403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.02.36.txt
 ## swap threshold exceeded
## server overview
2025-11-17.02.36 load[0] mem[61/62] mysql[1/8] httpd[20]
              total        used        free      shared  buff/cache   available
Mem:           2363        1397         159          64         806         735
Swap:          1999        1356         643
 02:36:01 up  3:17,  0 users,  load average: 0.17, 0.20, 0.26
## system overview
top - 02:36:01 up  3:17,  0 users,  load average: 0.17, 0.20, 0.26
Tasks: 200 total,   4 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 46.9 us, 15.6 sy,  0.0 ni, 37.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   177720 free,  1416904 used,   825676 buff/cache
KiB Swap:  2047996 total,   658940 free,  1389056 used.   767932 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 271796   5060 S  81.2 11.2   2:29.48 /usr/sbin+
 68285 nigeria   20   0  404052  16144  10384 R  18.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44400   3480   1612 S   6.2  0.1   0:16.21 /usr/lib/+
     9 root      20   0       0      0      0 S   6.2  0.0   0:12.69 [rcu_sche+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.73 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.66 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.64 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.20 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.42 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.57 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.29 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.67 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   5816   5512 S   0.0  0.2   0:06.51 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    596    468 S   0.0  0.0   0:01.00 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.64 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:02.76 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.25 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    440    344 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 S   0.0  0.1   0:06.25 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1528    900 S   0.0  0.1   0:11.11 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   6076   1364 S   0.0  0.3   0:00.21 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.35 /usr/sbin+
   546 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4100   1076 S   0.0  0.2   0:00.21 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.46 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  249168   5692   4836 S   0.0  0.2   0:03.25 /usr/sbin+
   918 named     20   0  989256  38468   2528 S   0.0  1.6   0:07.24 /usr/sbin+
   919 root      20   0 1763124 263768   1128 S   0.0 10.9   0:14.12 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.16 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.08 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.43 sw-engine+
   937 root      20   0  439788  11508  11300 S   0.0  0.5   0:00.44 php-fpm: +
   938 systuser  20   0  114016  14168   2720 S   0.0  0.6   0:02.92 /usr/loca+
   939 root      20   0  261296   7628   2068 S   0.0  0.3   0:02.40 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.26 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.83 /usr/bin/+
   947 cpanelc+  20   0   10308   3544   2424 R   0.0  0.1   0:09.91 /usr/loca+
   952 root      20   0  396248    740    556 S   0.0  0.0   0:00.40 php-fpm: +
   957 root      20   0  388892    784    684 S   0.0  0.0   0:00.42 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  36060   5944 S   0.0  1.5   0:06.72 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.24 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:01.99 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.26 /usr/bin/+
   974 root      20   0  389508    816    612 S   0.0  0.0   0:00.37 php-fpm: +
  1080 dovenull  20   0   46912   2588   1876 S   0.0  0.1   0:00.19 dovecot/p+
  1081 dovenull  20   0   47340   3420   2332 S   0.0  0.1   0:00.09 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.02 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.13 dovecot/l+
  1084 dovenull  20   0   46984   2496   1764 S   0.0  0.1   0:00.22 dovecot/p+
  1085 dovenull  20   0   47308   3268   2232 S   0.0  0.1   0:00.09 dovecot/i+
  1091 root      20   0   24528   2500    632 S   0.0  0.1   0:00.09 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.02 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.24 /usr/loca+
  1160 dovecot   20   0   41160   1588   1128 S   0.0  0.1   0:00.23 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.07 SonarPush+
  1176 wp-tool+  20   0  387556   5072   1700 S   0.0  0.2   0:00.18 /usr/bin/+
  1177 wp-tool+  20   0  412368  32508   1732 S   0.0  1.3   0:03.90 /usr/bin/+
  1211 root      20   0  209308  12192   2580 S   0.0  0.5   0:01.41 tailwatchd
  1213 root      20   0  262224  23200   5340 S   0.0  1.0   0:00.66 cpdavd - +
  1216 root      20   0  167452   4120   2748 S   0.0  0.2   0:00.30 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    888    548 S   0.0  0.0   0:00.32 php-fpm: +
  1673 root      38  18  130416   1592    820 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.44 /usr/sbin+
  1932 root      20   0   12852    520    376 S   0.0  0.0   0:01.50 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:01.32 /usr/loca+
  1934 root      20   0   12896    500    348 S   0.0  0.0   0:01.42 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  264952 129772   3344 S   0.0  5.4   0:01.73 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 14071 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35569 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.17 [kworker]
 40218 root      20   0  181888  29276   1644 S   0.0  1.2   0:09.35 lfd - sle+
 47511 nobody    20   0  277680  20516   5008 S   0.0  0.8   0:02.24 /usr/sbin+
 48575 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 48576 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 52247 nobody    20   0  277580  20428   4836 S   0.0  0.8   0:01.40 /usr/sbin+
 52255 nobody    20   0  277656  20528   4896 S   0.0  0.8   0:01.77 /usr/sbin+
 52258 nobody    20   0  277616  20368   4840 S   0.0  0.8   0:01.77 /usr/sbin+
 52503 nobody    20   0  277656  20644   4988 S   0.0  0.9   0:01.83 /usr/sbin+
 54233 nobody    20   0  277692  20532   4912 S   0.0  0.8   0:01.74 /usr/sbin+
 54829 nobody    20   0  277692  20500   4972 S   0.0  0.8   0:01.30 /usr/sbin+
 55807 nobody    20   0  277680  20496   4856 S   0.0  0.8   0:01.31 /usr/sbin+
 56370 nobody    20   0  277744  20712   4952 S   0.0  0.9   0:01.39 /usr/sbin+
 56483 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 58187 nobody    20   0  277676  20244   4820 S   0.0  0.8   0:01.11 /usr/sbin+
 61433 nobody    20   0  277880  19960   4664 S   0.0  0.8   0:00.72 /usr/sbin+
 63584 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64181 nobody    20   0  277744  19404   4288 S   0.0  0.8   0:00.23 /usr/sbin+
 64182 nobody    20   0  277744  19720   4440 S   0.0  0.8   0:00.44 /usr/sbin+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 64762 nobody    20   0  277744  19712   4344 S   0.0  0.8   0:00.42 /usr/sbin+
 64771 nobody    20   0  277876  19724   4504 S   0.0  0.8   0:00.34 /usr/sbin+
 65850 nobody    20   0  277892  19660   4332 S   0.0  0.8   0:00.26 /usr/sbin+
 65900 nobody    20   0  277680  19488   4308 S   0.0  0.8   0:00.25 /usr/sbin+
 66758 nobody    20   0  277880  19176   3960 S   0.0  0.8   0:00.15 /usr/sbin+
 66888 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 67134 nobody    20   0  277752  19036   3880 S   0.0  0.8   0:00.17 /usr/sbin+
 67626 nobody    20   0  277872  18852   3680 S   0.0  0.8   0:00.07 /usr/sbin+
 67700 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68093 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 68155 mailnull  20   0   89496   5676   2456 S   0.0  0.2   0:00.00 /usr/sbin+
 68179 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68183 nobody    20   0  277304  17764   3252 S   0.0  0.7   0:00.00 /usr/sbin+
 68189 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 68196 healtho+  20   0  442916  49812   4120 S   0.0  2.1   0:00.41 php-fpm: +
 68197 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 68202 nigeria   20   0  400460    924    552 S   0.0  0.0   0:00.00 php-fpm: +
 68207 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68210 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68211 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68212 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68213 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68214 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68215 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68216 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68217 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68218 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68219 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68221 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68224 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 68226 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 68227 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 68250 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 68251 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68253 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68254 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68256 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68257 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68258 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68259 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68261 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68262 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 68264 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 68276 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68281 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 68283 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 68284 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 68287 pactpay   20   0  480124  16792  11092 S   0.0  0.7   0:00.01 /opt/cpan+
 68292 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 68296 root      20   0   38648   6508   3044 R   0.0  0.3   0:00.00 /usr/loca+
 93318 root      20   0  183052   2112   1548 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1116    940 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root      14071  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:1]
root      35569  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:1]
root      48575  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      48576  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:1]
root      50830  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:2]
root      56483  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/1:3]
root      63584  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/0:4]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44400  3480 ?        Ss   Nov16   0:16 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  5816 ?        Ss   Nov16   0:06 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   596 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:02 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   440 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1528 ?        Ssl  Nov16   0:11 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  6076 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2112 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1116 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      68207  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68224  0.0  0.0 113284  1212 ?        Ss   02:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      68226  0.0  0.0 108052   356 ?        S    02:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      68227  0.0  0.0 113288  1516 ?        S    02:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      68297  0.0  0.0 153840  2092 ?        R    02:36   0:00  |               \_ ps auxf
root      68210  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68250  0.0  0.0  20164   984 ?        Ss   02:36   0:00  |   \_ jailshell (cloudsms) [68298] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      68298  0.0  0.0  20164   260 ?        R    02:36   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      68211  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68259  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      68212  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68261  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      68213  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68253  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      68214  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68254  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      68215  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68257  0.0  0.0  20164   984 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      68216  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68258  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      68217  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68251  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      68218  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68256  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      68219  0.0  0.0 183048  2152 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68262  0.0  0.0  20164   968 ?        Ss   02:36   0:00  |   \_ jailshell (pactpay) [68281] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68281  0.0  0.0  20164   260 ?        S    02:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68287  0.0  0.7 480124 17320 ?        S    02:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      68221  0.0  0.0 183048  2148 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      68264  0.0  0.0  20164   968 ?        Ss   02:36   0:00      \_ jailshell (nigeria) [68284] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68284  0.0  0.0  20164   264 ?        S    02:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68285  0.0  0.6 404052 16144 ?        R    02:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208   244 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4100 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  68155  0.0  0.2  89496  5676 ?        S    02:35   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      67700  0.0  0.1 111304  4272 ?        Ss   02:35   0:00  \_ sshd: [accepted]
root      68179  0.0  0.1 111304  4264 ?        Ss   02:35   0:00  \_ sshd: [accepted]
sshd      68189  0.0  0.1 115644  2624 ?        S    02:35   0:00  |   \_ sshd: [net]
root      68276  0.0  0.1 111304  4268 ?        Ss   02:36   0:00  \_ sshd: [accepted]
sshd      68283  0.0  0.1 115644  2628 ?        S    02:36   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 249168  5692 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 989256 38468 ?        Ssl  Nov16   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 10.8 1763124 263768 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2588 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  3420 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2496 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3268 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24528  2500 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1588 ?        S    Nov16   0:00  \_ dovecot/auth
root      66888  0.0  0.1  60820  4512 ?        S    02:34   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  68093  0.0  0.0 445028   316 ?        S    02:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11508 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 14168 ?        Ssl  Nov16   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7628 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      68197  0.0  0.0      0     0 ?        Z    02:35   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.2  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3544 ?        Ss   Nov16   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   740 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   784 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 36060 ?       SLsl Nov16   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  68196 41.0  2.0 442916 49812 ?        S    02:35   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   68202  0.0  0.0 400460   924 ?        S    02:35   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   816 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.3 264952 129772 ?       S    Nov16   0:01  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5072 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32508 ?        Ss   Nov16   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.5 209308 12192 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.9 262224 23200 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.1 167452  4120 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   888 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1592 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12852   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12896   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47511  0.1  0.8 277680 20516 ?        S    02:09   0:02  \_ /usr/sbin/httpd -k start
nobody    52247  0.1  0.8 277580 20428 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52255  0.1  0.8 277656 20528 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52258  0.1  0.8 277616 20368 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    52503  0.1  0.8 277656 20644 ?        S    02:16   0:01  \_ /usr/sbin/httpd -k start
nobody    54233  0.1  0.8 277692 20532 ?        S    02:18   0:01  \_ /usr/sbin/httpd -k start
nobody    54829  0.1  0.8 277692 20500 ?        S    02:19   0:01  \_ /usr/sbin/httpd -k start
nobody    55807  0.1  0.8 277680 20496 ?        S    02:20   0:01  \_ /usr/sbin/httpd -k start
nobody    56370  0.1  0.8 277744 20712 ?        S    02:20   0:01  \_ /usr/sbin/httpd -k start
nobody    58187  0.1  0.8 277676 20244 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    61433  0.1  0.8 277880 19960 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody    64181  0.0  0.8 277744 19404 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    64182  0.1  0.8 277744 19720 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    64762  0.1  0.8 277744 19712 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    64771  0.1  0.8 277876 19724 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    65850  0.1  0.8 277892 19660 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
nobody    65900  0.1  0.8 277680 19488 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
nobody    66758  0.1  0.7 277880 19176 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    67134  0.1  0.7 277752 19036 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    67626  0.1  0.7 277872 18852 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    68183  0.0  0.7 277304 17764 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.2 11.2 1461652 271796 ?      Sl   Nov16   2:29 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.0  1.2 181888 29276 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 11787  Threads: 3  Questions: 899311  Slow queries: 0  Opens: 4938  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.296
*************************** 1. row ***************************
     Id: 13305
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `13` WHERE `phone`='2348030852137' LIMIT 1
*************************** 2. row ***************************
     Id: 13307
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 13310
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 4. row ***************************
     Id: 13311
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
## network stats
      1 106.8.136.104 TIME_WAIT
      1 106.8.136.146 TIME_WAIT
      1 106.8.136.167 TIME_WAIT
      1 106.8.139.107 TIME_WAIT
      1 106.8.139.151 TIME_WAIT
      1 114.119.138.214 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 116.132.252.204 TIME_WAIT
      1 116.132.252.249 TIME_WAIT
      1 116.132.252.2 TIME_WAIT
      1 15.235.98.211 TIME_WAIT
      1 15.235.98.50 TIME_WAIT
      1 172.69.221.28 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.82.78.114 TIME_WAIT
      1 54.39.136.5 TIME_WAIT
      1 68.221.67.161 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     15 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 02:36:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 17 minutes 12 seconds
   Server load: 0.17 0.20 0.26
   Total accesses: 67847 - Total Traffic: 1.7 GB - Total Duration: 34026024
   CPU Usage: u13.66 s6.69 cu915.94 cs748.24 - 14.2% CPU load
   5.73 requests/sec - 150.4 kB/second - 26.2 kB/request - 501.511 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

RKKKK.KKKK_K.CKWKW.KKK_.....K...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  66758 0/29/3111  R 0.70  32    2   1591053 0.0   0.65  79.28 104.248.90.230  http/1.1 covid19.oyostate.gov.ng:443 GET / HTTP/1.1
   1-0  65850 1/52/2739  K 1.07  4     26  1419931 10.8  1.09  80.56 188.165.217.198 http/1.1 cloudsms.com.ng:443         GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   2-0  61433 1/130/2928 K 2.89  1     264 1439105 33.9  3.12  74.86 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=401055130 HTTP/1.1
   3-0  65900 2/48/3005  K 1.04  4     264 1499341 64.2  1.39  73.36 192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=2432075841 HTTP/1.1
   4-0  68183 1/1/2987   K 0.00  1     6   1354447 10.6  0.01  75.63 74.7.229.64     http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php?lga=Akure+south&state=Ondo&ward=
   5-0  -     0/0/2733   . 0.00  16    0   1346545 0.0   0.00  71.78 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   6-0  52503 1/346/2984 K 8.48  4     0   1437872 5.8   7.50  75.16 74.7.230.47     http/1.1 nigeriadecide.org:443       GET /robots.txt HTTP/1.1
   7-0  64181 6/39/2473  K 0.99  2     262 1294155 190.1 1.07  64.47 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=980913729 HTTP/1.1
   8-0  64182 1/90/2685  K 1.92  3     268 1317009 34.7  1.67  65.71 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=551031004 HTTP/1.1
   9-0  54233 1/302/2772 K 7.19  0     268 1379120 34.0  8.65  69.02 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=2913034126 HTTP/1.1
   10-0 56370 0/267/2771 _ 6.14  0     361 1401096 0.0   5.75  71.52 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=1031949960 HTTP/1.1
   11-0 52247 1/258/2529 K 6.11  0     368 1303223 36.4  6.73  65.88 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=3824946774 HTTP/1.1
   12-0 -     0/0/2437   . 0.00  40    0   1280948 0.0   0.00  63.77 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   13-0 52255 1/312/2611 C 7.19  1     448 1386240 26.9  7.75  68.62 101.33.80.42    http/1.1 health.oyostate.gov.ng:443  GET /portfolio/oyo-state-executive-council-led-by-the-ssg-showe
   14-0 64762 5/77/2342  K 1.76  3     314 1202725 156.5 1.86  60.53 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=387270912 HTTP/1.1
   15-0 64771 0/68/2521  W 1.31  0     0   1273804 0.0   1.45  64.24 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   16-0 54829 4/247/2414 K 6.33  2     5   1222939 24.7  5.98  60.66 147.135.212.201 http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php?state=Enugu&lga=Igbo%20etiti&war
   17-0 67134 4/29/2430  W 0.74  0     0   1230685 124.8 0.82  65.32 192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=3146513374 HTTP/1.1
   18-0 -     0/0/2047   . 0.00  47    0   1038116 0.0   0.00  53.00 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 47511 1/400/1885 K 10.86 4     1   952297  5.7   9.42  52.31 74.7.230.56     http/1.1 oysipa.oyostate.gov.ng:443  GET /robots.txt HTTP/1.1
   20-0 55807 3/250/2017 K 5.85  1     267 1020871 97.8  5.58  50.34 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=2720181192 HTTP/1.1
   21-0 52258 1/312/1966 K 7.61  0     22  1043313 5.8   8.26  53.38 66.249.70.7     http/1.1 test.cloudware.ng:443       GET /2980949819?goodscode=2977043702 HTTP/1.1
   22-0 67626 0/13/1318  _ 0.29  0     0   665942  0.0   0.29  32.46 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   23-0 -     0/0/1224   . 0.00  711   0   586731  0.0   0.00  29.95 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/1523   . 0.00  633   0   797856  0.0   0.00  40.09 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/988    . 0.00  680   0   469877  0.0   0.00  25.03 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/869    . 0.00  733   0   341801  0.0   0.00  16.88 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/749    . 0.00  242   0   367299  0.0   0.00  19.30 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 58187 3/192/792  K 4.79  0     296 408243  95.6  5.11  19.70 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=1232223491 HTTP/1.1
   29-0 -     0/0/117    . 0.00  2961  0   56902   0.0   0.00  2.50  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/628    . 0.00  1864  0   285658  0.0   0.00  13.70 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/500    . 0.00  3025  0   230058  0.0   0.00  10.64 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/183    . 0.00  3090  0   79523   0.0   0.00  3.91  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00  7938  0   46426   0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00  7931  0   156256  0.0   0.00  7.78  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00  7925  0   6362    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00  7871  0   85805   0.0   0.00  4.16  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00  7935  0   7767    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00  7918  0   77733   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/424    . 0.00  6525  0   220703  0.0   0.00  11.36 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/88     . 0.00  7805  0   19096   0.0   0.00  1.31  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  7937  0   3054    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00  7793  0   22487   0.0   0.00  0.98  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00  7936  0   52913   0.0   0.00  2.30  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00  5577  0   366544  0.0   0.00  17.77 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00  7941  0   19040   0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00  7914  0   5124    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00  7875  0   7973    0.0   0.00  0.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00  7626  0   40607   0.0   0.00  1.94  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00  7929  0   18588   0.0   0.00  0.72  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00  7924  0   3381    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00  7898  0   3457    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  10633 0   1702    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00  10609 0   2649    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  10632 0   1806    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00  10554 0   13156   0.0   0.00  0.55  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00  9799  0   98784   0.0   0.00  5.53  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  10494 0   19861   0.0   0.00  0.82  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1383
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...25)
   index usage: 24%, cache usage: 33%
   total entries stored since starting: 51047
   total entries replaced since starting: 0
   total entries expired since starting: 49660
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 115 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit