403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.01.24.txt
 ## swap threshold exceeded
## server overview
2025-11-18.01.24 load[0] mem[61/69] mysql[1/11] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1348         119          77         895         757
Swap:          1999        1463         536
 01:24:01 up  6:36,  0 users,  load average: 0.55, 0.42, 0.40
## system overview
top - 01:24:01 up  6:36,  0 users,  load average: 0.55, 0.42, 0.40
Tasks: 205 total,   6 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.6 us, 48.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   105864 free,  1397404 used,   917032 buff/cache
KiB Swap:  2047996 total,   549116 free,  1498880 used.   759696 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264288   3068 S  37.5 10.9   5:26.97 /usr/sbin+
     1 root      20   0   44412   3444   1572 S  12.5  0.1   0:32.74 /usr/lib/+
 84755 nigeria   20   0  404052  16136  10384 R  12.5  0.7   0:00.02 /opt/cpan+
 82507 nobody    20   0  277560  18764   4072 S   6.2  0.8   0:00.22 /usr/sbin+
 84761 pactpay   20   0  412248  16144  10560 R   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.42 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:24.10 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.02 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.83 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.46 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.71 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.32 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   2756   2448 S   0.0  0.1   0:11.59 /usr/lib/+
   391 root      20   0   45424    268    192 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    536    420 S   0.0  0.0   0:01.63 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240   1044    636 S   0.0  0.0   0:03.18 /usr/lib/+
   514 root      20   0  224148   5924   1196 S   0.0  0.2   0:00.30 queueproc+
   516 rpc       20   0   69256     88     28 S   0.0  0.0   0:00.02 /sbin/rpc+
   517 root      20   0   21540    428    340 S   0.0  0.0   0:00.54 /usr/sbin+
   521 root      20   0  152780    216    176 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    360    256 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1412    680 R   0.0  0.1   0:12.42 /usr/bin/+
   532 root      20   0  195208     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1232    876 D   0.0  0.1   0:05.48 /usr/lib/+
   556 root      20   0  126420    940    488 S   0.0  0.0   0:00.77 /usr/sbin+
   558 root      20   0   25908      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1848    792 S   0.0  0.1   0:19.63 /usr/sbin+
   578 root      20   0  114704    120    120 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4064    976 S   0.0  0.2   0:00.49 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.52 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
  1061 root      20   0  153404    384    300 S   0.0  0.0   0:00.52 pure-ftpd+
  1062 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13116   2280 S   0.0  0.5   0:05.65 /usr/loca+
  1067 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.52 /usr/bin/+
  1068 root      20   0 1276356   9180    148 S   0.0  0.4   0:26.96 /usr/bin/+
  1069 telegraf  20   0 5654304  38084   5936 S   0.0  1.6   0:12.80 /usr/loca+
  1071 root      20   0  572372    932    356 S   0.0  0.0   0:02.07 /usr/bin/+
  1072 root      20   0   51508    584    420 S   0.0  0.0   0:00.29 /usr/sbin+
  1076 root      20   0 1277056   9788    144 S   0.0  0.4   0:23.11 /usr/bin/+
  1085 systuser  20   0   12756     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    488    388 S   0.0  0.0   0:02.21 /usr/sbin+
  1087 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1404   1292 S   0.0  0.1   0:01.00 sw-engine+
  1091 root      20   0  389508    768    552 S   0.0  0.0   0:00.68 php-fpm: +
  1098 named     20   0 1054792  42736   2128 S   0.0  1.8   0:12.89 /usr/sbin+
  1109 root      20   0  388892    732    520 S   0.0  0.0   0:00.63 php-fpm: +
  1113 root      20   0  281936   3424   2324 S   0.0  0.1   0:05.79 /usr/sbin+
  1117 root      20   0 1763304 178364    708 S   0.0  7.4   0:13.84 /usr/loca+
  1123 root      20   0  439788   1056    964 S   0.0  0.0   0:00.71 php-fpm: +
  1131 root      20   0  400740   2092    736 S   0.0  0.1   0:03.43 php-fpm: +
  1134 root      20   0  261152   7208   2096 S   0.0  0.3   0:02.48 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3776   2404 S   0.0  0.2   0:19.00 /usr/loca+
  1149 root      20   0  396248    700    528 S   0.0  0.0   0:00.64 php-fpm: +
  1213 dovenull  20   0   46984   2784   2052 S   0.0  0.1   0:00.37 dovecot/p+
  1214 dovenull  20   0   47936   3492   1952 S   0.0  0.1   0:00.32 dovecot/i+
  1215 dovecot   20   0   10320    396    284 S   0.0  0.0   0:00.06 dovecot/a+
  1216 root      20   0   10452    680    504 S   0.0  0.0   0:00.29 dovecot/l+
  1217 dovenull  20   0   47056   2680   1880 S   0.0  0.1   0:00.53 dovecot/p+
  1218 dovenull  20   0   47752   3240   2060 S   0.0  0.1   0:00.23 dovecot/i+
  1226 root      20   0   24528   2348    488 S   0.0  0.1   0:00.14 dovecot/c+
  1227 dovecot   20   0   13568    564    348 S   0.0  0.0   0:00.05 dovecot/s+
  1292 systuser  20   0  157704   3096   1044 S   0.0  0.1   0:00.11 SonarPush+
  1297 dovecot   20   0   41188   1596   1084 S   0.0  0.1   0:00.51 dovecot/a+
  1300 wp-tool+  20   0  412396  32504   1696 S   0.0  1.3   0:07.65 /usr/bin/+
  1301 wp-tool+  20   0  387556  13356   1696 S   0.0  0.6   0:00.26 /usr/bin/+
  1308 root      20   0  248116 117400   1000 S   0.0  4.9   0:05.63 /usr/loca+
  1409 root      20   0  210048  13452   2404 S   0.0  0.6   0:02.93 tailwatchd
  1412 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.25 cpdavd - +
  1413 root      20   0  228228  18892   5984 S   0.0  0.8   0:00.42 dnsadmin +
  1836 root      20   0  299272    796    416 S   0.0  0.0   0:00.64 php-fpm: +
  1853 root      38  18  130416   1496    764 S   0.0  0.1   0:00.05 cpanellog+
  2063 root      20   0  266984   7772    732 S   0.0  0.3   0:03.37 /usr/sbin+
  2067 root      20   0   12848    400    292 S   0.0  0.0   0:02.63 /usr/loca+
  2068 root      20   0   12732    364    288 S   0.0  0.0   0:02.28 /usr/loca+
  2069 root      20   0   12880    412    292 S   0.0  0.0   0:02.45 /usr/loca+
  2075 root      20   0   53252    188    188 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  264072 127596   2096 S   0.0  5.3   0:02.62 spamd chi+
  7507 root      20   0  248116 116772    416 S   0.0  4.8   0:00.00 spamd chi+
 13053 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.42 [kworker]
 14140 root      20   0  181620  29596   2320 S   0.0  1.2   0:05.07 lfd - sle+
 38740 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 51192 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 51258 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 51661 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 62775 root      20   0  182832   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62833 root      20   0  113284   1200   1024 S   0.0  0.0   0:00.00 /bin/sh -+
 62852 root      20   0  108056    340    268 S   0.0  0.0   0:00.00 sleep 1h +
 68263 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 69069 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72384 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75248 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 76698 nobody    20   0  277900  19492   4488 S   0.0  0.8   0:00.88 /usr/sbin+
 77381 nobody    20   0  277676  19956   4688 S   0.0  0.8   0:00.81 /usr/sbin+
 78151 nobody    20   0  277740  19508   4440 S   0.0  0.8   0:00.80 /usr/sbin+
 78277 nobody    20   0  277744  19320   4372 S   0.0  0.8   0:00.84 /usr/sbin+
 80271 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80343 nobody    20   0  277616  19104   4288 S   0.0  0.8   0:00.41 /usr/sbin+
 80345 nobody    20   0  277744  19000   4108 S   0.0  0.8   0:00.37 /usr/sbin+
 80347 nobody    20   0  277676  18968   4132 S   0.0  0.8   0:00.62 /usr/sbin+
 81146 nobody    20   0  277744  18936   4112 S   0.0  0.8   0:00.45 /usr/sbin+
 81491 nobody    20   0  277876  19068   4208 S   0.0  0.8   0:00.40 /usr/sbin+
 82509 nobody    20   0  277740  18780   3908 S   0.0  0.8   0:00.28 /usr/sbin+
 82952 nobody    20   0  277744  19192   4096 S   0.0  0.8   0:00.18 /usr/sbin+
 82957 nobody    20   0  277744  18624   3724 S   0.0  0.8   0:00.18 /usr/sbin+
 82958 nobody    20   0  277744  18604   3832 S   0.0  0.8   0:00.26 /usr/sbin+
 82971 nobody    20   0  277744  18700   3928 S   0.0  0.8   0:00.16 /usr/sbin+
 82973 nobody    20   0  277744  18684   3860 S   0.0  0.8   0:00.29 /usr/sbin+
 83036 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 83039 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 83305 nobody    20   0  277884  18816   3948 S   0.0  0.8   0:00.23 /usr/sbin+
 83533 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 83870 nobody    20   0  277868  18560   3796 S   0.0  0.8   0:00.06 /usr/sbin+
 83878 nobody    20   0  277744  18212   3376 S   0.0  0.8   0:00.11 /usr/sbin+
 83879 nobody    20   0  277744  18540   3772 S   0.0  0.8   0:00.09 /usr/sbin+
 83889 root      20   0  182864   2404   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83898 root      20   0  178148  26300   2812 S   0.0  1.1   0:00.12 /usr/loca+
 83928 root      20   0  158816  15304   2712 S   0.0  0.6   0:00.06 /usr/loca+
 83934 root      20   0  195348  34684   3168 S   0.0  1.4   0:00.18 /usr/loca+
 83960 root      20   0   76780  16844   3040 S   0.0  0.7   0:00.10 /usr/loca+
 84073 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 84472 mailnull  20   0   89484   4312   1176 S   0.0  0.2   0:00.00 /usr/sbin+
 84504 nigeria   20   0  401180   8868   3916 S   0.0  0.4   0:00.19 php-fpm: +
 84567 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 84671 healtho+  20   0  445160  52924   4056 S   0.0  2.2   0:00.57 php-fpm: +
 84682 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 84689 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84690 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84691 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84692 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84694 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84695 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84696 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84697 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84698 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84699 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84700 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84701 root      20   0  182864   2404   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 84703 root      20   0  182864   2404   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84705 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 84706 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 84707 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 84729 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 84730 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84731 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84733 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84734 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84735 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 84736 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84737 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84740 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84741 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84742 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84743 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84744 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 84750 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 84757 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 84758 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 84768 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      38740  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:2]
root      51192  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/0:1]
root      51258  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/1:2]
root      51661  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root      69069  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:3]
root      72384  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:3]
root      75248  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:4]
root      80271  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/1:0]
root      83036  0.0  0.0      0     0 ?        R    01:22   0:00  \_ [kworker/1:1]
root      83039  0.0  0.0      0     0 ?        R    01:22   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44412  3444 ?        Ss   Nov17   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.1  40244  2756 ?        Ss   Nov17   0:11 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   268 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   536 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240  1044 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.2 224148  5924 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256    88 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   428 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   216 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   360 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1412 ?        Ss   Nov17   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    28 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1232 ?        Ss   Nov17   0:05 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   940 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      62775  0.0  0.0 182832  2136 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      62833  0.0  0.0 113284  1200 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      62852  0.0  0.0 108056   340 ?        S    01:00   0:00  |       \_ sleep 1h 4m
root      83889  0.0  0.0 182864  2404 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      83898  0.2  1.0 178148 26300 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      83928  0.1  0.6 158816 15304 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      83934  0.3  1.4 195348 34684 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      83960  0.1  0.6  76780 16844 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      84689  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84705  0.0  0.0 113284  1212 ?        Ss   01:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      84706  0.0  0.0 108052   360 ?        S    01:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      84707  0.0  0.0 113288  1520 ?        S    01:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      84769  0.0  0.0 153840  2096 ?        R    01:24   0:00  |               \_ ps auxf
root      84690  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84742  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      84691  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84730  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      84692  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84740  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      84694  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84737  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      84695  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84733  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      84696  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84734  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      84697  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84741  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      84698  0.0  0.0 182864  2412 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84743  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      84699  0.0  0.0 182864  2408 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84731  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      84700  0.0  0.0 182864  2408 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84736  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      84701  0.0  0.0 182864  2404 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84744  0.0  0.0  20164   964 ?        Ss   01:24   0:00  |   \_ jailshell (pactpay) [84757] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   84757  0.0  0.0  20164   260 ?        S    01:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   84761  0.0  0.6 479860 16176 ?        Rl   01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      84703  0.0  0.0 182864  2404 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      84735  0.0  0.0  20164   972 ?        Ss   01:24   0:00      \_ jailshell (nigeria) [84750] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   84750  0.0  0.0  20164   264 ?        S    01:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   84755  0.0  0.6 404052 16136 ?        R    01:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908     0 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1848 ?        Ssl  Nov17   0:19 /usr/sbin/nscd
root        578  0.0  0.0 114704   120 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   136 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4064 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  84472  0.0  0.2  89496  5088 ?        S    01:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   384 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13116 ?        Ssl  Nov17   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400    32 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.1  0.3 1276356 9180 ?        Ssl  Nov17   0:26 /usr/bin/cspdaemon
telegraf   1069  0.0  1.5 5654304 38084 ?       SLsl Nov17   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372   932 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   584 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.1  46984  2784 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  3492 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   396 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   680 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2680 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  3240 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2348 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   564 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1596 ?        S    Nov17   0:00  \_ dovecot/auth
root      83533  0.0  0.1  60820  4508 ?        S    01:22   0:00  \_ dovecot/lmtp
root       1076  0.0  0.4 1277056 9788 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    48 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   488 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      84073  0.0  0.1 111304  4268 ?        Ss   01:23   0:00  \_ sshd: [accepted]
systuser   1087  0.0  0.0 111864    76 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1404 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  84567  0.0  0.0 445028   320 ?        S    01:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   768 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 42736 ?       Ssl  Nov17   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   732 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.1 281936  3424 ?        Ssl  Nov17   0:05 /usr/sbin/rsyslogd -n
root       1117  0.0  7.3 1763304 178364 ?      Ssl  Nov17   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788  1056 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2092 ?        Ss   Nov17   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   84504  1.1  0.3 401180  8868 ?        S    01:23   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  84671 29.0  2.1 445160 52924 ?        R    01:23   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.2 261152  7208 ?        Ss   Nov17   0:02 cpsrvd (SSL) - waiting for connections                   
root      84682  0.0  0.0      0     0 ?        Z    01:23   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3776 ?        Rs   Nov17   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   700 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  3096 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.3 412396 32504 ?        Ss   Nov17   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.5 387556 13356 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  4.8 248116 117400 ?       Ss   Nov17   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  5.2 264072 127596 ?       S    Nov17   0:02  \_ spamd child
root       7507  0.0  4.8 248116 116772 ?       S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.5 210048 13452 ?        Ss   Nov17   0:02 tailwatchd
root       1412  0.0  0.2 183900  6692 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1413  0.0  0.7 228228 18892 ?        Ss   Nov17   0:00 dnsadmin - server mode
root       1836  0.0  0.0 299272   796 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1496 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.3 10.9 1458600 264288 ?      Sl   Nov17   5:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7772 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12848   400 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   364 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12880   412 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   188 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76698  0.1  0.8 277900 19492 ?        R    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    77381  0.1  0.8 277676 19956 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    78151  0.1  0.8 277740 19508 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    78277  0.2  0.7 277744 19320 ?        S    01:17   0:00  \_ /usr/sbin/httpd -k start
nobody    80343  0.1  0.7 277616 19104 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    80345  0.1  0.7 277744 19000 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    80347  0.2  0.7 277676 18968 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    81146  0.1  0.7 277744 18936 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    81491  0.1  0.7 277876 19068 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    82507  0.1  0.7 277560 18764 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    82509  0.1  0.7 277740 18780 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    82952  0.1  0.7 277744 19192 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    82957  0.1  0.7 277744 18624 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    82958  0.2  0.7 277744 18604 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    82971  0.1  0.7 277744 18700 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    82973  0.2  0.7 277744 18684 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    83305  0.2  0.7 277884 18816 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    84758  0.0  0.6 353712 15976 ?        S    01:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    83870  0.0  0.7 277868 18560 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    83878  0.1  0.7 277744 18212 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    83879  0.1  0.7 277744 18540 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148   416 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152   492 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.2 181620 29596 ?        Ss   00:00   0:05 lfd - sleeping
## mysql stats
Uptime: 23755  Threads: 3  Questions: 2063009  Slow queries: 0  Opens: 7388  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.845
*************************** 1. row ***************************
     Id: 31397
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 31401
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 31403
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 124.156.179.141 TIME_WAIT
      1 136.0.25.251 TIME_WAIT
      1 142.44.228.189 TIME_WAIT
      1 15.235.96.156 TIME_WAIT
      1 154.30.78.17 TIME_WAIT
      1 167.160.63.158 TIME_WAIT
      1 172.68.70.5 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 195.172.108.126 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.4 TIME_WAIT
      1 54.39.0.170 TIME_WAIT
      1 54.39.203.244 TIME_WAIT
      1 54.39.89.91 TIME_WAIT
      1 66.249.64.130 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.44.155.83 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 01:24:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 35 minutes 49 seconds
   Server load: 0.55 0.42 0.40
   Total accesses: 120374 - Total Traffic: 2.9 GB - Total Duration: 62140301
   CPU Usage: u5.6 s5.41 cu1564.32 cs1230.96 - 11.8% CPU load
   5.07 requests/sec - 126.4 kB/second - 24.9 kB/request - 516.227 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

W.W_.K.KKKK_WK.KKW_.KR_.K...K...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  83305 2/40/5447   W 1.02 0     0   3160934 66.9   1.09  126.63 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=758009628 HTTP/1.1
   1-0  -     0/0/5620    . 0.00 48    0   2785123 0.0    0.00  129.88 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  76698 1/176/5295  W 4.87 0     0   2638686 33.3   3.71  124.92 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=3028967727 HTTP/1.1
   3-0  82952 0/33/4921   _ 0.95 0     296 2568706 0.0    0.77  118.58 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=2949620282 HTTP/1.1
   4-0  -     0/0/5441    . 0.00 47    0   2628811 0.0    0.00  124.89 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  78151 6/147/5246  K 4.07 1     306 2618807 187.6  3.42  128.40 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=3835439227 HTTP/1.1
   6-0  -     0/0/5170    . 0.00 49    0   2635333 0.0    0.00  128.43 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  81146 2/73/4854   K 2.01 0     295 2381624 66.1   2.24  120.84 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=4072178398 HTTP/1.1
   8-0  82957 5/32/4579   K 1.08 0     302 2234569 154.4  0.81  107.65 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=2870487009 HTTP/1.1
   9-0  83870 2/14/4682   K 0.21 1     259 2315142 65.1   0.48  113.25 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=3685718348 HTTP/1.1
   10-0 83878 1/17/4623   K 0.47 2     648 2289422 2582.6 3.02  113.64 68.221.67.170 http/1.1 oysipa.oyostate.gov.ng:443 GET /download_documents/UPDATED-FISCAL-COMMITMENT-AND-CONTINGEN
   11-0 83879 0/16/4904   _ 0.37 0     7   2370219 0.0    0.44  120.76 44.212.145.46 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/2019elections/blog/2019elec
   12-0 77381 22/172/4036 W 4.17 0     0   2150267 99.7   3.42  100.19 167.172.89.14 http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   13-0 82507 2/42/4177   K 0.86 0     268 1994671 63.5   1.42  101.23 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=3612413290 HTTP/1.1
   14-0 -     0/0/4142    . 0.00 106   0   2158733 0.0    0.00  98.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 82958 1/40/4286   K 1.14 4     349 2155662 229.3  1.40  102.32 52.167.144.19 http/1.1 team.cloudware.ng:443      GET /var/cache/prod/pools/2wJoJAFabM/G/9/ HTTP/1.1
   16-0 82509 11/44/3983  K 1.16 1     290 2804671 346.9  1.47  110.17 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=3189239208 HTTP/1.1
   17-0 78277 0/144/4041  W 4.08 0     0   1976874 0.0    3.63  104.19 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 80343 0/75/3303   _ 1.94 0     0   1686775 0.0    2.21  74.51  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-0 -     0/0/3141    . 0.00 112   0   1532752 0.0    0.00  74.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 82971 1/26/3507   K 0.64 2     397 1737339 232.7  0.92  85.81  192.178.4.98  http/1.1 team.cloudware.ng:443      GET /var/cache/dev/profiler/d1/1c/ HTTP/1.1
   21-0 80345 0/70/2480   R 1.58 69    1   1285524 0.0    1.93  59.91  102.89.75.95  http/1.1
   22-0 81491 0/67/2388   _ 1.63 1     1   1156684 0.0    1.69  55.27  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   23-0 -     0/0/2440    . 0.00 74    0   1178291 0.0    0.00  53.34  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 82973 6/44/2368   K 1.52 1     287 1299385 189.4  1.35  61.89  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=488776
   25-0 -     0/0/1562    . 0.00 82    0   870760  0.0    0.00  38.55  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1345    . 0.00 257   0   766082  0.0    0.00  32.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1397    . 0.00 287   0   796632  0.0    0.00  33.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 80347 1/103/1349  K 3.16 3     295 736099  35.5   2.98  29.88  192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=4097239158 HTTP/1.1
   29-0 -     0/0/1149    . 0.00 253   0   697402  0.0    0.00  30.20  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/961     . 0.00 201   0   552267  0.0    0.00  24.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/1211    . 0.00 284   0   545120  0.0    0.00  32.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/641     . 0.00 402   0   354259  0.0    0.00  18.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/1003    . 0.00 230   0   620628  0.0    0.00  28.29  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/551     . 0.00 377   0   295159  0.0    0.00  14.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/465     . 0.00 391   0   257631  0.0    0.00  12.74  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/528     . 0.00 115   1   279046  0.0    0.00  14.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/563     . 0.00 401   0   312238  0.0    0.00  17.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/371     . 0.00 4246  0   197602  0.0    0.00  10.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/111     . 0.00 4252  0   55375   0.0    0.00  2.84   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/365     . 0.00 4129  0   203780  0.0    0.00  9.39   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/81      . 0.00 4257  0   39481   0.0    0.00  1.95   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/121     . 0.00 4236  0   63252   0.0    0.00  3.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/251     . 0.00 4255  0   94774   0.0    0.00  3.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/190     . 0.00 4030  0   101665  0.0    0.00  4.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/73      . 0.00 4251  0   39616   0.0    0.00  2.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/225     . 0.00 4126  0   119013  0.0    0.00  5.41   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/65      . 0.00 4216  0   35063   0.0    0.00  1.48   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/243     . 0.00 4240  0   115638  0.0    0.00  5.61   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/19      . 0.00 4256  0   7927    0.0    0.00  0.41   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/52      . 0.00 8320  0   34889   0.0    0.00  1.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/70      . 0.00 8402  0   34943   0.0    0.00  1.72   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/33      . 0.00 8378  0   12820   0.0    0.00  0.87   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/22      . 0.00 9671  0   10829   0.0    0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/121     . 0.00 9582  0   71948   0.0    0.00  3.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/72      . 0.00 9637  0   40608   0.0    0.00  2.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/7       . 0.00 10005 0   1321    0.0    0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 9997  0   2507    0.0    0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/9       . 0.00 10014 0   517     0.0    0.00  0.87   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/4       . 0.00 10012 0   12      0.0    0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/42      . 0.00 9850  0   19606   0.0    0.00  1.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2       . 0.00 10021 0   821     0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/19      . 0.00 9973  0   7935    0.0    0.00  0.50   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1251
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 2 seconds, (range: 0...17)
   index usage: 22%, cache usage: 29%
   total entries stored since starting: 86997
   total entries replaced since starting: 0
   total entries expired since starting: 85726
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 203 miss
   total removes since starting: 21 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit