422     . 0.00  4380  0   320901  0.0  0.00  13.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/79      . 0.00  4428  0   50774   0.0  0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/30      . 0.00  4429  0   8201    0.0  0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/345     . 0.00  4264  0   224672  0.0  0.00  7.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/211     . 0.00  4268  0   85306   0.0  0.00  3.87   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/257     . 0.00  4012  0   154505  0.0  0.00  5.37   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/210     . 0.00  4283  0   75311   0.0  0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/225     . 0.00  4423  0   116672  0.0  0.00  4.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/53      . 0.00  4270  0   41973   0.0  0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/234     . 0.00  4391  0   61300   0.0  0.00  1.81   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/104     . 0.00  4271  0   43929   0.0  0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/54      . 0.00  4389  0   37444   0.0  0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/137     . 0.00  3990  0   63130   0.0  0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/21      . 0.00  4420  0   40095   0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/201     . 0.00  4399  0   93119   0.0  0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/66      . 0.00  4408  0   66683   0.0  0.00  1.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/931     . 0.00  4382  0   498006  0.0  0.00  20.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/182     . 0.00  4259  0   69161   0.0  0.00  2.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/263     . 0.00  4386  0   128005  0.0  0.00  4.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/95      . 0.00  4256  0   55142   0.0  0.00  2.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/15      . 0.00  4416  0   12842   0.0  0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/151     . 0.00  4419  0   87735   0.0  0.00  3.29   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/15      . 0.00  4418  0   2685    0.0  0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/17      . 0.00  4442  0   16053   0.0  0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/43      . 0.00  4430  0   30142   0.0  0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/21      . 0.00  4426  0   6790    0.0  0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/361     . 0.00  4425  0   198769  0.0  0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/6       . 0.00  4401  0   876     0.0  0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/3       . 0.00  33958 0   644     0.0  0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/2       . 0.00  33976 0   3       0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7       . 0.00  33943 0   3861    0.0  0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 939
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 2...52)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 129490
   total entries replaced since starting: 0
   total entries expired since starting: 128502
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 573 miss
   total removes since starting: 50 hit, 60 miss
Youez - 2016 - github.com/yon3zu
LinuXploit