403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.03.54.txt
 ## swap threshold exceeded
## server overview
2025-11-17.03.54 load[0] mem[64/62] mysql[1/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1464         293           8         606         731
Swap:          1999        1422         577
 03:54:01 up  4:35,  0 users,  load average: 0.54, 0.70, 0.75
## system overview
top - 03:54:01 up  4:35,  0 users,  load average: 0.98, 0.78, 0.78
Tasks: 203 total,   1 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.6 us, 41.9 sy,  0.0 ni,  6.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   282656 free,  1514864 used,   622780 buff/cache
KiB Swap:  2047996 total,   591476 free,  1456520 used.   734104 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 247364   4748 S  37.5 10.2   3:44.01 /usr/sbin+
   476 root      20   0   24716   1072    788 S  12.5  0.0   0:03.91 /usr/lib/+
   492 dbus      20   0   58700   1244    600 S  12.5  0.1   0:08.92 /usr/bin/+
 37600 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44400   3204   1452 S   0.0  0.1   0:22.27 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.15 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.94 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:17.94 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.92 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.28 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:46.57 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.13 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.26 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.01 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   4184   4024 S   0.0  0.2   0:09.12 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    220     96 S   0.0  0.0   0:01.42 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    980    624 S   0.0  0.0   0:02.33 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.36 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   485 root      20   0   52852    360    260 S   0.0  0.0   0:00.01 /usr/sbin+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1384    700 S   0.0  0.1   0:15.94 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   2996    712 S   0.0  0.1   0:00.25 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.48 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120    440    292 S   0.0  0.0   0:00.30 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.67 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.04 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  265552   3108   2664 S   0.0  0.1   0:04.62 /usr/sbin+
   918 named     20   0 1185864  29348   1880 S   0.0  1.2   0:11.04 /usr/sbin+
   919 root      20   0 1828136 603980    232 S   0.0 25.0   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    456    292 S   0.0  0.0   0:00.20 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.52 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.65 sw-engine+
   937 root      20   0  439788    296    212 S   0.0  0.0   0:00.71 php-fpm: +
   938 systuser  20   0  114016  13620   2840 S   0.0  0.6   0:04.09 /usr/loca+
   939 root      20   0  261296   4432    860 S   0.0  0.2   0:03.76 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.28 /usr/bin/+
   944 root      20   0 1276356   6376      4 S   0.0  0.3   0:24.88 /usr/bin/+
   947 cpanelc+  20   0   10416   3316   2304 S   0.0  0.1   0:13.98 /usr/loca+
   952 root      20   0  396248    284    204 S   0.0  0.0   0:00.63 php-fpm: +
   957 root      20   0  388892    292    200 S   0.0  0.0   0:00.63 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   963 telegraf  20   0 5654048  34200   5780 S   0.0  1.4   0:09.51 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.33 pure-ftpd+
   967 root      20   0  400740    756    588 S   0.0  0.0   0:02.78 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.37 /usr/bin/+
   974 root      20   0  389508    356    272 S   0.0  0.0   0:00.59 php-fpm: +
  1080 dovenull  20   0   46912    724    468 S   0.0  0.0   0:00.25 dovecot/p+
  1081 dovenull  20   0   47608   2248   1472 S   0.0  0.1   0:00.12 dovecot/i+
  1082 dovecot   20   0   10320    292    200 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    604    436 S   0.0  0.0   0:00.18 dovecot/l+
  1084 dovenull  20   0   46984    808    548 S   0.0  0.0   0:00.31 dovecot/p+
  1085 dovenull  20   0   47432   1152    764 S   0.0  0.0   0:00.11 dovecot/i+
  1091 root      20   0   24528   1836    476 S   0.0  0.1   0:00.11 dovecot/c+
  1095 dovecot   20   0   13568    624    448 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   3580    720 S   0.0  0.1   0:04.83 /usr/loca+
  1160 dovecot   20   0   41160   1340    952 S   0.0  0.1   0:00.34 dovecot/a+
  1168 systuser  20   0  157704   2968   1008 S   0.0  0.1   0:00.09 SonarPush+
  1176 wp-tool+  20   0  387556   2656   1316 S   0.0  0.1   0:00.22 /usr/bin/+
  1177 wp-tool+  20   0  412368   8948   1184 S   0.0  0.4   0:05.53 /usr/bin/+
  1211 root      20   0  209308   7008   1568 S   0.0  0.3   0:01.85 tailwatchd
  1213 root      20   0  262224   5048    728 S   0.0  0.2   0:00.90 cpdavd - +
  1216 root      20   0  167452   1212    652 S   0.0  0.1   0:00.39 dnsadmin +
  1627 root      20   0  299272    400    240 S   0.0  0.0   0:00.46 php-fpm: +
  1673 root      38  18  130416   1324    668 S   0.0  0.1   0:00.04 cpanellog+
  1928 root      20   0  266984   4956    468 S   0.0  0.2   0:02.07 /usr/sbin+
  1932 root      20   0   12828    324    212 S   0.0  0.0   0:02.15 /usr/loca+
  1933 root      20   0   12732    260    180 S   0.0  0.0   0:01.88 /usr/loca+
  1934 root      20   0   12856    332    216 S   0.0  0.0   0:02.04 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4229 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8393 root      20   0  266004  45124   1176 S   0.0  1.9   0:03.90 spamd chi+
  8394 root      20   0  248032   2112    376 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 13393 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 15866 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 17108 nobody    20   0  277804  14804   4624 S   0.0  0.6   0:02.06 /usr/sbin+
 20659 nobody    20   0  277808  12344   4736 S   0.0  0.5   0:02.04 /usr/sbin+
 23411 nobody    20   0  277836  11768   4584 S   0.0  0.5   0:01.35 /usr/sbin+
 23560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25641 nobody    20   0  277876  17568   4724 S   0.0  0.7   0:01.36 /usr/sbin+
 25806 nobody    20   0  277616  18348   4648 S   0.0  0.8   0:01.30 /usr/sbin+
 28007 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 28078 nobody    20   0  277820  19820   4764 S   0.0  0.8   0:00.86 /usr/sbin+
 29072 nobody    20   0  277680  19660   4768 S   0.0  0.8   0:00.92 /usr/sbin+
 29075 nobody    20   0  277740  19676   4792 S   0.0  0.8   0:00.82 /usr/sbin+
 29709 nobody    20   0  277680  18924   4528 S   0.0  0.8   0:00.69 /usr/sbin+
 29723 nobody    20   0  277816  19476   4680 S   0.0  0.8   0:00.77 /usr/sbin+
 30014 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33338 nobody    20   0  277832  18452   4252 S   0.0  0.8   0:00.41 /usr/sbin+
 34451 nobody    20   0  277568  17900   3952 S   0.0  0.7   0:00.25 /usr/sbin+
 35099 nobody    20   0  277744  17976   4036 S   0.0  0.7   0:00.37 /usr/sbin+
 35100 nobody    20   0  277680  18156   3868 S   0.0  0.8   0:00.19 /usr/sbin+
 35738 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35768 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35815 nobody    20   0  277888  18164   4088 S   0.0  0.8   0:00.18 /usr/sbin+
 36035 nobody    20   0  277744  17784   3936 S   0.0  0.7   0:00.13 /usr/sbin+
 36060 nobody    20   0  277616  18100   4124 S   0.0  0.7   0:00.11 /usr/sbin+
 36781 nobody    20   0  277744  17008   3288 S   0.0  0.7   0:00.16 /usr/sbin+
 36796 nobody    20   0  277744  16972   3256 S   0.0  0.7   0:00.15 /usr/sbin+
 36797 nobody    20   0  277876  17724   3852 S   0.0  0.7   0:00.09 /usr/sbin+
 37118 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 37493 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 37494 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 37500 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 37513 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 37517 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 37519 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 37522 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 37523 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 37524 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37526 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37527 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37528 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37529 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37530 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37531 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37532 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37534 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37535 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37536 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37538 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37541 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 37543 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37544 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 37545 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 37548 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 37557 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 37578 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 37579 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37580 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37581 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 37582 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37586 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37587 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37588 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37589 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37590 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37591 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 37598 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 37608 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 37609 pactpay   20   0  479860  16172  10576 S   0.0  0.7   0:00.00 /opt/cpan+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.31 [kworker]
 40218 root      20   0  182316   7940   1100 S   0.0  0.3   0:14.07 lfd - sle+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
101261 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:17  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:46  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root     101261  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:2]
root       4229  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:1]
root      13393  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/1:3]
root      15866  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      23560  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:2]
root      28007  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:4]
root      30014  0.0  0.0      0     0 ?        S    03:46   0:00  \_ [kworker/0:0]
root      35738  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:3]
root      35768  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:4]
root      37613  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44400  3204 ?        Ss   Nov16   0:22 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  4184 ?        Ss   Nov16   0:09 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   220 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780    60 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   980 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1072 ?        Ss   Nov16   0:03 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   360 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1244 ?        Ss   Nov16   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1384 ?        Ssl  Nov16   0:15 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  2996 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      37524  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37541  0.0  0.0 113284  1212 ?        Ss   03:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      37544  0.0  0.0 108052   356 ?        S    03:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      37545  0.0  0.0 113288  1520 ?        S    03:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      37616  0.0  0.0 153840  2092 ?        R    03:54   0:00  |               \_ ps auxf
root      37526  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37543  0.0  0.0  20164   988 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      37527  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37580  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      37528  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37579  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      37529  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37586  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      37530  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37588  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      37531  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37590  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      37532  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37582  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      37534  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37589  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      37535  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37587  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      37536  0.0  0.0 183048  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37581  0.0  0.0  20164   964 ?        Ss   03:54   0:00  |   \_ jailshell (pactpay) [37608] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37608  0.0  0.0  20164   256 ?        S    03:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37609  0.0  0.6 479860 16172 ?        Sl   03:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      37538  0.0  0.0 183048  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      37591  0.0  0.0  20164   960 ?        Ss   03:54   0:00      \_ jailshell (nigeria) [37598] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37598  0.0  0.0  20164   256 ?        S    03:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37600  0.0  0.6 404052 16144 ?        R    03:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.0  89120   440 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   Nov16   0:02 /usr/sbin/sshd -D
root      37118  0.0  0.1 111304  4260 ?        Ss   03:53   0:00  \_ sshd: [accepted]
root      37493  0.0  0.2 157100  5080 ?        Ss   03:53   0:00  \_ sshd: unknown [priv]
sshd      37494  0.0  0.1 115644  2632 ?        S    03:53   0:00  |   \_ sshd: unknown [net]
root      37517  0.0  0.2 157100  5068 ?        Ss   03:53   0:00  \_ sshd: unknown [priv]
sshd      37519  0.0  0.1 115644  2628 ?        S    03:53   0:00  |   \_ sshd: unknown [net]
root      37522  0.0  0.1 111304  4260 ?        Ss   03:54   0:00  \_ sshd: [accepted]
sshd      37523  0.0  0.1 115644  2632 ?        S    03:54   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 265552  3108 ?        Ssl  Nov16   0:04 /usr/sbin/rsyslogd -n
named       918  0.0  1.2 1185864 29348 ?       Ssl  Nov16   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.2 24.9 1828136 603980 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   456 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912   724 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47608  2248 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   292 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   604 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   808 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.0  47432  1152 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  1836 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   624 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1340 ?        S    Nov16   0:00  \_ dovecot/auth
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  37500  0.0  0.0 445028   312 ?        S    03:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   296 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13620 ?        Ssl  Nov16   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.1 261296  4432 ?        Ss   Nov16   0:03 cpsrvd (SSL) - waiting for connections                   
root      37513  0.0  0.0      0     0 ?        Z    03:53   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.1 1277312 3688 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6376 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3316 ?        Ss   Nov16   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   284 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   292 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 34200 ?       SLsl Nov16   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   756 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   37548  0.0  0.1 400460  4420 ?        S    03:54   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   356 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  3580 ?        Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  1.8 266004 45124 ?        S    Nov16   0:03  \_ spamd child
root       8394  0.0  0.0 248032  2112 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2968 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  2656 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  8948 ?        Ss   Nov16   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.2 209308  7008 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.2 262224  5048 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.0 167452  1212 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   400 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1324 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4956 ?        Ss   Nov16   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12828   324 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   260 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12856   332 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    17108  0.1  0.6 277804 14804 ?        S    03:31   0:02  \_ /usr/sbin/httpd -k start
nobody    20659  0.1  0.5 277808 12344 ?        S    03:35   0:02  \_ /usr/sbin/httpd -k start
nobody    23411  0.1  0.4 277836 11768 ?        S    03:38   0:01  \_ /usr/sbin/httpd -k start
nobody    25641  0.1  0.7 277876 17568 ?        S    03:41   0:01  \_ /usr/sbin/httpd -k start
nobody    25806  0.1  0.7 277616 18348 ?        S    03:41   0:01  \_ /usr/sbin/httpd -k start
nobody    28078  0.1  0.8 277820 19820 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29072  0.1  0.8 277680 19660 ?        S    03:45   0:00  \_ /usr/sbin/httpd -k start
nobody    29075  0.1  0.8 277740 19676 ?        S    03:45   0:00  \_ /usr/sbin/httpd -k start
nobody    29709  0.1  0.7 277680 18924 ?        S    03:45   0:00  \_ /usr/sbin/httpd -k start
nobody    29723  0.1  0.8 277816 19476 ?        S    03:45   0:00  \_ /usr/sbin/httpd -k start
nobody    33338  0.1  0.7 277832 18452 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    34451  0.1  0.7 277568 17900 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody    35099  0.2  0.7 277744 17976 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    35100  0.1  0.7 277680 18156 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    35815  0.1  0.7 277888 18164 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    36035  0.1  0.7 277744 17784 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    36060  0.1  0.7 277616 18100 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    36781  0.2  0.7 277744 17008 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    36796  0.2  0.7 277744 16972 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
cloudw    37557  0.0  0.6 353712 15980 ?        S    03:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    36797  0.1  0.7 277876 17724 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.3 10.2 1468028 247364 ?      Sl   Nov16   3:44 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.3 182316  7940 ?        Ss   00:00   0:14 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 16467  Threads: 3  Questions: 1304484  Slow queries: 0  Opens: 7900  Flush tables: 1  Open tables: 2000  Queries per second avg: 79.218
*************************** 1. row ***************************
     Id: 18610
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 18614
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 18616
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 101.33.81.73 TIME_WAIT
      1 148.113.130.240 TIME_WAIT
      1 154.120.113.62 TIME_WAIT
      1 161.97.170.156 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 185.211.22.251 TIME_WAIT
      1 185.55.249.123 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.156.146.119 TIME_WAIT
      1 43.159.152.4 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.0.52 TIME_WAIT
      1 54.39.136.69 TIME_WAIT
      1 54.39.203.8 TIME_WAIT
      1 74.7.227.98 TIME_WAIT
      1 74.7.228.139 TIME_WAIT
      1 74.7.229.0 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 103.133.214.209 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 147.182.235.78 TIME_WAIT
      2 43.164.196.57 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 03:54:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 35 minutes 11 seconds
   Server load: 0.98 0.78 0.78
   Total accesses: 96552 - Total Traffic: 2.4 GB - Total Duration: 49260020
   CPU Usage: u9.84 s6.43 cu1317.94 cs1088.03 - 14.7% CPU load
   5.85 requests/sec - 152.9 kB/second - 26.1 kB/request - 510.192 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

K_KK.WWKK__K_K_...__._.R.KK.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  28078 1/168/4321  K 3.72  0     264 2245094 33.6  4.46  109.52 192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=2969837742 HTTP/1.1
   1-0  25806 0/215/3812  _ 5.61  1     24  2000911 0.0   7.77  110.38 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /q=75/201363/2025_05_04_14_29_56.jpg HTTP/1.1
   2-0  25641 5/223/4187  K 6.23  3     409 2029392 157.4 5.75  102.70 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=1713547627 HTTP/1.1
   3-0  36781 9/24/4058   K 0.69  0     263 2015596 277.0 0.73  101.06 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=3759123578 HTTP/1.1
   4-0  -     0/0/4073    . 0.00  0     0   1935927 0.0   0.00  102.42 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  23411 0/215/3748  W 5.55  0     0   1896753 0.0   7.39  98.75  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  36796 10/22/3988  W 0.62  0     0   1960426 312.5 0.67  99.73  192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=1548020214 HTTP/1.1
   7-0  35099 9/67/3787   K 1.79  0     49  1943156 12.2  1.42  97.40  66.249.70.7   http/1.1 test.cloudware.ng:443      GET /187785450?goodscode=0187540098 HTTP/1.1
   8-0  34451 2/41/3857   K 1.00  3     270 1853331 65.9  2.07  93.33  192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=1908006405 HTTP/1.1
   9-0  35100 0/38/3783   _ 0.83  1     294 1908218 0.0   1.20  97.49  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=478907773 HTTP/1.1
   10-0 29072 0/169/3857  _ 4.17  1     1   1963507 0.0   3.99  100.48 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   11-0 33338 2/73/3499   K 1.89  2     261 1806247 66.1  1.99  88.90  192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=948835778 HTTP/1.1
   12-0 36797 0/16/3560   _ 0.35  0     28  1828230 0.0   0.43  91.92  34.194.165.45 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/2019elections/2019el
   13-0 17108 8/371/3744  K 10.16 2     412 1907438 247.4 7.82  93.18  192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=1723893741 HTTP/1.1
   14-0 29075 0/154/3370  _ 3.87  1     1   1714371 0.0   5.40  86.75  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   15-0 -     0/0/3304    . 0.00  97    0   1714935 0.0   0.00  86.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/3529    . 0.00  44    0   1780287 0.0   0.00  90.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/3316    . 0.00  95    0   1701350 0.0   0.00  88.87  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 29709 0/111/3086  _ 3.05  1     350 1593477 0.0   3.20  81.15  192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=1430023333 HTTP/1.1
   19-0 35815 0/35/2774   _ 0.77  0     0   1431810 0.0   0.82  74.28  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-0 -     0/0/2883    . 0.00  12    0   1481404 0.0   0.00  72.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 36035 0/22/2580   _ 0.52  1     343 1389194 0.0   0.61  71.02  192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=3354801396 HTTP/1.1
   22-0 -     0/0/1961    . 0.00  13    0   1221679 0.0   0.00  47.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 29723 0/171/2113  R 3.62  3     0   1022073 0.0   3.62  53.21  43.166.226.57 http/1.1 health.oyostate.gov.ng:443
   24-0 -     0/0/2110    . 0.00  96    0   1078620 0.0   0.00  52.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 36060 2/21/1397   K 0.45  1     261 686585  64.8  0.82  35.31  192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=3519172707 HTTP/1.1
   26-0 20659 10/311/1290 K 9.60  2     281 604628  306.4 8.83  28.43  192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=3054812199 HTTP/1.1
   27-0 -     0/0/937     . 0.00  486   0   740999  0.0   0.00  24.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1175    . 0.00  395   0   595416  0.0   0.00  28.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/576     . 0.00  487   0   272126  0.0   0.00  13.52  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1150    . 0.00  472   0   560685  0.0   0.00  26.86  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/717     . 0.00  485   0   325970  0.0   0.00  15.89  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/237     . 0.00  400   0   98062   0.0   0.00  4.68   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/176     . 0.00  457   0   86694   0.0   0.00  5.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/355     . 0.00  434   0   184428  0.0   0.00  9.27   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/586     . 0.00  651   0   324653  0.0   0.00  16.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/239     . 0.00  471   0   125237  0.0   0.00  6.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/370     . 0.00  664   0   194052  0.0   0.00  9.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/160     . 0.00  599   0   86409   0.0   0.00  4.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/427     . 0.00  654   0   221231  0.0   0.00  11.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/128     . 0.00  529   0   35694   0.0   0.00  2.32   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/34      . 0.00  530   0   15628   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/43      . 0.00  12472 0   22487   0.0   0.00  0.98   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00  12616 0   52913   0.0   0.00  2.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00  10257 0   366544  0.0   0.00  17.77  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00  12621 0   19040   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00  12594 0   5124    0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00  12555 0   7973    0.0   0.00  0.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00  12305 0   40607   0.0   0.00  1.94   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00  12609 0   18588   0.0   0.00  0.72   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00  12604 0   3381    0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00  12578 0   3457    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00  15313 0   1702    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00  15289 0   2649    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00  15312 0   1806    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00  15234 0   13156   0.0   0.00  0.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00  14479 0   98784   0.0   0.00  5.53   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00  15173 0   19861   0.0   0.00  0.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1471
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...17)
   index usage: 25%, cache usage: 35%
   total entries stored since starting: 72111
   total entries replaced since starting: 0
   total entries expired since starting: 70627
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 312 miss
   total removes since starting: 13 hit, 11 miss
Youez - 2016 - github.com/yon3zu
LinuXploit