403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.01.06.txt
 ## swap threshold exceeded
## server overview
2025-11-18.01.06 load[0] mem[60/69] mysql[1/11] httpd[24]
              total        used        free      shared  buff/cache   available
Mem:           2363        1311          78          76         973         790
Swap:          1999        1458         541
 01:06:01 up  6:18,  0 users,  load average: 0.39, 0.36, 0.41
## system overview
top - 01:06:01 up  6:18,  0 users,  load average: 0.39, 0.36, 0.41
Tasks: 212 total,   9 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 48.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    85264 free,  1359780 used,   975256 buff/cache
KiB Swap:  2047996 total,   554492 free,  1493504 used.   792784 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264188   3016 S  12.5 10.9   5:13.75 /usr/sbin+
    36 root      20   0       0      0      0 S   6.2  0.0   0:13.55 [kswapd0]
   523 dbus      20   0   58704   1412    680 S   6.2  0.1   0:11.87 /usr/bin/+
 59192 nobody    20   0  277740  19748   4588 S   6.2  0.8   0:01.00 /usr/sbin+
 68258 saboakin  20   0  404052  15612  10160 S   6.2  0.6   0:00.01 /opt/cpan+
 68259 nigeria   20   0  404052  16136  10380 R   6.2  0.7   0:00.01 /opt/cpan+
 68260 pactpay   20   0  404052  15616  10144 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44412   3444   1572 S   0.0  0.1   0:31.38 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.35 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.97 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:22.86 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.96 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.83 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.42 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.66 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.27 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   6948   6644 S   0.0  0.3   0:11.08 /usr/lib/+
   391 root      20   0   45424    268    192 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    536    420 S   0.0  0.0   0:01.57 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240   1044    636 S   0.0  0.0   0:03.04 /usr/lib/+
   514 root      20   0  224148   5924   1196 S   0.0  0.2   0:00.28 queueproc+
   516 rpc       20   0   69256     88     28 S   0.0  0.0   0:00.02 /sbin/rpc+
   517 root      20   0   21540    428    340 S   0.0  0.0   0:00.51 /usr/sbin+
   521 root      20   0  152780    216    176 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    360    256 S   0.0  0.0   0:00.01 /usr/sbin+
   532 root      20   0  195208     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1232    876 S   0.0  0.1   0:05.24 /usr/lib/+
   556 root      20   0  126388    520    364 S   0.0  0.0   0:00.73 /usr/sbin+
   558 root      20   0   25908      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1848    792 S   0.0  0.1   0:18.46 /usr/sbin+
   578 root      20   0  114704    120    120 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4068    980 S   0.0  0.2   0:00.48 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
  1061 root      20   0  153404    384    300 S   0.0  0.0   0:00.49 pure-ftpd+
  1062 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13196   2360 S   0.0  0.5   0:05.40 /usr/loca+
  1067 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.50 /usr/bin/+
  1068 root      20   0 1276356   9040    144 S   0.0  0.4   0:26.95 /usr/bin/+
  1069 telegraf  20   0 5654304  39532   6012 S   0.0  1.6   0:12.23 /usr/loca+
  1071 root      20   0  572372    932    356 S   0.0  0.0   0:01.98 /usr/bin/+
  1072 root      20   0   51508    584    420 S   0.0  0.0   0:00.28 /usr/sbin+
  1076 root      20   0 1277056   9788    144 S   0.0  0.4   0:23.11 /usr/bin/+
  1085 systuser  20   0   12756     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    488    388 S   0.0  0.0   0:02.12 /usr/sbin+
  1087 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1404   1292 S   0.0  0.1   0:00.97 sw-engine+
  1091 root      20   0  389508    768    552 S   0.0  0.0   0:00.66 php-fpm: +
  1098 named     20   0 1055796  39572   1580 S   0.0  1.6   0:12.19 /usr/sbin+
  1109 root      20   0  388892    800    588 S   0.0  0.0   0:00.61 php-fpm: +
  1113 root      20   0  273744   7012   5936 S   0.0  0.3   0:05.52 /usr/sbin+
  1117 root      20   0 1763304 179272   1008 S   0.0  7.4   0:13.84 /usr/loca+
  1123 root      20   0  439788    996    904 S   0.0  0.0   0:00.69 php-fpm: +
  1131 root      20   0  400740   2092    736 S   0.0  0.1   0:03.29 php-fpm: +
  1134 root      20   0  261152   7136   2040 S   0.0  0.3   0:02.39 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3776   2404 R   0.0  0.2   0:18.08 /usr/loca+
  1149 root      20   0  396248    584    412 S   0.0  0.0   0:00.61 php-fpm: +
  1213 dovenull  20   0   46984   2540   1812 S   0.0  0.1   0:00.35 dovecot/p+
  1214 dovenull  20   0   47660   2996   1724 S   0.0  0.1   0:00.26 dovecot/i+
  1215 dovecot   20   0   10320    396    284 S   0.0  0.0   0:00.06 dovecot/a+
  1216 root      20   0   10452    680    504 S   0.0  0.0   0:00.28 dovecot/l+
  1217 dovenull  20   0   47056   2680   1880 S   0.0  0.1   0:00.49 dovecot/p+
  1218 dovenull  20   0   47472   2980   1868 S   0.0  0.1   0:00.18 dovecot/i+
  1226 root      20   0   24528   2348    488 S   0.0  0.1   0:00.14 dovecot/c+
  1227 dovecot   20   0   13568    564    348 S   0.0  0.0   0:00.05 dovecot/s+
  1292 systuser  20   0  157704   3096   1044 S   0.0  0.1   0:00.10 SonarPush+
  1297 dovecot   20   0   41188   1596   1084 S   0.0  0.1   0:00.47 dovecot/a+
  1300 wp-tool+  20   0  412396  32760   1952 S   0.0  1.4   0:07.32 /usr/bin/+
  1301 wp-tool+  20   0  387556  13596   1936 S   0.0  0.6   0:00.25 /usr/bin/+
  1308 root      20   0  248116 117400   1000 S   0.0  4.9   0:05.51 /usr/loca+
  1409 root      20   0  210048  13392   2404 S   0.0  0.6   0:02.83 tailwatchd
  1412 root      20   0  262224  24492   6572 S   0.0  1.0   0:01.23 cpdavd - +
  1413 root      20   0  167452   4256   2888 S   0.0  0.2   0:00.39 dnsadmin +
  1836 root      20   0  299272    744    364 S   0.0  0.0   0:00.62 php-fpm: +
  1853 root      38  18  130416   1496    764 S   0.0  0.1   0:00.05 cpanellog+
  2063 root      20   0  266984   7772    732 S   0.0  0.3   0:03.19 /usr/sbin+
  2067 root      20   0   12828    400    292 S   0.0  0.0   0:02.45 /usr/loca+
  2068 root      20   0   12732    364    288 S   0.0  0.0   0:02.13 /usr/loca+
  2069 root      20   0   12856    412    292 S   0.0  0.0   0:02.29 /usr/loca+
  2075 root      20   0   53252    188    188 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  264072 127596   2096 S   0.0  5.3   0:02.51 spamd chi+
  7507 root      20   0  248116 116772    416 S   0.0  4.8   0:00.00 spamd chi+
 13053 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.41 [kworker]
 14140 root      20   0  181620  29588   2320 S   0.0  1.2   0:04.01 lfd - sle+
 38740 root      20   0       0      0      0 D   0.0  0.0   0:00.11 [kworker/+
 51192 root      20   0       0      0      0 D   0.0  0.0   0:00.06 [kworker/+
 51258 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51661 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53670 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 55907 nobody    20   0  277744  19704   4684 S   0.0  0.8   0:01.67 /usr/sbin+
 56134 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 62775 root      20   0  182832   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62833 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 62852 root      20   0  108056    356    284 S   0.0  0.0   0:00.00 sleep 1h +
 63053 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 63081 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 63453 nobody    20   0  277744  19256   4424 S   0.0  0.8   0:00.55 /usr/sbin+
 63882 nobody    20   0  277868  19172   4256 S   0.0  0.8   0:00.49 /usr/sbin+
 64848 nobody    20   0  277748  18980   4160 S   0.0  0.8   0:00.40 /usr/sbin+
 64849 nobody    20   0  277876  18956   4080 S   0.0  0.8   0:00.23 /usr/sbin+
 65830 nobody    20   0  277744  18904   4040 S   0.0  0.8   0:00.27 /usr/sbin+
 66605 nobody    20   0  277744  18952   4060 S   0.0  0.8   0:00.15 /usr/sbin+
 66606 nobody    20   0  277744  18824   4044 S   0.0  0.8   0:00.16 /usr/sbin+
 66626 nobody    20   0  277744  18564   3792 S   0.0  0.8   0:00.26 /usr/sbin+
 66628 nobody    20   0  277884  18828   3992 S   0.0  0.8   0:00.20 /usr/sbin+
 67054 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 67488 nobody    20   0  277744  18320   3532 S   0.0  0.8   0:00.07 /usr/sbin+
 67498 nobody    20   0  277748  18308   3508 S   0.0  0.8   0:00.11 /usr/sbin+
 67499 nobody    20   0  277748  18696   3900 S   0.0  0.8   0:00.09 /usr/sbin+
 67512 nobody    20   0  277756  18180   3392 S   0.0  0.8   0:00.06 /usr/sbin+
 67514 nobody    20   0  277744  18876   3960 S   0.0  0.8   0:00.10 /usr/sbin+
 67515 nobody    20   0  277744  18560   3792 S   0.0  0.8   0:00.07 /usr/sbin+
 67549 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 67647 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 67937 cloudw    20   0   61844   6272   4464 S   0.0  0.3   0:00.01 dovecot/l+
 67989 wp-tool+  20   0  445028    312    184 S   0.0  0.0   0:00.00 sw-engine+
 68016 nigeria   20   0  400460   4292   2184 S   0.0  0.2   0:00.00 php-fpm: +
 68120 nobody    20   0  277600  17680   3168 S   0.0  0.7   0:00.00 /usr/sbin+
 68135 nobody    20   0  277600  17672   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 68136 nobody    20   0  277372  17764   3404 S   0.0  0.7   0:00.01 /usr/sbin+
 68148 nobody    20   0  277440  17860   3380 S   0.0  0.7   0:00.00 /usr/sbin+
 68149 nobody    20   0  277716  17804   3200 S   0.0  0.7   0:00.00 /usr/sbin+
 68150 nobody    20   0  277716  17824   3216 S   0.0  0.7   0:00.00 /usr/sbin+
 68151 nobody    20   0  277600  17676   3164 S   0.0  0.7   0:00.00 /usr/sbin+
 68156 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 68165 nobody    20   0  277600  17668   3156 S   0.0  0.7   0:00.00 /usr/sbin+
 68166 nobody    20   0  276908  14520    684 S   0.0  0.6   0:00.00 /usr/sbin+
 68167 nobody    20   0  277040  16080   2088 S   0.0  0.7   0:00.00 /usr/sbin+
 68168 nobody    20   0  277176  17080   2936 S   0.0  0.7   0:00.00 /usr/sbin+
 68169 nobody    20   0  277308  17104   2916 S   0.0  0.7   0:00.00 /usr/sbin+
 68170 nobody    20   0  276908  14520    684 S   0.0  0.6   0:00.00 /usr/sbin+
 68171 nobody    20   0  276908  14520    684 S   0.0  0.6   0:00.00 /usr/sbin+
 68172 nobody    20   0  276908  14520    684 S   0.0  0.6   0:00.00 /usr/sbin+
 68179 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68181 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68182 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68184 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68185 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68186 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68187 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68189 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68190 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68191 root      20   0  182832   2128   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 68192 root      20   0  182828   2196   1632 R   0.0  0.1   0:00.00 /usr/sbin+
 68193 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68194 root      20   0  182832   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 68195 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 68196 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 68197 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 68220 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 68225 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68226 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68228 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68229 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68230 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68233 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 68234 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68235 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 68236 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68237 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68238 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 68250 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 68256 nigeria   20   0   20164    440    164 S   0.0  0.0   0:00.00 jailshell+
 68257 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 68262 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 68263 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kthreadd]
 68264 nobody    20   0  277308  14212      0 R   0.0  0.6   0:00.00 /usr/sbin+
 69511 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov17   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      69511  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kworker/1:1]
root      38740  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:2]
root      51192  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/0:1]
root      51258  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/1:2]
root      51661  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root      53670  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/0:6]
root      56134  0.0  0.0      0     0 ?        S    00:52   0:00  \_ [kworker/1:4]
root      63053  0.0  0.0      0     0 ?        D    01:00   0:00  \_ [kworker/1:0]
root      63081  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:0]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44412  3444 ?        Rs   Nov17   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.2  40244  6948 ?        Ss   Nov17   0:11 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   268 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   536 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240  1044 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.2 224148  5924 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256    88 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   428 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   216 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   360 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1412 ?        Ss   Nov17   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    28 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1232 ?        Ds   Nov17   0:05 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126388   520 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      62775  0.0  0.0 182832  2136 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      62833  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      62852  0.0  0.0 108056   356 ?        S    01:00   0:00  |       \_ sleep 1h 4m
root      68179  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68195  0.0  0.0 113284  1212 ?        Ss   01:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      68196  0.0  0.0 108052   360 ?        S    01:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      68197  0.0  0.0 113288  1512 ?        S    01:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      68265  0.0  0.0 153840  2092 ?        R    01:06   0:00  |               \_ ps auxf
root      68181  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68228  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      68182  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68237  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      68184  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68234  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      68185  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68225  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      68186  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68226  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      68187  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68230  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      68189  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68229  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      68190  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68236  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      68191  0.0  0.0 182832  2128 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68233  0.0  0.0  20164   964 ?        Ss   01:06   0:00  |   \_ jailshell (pactpay) [68257] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68257  0.0  0.0  20164   260 ?        S    01:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68260  0.0  0.6 479860 16176 ?        Rl   01:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      68193  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68235  0.0  0.0  20164   968 ?        Ss   01:06   0:00  |   \_ jailshell (nigeria) [68256] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68256  0.0  0.0  20164   440 ?        S    01:06   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68259  0.0  0.6 404052 16136 ?        S    01:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      68194  0.0  0.0 182832  2132 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      68238  0.0  0.0  20164   968 ?        Ss   01:06   0:00      \_ jailshell (saboakin) [68250] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  68250  0.0  0.0      0     0 ?        D    01:06   0:00          \_ [jailshell]
root        558  0.0  0.0  25908     0 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1848 ?        Ssl  Nov17   0:18 /usr/sbin/nscd
root        578  0.0  0.0 114704   120 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   136 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4068 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   384 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13196 ?        Ssl  Nov17   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400    32 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.1  0.3 1276356 9040 ?        Ssl  Nov17   0:26 /usr/bin/cspdaemon
telegraf   1069  0.0  1.6 5654304 39532 ?       SLsl Nov17   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372   932 ?        Ssl  Nov17   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   584 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.1  46984  2540 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47660  2996 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   396 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   680 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2680 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47472  2980 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2348 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   564 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1596 ?        S    Nov17   0:00  \_ dovecot/auth
root      67054  0.0  0.1  41052  2724 ?        S    01:04   0:00  \_ dovecot/auth -w
cloudw    67937  0.0  0.2  61844  6272 ?        S    01:05   0:00  \_ dovecot/lmtp
root       1076  0.1  0.4 1277056 9788 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    48 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   488 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      67549  0.0  0.1 111304  4268 ?        Ss   01:05   0:00  \_ sshd: [accepted]
root      67647  0.0  0.1 111304  4264 ?        Ss   01:05   0:00  \_ sshd: [accepted]
systuser   1087  0.0  0.0 111864    76 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1404 ?        Ss   Nov17   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  67989  0.0  0.0 445028   312 ?        S    01:05   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   768 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.6 1055796 39572 ?       Ssl  Nov17   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   800 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.2 273744  7012 ?        Ssl  Nov17   0:05 /usr/sbin/rsyslogd -n
root       1117  0.0  7.4 1763304 179272 ?      Ssl  Nov17   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788   996 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2092 ?        Ss   Nov17   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   68016  0.0  0.1 400460  4292 ?        S    01:05   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.2 261152  7136 ?        Ss   Nov17   0:02 cpsrvd (SSL) - waiting for connections                   
root      68156  0.0  0.0      0     0 ?        Z    01:05   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3776 ?        Ss   Nov17   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   584 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  3096 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.3 412396 32760 ?        Ss   Nov17   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.5 387556 13596 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  4.8 248116 117400 ?       Ss   Nov17   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  5.2 264072 127596 ?       S    Nov17   0:02  \_ spamd child
root       7507  0.0  4.8 248116 116772 ?       S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.5 210048 13392 ?        Ss   Nov17   0:02 tailwatchd
root       1412  0.0  1.0 262224 24492 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  4256 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   744 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1496 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.3 10.9 1458600 264188 ?      Sl   Nov17   5:13 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7772 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12828   400 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   364 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12856   412 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   188 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    55907  0.1  0.8 277744 19704 ?        S    00:51   0:01  \_ /usr/sbin/httpd -k start
nobody    59192  0.1  0.8 277740 19748 ?        S    00:55   0:01  \_ /usr/sbin/httpd -k start
nobody    63453  0.1  0.7 277744 19256 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody    63882  0.1  0.7 277868 19172 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody    64848  0.1  0.7 277748 18980 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    64849  0.0  0.7 277876 18956 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    65830  0.1  0.7 277744 18904 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    66605  0.1  0.7 277744 18952 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    66606  0.1  0.7 277744 18824 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    66626  0.2  0.7 277744 18564 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    66628  0.1  0.7 277884 18828 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    67488  0.1  0.7 277744 18320 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    67498  0.1  0.7 277748 18308 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    67499  0.1  0.7 277748 18696 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    67512  0.1  0.7 277756 18180 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    67514  0.1  0.7 277744 18876 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    67515  0.1  0.7 277744 18560 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68120  0.0  0.7 277600 17680 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68135  0.0  0.7 277600 17672 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68136  0.5  0.7 277372 17764 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68148  0.0  0.7 277440 17860 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68149  0.0  0.7 277716 17804 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68150  0.0  0.7 277716 17824 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68151  0.0  0.7 277600 17676 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    68165  0.0  0.7 277600 17668 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68166  0.0  0.5 276908 14520 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68167  0.0  0.6 277040 16080 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68168  0.0  0.7 277176 17080 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68169  0.0  0.7 277308 17104 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    68264  0.0  0.3 248040  9564 ?        R    01:06   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    68170  0.0  0.5 276908 14520 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68171  0.0  0.5 276908 14520 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68172  0.0  0.5 276908 14520 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148   416 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152   492 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.2 181620 29588 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 22675  Threads: 3  Questions: 1991997  Slow queries: 0  Opens: 7188  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.849
*************************** 1. row ***************************
     Id: 30231
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30233
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30235
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.150.65 TIME_WAIT
      1 142.44.225.235 TIME_WAIT
      1 142.44.233.17 TIME_WAIT
      1 148.113.128.81 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.126 TIME_WAIT
      1 213.180.203.214 TIME_WAIT
      1 54.39.0.111 TIME_WAIT
      1 54.39.203.178 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 134.122.27.79 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 01:06:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 17 minutes 49 seconds
   Server load: 0.39 0.36 0.41
   Total accesses: 111528 - Total Traffic: 2.7 GB - Total Duration: 58800531
   CPU Usage: u4.42 s4.66 cu1439.26 cs1146.61 - 11.4% CPU load
   4.92 requests/sec - 124.1 kB/second - 25.2 kB/request - 527.227 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KKKKKK_KKKKKKKK__KKKK__K_KKKWW__................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                       Request
   0-0  68120 1/1/5100   K 0.00 3    264 3009674 35.3  0.03  118.65 192.178.4.98   http/1.1 team.cloudware.ng:443     GET /?l=1902136390 HTTP/1.1
   1-0  65830 5/43/5177  K 1.12 1    388 2644005 159.0 1.25  123.31 192.178.4.104  http/1.1 team.cloudware.ng:443     GET /?l=3078136131 HTTP/1.1
   2-0  59192 5/163/4856 K 4.21 0    269 2490046 158.7 4.58  117.61 192.178.4.96   http/1.1 team.cloudware.ng:443     GET /?l=2775986432 HTTP/1.1
   3-0  68135 1/1/4645   K 0.00 2    340 2443503 35.3  0.03  112.04 192.178.4.100  http/1.1 team.cloudware.ng:443     GET /?l=260106728 HTTP/1.1
   4-0  68136 1/2/5044   K 0.25 2    23  2501187 5.7   0.01  118.64 66.249.70.7    http/1.1 test.cloudware.ng:443     GET /2999750797?goodscode=2995820038 HTTP/1.1
   5-0  68148 1/2/4888   K 0.00 1    351 2469184 35.0  0.04  119.96 66.249.64.33   http/1.1 team.cloudware.ng:443     GET /?l=517288520 HTTP/1.1
   6-0  67488 0/10/4875  _ 0.25 0    272 2511939 0.0   0.31  121.99 192.178.4.99   http/1.1 team.cloudware.ng:443     GET /?l=1615898081 HTTP/1.1
   7-0  67498 3/18/4435  K 0.45 3    362 2239146 94.6  0.48  113.32 192.178.4.105  http/1.1 team.cloudware.ng:443     GET /?l=115006499 HTTP/1.1
   8-0  67499 6/15/4325  K 0.34 3    262 2130153 186.8 0.38  102.29 192.178.4.98   http/1.1 team.cloudware.ng:443     GET /?l=4149850137 HTTP/1.1
   9-0  63882 6/80/4367  K 2.07 3    406 2217663 189.5 2.18  108.44 192.178.4.102  http/1.1 team.cloudware.ng:443     GET /?l=2633254406 HTTP/1.1
   10-0 68149 1/2/4369   K 0.00 0    263 2179007 33.8  0.03  105.54 66.249.70.33   http/1.1 team.cloudware.ng:443     GET /?l=788427084 HTTP/1.1
   11-0 68150 1/2/4503   K 0.00 0    346 2248783 35.9  0.04  115.08 66.249.64.97   http/1.1 team.cloudware.ng:443     GET /?l=3903279453 HTTP/1.1
   12-0 64848 1/66/3741  K 1.71 2    388 2033678 35.9  1.77  94.46  192.178.4.103  http/1.1 team.cloudware.ng:443     GET /?l=767814563 HTTP/1.1
   13-0 66605 2/26/3853  K 0.58 1    388 1877360 66.5  0.63  94.45  192.178.4.101  http/1.1 team.cloudware.ng:443     GET /?l=1243881862 HTTP/1.1
   14-0 68151 1/1/4004   K 0.00 1    392 2096221 35.5  0.03  94.80  66.249.64.234  http/1.1 team.cloudware.ng:443     GET /?l=3626040593 HTTP/1.1
   15-0 55907 0/276/3996 _ 7.18 0    260 2029031 0.0   7.41  95.87  192.178.4.97   http/1.1 team.cloudware.ng:443     GET /?l=2417983697 HTTP/1.1
   16-0 67512 0/10/3690  _ 0.26 0    401 2667821 0.0   0.30  103.47 192.178.4.97   http/1.1 team.cloudware.ng:443     GET /?l=2718668038 HTTP/1.1
   17-0 68165 1/1/3847   K 0.00 0    337 1888783 36.0  0.04  99.51  66.249.64.169  http/1.1 team.cloudware.ng:443     GET /?l=3215784383 HTTP/1.1
   18-0 66606 1/27/3009  K 0.60 3    259 1557932 36.0  0.68  68.21  192.178.4.98   http/1.1 team.cloudware.ng:443     GET /?l=3255327118 HTTP/1.1
   19-0 64849 2/39/2980  K 0.92 2    389 1467653 66.3  1.08  71.44  192.178.4.104  http/1.1 team.cloudware.ng:443     GET /?l=2388303804 HTTP/1.1
   20-0 67514 3/17/3408  K 0.44 3    352 1703331 93.8  0.48  83.72  192.178.4.100  http/1.1 team.cloudware.ng:443     GET /?l=3528569999 HTTP/1.1
   21-0 68166 0/0/2271   _ 0.00 0    0   1203418 0.0   0.00  53.00  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   22-0 63453 0/89/1924  _ 2.38 0    7   1010692 0.0   2.50  48.17  44.223.115.10  http/1.1 nigeriadecide.org:443     GET /polling_unit_category.php/blog/2019elections/blog/blog/201
   23-0 66626 6/40/2184  K 1.13 4    290 1084382 188.6 1.21  48.87  192.178.4.105  http/1.1 team.cloudware.ng:443     GET /?l=1583017087 HTTP/1.1
   24-0 68167 0/1/2116   _ 0.00 0    1   1225492 0.0   0.02  58.23  ::1            http/1.1 chs1.nescrow.com.ng:80    GET //whm-server-status HTTP/1.0
   25-0 66628 2/35/1365  K 1.13 2    270 824352  5.6   0.88  36.15  216.73.216.115 http/1.1 blog.cloudsms.com.ng:443  GET /wp-sitemap.xml HTTP/1.1
   26-0 67515 2/12/1268  K 0.25 3    322 741432  67.6  0.32  30.96  192.178.4.99   http/1.1 team.cloudware.ng:443     GET /?l=4214931740 HTTP/1.1
   27-0 68168 1/1/1110   K 0.00 0    2   662401  6.5   0.01  26.53  45.82.78.113   http/1.1 voice.cloudsms.com.ng:443 GET /favicon.ico HTTP/1.1
   28-0 68169 0/0/1196   W 0.00 0    0   666503  0.0   0.00  25.93  66.249.64.165  http/1.1 team.cloudware.ng:443     GET /?l=3897521747 HTTP/1.1
   29-0 68170 0/0/1099   W 0.00 0    0   674301  0.0   0.00  29.09  ::1            http/1.1 chs1.nescrow.com.ng:80    GET //whm-server-status HTTP/1.0
   30-0 68171 0/0/874    _ 0.00 0    0   512081  0.0   0.00  22.13  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   31-0 68172 0/0/890    _ 0.00 0    0   430293  0.0   0.00  19.99  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   32-0 -     0/0/638    . 0.00 3053 0   353573  0.0   0.00  17.97  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   33-0 -     0/0/932    . 0.00 3182 0   602731  0.0   0.00  27.29  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   34-0 -     0/0/535    . 0.00 3181 0   290281  0.0   0.00  13.80  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   35-0 -     0/0/461    . 0.00 3178 0   255827  0.0   0.00  12.63  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   36-0 -     0/0/420    . 0.00 2796 0   233407  0.0   0.00  11.11  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   37-0 -     0/0/558    . 0.00 3169 0   311293  0.0   0.00  17.32  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   38-0 -     0/0/371    . 0.00 3166 0   197602  0.0   0.00  10.72  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   39-0 -     0/0/111    . 0.00 3172 0   55375   0.0   0.00  2.84   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   40-0 -     0/0/365    . 0.00 3050 0   203780  0.0   0.00  9.39   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   41-0 -     0/0/81     . 0.00 3177 0   39481   0.0   0.00  1.95   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   42-0 -     0/0/121    . 0.00 3156 0   63252   0.0   0.00  3.11   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   43-0 -     0/0/251    . 0.00 3175 0   94774   0.0   0.00  3.69   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   44-0 -     0/0/190    . 0.00 2951 0   101665  0.0   0.00  4.99   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   45-0 -     0/0/73     . 0.00 3171 0   39616   0.0   0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   46-0 -     0/0/225    . 0.00 3047 0   119013  0.0   0.00  5.41   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   47-0 -     0/0/65     . 0.00 3136 0   35063   0.0   0.00  1.48   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   48-0 -     0/0/243    . 0.00 3160 0   115638  0.0   0.00  5.61   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   49-0 -     0/0/19     . 0.00 3176 0   7927    0.0   0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   50-0 -     0/0/52     . 0.00 7240 0   34889   0.0   0.00  1.28   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   51-0 -     0/0/70     . 0.00 7322 0   34943   0.0   0.00  1.72   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   52-0 -     0/0/33     . 0.00 7298 0   12820   0.0   0.00  0.87   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   53-0 -     0/0/22     . 0.00 8591 0   10829   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   54-0 -     0/0/121    . 0.00 8502 0   71948   0.0   0.00  3.51   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   55-0 -     0/0/72     . 0.00 8557 0   40608   0.0   0.00  2.03   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   56-0 -     0/0/7      . 0.00 8926 0   1321    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00 8918 0   2507    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   58-0 -     0/0/9      . 0.00 8935 0   517     0.0   0.00  0.87   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   59-0 -     0/0/4      . 0.00 8933 0   12      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   60-0 -     0/0/42     . 0.00 8770 0   19606   0.0   0.00  1.02   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 8942 0   821     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   62-0 -     0/0/19     . 0.00 8894 0   7935    0.0   0.00  0.50   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1177
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...29)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 82500
   total entries replaced since starting: 0
   total entries expired since starting: 81304
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 203 miss
   total removes since starting: 19 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit