403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.11.24.txt
 ## swap threshold exceeded
## server overview
2025-11-17.11.24 load[0] mem[59/71] mysql[2/25] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1356         461          37         545         807
Swap:          1999        1489         510
 11:24:01 up  6:03,  0 users,  load average: 0.46, 0.54, 0.64
## system overview
top - 11:24:01 up  6:03,  0 users,  load average: 0.46, 0.54, 0.64
Tasks: 208 total,   7 running, 199 sleeping,   0 stopped,   2 zombie
%Cpu(s): 86.5 us, 13.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   414772 free,  1427736 used,   577792 buff/cache
KiB Swap:  2047996 total,   522988 free,  1525008 used.   788344 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 273976   2192 S 100.0 11.3   5:06.75 /usr/sbin+
 20603 cloudw    20   0  462488  67576   3880 R  50.0  2.8   0:00.27 php-fpm: +
 20608 nigeria   20   0  404052  16144  10384 S  11.1  0.7   0:00.04 /opt/cpan+
   475 polkitd   20   0  612240    836    460 S   5.6  0.0   0:03.08 /usr/lib/+
 20631 cloudw    20   0  353712  15972  10492 S   5.6  0.7   0:00.01 /opt/cpan+
 20632 root      20   0  160220   2060   1584 R   5.6  0.1   0:00.01 top -bcn1
 20637 cloudw    20   0  288176  15948  10472 R   5.6  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44400   3296   1404 R   0.0  0.1   0:29.32 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.51 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.25 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:24.11 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.23 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.43 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:52.50 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.90 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.90 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.43 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   6216   5976 S   0.0  0.3   0:12.60 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    180     52 R   0.0  0.0   0:01.97 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   476 root      20   0   24716   1156    792 S   0.0  0.0   0:05.17 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.48 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    100      0 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1328    600 S   0.0  0.1   0:11.84 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1228    548 S   0.0  0.1   0:21.40 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   4644    808 S   0.0  0.2   0:00.38 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.64 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3124    208 S   0.0  0.1   0:00.39 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.76 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.81 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  281936   6068   5416 S   0.0  0.3   0:06.36 /usr/sbin+
   918 named     20   0 1185864  35220   1480 S   0.0  1.5   0:14.98 /usr/sbin+
   919 root      20   0 1828136 313356      0 S   0.0 12.9   0:35.56 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    444    280 S   0.0  0.0   0:00.26 /usr/sbin+
   926 root      20   0  572372    764    300 S   0.0  0.0   0:01.96 /usr/bin/+
   928 root      20   0  445028    432    324 S   0.0  0.0   0:00.86 sw-engine+
   937 root      20   0  439788    172     80 S   0.0  0.0   0:00.86 php-fpm: +
   938 systuser  20   0  114016  13456   2228 S   0.0  0.6   0:05.38 /usr/loca+
   939 root      20   0  261296   5676    932 S   0.0  0.2   0:05.07 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.30 /usr/bin/+
   944 root      20   0 1276356   6524      4 S   0.0  0.3   0:24.93 /usr/bin/+
   947 cpanelc+  20   0   10400   3096   2164 S   0.0  0.1   0:18.56 /usr/loca+
   952 root      20   0  396248    272    188 S   0.0  0.0   0:00.77 php-fpm: +
   957 root      20   0  388892    432    336 S   0.0  0.0   0:00.78 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  29044     68 S   0.0  1.2   0:12.44 /usr/loca+
   964 root      20   0  153404    292    188 S   0.0  0.0   0:00.46 pure-ftpd+
   967 root      20   0  400740    716    544 S   0.0  0.0   0:03.71 php-fpm: +
   968 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.48 /usr/bin/+
   974 root      20   0  389508    268    180 S   0.0  0.0   0:00.73 php-fpm: +
  1080 dovenull  20   0   47332   1848    760 S   0.0  0.1   0:00.37 dovecot/p+
  1081 dovenull  20   0   48020   1532    188 S   0.0  0.1   0:00.20 dovecot/i+
  1082 dovecot   20   0   10320    208    100 S   0.0  0.0   0:00.04 dovecot/a+
  1083 root      20   0   10452    452    256 S   0.0  0.0   0:00.25 dovecot/l+
  1084 dovenull  20   0   47124   1636    644 S   0.0  0.1   0:00.44 dovecot/p+
  1085 dovenull  20   0   47764   1592    244 S   0.0  0.1   0:00.19 dovecot/i+
  1091 root      20   0   24528   1724    168 S   0.0  0.1   0:00.14 dovecot/c+
  1095 dovecot   20   0   13568    184      0 S   0.0  0.0   0:00.04 dovecot/s+
  1160 dovecot   20   0   41160    700    264 S   0.0  0.0   0:00.44 dovecot/a+
  1168 systuser  20   0  157704   2020     52 S   0.0  0.1   0:00.12 SonarPush+
  1176 wp-tool+  20   0  387556   3148   1232 S   0.0  0.1   0:00.27 /usr/bin/+
  1177 wp-tool+  20   0  412368   9640   1244 S   0.0  0.4   0:07.20 /usr/bin/+
  1211 root      20   0  209332  18848   1456 S   0.0  0.8   0:02.80 tailwatchd
  1213 root      20   0  183900   3596    368 S   0.0  0.1   0:01.23 cpdavd - +
  1216 root      20   0  167452    968    416 S   0.0  0.0   0:00.47 dnsadmin +
  1627 root      20   0  299272    292    128 S   0.0  0.0   0:00.60 php-fpm: +
  1673 root      38  18  130416    828    160 S   0.0  0.0   0:00.05 cpanellog+
  1928 root      20   0  266984   4892    404 S   0.0  0.2   0:02.82 /usr/sbin+
  1932 root      20   0   12844    380    152 S   0.0  0.0   0:02.89 /usr/loca+
  1933 root      20   0   12732    100     20 S   0.0  0.0   0:02.51 /usr/loca+
  1934 root      20   0   12892    392    112 S   0.0  0.0   0:02.73 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5994 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  9455 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10515 root      30  10  132964     44      0 S   0.0  0.0   0:00.00 ConfigSer+
 10528 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 161+
 11920 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12588 nobody    20   0  277888  18672   4020 S   0.0  0.8   0:00.60 /usr/sbin+
 12592 nobody    20   0  277568  17912   3596 S   0.0  0.7   0:01.10 /usr/sbin+
 13616 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 14456 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17075 nobody    20   0  277680  17344   3204 S   0.0  0.7   0:00.44 /usr/sbin+
 17346 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17898 root      20   0   84400   3268    456 S   0.0  0.1   0:00.02 /usr/sbin+
 18490 nobody    20   0  277612  17480   3392 S   0.0  0.7   0:00.25 /usr/sbin+
 19117 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19212 nobody    20   0  277880  17412   3340 S   0.0  0.7   0:00.11 /usr/sbin+
 19542 root      20   0   88344   7176    392 S   0.0  0.3   0:00.01 /usr/sbin+
 19546 mailnull  20   0   88556   7024    184 S   0.0  0.3   0:00.00 /usr/sbin+
 19658 nobody    20   0  277860  16964   3040 S   0.0  0.7   0:00.09 /usr/sbin+
 19659 nobody    20   0  277472  16748   3080 S   0.0  0.7   0:00.05 /usr/sbin+
 19661 nobody    20   0  277444  17512   3640 S   0.0  0.7   0:00.03 /usr/sbin+
 19666 nobody    20   0  277752  17148   3176 S   0.0  0.7   0:00.04 /usr/sbin+
 19667 nobody    20   0  277880  17304   3412 S   0.0  0.7   0:00.07 /usr/sbin+
 19674 nobody    20   0  277752  17512   3488 S   0.0  0.7   0:00.08 /usr/sbin+
 19679 nobody    20   0  277748  16992   3168 S   0.0  0.7   0:00.02 /usr/sbin+
 19696 nobody    20   0  277744  17476   3532 S   0.0  0.7   0:00.07 /usr/sbin+
 19697 nobody    20   0  277744  16532   2808 S   0.0  0.7   0:00.03 /usr/sbin+
 19703 nobody    20   0  277744  17188   3256 S   0.0  0.7   0:00.07 /usr/sbin+
 19706 nobody    20   0  277876  16944   3192 S   0.0  0.7   0:00.11 /usr/sbin+
 19708 nobody    20   0  277744  17516   3540 S   0.0  0.7   0:00.06 /usr/sbin+
 19709 nobody    20   0  277752  17116   3252 S   0.0  0.7   0:00.08 /usr/sbin+
 19713 nobody    20   0  277448  17524   3640 S   0.0  0.7   0:00.03 /usr/sbin+
 19716 nobody    20   0  277824  17424   3556 S   0.0  0.7   0:00.04 /usr/sbin+
 19719 nobody    20   0  277520  17180   3504 S   0.0  0.7   0:00.09 /usr/sbin+
 19970 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 20426 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 20438 nigeria   20   0  413948  20588   3960 S   0.0  0.9   0:00.37 php-fpm: +
 20473 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 20474 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 20545 nobody    20   0  277040  15036   2076 S   0.0  0.6   0:00.00 /usr/sbin+
 20552 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20553 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20554 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20555 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20556 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20557 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20558 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20559 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20560 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20562 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20564 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 20566 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20568 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20569 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20570 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20571 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20572 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20573 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20575 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 20577 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20578 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 20579 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 20581 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20582 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20585 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 20590 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 20596 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 20597 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 20607 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 20638 root      20   0  111304   1020      0 R   0.0  0.0   0:00.00 sshd: [ac+
 20640 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.41 [kworker]
 40218 root      20   0  183312  10484   1072 S   0.0  0.4   0:19.67 lfd - sle+
 71800 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72858 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 81155 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 92278 root      20   0  248096 117412    776 S   0.0  4.9   0:02.99 /usr/loca+
 93318 root      20   0  183052      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 98008 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 98393 root      20   0  259580 124120    724 S   0.0  5.1   0:01.49 spamd chi+
 98394 root      20   0  248096 117076    480 S   0.0  4.8   0:00.00 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    05:20   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:52  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      37613  0.0  0.0      0     0 ?        S    09:55   0:00  \_ [kworker/1:1]
root      71800  0.0  0.0      0     0 ?        S    10:30   0:00  \_ [kworker/0:3]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root      81155  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:4]
root      98008  0.0  0.0      0     0 ?        S    10:55   0:00  \_ [kworker/1:3]
root       4438  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/u200:1]
root       5994  0.0  0.0      0     0 ?        S    11:06   0:00  \_ [kworker/1:4]
root       9455  0.0  0.0      0     0 ?        S    11:10   0:00  \_ [kworker/0:0]
root      11920  0.0  0.0      0     0 ?        S    11:13   0:00  \_ [kworker/1:2]
root      13616  0.0  0.0      0     0 ?        S    11:15   0:00  \_ [kworker/0:1]
root      14456  0.0  0.0      0     0 ?        S    11:16   0:00  \_ [kworker/0:2]
root      17346  0.0  0.0      0     0 ?        S    11:20   0:00  \_ [kworker/1:0]
root      19117  0.0  0.0      0     0 ?        S    11:22   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44400  3296 ?        Ss   05:20   0:29 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39500  6216 ?        Ss   05:20   0:12 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   180 ?        S<sl 05:20   0:01 /sbin/auditd
root        470  0.0  0.0 152780    72 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   836 ?        Ssl  05:20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1156 ?        Ss   05:20   0:05 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   100 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1328 ?        Ss   05:20   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1228 ?        Ssl  05:20   0:21 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  4644 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     0 ?        S    07:01   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   07:01   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    07:01   0:00  |       \_ sleep 4h 32m
root      20552  0.0  0.0 183048  2144 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20575  0.0  0.0 113284  1212 ?        Ss   11:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      20585  0.0  0.0 108052   360 ?        S    11:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      20590  0.0  0.0 113288  1520 ?        S    11:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      20641  0.0  0.0 153840  2096 ?        R    11:24   0:00  |               \_ ps auxf
root      20553  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20568  0.0  0.0  20164   808 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      20554  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20573  0.0  0.0  20164   804 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      20555  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20571  0.0  0.0  20164   988 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      20642  0.0  0.2  38648  6508 ?        R    11:24   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      20556  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20572  0.0  0.0  20164   804 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      20557  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20570  0.0  0.0  20164   808 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      20558  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20582  0.0  0.0  20164   808 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      20559  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20569  0.0  0.0  20164   808 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      20560  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20581  0.0  0.0  20164   804 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      20562  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20577  0.0  0.0  20164   804 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      20564  0.0  0.0 183048  2152 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20579  0.0  0.0  20164   964 ?        Ss   11:24   0:00  |   \_ jailshell (pactpay) [20596] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   20596  0.0  0.0  20164   260 ?        S    11:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   20597  0.0  0.7 480124 17684 ?        S    11:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      20566  0.0  0.0 183048  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      20578  0.0  0.0  20164   968 ?        Ss   11:24   0:00      \_ jailshell (nigeria) [20607] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20607  0.0  0.0  20164   260 ?        S    11:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20608  0.0  0.6 404052 16144 ?        S    11:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3124 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      17898  0.0  0.1  84400  3268 ?        S    11:20   0:00  \_ /usr/sbin/exim -q
root      19542  0.0  0.2  88344  7176 ?        S    11:22   0:00      \_ /usr/sbin/exim -q
mailnull  19546  0.0  0.2  88556  7024 ?        S    11:22   0:00          \_ /usr/sbin/exim -q
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:02 /usr/sbin/sshd -D
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 281936  6068 ?        Ssl  05:20   0:06 /usr/sbin/rsyslogd -n
named       918  0.0  1.4 1185864 35220 ?       Ssl  05:20   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 12.9 1828136 313356 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   444 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  47332  1848 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  48020  1532 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   208 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   452 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  47124  1636 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.0  47764  1592 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  1724 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   184 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160   700 ?        S    05:20   0:00  \_ dovecot/auth
root        926  0.0  0.0 572372   764 ?        Ssl  05:20   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   432 ?        Ss   05:20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  20426  0.0  0.0 445028   312 ?        S    11:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   172 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13456 ?        Ssl  05:20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  5676 ?        Ss   05:20   0:05 cpsrvd (SSL) - waiting for connections                   
root      20473  0.0  0.0      0     0 ?        Z    11:23   0:00  \_ [cpaneld - servi] <defunct>
root      20474  0.0  0.0      0     0 ?        Z    11:23   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        943  0.0  0.1 1277312 3688 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6524 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3096 ?        Ss   05:20   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   272 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   432 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.2 5654048 29044 ?       SLsl 05:20   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   292 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   716 ?        Ss   05:20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   20438  3.7  0.8 413948 20588 ?        S    11:23   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    20603  0.0  2.9 464600 71536 ?        R    11:24   0:00  \_ php-fpm: pool cloudware_ng
systuser    968  0.0  0.0 112524    68 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   268 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.0 157704  2020 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3148 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  9640 ?        Ss   05:20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.7 209332 18848 ?        Ss   05:20   0:02 tailwatchd
root       1213  0.0  0.1 183900  3596 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.0 167452   968 ?        Ss   05:20   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   292 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416   828 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4892 ?        Ss   05:20   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12844   380 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   100 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12892   392 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    12588  0.0  0.7 277888 18672 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12592  0.1  0.7 277568 17912 ?        S    11:13   0:01  \_ /usr/sbin/httpd -k start
nobody    17075  0.1  0.7 277680 17344 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    18490  0.1  0.7 277612 17480 ?        S    11:21   0:00  \_ /usr/sbin/httpd -k start
nobody    19212  0.0  0.7 277880 17412 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19658  0.1  0.7 277860 16964 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    20631  0.0  0.6 353712 15972 ?        S    11:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    19659  0.0  0.6 277472 16748 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19661  0.0  0.7 277444 17512 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    20637  0.0  0.6 353712 15976 ?        S    11:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    19666  0.0  0.7 277752 17148 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19667  0.1  0.7 277880 17304 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19674  0.1  0.7 277752 17512 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19679  0.0  0.7 277748 16992 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19696  0.1  0.7 277744 17476 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19697  0.0  0.6 277744 16532 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19703  0.1  0.7 277744 17188 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19706  0.1  0.7 277876 16944 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19708  0.0  0.7 277744 17516 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19709  0.1  0.7 277752 17116 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19713  0.0  0.7 277448 17524 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19716  0.0  0.7 277824 17424 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19719  0.1  0.7 277520 17180 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    20545  0.0  0.6 277040 15036 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 11.3 1468028 273976 ?      Sl   05:21   5:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183312 10484 ?        Ss   06:01   0:19 lfd - sleeping
root      10515  0.0  0.0 132964    44 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056     0 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.1  4.8 248096 117412 ?       Ss   10:49   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.0  5.1 259580 124120 ?       S    10:55   0:01  \_ spamd child
root      98394  0.0  4.8 248096 117076 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 43467  Threads: 4  Questions: 1755472  Slow queries: 0  Opens: 9930  Flush tables: 1  Open tables: 2000  Queries per second avg: 40.386
*************************** 1. row ***************************
     Id: 24918
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 24922
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 24923
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 4. row ***************************
     Id: 24927
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.131.71.102 TIME_WAIT
      1 103.131.71.85 TIME_WAIT
      1 104.248.90.230 TIME_WAIT
      1 114.119.134.79 TIME_WAIT
      1 114.119.136.120 TIME_WAIT
      1 142.44.220.204 TIME_WAIT
      1 148.113.128.31 TIME_WAIT
      1 148.113.130.102 TIME_WAIT
      1 154.29.225.15 TIME_WAIT
      1 17.22.245.32 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.239.171.120 TIME_WAIT
      1 43.173.175.63 TIME_WAIT
      1 43.173.180.176 TIME_WAIT
      1 43.173.181.191 TIME_WAIT
      1 47.246.164.131 TIME_WAIT
      1 47.246.164.132 TIME_WAIT
      1 52.167.144.192 TIME_WAIT
      1 52.215.86.173 TIME_WAIT
      1 66.240.236.13 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.104 TIME_WAIT
      2 67.23.236.167 TIME_WAIT
      3 173.199.190.174 TIME_WAIT
      4 78.157.49.100 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 11:24:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 5 minutes 12 seconds
   Server load: 0.46 0.54 0.64
   Total accesses: 130599 - Total Traffic: 3.2 GB - Total Duration: 110055440
   CPU Usage: u2.71 s3.57 cu1785.67 cs1471.23 - 7.5% CPU load
   3 requests/sec - 77.8 kB/second - 25.9 kB/request - 842.697 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K__.........._.........KK_.W.K...W_......W....R.......WR....._..
K.KK...K..K..K..................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS Req   Dur    Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  19212 2/21/5639  K 0.33 2  304 2946838  66.0  0.44  141.79 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1890080589 HTTP/1.1
   1-0  20545 0/1/5138   _ 0.00 0  12  2727918  0.0   0.02  147.72 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  18490 0/40/5513  _ 0.98 0  262 2670444  0.0   1.23  134.38 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=3821327141 HTTP/1.1
   3-0  -     0/0/5405   . 0.00 53 0   2690065  0.0   0.00  136.01 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   4-0  -     0/0/5248   . 0.00 54 0   2546124  0.0   0.00  135.22 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  -     0/0/5076   . 0.00 14 0   2534231  0.0   0.00  128.77 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  -     0/0/5304   . 0.00 61 7   2683520  0.0   0.00  138.44 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  -     0/0/4993   . 0.00 13 0   2556433  0.0   0.00  126.62 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  -     0/0/5078   . 0.00 34 0   2451684  0.0   0.00  121.99 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-0  -     0/0/5066   . 0.00 52 0   2526639  0.0   0.00  127.23 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 -     0/0/4860   . 0.00 49 0   2451473  0.0   0.00  125.11 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 -     0/0/4614   . 0.00 35 0   2363045  0.0   0.00  115.16 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 -     0/0/4697   . 0.00 15 0   2398670  0.0   0.00  119.44 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 17075 0/74/4811  _ 2.16 0  398 2490574  0.0   2.17  122.01 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=2157534149 HTTP/1.1
   14-0 -     0/0/4722   . 0.00 48 0   45822348 0.0   0.00  117.54 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/4268   . 0.00 46 0   2187477  0.0   0.00  109.71 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/4883   . 0.00 41 0   2423779  0.0   0.00  121.31 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/4464   . 0.00 30 0   2315661  0.0   0.00  115.69 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/4027   . 0.00 47 0   2059217  0.0   0.00  103.77 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/3585   . 0.00 45 0   1858580  0.0   0.00  94.54  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/3863   . 0.00 6  0   1956433  0.0   0.00  94.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/3425   . 0.00 59 1   1832174  0.0   0.00  91.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2985   . 0.00 24 0   1703039  0.0   0.00  70.88  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 19658 10/16/3269 K 0.40 0  338 1567211  310.5 0.44  82.16  192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1758927737 HTTP/1.1
   24-0 12588 1/103/2981 K 2.40 1  257 1505767  33.2  2.72  76.06  192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2319447021 HTTP/1.1
   25-0 19659 0/9/2370   _ 0.18 0  298 1384319  0.0   0.25  61.83  192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=3707694147 HTTP/1.1
   26-0 -     0/0/2257   . 0.00 31 0   1087591  0.0   0.00  51.30  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 19661 0/8/1816   W 0.07 0  0   1162522  0.0   0.07  42.61  192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=2891275494 HTTP/1.1
   28-0 -     0/0/1602   . 0.00 17 0   819401   0.0   0.00  40.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 12592 5/180/933  K 5.12 1  263 483630   159.7 5.05  23.67  192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=2105334288 HTTP/1.1
   30-0 -     0/0/1533   . 0.00 12 0   762343   0.0   0.00  36.39  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/824    . 0.00 58 0   381273   0.0   0.00  18.41  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/347    . 0.00 37 0   137861   0.0   0.00  6.64   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 19666 0/7/393    W 0.12 0  0   193794   0.0   0.12  10.30  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   34-0 19667 0/13/419   _ 0.27 0  5   207385   0.0   0.31  10.40  114.119.134.79 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Kogi&=Kogi%20.%20k.%20k.&w
   35-0 -     0/0/692    . 0.00 7  0   379452   0.0   0.00  18.83  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/336    . 0.00 57 0   169758   0.0   0.00  8.46   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/393    . 0.00 4  0   204443   0.0   0.00  9.75   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/165    . 0.00 56 0   87126    0.0   0.00  4.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/433    . 0.00 28 0   222341   0.0   0.00  11.45  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/139    . 0.00 29 0   38901    0.0   0.00  2.51   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 19674 0/15/52    W 0.33 0  0   24026    0.0   0.36  1.42   195.250.21.230 http/1.1 cloudware.ng:443       GET /wp-login.php HTTP/1.1
   42-0 -     0/0/47     . 0.00 55 0   22499    0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/119    . 0.00 42 0   52925    0.0   0.00  2.38   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/669    . 0.00 23 0   368833   0.0   0.00  17.91  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/75     . 0.00 38 0   37747    0.0   0.00  1.71   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 19679 0/4/19     R 0.06 9  2   5791     0.0   0.06  0.24   195.250.21.230 http/1.1
   47-0 -     0/0/125    . 0.00 50 0   57498    0.0   0.00  3.23   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/223    . 0.00 21 0   109674   0.0   0.00  5.99   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/164    . 0.00 20 0   87203    0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/14     . 0.00 19 0   5010     0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/15     . 0.00 36 0   5645     0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 40 0   5381     0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/69     . 0.00 33 0   35130    0.0   0.00  1.62   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 19696 7/12/14    W 0.25 0  0   7586     212.8 0.31  0.33   192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=2107782409 HTTP/1.1
   55-0 19697 0/3/30     R 0.06 46 298 15218    0.0   0.10  0.65   110.227.57.221 http/1.1 nigeriadecide.org:443
   56-0 -     0/0/191    . 0.00 62 0   98835    0.0   0.00  5.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/54     . 0.00 16 0   25519    0.0   0.00  1.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/5      . 0.00 22 0   2796     0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/7      . 0.00 32 0   4222     0.0   0.00  0.19   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00 66 0   0        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 19703 0/11/11    _ 0.24 0  27  7984     0.0   0.29  0.29   116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue2.php HTTP/1.1
   62-0 -     0/0/9      . 0.00 18 0   8650     0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00 44 0   0        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 19706 9/20/20    K 0.48 1  268 11739    280.0 0.55  0.55   192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=3779265620 HTTP/1.1
   65-0 -     0/0/1      . 0.00 63 0   1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 19708 2/11/11    K 0.19 0  433 9375     238.9 0.46  0.46   192.178.4.98   http/1.1 team.cloudware.ng:443  GET /vendor/symfony/config/Tests/Resource/ HTTP/1.1
   67-0 19709 2/14/14    K 0.33 3  260 11581    65.1  0.42  0.42   192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=1449029147 HTTP/1.1
   68-0 -     0/0/1      . 0.00 64 0   1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/4      . 0.00 25 0   1380     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/1      . 0.00 65 0   0        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 19713 2/11/11    K 0.05 0  0   8885     1.9   0.08  0.08   212.66.38.248  http/1.1 nigeriadecide.org:80   GET http://nigeriadecide.orghttp/nigeriadecide.org/blog/voters-
   72-0 -     0/0/3      . 0.00 43 0   1252     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/11     . 0.00 5  0   5534     0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 19716 1/8/8      K 0.08 2  292 6670     36.3  0.15  0.15   192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=3849198660 HTTP/1.1
   75-0 -     0/0/2      . 0.00 51 0   2977     0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/3      . 0.00 39 0   2082     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 19719 4/14/14    K 0.32 0  419 11617    127.3 0.37  0.37   192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2317522883 HTTP/1.1
   78-0 -     0/0/4      . 0.00 27 0   747      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/4      . 0.00 26 0   1901     0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1353
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...14)
   index usage: 23%, cache usage: 32%
   total entries stored since starting: 97332
   total entries replaced since starting: 0
   total entries expired since starting: 95960
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 352 miss
   total removes since starting: 21 hit, 25 miss
Youez - 2016 - github.com/yon3zu
LinuXploit