403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.02.30.txt
 ## swap threshold exceeded
## server overview
2025-11-17.02.30 load[0] mem[60/62] mysql[5/8] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1359         214          64         789         774
Swap:          1999        1346         653
 02:30:01 up  3:11,  0 users,  load average: 0.12, 0.24, 0.29
## system overview
top - 02:30:01 up  3:11,  0 users,  load average: 0.12, 0.24, 0.29
Tasks: 205 total,   3 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 25.0 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   219488 free,  1392760 used,   808052 buff/cache
KiB Swap:  2047996 total,   669692 free,  1378304 used.   792236 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 271556   5036 S 100.0 11.2   2:24.26 /usr/sbin+
 63446 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44400   3492   1624 S   6.7  0.1   0:15.77 /usr/lib/+
   492 dbus      20   0   58700   1520    768 S   6.7  0.1   0:06.08 /usr/bin/+
 63445 pactpay   20   0  480124  17684  11892 S   6.7  0.7   0:00.02 /opt/cpan+
 63546 cloudw    20   0  353712  15976  10492 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.71 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.64 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:12.30 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.62 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.14 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.33 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.55 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.28 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.65 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   4852   4548 S   0.0  0.2   0:06.30 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    596    468 S   0.0  0.0   0:00.97 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.60 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:02.67 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.25 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    480    384 S   0.0  0.0   0:00.01 /usr/sbin+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1524    896 S   0.0  0.1   0:10.80 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   6108   1396 S   0.0  0.3   0:00.20 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.34 /usr/sbin+
   546 root      20   0   24208    260    240 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4100   1076 S   0.0  0.2   0:00.21 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.20 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.40 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  249168   4808   3960 S   0.0  0.2   0:03.14 /usr/sbin+
   918 named     20   0  989256  38304   2472 S   0.0  1.6   0:07.01 /usr/sbin+
   919 root      20   0 1763124 274436   1128 S   0.0 11.3   0:14.12 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.16 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.04 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.42 sw-engine+
   937 root      20   0  439788  11508  11300 S   0.0  0.5   0:00.44 php-fpm: +
   938 systuser  20   0  114016  14232   2784 S   0.0  0.6   0:02.83 /usr/loca+
   939 root      20   0  261296   7612   2052 S   0.0  0.3   0:02.33 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.26 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.82 /usr/bin/+
   947 cpanelc+  20   0   10308   3544   2424 S   0.0  0.1   0:09.61 /usr/loca+
   952 root      20   0  396248    740    556 S   0.0  0.0   0:00.39 php-fpm: +
   957 root      20   0  388892    772    672 S   0.0  0.0   0:00.40 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  35960   5916 S   0.0  1.5   0:06.53 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.23 pure-ftpd+
   967 root      20   0  400740   1016    844 S   0.0  0.0   0:01.94 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.25 /usr/bin/+
   974 root      20   0  389508    816    612 S   0.0  0.0   0:00.36 php-fpm: +
  1080 dovenull  20   0   46912   2588   1876 S   0.0  0.1   0:00.18 dovecot/p+
  1081 dovenull  20   0   47340   3184   2164 S   0.0  0.1   0:00.08 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.02 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.13 dovecot/l+
  1084 dovenull  20   0   46984   2496   1764 S   0.0  0.1   0:00.22 dovecot/p+
  1085 dovenull  20   0   47308   3096   2144 S   0.0  0.1   0:00.07 dovecot/i+
  1091 root      20   0   24528   2500    632 S   0.0  0.1   0:00.08 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.02 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.20 /usr/loca+
  1160 dovecot   20   0   41160   1588   1128 S   0.0  0.1   0:00.23 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.06 SonarPush+
  1176 wp-tool+  20   0  387556   5072   1700 S   0.0  0.2   0:00.18 /usr/bin/+
  1177 wp-tool+  20   0  412368  32508   1732 S   0.0  1.3   0:03.78 /usr/bin/+
  1211 root      20   0  209308  12156   2592 S   0.0  0.5   0:01.35 tailwatchd
  1213 root      20   0  262224  24620   6760 S   0.0  1.0   0:00.66 cpdavd - +
  1216 root      20   0  167452   4120   2748 S   0.0  0.2   0:00.30 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    888    548 R   0.0  0.0   0:00.31 php-fpm: +
  1673 root      38  18  130416   1592    820 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.41 /usr/sbin+
  1932 root      20   0   12808    520    376 S   0.0  0.0   0:01.46 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:01.28 /usr/loca+
  1934 root      20   0   12836    500    348 S   0.0  0.0   0:01.38 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  264952 129772   3344 S   0.0  5.4   0:01.70 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 14071 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35569 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.17 [kworker]
 40218 root      20   0  181788  29212   1644 S   0.0  1.2   0:08.98 lfd - sle+
 44789 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45522 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 47511 nobody    20   0  277680  20392   4932 S   0.0  0.8   0:01.71 /usr/sbin+
 48575 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48576 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 48646 nobody    20   0  277680  20180   4816 S   0.0  0.8   0:01.31 /usr/sbin+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 52247 nobody    20   0  277580  20176   4720 S   0.0  0.8   0:00.94 /usr/sbin+
 52255 nobody    20   0  277656  20308   4756 S   0.0  0.8   0:01.19 /usr/sbin+
 52258 nobody    20   0  277744  20132   4688 S   0.0  0.8   0:01.12 /usr/sbin+
 52503 nobody    20   0  277720  20100   4840 S   0.0  0.8   0:01.30 /usr/sbin+
 53495 nobody    20   0  277740  19680   4544 S   0.0  0.8   0:01.02 /usr/sbin+
 54233 nobody    20   0  277692  20216   4748 S   0.0  0.8   0:01.11 /usr/sbin+
 54829 nobody    20   0  277692  19736   4524 S   0.0  0.8   0:00.84 /usr/sbin+
 54842 nobody    20   0  277524  20060   4792 S   0.0  0.8   0:01.06 /usr/sbin+
 55807 nobody    20   0  277680  19780   4476 S   0.0  0.8   0:00.69 /usr/sbin+
 56342 nobody    20   0  277744  19736   4508 S   0.0  0.8   0:00.47 /usr/sbin+
 56369 nobody    20   0  277616  19904   4524 S   0.0  0.8   0:00.59 /usr/sbin+
 56370 nobody    20   0  277744  19964   4444 S   0.0  0.8   0:00.83 /usr/sbin+
 56483 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 57634 nobody    20   0  277876  20188   4616 S   0.0  0.8   0:00.62 /usr/sbin+
 58187 nobody    20   0  277676  19712   4512 S   0.0  0.8   0:00.66 /usr/sbin+
 59658 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60187 nobody    20   0  277744  19256   4168 S   0.0  0.8   0:00.42 /usr/sbin+
 60336 nobody    20   0  277744  19992   4436 S   0.0  0.8   0:00.29 /usr/sbin+
 61433 nobody    20   0  277880  19120   4064 S   0.0  0.8   0:00.23 /usr/sbin+
 62553 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62658 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 62666 workflo+  20   0   61432   5860   4428 S   0.0  0.2   0:00.00 dovecot/l+
 62667 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 63044 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 63056 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.01 php-fpm: +
 63255 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 63321 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 63322 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 63337 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 63340 root      20   0  157100   5076   3784 S   0.0  0.2   0:00.00 sshd: unk+
 63341 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 63350 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 63351 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 63365 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63366 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63367 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63368 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63373 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63374 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63375 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63376 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63378 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63379 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63380 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 63382 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63405 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 63406 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63408 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63409 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63410 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 63411 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 63412 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63413 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 63416 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63417 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 63418 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63421 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 63427 root      20   0  188212  11092   5148 S   0.0  0.5   0:00.01 /usr/loca+
 63431 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 63436 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 63441 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 63442 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 63471 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
 63542 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 63547 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 93318 root      20   0  183052   2112   1548 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1116    940 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root      14071  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:1]
root      35569  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:1]
root      44789  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:2]
root      45522  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:0]
root      48575  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      48576  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:1]
root      50830  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:2]
root      56483  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/1:3]
root      59658  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/1:4]
root      62553  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44400  3492 ?        Ss   Nov16   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  4852 ?        Ss   Nov16   0:06 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   596 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:02 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   480 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1524 ?        Ssl  Nov16   0:10 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  6108 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1116 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      63365  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63421  0.0  0.0 113284  1212 ?        Ss   02:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      63431  0.0  0.0 108052   356 ?        S    02:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      63436  0.0  0.0 113288  1516 ?        S    02:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      63552  0.0  0.0 153840  2092 ?        R    02:30   0:00  |               \_ ps auxf
root      63366  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63405  0.0  0.0  20164   808 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      63367  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63418  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      63368  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63408  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      63373  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63406  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      63374  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63417  0.0  0.0  20164   992 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      63375  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63412  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      63376  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63409  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      63378  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63416  0.0  0.0  20164   804 ?        Ss   02:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      63379  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63413  0.0  0.0 113284  1208 ?        Ss   02:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      63427  1.0  0.4 188212 11092 ?        S    02:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      63471  0.0  0.0 160224  2368 ?        S    02:30   0:00  |           \_ top -n 2 -b -c
root      63380  0.0  0.0 183048  2152 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63410  0.0  0.0  20164   968 ?        Ss   02:30   0:00  |   \_ jailshell (pactpay) [63441] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   63441  0.0  0.0  20164   260 ?        S    02:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   63445  2.0  0.7 480124 17684 ?        S    02:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      63382  0.0  0.0 183048  2148 ?        S    02:30   0:00  \_ /usr/sbin/CROND -n
root      63411  0.0  0.0  20164   968 ?        Ss   02:30   0:00      \_ jailshell (nigeria) [63442] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   63442  0.0  0.0  20164   260 ?        S    02:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   63446  5.0  0.6 404052 16140 ?        R    02:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208   260 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4100 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      62658  0.0  0.1 111304  4260 ?        Ss   02:29   0:00  \_ sshd: [accepted]
root      63255  0.0  0.1 111304  4264 ?        Ss   02:29   0:00  \_ sshd: [accepted]
root      63321  0.3  0.2 162436  5832 ?        Ss   02:29   0:00  \_ sshd: root [priv]
sshd      63322  0.0  0.1 115644  2628 ?        S    02:29   0:00  |   \_ sshd: root [net]
root      63340  0.0  0.2 157100  5076 ?        Ss   02:29   0:00  \_ sshd: unknown [priv]
sshd      63341  0.0  0.1 115644  2632 ?        S    02:29   0:00  |   \_ sshd: unknown [net]
root      63350  0.0  0.1 111304  4448 ?        Ss   02:29   0:00  \_ sshd: [accepted]
sshd      63351  0.0  0.1 115644  2632 ?        S    02:29   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 249168  4808 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 989256 38304 ?        Ssl  Nov16   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 11.3 1763124 274436 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2588 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  3184 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2496 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3096 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24528  2500 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1588 ?        S    Nov16   0:00  \_ dovecot/auth
workflo+  62666  0.0  0.2  61432  5860 ?        S    02:29   0:00  \_ dovecot/lmtp
root      62667  0.0  0.1  41052  2728 ?        S    02:29   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  63044  0.0  0.0 445028   316 ?        S    02:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11508 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 14232 ?        Ssl  Nov16   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7612 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      63337  0.0  0.0      0     0 ?        Z    02:29   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.2  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3544 ?        Ss   Nov16   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   740 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   772 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35960 ?       SLsl Nov16   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1016 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   63056  0.0  0.1 400460  4420 ?        S    02:29   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   816 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.3 264952 129772 ?       S    Nov16   0:01  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5072 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32508 ?        Ss   Nov16   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.5 209308 12156 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  1.0 262224 24620 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.1 167452  4120 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   888 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1592 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12808   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12836   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47511  0.1  0.8 277680 20392 ?        S    02:09   0:01  \_ /usr/sbin/httpd -k start
nobody    48646  0.1  0.8 277680 20180 ?        S    02:11   0:01  \_ /usr/sbin/httpd -k start
nobody    52247  0.1  0.8 277580 20176 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
cloudw    63547  0.0  0.6 353712 15972 ?        S    02:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    52255  0.1  0.8 277656 20308 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52258  0.1  0.8 277744 20132 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52503  0.1  0.8 277720 20100 ?        S    02:16   0:01  \_ /usr/sbin/httpd -k start
nobody    53495  0.1  0.8 277740 19680 ?        S    02:17   0:01  \_ /usr/sbin/httpd -k start
nobody    54233  0.1  0.8 277692 20216 ?        S    02:18   0:01  \_ /usr/sbin/httpd -k start
nobody    54829  0.1  0.8 277692 19736 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody    54842  0.1  0.8 277524 20060 ?        S    02:19   0:01  \_ /usr/sbin/httpd -k start
nobody    55807  0.1  0.8 277680 19780 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    63546  1.0  0.6 353712 15976 ?        S    02:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    56342  0.0  0.8 277744 19736 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody    56369  0.1  0.8 277616 19904 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody    56370  0.1  0.8 277744 19964 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody    57634  0.1  0.8 277876 20188 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody    58187  0.1  0.8 277676 19712 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    60187  0.1  0.7 277744 19256 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    60336  0.1  0.8 277744 19992 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    61433  0.1  0.7 277880 19120 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.2 11.2 1461652 271556 ?      Sl   Nov16   2:24 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.0  1.2 181788 29212 ?        Ss   00:00   0:08 lfd - sleeping
## mysql stats
Uptime: 11428  Threads: 3  Questions: 869393  Slow queries: 0  Opens: 4799  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.075
*************************** 1. row ***************************
     Id: 12873
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: NULL
   Info: NULL
*************************** 2. row ***************************
     Id: 12879
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-17' LIMIT 1
*************************** 3. row ***************************
     Id: 12886
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.220.133 TIME_WAIT
      1 15.235.96.30 TIME_WAIT
      1 181.214.232.63 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.215.214.18 TIME_WAIT
      1 20.215.214.24 TIME_WAIT
      1 45.145.106.77 TIME_WAIT
      1 54.39.0.92 TIME_WAIT
      1 54.39.210.94 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 02:30:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 11 minutes 12 seconds
   Server load: 0.12 0.24 0.29
   Total accesses: 65827 - Total Traffic: 1.7 GB - Total Duration: 33094110
   CPU Usage: u11.88 s5.93 cu893.17 cs729.01 - 14.3% CPU load
   5.74 requests/sec - 151.0 kB/second - 26.3 kB/request - 502.744 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K_K_WKK..K_WK_.._W._WK.....KK...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req    Dur   Conn  Child  Slot    Client     Protocol         VHost                                      Request
   0-0  60187 4/77/3026   K 1.97 0     312  1561048 128.2 1.75  77.59 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=3434338475 HTTP/1.1
   1-0  56342 0/85/2661   _ 1.88 0     0    1384944 0.0   4.64  78.82 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  61433 1/37/2835   K 0.95 3     316  1397753 37.2  1.04  72.78 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=2096079041 HTTP/1.1
   3-0  56369 0/101/2916  _ 2.49 0     1756 1452826 0.0   2.59  70.81 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3299996896 HTTP/1.1
   4-0  53495 0/169/2921  W 4.31 0     0    1329903 0.0   5.81  74.05 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   5-0  60336 6/53/2642   K 1.14 0     376  1308748 182.3 1.20  69.47 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=1242581861 HTTP/1.1
   6-0  52503 7/247/2885  K 6.24 4     346  1385413 217.0 5.10  72.76 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1593774895 HTTP/1.1
   7-0  -     0/0/2434    . 0.00 349   0    1274108 0.0   0.00  63.40 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  -     0/0/2595    . 0.00 323   0    1284851 0.0   0.00  64.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-0  54233 1/191/2661  K 4.64 1     274  1310413 35.1  5.62  65.99 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1070443968 HTTP/1.1
   10-0 56370 0/151/2655  _ 3.79 2     1    1347295 0.0   3.38  69.15 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   11-0 52247 2/166/2437  W 4.01 0     0    1270373 64.7  4.91  64.07 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=2871500509 HTTP/1.1
   12-0 48646 16/246/2389 K 6.55 0     62   1263106 17.5  5.53  63.02 66.249.70.7   http/1.1 test.cloudware.ng:443  GET /880867950?goodscode=0879714234 HTTP/1.1
   13-0 52255 0/208/2507  _ 4.72 1     5    1332499 0.0   5.27  66.13 54.84.250.51  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/blog/2019elections/blog/b
   14-0 -     0/0/2265    . 0.00 331   0    1166920 0.0   0.00  58.67 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/2453    . 0.00 274   0    1249987 0.0   0.00  62.79 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 54829 0/149/2316  _ 4.25 0     0    1177605 0.0   4.37  59.04 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   17-0 54842 3/187/2369  W 4.82 0     0    1205192 93.6  4.59  63.81 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3274189125 HTTP/1.1
   18-0 -     0/0/1983    . 0.00 287   0    1008828 0.0   0.00  51.72 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 47511 0/293/1778  _ 8.42 2     1    912877  0.0   7.43  50.31 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   20-0 55807 0/144/1911  W 3.36 0     0    955592  0.0   2.85  47.61 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=4216012360 HTTP/1.1
   21-0 52258 1/194/1848  K 4.87 3     255  982531  34.1  5.39  50.51 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=3677218185 HTTP/1.1
   22-0 -     0/0/1305    . 0.00 256   0    660176  0.0   0.00  32.17 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/1224    . 0.00 351   0    586731  0.0   0.00  29.95 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1523    . 0.00 273   0    797856  0.0   0.00  40.09 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/988     . 0.00 320   0    469877  0.0   0.00  25.03 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/869     . 0.00 373   0    341801  0.0   0.00  16.88 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 57634 3/107/717   K 3.17 1     258  352680  94.3  2.96  17.70 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=1219376368 HTTP/1.1
   28-0 58187 3/117/717   K 2.90 0     378  368735  94.6  3.16  17.75 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=3324655380 HTTP/1.1
   29-0 -     0/0/117     . 0.00 2602  0    56902   0.0   0.00  2.50  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/628     . 0.00 1504  0    285658  0.0   0.00  13.70 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/500     . 0.00 2666  0    230058  0.0   0.00  10.64 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/183     . 0.00 2731  0    79523   0.0   0.00  3.91  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/106     . 0.00 7578  0    46426   0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/292     . 0.00 7571  0    156256  0.0   0.00  7.78  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/28      . 0.00 7565  0    6362    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/170     . 0.00 7511  0    85805   0.0   0.00  4.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/11      . 0.00 7575  0    7767    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/144     . 0.00 7558  0    77733   0.0   0.00  3.62  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424     . 0.00 6166  0    220703  0.0   0.00  11.36 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88      . 0.00 7445  0    19096   0.0   0.00  1.31  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00 7577  0    3054    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43      . 0.00 7433  0    22487   0.0   0.00  0.98  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00 7576  0    52913   0.0   0.00  2.30  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00 5218  0    366544  0.0   0.00  17.77 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00 7581  0    19040   0.0   0.00  0.83  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00 7554  0    5124    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00 7515  0    7973    0.0   0.00  0.58  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00 7266  0    40607   0.0   0.00  1.94  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00 7569  0    18588   0.0   0.00  0.72  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00 7564  0    3381    0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00 7538  0    3457    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00 10273 0    1702    0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00 10249 0    2649    0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 10272 0    1806    0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00 10194 0    13156   0.0   0.00  0.55  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00 9439  0    98784   0.0   0.00  5.53  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00 10134 0    19861   0.0   0.00  0.82  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1036
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...30)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 49426
   total entries replaced since starting: 0
   total entries expired since starting: 48387
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 115 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit