403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.11.21.txt
 ## swap threshold exceeded
## server overview
2025-11-17.11.21 load[0] mem[64/64] mysql[2/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1447         188          39         728         708
Swap:          1999        1359         640
 11:21:01 up  6:00,  0 users,  load average: 0.39, 0.52, 0.65
## system overview
top - 11:21:02 up  6:00,  0 users,  load average: 0.39, 0.52, 0.65
Tasks: 206 total,   5 running, 199 sleeping,   0 stopped,   2 zombie
%Cpu(s): 54.5 us, 18.2 sy,  0.0 ni, 24.2 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   185700 free,  1488512 used,   746088 buff/cache
KiB Swap:  2047996 total,   655840 free,  1392156 used.   718916 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 276064   3488 S  86.7 11.4   5:03.86 /usr/sbin+
 18283 nigeria   20   0  404052  16140  10384 S  20.0  0.7   0:00.05 /opt/cpan+
   918 named     20   0 1185864  36236   1872 S   6.7  1.5   0:14.82 /usr/sbin+
 18305 cloudsms  20   0  404052  15608  10164 S   6.7  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44400   3396   1504 S   0.0  0.1   0:29.13 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.90 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.39 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:51.25 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.86 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.87 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.42 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   5936   5696 S   0.0  0.2   0:12.52 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    440    308 S   0.0  0.0   0:01.95 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    812    444 S   0.0  0.0   0:03.05 /usr/lib/+
   476 root      20   0   24716   1160    796 S   0.0  0.0   0:05.13 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.48 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    232    132 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1328    600 S   0.0  0.1   0:11.75 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1332    652 S   0.0  0.1   0:21.26 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5028   1192 S   0.0  0.2   0:00.37 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.63 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3700    784 S   0.0  0.2   0:00.39 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.75 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.80 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  281936   5888   5172 S   0.0  0.2   0:06.31 /usr/sbin+
   919 root      20   0 1828136 437980    380 S   0.0 18.1   0:35.56 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    456    292 S   0.0  0.0   0:00.26 /usr/sbin+
   926 root      20   0  572372    780    316 S   0.0  0.0   0:01.94 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.85 sw-engine+
   937 root      20   0  439788    344    252 S   0.0  0.0   0:00.85 php-fpm: +
   938 systuser  20   0  114016  13988   2696 S   0.0  0.6   0:05.34 /usr/loca+
   939 root      20   0  261296   6556   1712 S   0.0  0.3   0:05.05 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.30 /usr/bin/+
   944 root      20   0 1276356   6548      4 S   0.0  0.3   0:24.93 /usr/bin/+
   947 cpanelc+  20   0   10400   3372   2292 S   0.0  0.1   0:18.40 /usr/loca+
   952 root      20   0  396248    332    248 S   0.0  0.0   0:00.75 php-fpm: +
   957 root      20   0  388892    384    284 S   0.0  0.0   0:00.77 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  35048   5808 S   0.0  1.4   0:12.35 /usr/loca+
   964 root      20   0  153404    356    252 S   0.0  0.0   0:00.45 pure-ftpd+
   967 root      20   0  400740    776    604 S   0.0  0.0   0:03.68 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.48 /usr/bin/+
   974 root      20   0  389508    312    224 S   0.0  0.0   0:00.72 php-fpm: +
  1080 dovenull  20   0   47332   3272   2164 S   0.0  0.1   0:00.37 dovecot/p+
  1081 dovenull  20   0   48020   3676   2252 S   0.0  0.2   0:00.20 dovecot/i+
  1082 dovecot   20   0   10320    388    280 S   0.0  0.0   0:00.04 dovecot/a+
  1083 root      20   0   10452    464    268 S   0.0  0.0   0:00.25 dovecot/l+
  1084 dovenull  20   0   47124   3320   2328 S   0.0  0.1   0:00.43 dovecot/p+
  1085 dovenull  20   0   47764   3644   2276 S   0.0  0.2   0:00.19 dovecot/i+
  1091 root      20   0   24528   2160    492 S   0.0  0.1   0:00.14 dovecot/c+
  1095 dovecot   20   0   13568    416    232 S   0.0  0.0   0:00.04 dovecot/s+
  1160 dovecot   20   0   41160   1444   1008 S   0.0  0.1   0:00.44 dovecot/a+
  1168 systuser  20   0  157704   2848    880 S   0.0  0.1   0:00.12 SonarPush+
  1176 wp-tool+  20   0  387556   3176   1256 S   0.0  0.1   0:00.27 /usr/bin/+
  1177 wp-tool+  20   0  412368   9720   1260 S   0.0  0.4   0:07.14 /usr/bin/+
  1211 root      20   0  209332  20724   3308 S   0.0  0.9   0:02.78 tailwatchd
  1213 root      20   0  183900   6688   3460 S   0.0  0.3   0:01.23 cpdavd - +
  1216 root      20   0  167452   1212    652 S   0.0  0.1   0:00.46 dnsadmin +
  1627 root      20   0  299272    460    296 S   0.0  0.0   0:00.60 php-fpm: +
  1673 root      38  18  130416   1360    692 S   0.0  0.1   0:00.05 cpanellog+
  1928 root      20   0  266984   4960    472 S   0.0  0.2   0:02.74 /usr/sbin+
  1932 root      20   0   12828    324    212 S   0.0  0.0   0:02.87 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.49 /usr/loca+
  1934 root      20   0   12868    332    216 S   0.0  0.0   0:02.70 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5994 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  6588 nobody    20   0  277744  19532   4788 S   0.0  0.8   0:01.31 /usr/sbin+
  7047 nobody    20   0  277556  19064   4708 S   0.0  0.8   0:00.85 /usr/sbin+
  9455 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9723 nobody    20   0  277680  19092   4628 S   0.0  0.8   0:00.93 /usr/sbin+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 11920 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12588 nobody    20   0  277888  18824   4332 S   0.0  0.8   0:00.34 /usr/sbin+
 12592 nobody    20   0  277568  18556   4356 S   0.0  0.8   0:00.75 /usr/sbin+
 12593 nobody    20   0  277888  18880   4412 S   0.0  0.8   0:00.60 /usr/sbin+
 12596 nobody    20   0  277560  18456   4264 S   0.0  0.8   0:00.55 /usr/sbin+
 12613 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.52 [httpd] <+
 12614 nobody    20   0  277552  18584   4388 S   0.0  0.8   0:00.60 /usr/sbin+
 12615 nobody    20   0  277692  18628   4276 S   0.0  0.8   0:00.48 /usr/sbin+
 13616 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 14275 nobody    20   0  277884  18508   4240 S   0.0  0.8   0:00.48 /usr/sbin+
 14456 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15675 nobody    20   0  277744  18420   4192 S   0.0  0.8   0:00.37 /usr/sbin+
 16994 nobody    20   0  277744  17816   3800 S   0.0  0.7   0:00.05 /usr/sbin+
 17008 nobody    20   0  277876  17960   3868 S   0.0  0.7   0:00.20 /usr/sbin+
 17009 nobody    20   0  277720  17492   3484 S   0.0  0.7   0:00.15 /usr/sbin+
 17075 nobody    20   0  277744  17836   3812 S   0.0  0.7   0:00.14 /usr/sbin+
 17088 nobody    20   0  277744  17528   3600 S   0.0  0.7   0:00.14 /usr/sbin+
 17346 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17494 nobody    20   0  277744  17460   3640 S   0.0  0.7   0:00.07 /usr/sbin+
 17512 nobody    20   0  277744  16996   3280 S   0.0  0.7   0:00.11 /usr/sbin+
 17535 nobody    20   0  277748  17112   3376 S   0.0  0.7   0:00.01 /usr/sbin+
 17536 nobody    20   0  277744  17264   3460 S   0.0  0.7   0:00.15 /usr/sbin+
 17537 nobody    20   0  277744  17312   3480 S   0.0  0.7   0:00.07 /usr/sbin+
 17723 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 17898 root      20   0   84400   6392   3580 S   0.0  0.3   0:00.01 /usr/sbin+
 17915 root      20   0   88344  10368   3584 S   0.0  0.4   0:00.01 /usr/sbin+
 17917 mailnull  20   0   88556   7996   1192 S   0.0  0.3   0:00.00 /usr/sbin+
 18049 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 18059 nigeria   20   0  401500   9520   4084 S   0.0  0.4   0:00.40 php-fpm: +
 18157 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 18214 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 18215 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 18223 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18225 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18226 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18227 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18228 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18229 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18230 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18232 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18233 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 18235 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18238 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 18239 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 18240 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 18247 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 18248 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 18250 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18251 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 18252 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18254 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 18255 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18256 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 18259 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 18276 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 18279 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 18281 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 18300 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 18303 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 18304 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 18307 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 18308 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 18309 nobody    20   0  277720  14032      0 R   0.0  0.6   0:00.00 /usr/sbin+
 18310 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.40 [kworker]
 40218 root      20   0  183312  10692   1100 S   0.0  0.4   0:19.50 lfd - sle+
 71800 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 81155 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92278 root      20   0  248096 120648   3984 S   0.0  5.0   0:02.96 /usr/loca+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 98008 root      20   0       0      0      0 R   0.0  0.0   0:00.10 [kworker/+
 98393 root      20   0  259580 126072   2764 S   0.0  5.2   0:01.49 spamd chi+
 98394 root      20   0  248096 118052   1424 S   0.0  4.9   0:00.00 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    05:20   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:51  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      37613  0.0  0.0      0     0 ?        S    09:55   0:00  \_ [kworker/1:1]
root      71800  0.0  0.0      0     0 ?        S    10:30   0:00  \_ [kworker/0:3]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root      81155  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:4]
root      98008  0.0  0.0      0     0 ?        S    10:55   0:00  \_ [kworker/1:3]
root       4438  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/u200:1]
root       5994  0.0  0.0      0     0 ?        S    11:06   0:00  \_ [kworker/1:4]
root       9455  0.0  0.0      0     0 ?        S    11:10   0:00  \_ [kworker/0:0]
root      11920  0.0  0.0      0     0 ?        S    11:13   0:00  \_ [kworker/1:2]
root      13616  0.0  0.0      0     0 ?        S    11:15   0:00  \_ [kworker/0:1]
root      14456  0.0  0.0      0     0 ?        S    11:16   0:00  \_ [kworker/0:2]
root      17346  0.0  0.0      0     0 ?        S    11:20   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44400  3396 ?        Ss   05:20   0:29 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39500  5936 ?        Ss   05:20   0:12 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   440 ?        S<sl 05:20   0:01 /sbin/auditd
root        470  0.0  0.0 152780    80 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   812 ?        Ssl  05:20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1160 ?        Ss   05:20   0:05 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   232 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1328 ?        Ss   05:20   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1332 ?        Ssl  05:20   0:21 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5028 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    07:01   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   07:01   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    07:01   0:00  |       \_ sleep 4h 32m
root      18223  0.0  0.0 183048  2144 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18238  0.0  0.0 113284  1212 ?        Ss   11:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      18239  0.0  0.0 108052   360 ?        S    11:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      18240  0.0  0.0 113288  1516 ?        S    11:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      18311  0.0  0.0 153840  2096 ?        R    11:21   0:00  |               \_ ps auxf
root      18225  0.0  0.0 183048  2148 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18256  0.0  0.0  20164   988 ?        Ss   11:21   0:00  |   \_ jailshell (cloudsms) [18307] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  18307  0.0  0.0  20164   256 ?        S    11:21   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  18308  0.0  0.0 113284  1212 ?        S    11:21   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  18310  0.0  0.3 310036  7468 ?        R    11:21   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root      18226  0.0  0.0 183048  2148 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18248  0.0  0.0  20164   804 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      18227  0.0  0.0 183048  2148 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18247  0.0  0.0  20164   988 ?        Ss   11:21   0:00  |   \_ jailshell (cloudsms) [18303] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  18303  0.0  0.0  20164   260 ?        S    11:21   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  18304  0.0  0.0 113284  1212 ?        S    11:21   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  18305  0.0  0.6 404052 15608 ?        S    11:21   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      18228  0.0  0.0 183048  2148 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18255  0.0  0.0  20164   808 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      18229  0.0  0.0 183048  2148 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18251  0.0  0.0  20164   804 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      18230  0.0  0.0 183048  2148 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18250  0.0  0.0  20164   808 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      18232  0.0  0.0 183048  2148 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18252  0.0  0.0  20164   808 ?        Ss   11:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      18233  0.0  0.0 183048  2152 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18254  0.0  0.0  20164   968 ?        Ss   11:21   0:00  |   \_ jailshell (pactpay) [18276] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18276  0.0  0.0  20164   264 ?        S    11:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18279  1.0  0.7 480124 17692 ?        S    11:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      18235  0.0  0.0 183048  2144 ?        S    11:21   0:00  \_ /usr/sbin/CROND -n
root      18259  0.0  0.0  20164   964 ?        Ss   11:21   0:00      \_ jailshell (nigeria) [18281] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   18281  0.0  0.0  20164   256 ?        S    11:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   18283  5.0  0.6 404052 16140 ?        S    11:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3700 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      17898  0.0  0.2  84400  6392 ?        S    11:20   0:00  \_ /usr/sbin/exim -q
root      17915  0.0  0.4  88344 10368 ?        S    11:20   0:00      \_ /usr/sbin/exim -q
mailnull  17917  0.0  0.3  88556  7996 ?        S    11:20   0:00          \_ /usr/sbin/exim -q
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:02 /usr/sbin/sshd -D
root      18214  0.0  0.2 157100  5080 ?        Ss   11:21   0:00  \_ sshd: unknown [priv]
sshd      18215  0.0  0.1 115644  2632 ?        S    11:21   0:00      \_ sshd: unknown [net]
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 281936  5888 ?        Ssl  05:20   0:06 /usr/sbin/rsyslogd -n
named       918  0.0  1.4 1185864 36236 ?       Ssl  05:20   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 18.0 1828136 437980 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   456 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47332  3272 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48020  3676 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   464 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47124  3320 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47764  3644 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2160 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   416 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1444 ?        S    05:20   0:00  \_ dovecot/auth
root      17723  0.0  0.1  60820  4508 ?        S    11:20   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   780 ?        Ssl  05:20   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   05:20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  18049  0.0  0.0 445028   312 ?        S    11:20   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   344 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13988 ?        Ssl  05:20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6556 ?        Ss   05:20   0:05 cpsrvd (SSL) - waiting for connections                   
root      18157  0.0  0.0      0     0 ?        Z    11:20   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.0  0.1 1277312 3688 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6548 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3372 ?        Ss   05:20   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   332 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   384 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35048 ?       SLsl 05:20   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   356 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   776 ?        Ss   05:20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   18059  2.3  0.3 401500  9520 ?        S    11:20   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   312 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.1 157704  2848 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3176 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.4 412368  9720 ?        Ss   05:20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.8 209332 20724 ?        Ss   05:20   0:02 tailwatchd
root       1213  0.0  0.2 183900  6688 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.0 167452  1212 ?        Ss   05:20   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   460 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1360 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4960 ?        Ss   05:20   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12828   324 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12868   332 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     6588  0.1  0.8 277744 19532 ?        S    11:06   0:01  \_ /usr/sbin/httpd -k start
nobody     7047  0.1  0.7 277556 19064 ?        S    11:07   0:00  \_ /usr/sbin/httpd -k start
nobody    18312  0.0  0.5 277556 14356 ?        R    11:21   0:00  |   \_ /usr/sbin/httpd -k start
nobody     9723  0.1  0.7 277680 19092 ?        S    11:10   0:00  \_ /usr/sbin/httpd -k start
nobody    12588  0.0  0.7 277888 18824 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12592  0.1  0.7 277568 18556 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12593  0.1  0.7 277888 18880 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12596  0.1  0.7 277560 18456 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12613  0.1  0.0      0     0 ?        Z    11:13   0:00  \_ [httpd] <defunct>
nobody    12614  0.1  0.7 277552 18584 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12615  0.1  0.7 277692 18628 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    14275  0.1  0.7 277884 18508 ?        S    11:15   0:00  \_ /usr/sbin/httpd -k start
nobody    15675  0.1  0.7 277744 18420 ?        S    11:17   0:00  \_ /usr/sbin/httpd -k start
nobody    16994  0.0  0.7 277744 17816 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    17008  0.2  0.7 277876 17960 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    17009  0.1  0.7 277720 17492 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    18309  0.0  0.7 277720 17336 ?        R    11:21   0:00  |   \_ /usr/sbin/httpd -k start
nobody    17075  0.1  0.7 277744 17836 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    17088  0.1  0.7 277744 17528 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    17494  0.1  0.7 277744 17460 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    17512  0.1  0.7 277744 16996 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    17535  0.0  0.7 277748 17112 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    17536  0.2  0.7 277744 17264 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    17537  0.1  0.7 277744 17312 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 11.4 1468028 276064 ?      Sl   05:21   5:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183312 10692 ?        Ss   06:01   0:19 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.1  4.9 248096 120648 ?       Ss   10:49   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.0  5.2 259580 126072 ?       S    10:55   0:01  \_ spamd child
root      98394  0.0  4.8 248096 118052 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 43288  Threads: 6  Questions: 1742344  Slow queries: 0  Opens: 9822  Flush tables: 1  Open tables: 2000  Queries per second avg: 40.250
*************************** 1. row ***************************
     Id: 24704
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-17' LIMIT 1
*************************** 2. row ***************************
     Id: 24705
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 24709
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 24710
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 24713
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.164.173.186 TIME_WAIT
      1 104.252.191.134 TIME_WAIT
      1 104.252.191.164 TIME_WAIT
      1 114.119.128.143 TIME_WAIT
      1 114.119.140.113 TIME_WAIT
      1 122.117.102.125 TIME_WAIT
      1 14.220.186.249 TIME_WAIT
      1 142.44.233.144 TIME_WAIT
      1 148.113.130.111 TIME_WAIT
      1 15.235.96.28 TIME_WAIT
      1 167.114.139.29 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.215.214.21 TIME_WAIT
      1 213.201.140.176 TIME_WAIT
      1 34.221.197.72 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 46.182.4.125 TIME_WAIT
      1 51.161.37.1 TIME_WAIT
      1 74.7.229.53 TIME_WAIT
      1 74.7.230.47 TIME_WAIT
      1 89.251.186.203 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 162.213.251.225 TIME_WAIT
      2 43.173.173.173 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 11:21:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 2 minutes 12 seconds
   Server load: 0.68 0.58 0.67
   Total accesses: 129491 - Total Traffic: 3.2 GB - Total Duration: 109503723
   CPU Usage: u6.63 s4.97 cu1766.78 cs1458.08 - 7.47% CPU load
   2.99 requests/sec - 77.5 kB/second - 25.9 kB/request - 845.647 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

__._KKK...KKW_RWKR......_..W.RK.._.............CK_..............
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  17494 0/13/5597  _ 0.29 1     3   2927806  0.0   0.32  140.76 114.119.128.143 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Kogi&=Odo%20ara%20omi%20og
   1-0  9723  0/155/5101 _ 4.00 0     0   2706835  0.0   4.64  146.71 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  -     0/0/5473   . 0.00 40    4   2649502  0.0   0.00  133.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  6588  0/221/5372 _ 5.61 1     24  2678524  0.0   5.73  135.24 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   4-0  14275 1/83/5223  K 2.09 0     412 2533901  36.4  2.07  134.62 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1111568185 HTTP/1.1
   5-0  15675 2/60/5045  K 1.87 1     405 2520118  64.0  1.72  128.05 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=2373061602 HTTP/1.1
   6-0  17512 4/18/5273  K 0.50 0     385 2666962  125.8 0.56  137.64 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=4108692323 HTTP/1.1
   7-0  -     0/0/4968   . 0.00 28    0   2546710  0.0   0.00  126.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  -     0/0/5055   . 0.00 47    2   2435385  0.0   0.00  121.49 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  -     0/0/5063   . 0.00 46    0   2526500  0.0   0.00  127.21 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 16994 1/9/4822   K 0.14 0     273 2436187  34.8  0.19  124.30 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=3993682020 HTTP/1.1
   11-0 17008 4/34/4583  K 0.79 2     272 2347069  127.7 0.86  114.38 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=3150183419 HTTP/1.1
   12-0 17009 0/27/4679  W 0.61 0     0   2391181  0.0   0.70  118.88 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1380968546 HTTP/1.1
   13-0 17075 0/24/4761  _ 0.56 1     24  2455494  0.0   0.61  120.45 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue5.php HTTP/1.1
   14-0 17535 0/3/4699   R 0.05 41    1   45812247 0.0   0.05  117.08 209.29.96.48    http/1.1
   15-0 17088 0/22/4239  W 0.59 0     0   2178631  0.0   0.62  109.25 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 17536 8/23/4868  K 0.63 1     398 2415285  252.3 0.68  120.81 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=466341385 HTTP/1.1
   17-0 17537 0/12/4441  R 0.28 7     1   2305293  0.0   0.30  115.12 193.181.210.95  http/1.1
   18-0 -     0/0/4024   . 0.00 39    0   2059206  0.0   0.00  103.77 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/3582   . 0.00 398   0   1858569  0.0   0.00  94.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/3854   . 0.00 296   0   1952325  0.0   0.00  93.96  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/3423   . 0.00 391   0   1832170  0.0   0.00  91.98  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/2977   . 0.00 359   0   1700060  0.0   0.00  70.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/3253   . 0.00 410   0   1559135  0.0   0.00  81.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 12588 0/62/2940  _ 1.32 1     22  1484710  0.0   1.56  74.89  116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   25-0 -     0/0/2361   . 0.00 68    0   1380082  0.0   0.00  61.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/2252   . 0.00 404   0   1084009  0.0   0.00  51.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 7047  2/146/1795 W 3.54 0     0   1155072  64.5  4.66  42.21  192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=1397469551 HTTP/1.1
   28-0 -     0/0/1596   . 0.00 421   0   817272   0.0   0.00  40.09  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 12592 0/125/878  R 3.34 3     4   447984   0.0   3.50  22.12  193.181.210.95  http/1.1 cloudware.ng:443
   30-0 12593 1/101/1488 K 2.54 1     422 741645   35.1  2.83  35.39  192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=2921382464 HTTP/1.1
   31-0 -     0/0/822    . 0.00 418   0   381269   0.0   0.00  18.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/344    . 0.00 405   0   134386   0.0   0.00  6.53   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 12596 0/95/373   _ 2.44 1     262 184868   0.0   2.46  9.84   192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3754538849 HTTP/1.1
   34-0 -     0/0/406    . 0.00 407   0   201299   0.0   0.00  10.09  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/685    . 0.00 409   0   377031   0.0   0.00  18.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/334    . 0.00 27    0   169756   0.0   0.00  8.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/385    . 0.00 374   0   202177   0.0   0.00  9.42   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/163    . 0.00 403   0   87123    0.0   0.00  4.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/429    . 0.00 416   0   221240   0.0   0.00  11.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/136    . 0.00 372   0   38118    0.0   0.00  2.47   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/37     . 0.00 401   0   16374    0.0   0.00  1.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/45     . 0.00 415   0   22497    0.0   0.00  0.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/116    . 0.00 413   0   52920    0.0   0.00  2.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/663    . 0.00 414   0   366552   0.0   0.00  17.79  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/73     . 0.00 299   0   37743    0.0   0.00  1.71   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/15     . 0.00 396   0   5152     0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 12613 1/102/122  C 2.34 0     0   56888    0.2   2.64  3.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 12614 1/106/189  K 2.66 0     3   96900    5.2   3.49  5.43   192.178.4.99    http/1.1 team.cloudware.ng:443      GET /vendor/symfony/form/Resources/translations/validators.ar.x
   49-0 12615 0/83/120   _ 2.13 0     24  70148    0.0   2.51  3.23   128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   50-0 -     0/0/9      . 0.00 412   0   3385     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/11     . 0.00 411   0   3549     0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/3      . 0.00 419   0   1703     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/64     . 0.00 185   0   33143    0.0   0.00  1.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 42132 0   1806     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 42054 0   13156    0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 41300 0   98784    0.0   0.00  5.53   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 41994 0   19861    0.0   0.00  0.82   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1198
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...18)
   index usage: 21%, cache usage: 28%
   total entries stored since starting: 96474
   total entries replaced since starting: 0
   total entries expired since starting: 95257
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 352 miss
   total removes since starting: 20 hit, 25 miss
Youez - 2016 - github.com/yon3zu
LinuXploit