403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.03.06.txt
 ## swap threshold exceeded
## server overview
2025-11-17.03.06 load[0] mem[60/64] mysql[1/8] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1353         121          71         888         763
Swap:          1999        1396         603
 03:06:01 up  3:47,  0 users,  load average: 0.89, 0.42, 0.36
## system overview
top - 03:06:01 up  3:47,  0 users,  load average: 0.89, 0.42, 0.36
Tasks: 209 total,   3 running, 205 sleeping,   0 stopped,   1 zombie
%Cpu(s): 52.9 us, 38.2 sy,  0.0 ni,  8.8 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    97628 free,  1412888 used,   909784 buff/cache
KiB Swap:  2047996 total,   618108 free,  1429888 used.   754912 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 272016   4452 S  47.1 11.2   2:55.36 /usr/sbin+
 96098 nigeria   20   0  404052  16140  10384 S  17.6  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44400   3492   1624 S  11.8  0.1   0:18.68 /usr/lib/+
   274 root      20   0       0      0      0 S   5.9  0.0   0:00.84 [jbd2/vda+
 96060 cloudw    20   0  353712  15976  10492 S   5.9  0.7   0:00.01 /opt/cpan+
 96089 pactpay   20   0  480124  17316  11580 S   5.9  0.7   0:00.01 /opt/cpan+
 96104 cloudsms  20   0  298436  15512  10032 R   5.9  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.76 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:14.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.74 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:02.56 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.10 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.28 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.85 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.50 [kworker/+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   4396   4096 S   0.0  0.2   0:07.61 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    584    456 S   0.0  0.0   0:01.18 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    300    256 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1284    860 S   0.0  0.1   0:01.96 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:03.25 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.30 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    400    304 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 S   0.0  0.1   0:07.41 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1528    900 S   0.0  0.1   0:12.90 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5992   1280 S   0.0  0.2   0:00.22 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.40 /usr/sbin+
   546 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4200   1172 S   0.0  0.2   0:00.26 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.90 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.69 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  257360   4444   3532 S   0.0  0.2   0:03.82 /usr/sbin+
   918 named     20   0 1185864  39676   2392 S   0.0  1.6   0:08.41 /usr/sbin+
   919 root      20   0 1763124 220804   1156 S   0.0  9.1   0:14.32 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.18 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.22 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.51 sw-engine+
   937 root      20   0  439788  11436  11228 S   0.0  0.5   0:00.49 php-fpm: +
   938 systuser  20   0  114016  14200   2704 S   0.0  0.6   0:03.34 /usr/loca+
   939 root      20   0  261296   7732   2140 S   0.0  0.3   0:02.98 cpsrvd (S+
   943 root      20   0 1277312  10584    228 S   0.0  0.4   0:20.27 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.85 /usr/bin/+
   947 cpanelc+  20   0   10416   3584   2432 S   0.0  0.1   0:11.44 /usr/loca+
   952 root      20   0  396248    820    636 S   0.0  0.0   0:00.44 php-fpm: +
   957 root      20   0  388892    700    600 S   0.0  0.0   0:00.45 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  36308   5448 S   0.0  1.5   0:07.70 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.28 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:02.26 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.30 /usr/bin/+
   974 root      20   0  389508    812    608 S   0.0  0.0   0:00.42 php-fpm: +
  1080 dovenull  20   0   46912   2452   1740 S   0.0  0.1   0:00.22 dovecot/p+
  1081 dovenull  20   0   47608   3348   2148 S   0.0  0.1   0:00.10 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.15 dovecot/l+
  1084 dovenull  20   0   46984   2392   1660 S   0.0  0.1   0:00.25 dovecot/p+
  1085 dovenull  20   0   47308   3076   2040 S   0.0  0.1   0:00.10 dovecot/i+
  1091 root      20   0   24556   2740    632 S   0.0  0.1   0:00.10 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.03 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.45 /usr/loca+
  1160 dovecot   20   0   41160   1620   1128 S   0.0  0.1   0:00.28 dovecot/a+
  1168 systuser  20   0  157704   3064   1088 S   0.0  0.1   0:00.07 SonarPush+
  1176 wp-tool+  20   0  387556   5340   1968 S   0.0  0.2   0:00.19 /usr/bin/+
  1177 wp-tool+  20   0  412368  32784   2008 S   0.0  1.4   0:04.47 /usr/bin/+
  1211 root      20   0  209308  11960   2312 S   0.0  0.5   0:01.60 tailwatchd
  1213 root      20   0  262224  24628   6760 S   0.0  1.0   0:00.76 cpdavd - +
  1216 root      20   0  167452   3804   2432 S   0.0  0.2   0:00.32 dnsadmin +
  1627 root      20   0  299272    840    500 S   0.0  0.0   0:00.37 php-fpm: +
  1673 root      38  18  130416   1592    820 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.64 /usr/sbin+
  1932 root      20   0   12836    520    376 S   0.0  0.0   0:01.74 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:01.52 /usr/loca+
  1934 root      20   0   12880    500    348 S   0.0  0.0   0:01.64 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  266004 130632   3024 S   0.0  5.4   0:03.56 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.21 [kworker]
 40218 root      20   0  182116  29480   1644 S   0.0  1.2   0:11.20 lfd - sle+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 63584 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64181 nobody    20   0  277744  20628   4804 S   0.0  0.9   0:03.04 /usr/sbin+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 72381 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78903 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82226 nobody    20   0  277876  19932   4728 S   0.0  0.8   0:01.28 /usr/sbin+
 82894 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84694 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85947 nobody    20   0  277680  19800   4592 S   0.0  0.8   0:00.91 /usr/sbin+
 87783 nobody    20   0  277680  19756   4612 S   0.0  0.8   0:00.92 /usr/sbin+
 88054 nobody    20   0  277868  19544   4420 S   0.0  0.8   0:00.82 /usr/sbin+
 88066 nobody    20   0  277744  19716   4500 S   0.0  0.8   0:00.78 /usr/sbin+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 88141 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89100 nobody    20   0  277876  19780   4516 S   0.0  0.8   0:00.58 /usr/sbin+
 89106 nobody    20   0  277888  19828   4628 S   0.0  0.8   0:00.66 /usr/sbin+
 89107 nobody    20   0  277748  19368   4256 S   0.0  0.8   0:00.41 /usr/sbin+
 90179 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 90479 nobody    20   0  277868  19548   4408 S   0.0  0.8   0:00.64 /usr/sbin+
 91261 root      20   0  123364    760    532 S   0.0  0.0   0:00.00 /usr/sbin+
 91278 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92150 nobody    20   0  277884  19260   4172 S   0.0  0.8   0:00.39 /usr/sbin+
 92215 nobody    20   0  277876  19372   4284 S   0.0  0.8   0:00.48 /usr/sbin+
 92226 nobody    20   0  277744  19364   4240 S   0.0  0.8   0:00.40 /usr/sbin+
 92227 nobody    20   0  277744  19300   4212 S   0.0  0.8   0:00.38 /usr/sbin+
 92231 nobody    20   0  277744  19504   4296 S   0.0  0.8   0:00.31 /usr/sbin+
 92233 nobody    20   0  277744  19360   4212 S   0.0  0.8   0:00.37 /usr/sbin+
 93278 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93283 nobody    20   0  277740  19484   4332 S   0.0  0.8   0:00.28 /usr/sbin+
 93318 root      20   0  183052   2108   1544 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1112    936 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    304    228 S   0.0  0.0   0:00.00 sleep 4h +
 93375 nobody    20   0  277684  19244   4128 S   0.0  0.8   0:00.33 /usr/sbin+
 94305 root      20   0   41052   2808   2144 S   0.0  0.1   0:00.00 dovecot/a+
 94479 nobody    20   0  277748  19144   3988 S   0.0  0.8   0:00.14 /usr/sbin+
 94512 nobody    20   0  277744  18872   3828 S   0.0  0.8   0:00.20 /usr/sbin+
 95178 nobody    20   0  277744  18352   3328 S   0.0  0.8   0:00.11 /usr/sbin+
 95239 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 95394 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 95597 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 95723 mailnull  20   0   89500   4908   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 95745 nobody    20   0  277744  18500   3460 S   0.0  0.8   0:00.03 /usr/sbin+
 95808 nigeria   20   0  477416  14136   6200 S   0.0  0.6   0:00.21 php-fpm: +
 95867 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 95874 nigeria   20   0  403232   9752   3916 S   0.0  0.4   0:00.18 php-fpm: +
 95913 mailnull  20   0   89500   5676   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 95976 cloudw    20   0  525180  61856   6740 S   0.0  2.6   0:00.54 php-fpm: +
 95986 mailnull  20   0   89500   5676   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 95998 root      20   0  162436   5840   4344 S   0.0  0.2   0:00.02 sshd: roo+
 96004 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 96006 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 96019 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96021 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96023 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96024 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96025 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96026 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96027 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96028 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96029 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96030 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96031 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96033 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96035 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 96036 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 96037 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 96062 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96064 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 96065 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 96067 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96068 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 96069 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96070 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96071 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96073 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96074 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96075 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96076 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96084 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 96095 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      50830  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:2]
root      63584  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/0:4]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      72381  0.0  0.0      0     0 ?        S    02:41   0:00  \_ [kworker/0:3]
root      78903  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/u200:0]
root      82894  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/0:2]
root      84694  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/1:1]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root      88141  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:0]
root      90179  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/1:3]
root      91278  0.0  0.0      0     0 ?        S    03:01   0:00  \_ [kworker/0:1]
root      93278  0.0  0.0      0     0 ?        S    03:03   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44400  3492 ?        Ss   Nov16   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  4396 ?        Ss   Nov16   0:07 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   584 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780   300 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1284 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:03 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   400 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1528 ?        Ssl  Nov16   0:12 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5992 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2108 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1112 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      96019  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96035  0.0  0.0 113284  1212 ?        Ss   03:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      96036  0.0  0.0 108052   356 ?        S    03:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      96037  0.0  0.0 113288  1520 ?        S    03:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      96105  0.0  0.0 153840  2100 ?        R    03:06   0:00  |               \_ ps auxf
root      96021  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96069  0.0  0.0  20164   804 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      96023  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96070  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      96024  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96075  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      96025  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96071  0.0  0.0  20164   804 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      96026  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96067  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      96027  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96073  0.0  0.0  20164   804 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      96028  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96076  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      96029  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96062  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      96030  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96074  0.0  0.0  20164   804 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      96031  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96065  0.0  0.0  20164   964 ?        Ss   03:06   0:00  |   \_ jailshell (pactpay) [96084] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   96084  0.0  0.0  20164   260 ?        S    03:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   96089  0.0  0.7 480124 17316 ?        S    03:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      96033  0.0  0.0 183048  2152 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      96064  0.0  0.0  20164   964 ?        Ss   03:06   0:00      \_ jailshell (nigeria) [96095] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   96095  0.0  0.0  20164   260 ?        S    03:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   96098  0.0  0.6 404052 16140 ?        R    03:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208   244 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4200 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  95723  0.0  0.2  89500  4908 ?        S    03:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  95913  0.0  0.2  89500  5676 ?        S    03:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  95986  0.0  0.2  89500  5676 ?        S    03:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      95394  0.0  0.1 111304  4272 ?        Ss   03:05   0:00  \_ sshd: [accepted]
root      95597  0.0  0.1 111304  4268 ?        Ss   03:05   0:00  \_ sshd: [accepted]
root      95998  1.0  0.2 162436  5840 ?        Ss   03:05   0:00  \_ sshd: root [priv]
sshd      96004  0.0  0.1 115644  2628 ?        S    03:05   0:00      \_ sshd: root [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 257360  4444 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.6 1185864 39676 ?       Ssl  Nov16   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1  9.1 1763124 220804 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2452 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47608  3348 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984  2392 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3076 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24556  2740 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1620 ?        S    Nov16   0:00  \_ dovecot/auth
root      94305  0.0  0.1  41052  2808 ?        S    03:04   0:00  \_ dovecot/auth -w
root      95239  0.0  0.1  60820  4512 ?        S    03:05   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  95867  0.0  0.0 445028   316 ?        S    03:05   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11436 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 14200 ?        Ssl  Nov16   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7732 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      96006  0.0  0.0      0     0 ?        Z    03:05   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.4 1277312 10584 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3584 ?        Ss   Nov16   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   820 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   700 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.5 5654048 36308 ?       SLsl Nov16   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   95808  1.4  0.5 477416 14136 ?        S    03:05   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   95874  1.6  0.4 403232  9752 ?        S    03:05   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    95976 18.0  2.5 525180 61856 ?        S    03:05   0:00  \_ php-fpm: pool cloudware_ng
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   812 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.3 266004 130632 ?       S    Nov16   0:03  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3064 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5340 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32784 ?        Ss   Nov16   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209308 11960 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  1.0 262224 24628 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.1 167452  3804 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   840 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1592 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12836   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12880   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    64181  0.1  0.8 277744 20628 ?        S    02:30   0:03  \_ /usr/sbin/httpd -k start
nobody    82226  0.1  0.8 277876 19932 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    85947  0.1  0.8 277680 19800 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    87783  0.1  0.8 277680 19756 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88054  0.1  0.8 277868 19544 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88066  0.1  0.8 277744 19716 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    89100  0.1  0.8 277876 19780 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    89106  0.1  0.8 277888 19828 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    89107  0.0  0.8 277748 19368 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    90479  0.1  0.8 277868 19548 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    92150  0.1  0.7 277884 19260 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    92215  0.1  0.8 277876 19372 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    92226  0.1  0.8 277744 19364 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    92227  0.1  0.7 277744 19300 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    92231  0.1  0.8 277744 19504 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    92233  0.1  0.7 277744 19360 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    93283  0.1  0.8 277740 19484 ?        S    03:03   0:00  \_ /usr/sbin/httpd -k start
nobody    93375  0.1  0.7 277684 19244 ?        S    03:03   0:00  \_ /usr/sbin/httpd -k start
nobody    94479  0.1  0.7 277748 19144 ?        S    03:04   0:00  \_ /usr/sbin/httpd -k start
cloudw    96060  0.0  0.6 353712 15976 ?        S    03:06   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    94512  0.2  0.7 277744 18872 ?        S    03:04   0:00  \_ /usr/sbin/httpd -k start
nobody    95178  0.1  0.7 277744 18352 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    95745  0.1  0.7 277744 18500 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.2 11.2 1461652 272016 ?      Sl   Nov16   2:55 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.2 182116 29480 ?        Ss   00:00   0:11 lfd - sleeping
root      91261  0.0  0.0 123364   760 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 13587  Threads: 3  Questions: 1042904  Slow queries: 0  Opens: 5688  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.757
*************************** 1. row ***************************
     Id: 15422
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-17' LIMIT 1
*************************** 2. row ***************************
     Id: 15426
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29/17/09/006,pdp103,apc67,pdm1,apa1,ad1.
*************************** 3. row ***************************
     Id: 15429
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 100.28.44.58 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 142.44.220.253 TIME_WAIT
      1 142.44.220.89 TIME_WAIT
      1 148.113.130.183 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.157.174.69 TIME_WAIT
      1 54.39.210.37 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 40.113.19.56 TIME_WAIT
      2 45.82.78.114 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 03:06:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 47 minutes 12 seconds
   Server load: 0.89 0.42 0.36
   Total accesses: 78312 - Total Traffic: 1.9 GB - Total Duration: 39001142
   CPU Usage: u9.7 s5.41 cu1060.27 cs864.29 - 14.2% CPU load
   5.74 requests/sec - 149.5 kB/second - 26.0 kB/request - 498.023 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KKKKK.KWKKK_R_K.R.K....K.....KKK...K._..........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  95745 1/4/3565    K 0.06  1     354 1819228 33.8  0.12  90.54 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=2028389952 HTTP/1.1
   1-0  93283 3/47/3142   K 1.23  1     275 1622877 98.9  1.19  90.25 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=657446796 HTTP/1.1
   2-0  89100 5/196/3450  K 2.35  4     336 1643956 159.6 1.96  84.91 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2601687635 HTTP/1.1
   3-0  82226 1/244/3491  K 5.41  3     298 1713004 35.6  5.50  84.41 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=4154586222 HTTP/1.1
   4-0  90479 15/127/3439 K 3.05  0     31  1555650 98.1  2.44  85.77 51.75.118.147  http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   5-0  -     0/0/3111    . 0.00  22    0   1528793 0.0   0.00  80.56 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  89106 6/111/3377  K 2.89  3     265 1640791 190.3 2.82  85.07 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=4285195829 HTTP/1.1
   7-0  64181 0/565/2999  W 13.25 0     0   1550283 0.0   14.94 78.34 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   8-0  95178 2/18/3284   K 0.50  2     304 1540066 68.2  0.56  77.57 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=3852024377 HTTP/1.1
   9-0  85947 4/146/3192  K 4.15  1     256 1609486 127.5 4.24  81.34 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=413446377 HTTP/1.1
   10-0 94479 9/23/3112   K 0.61  0     378 1553211 282.2 0.66  79.89 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1436812089 HTTP/1.1
   11-0 87783 0/166/2960  _ 4.23  0     0   1506986 0.0   3.83  75.72 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   12-0 89107 0/66/2835   R 1.78  90    345 1470472 0.0   1.80  73.56 179.162.150.49 http/1.1 nigeriadecide.org:443
   13-0 94512 0/31/2940   _ 0.83  0     348 1554289 0.0   0.90  76.21 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=738821267 HTTP/1.1
   14-0 93375 1/52/2791   K 1.44  3     364 1391662 35.1  1.56  70.66 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=3470099455 HTTP/1.1
   15-0 -     0/0/2800    . 0.00  168   0   1422450 0.0   0.00  71.79 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 88054 0/129/2830  R 3.57  19    347 1446544 0.0   3.52  70.97 102.90.102.175 http/1.1
   17-0 -     0/0/2687    . 0.00  224   0   1353499 0.0   0.00  71.61 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 92150 1/62/2459   K 1.55  2     351 1233272 35.6  1.87  63.91 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=4067727564 HTTP/1.1
   19-0 -     0/0/2170    . 0.00  217   0   1094601 0.0   0.00  59.48 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/2287    . 0.00  109   0   1159832 0.0   0.00  57.52 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/2092    . 0.00  218   0   1112752 0.0   0.00  57.19 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/1588    . 0.00  226   0   784811  0.0   0.00  37.96 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 88066 1/126/1539  K 3.33  3     306 744168  37.4  3.31  37.66 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1430942918 HTTP/1.1
   24-0 -     0/0/1769    . 0.00  170   0   914020  0.0   0.00  46.44 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1097    . 0.00  221   0   524165  0.0   0.00  27.69 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/903     . 0.00  225   0   358707  0.0   0.00  17.74 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/761     . 0.00  233   0   373138  0.0   0.00  19.50 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/1002    . 0.00  216   0   519933  0.0   0.00  25.05 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 92215 14/78/400   K 2.13  0     292 178779  435.6 2.14  8.67  192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=2959253252 HTTP/1.1
   30-0 92226 4/70/790    K 1.85  0     266 368364  126.8 1.66  17.93 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=4186738253 HTTP/1.1
   31-0 92227 1/62/562    K 1.64  0     68  263142  5.7   1.69  12.33 66.249.70.7    http/1.1 test.cloudware.ng:443  GET /2992328576?goodscode=2988407546 HTTP/1.1
   32-0 -     0/0/195     . 0.00  169   0   83866   0.0   0.00  4.14  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/108     . 0.00  232   0   47129   0.0   0.00  3.29  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/294     . 0.00  231   0   157046  0.0   0.00  7.81  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 92231 2/55/83     K 1.21  2     260 33093   65.4  1.63  1.91  192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=2874377906 HTTP/1.1
   36-0 -     0/0/175     . 0.00  219   0   88307   0.0   0.00  4.29  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 92233 0/60/71     _ 1.64  0     21  40082   0.0   1.77  1.88  66.249.70.7    http/1.1 test.cloudware.ng:443  GET /877395336?goodscode=0876246170 HTTP/1.1
   38-0 -     0/0/144     . 0.00  9718  0   77733   0.0   0.00  3.62  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424     . 0.00  8326  0   220703  0.0   0.00  11.36 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88      . 0.00  9605  0   19096   0.0   0.00  1.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00  9737  0   3054    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43      . 0.00  9593  0   22487   0.0   0.00  0.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00  9736  0   52913   0.0   0.00  2.30  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00  7377  0   366544  0.0   0.00  17.77 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00  9741  0   19040   0.0   0.00  0.83  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00  9714  0   5124    0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00  9675  0   7973    0.0   0.00  0.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00  9426  0   40607   0.0   0.00  1.94  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00  9729  0   18588   0.0   0.00  0.72  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00  9724  0   3381    0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00  9698  0   3457    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00  12433 0   1702    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00  12409 0   2649    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00  12432 0   1806    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00  12354 0   13156   0.0   0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00  11599 0   98784   0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00  12294 0   19861   0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1462
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...25)
   index usage: 25%, cache usage: 34%
   total entries stored since starting: 58740
   total entries replaced since starting: 0
   total entries expired since starting: 57274
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 125 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit