403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.03.09.txt
 ## swap threshold exceeded
## server overview
2025-11-18.03.09 load[0] mem[56/79] mysql[3/11] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1163         124          80        1075         934
Swap:          1999        1703         296
 03:09:01 up  8:21,  0 users,  load average: 0.53, 0.93, 0.73
## system overview
top - 03:09:01 up  8:21,  0 users,  load average: 0.53, 0.93, 0.73
Tasks: 203 total,   7 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.9 us, 12.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   116248 free,  1200600 used,  1103452 buff/cache
KiB Swap:  2047996 total,   303428 free,  1744568 used.   947596 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264276   3288 S 150.0 10.9   7:02.96 /usr/sbin+
 52905 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.05 /opt/cpan+
 52953 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44412   3356   1500 S   0.0  0.1   0:41.92 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.77 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:30.62 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.25 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.04 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.02 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.79 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.11 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.76 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   3156   2904 S   0.0  0.1   0:14.44 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    544    416 S   0.0  0.0   0:02.03 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    908    504 S   0.0  0.0   0:04.12 /usr/lib/+
   514 root      20   0  224148   3524   1024 S   0.0  0.1   0:00.35 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.68 /usr/sbin+
   521 root      20   0  152780    204    164 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    312    204 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1392    668 S   0.0  0.1   0:16.09 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1212    864 S   0.0  0.1   0:07.09 /usr/lib/+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:00.98 /usr/sbin+
   558 root      20   0   25908    144    124 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1784    736 S   0.0  0.1   0:24.39 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4076    988 S   0.0  0.2   0:00.68 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:03.23 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.02 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.65 pure-ftpd+
  1062 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13124   2324 S   0.0  0.5   0:07.11 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.67 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:27.04 /usr/bin/+
  1069 telegraf  20   0 5654304  36756   6104 S   0.0  1.5   0:16.16 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.60 /usr/bin/+
  1072 root      20   0   51508    572    408 S   0.0  0.0   0:00.37 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.13 /usr/bin/+
  1085 systuser  20   0   12756     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.71 /usr/sbin+
  1087 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1392   1280 S   0.0  0.1   0:01.27 sw-engine+
  1091 root      20   0  389508    524    428 S   0.0  0.0   0:00.84 php-fpm: +
  1098 named     20   0 1054792  43376   1860 S   0.0  1.8   0:16.94 /usr/sbin+
  1109 root      20   0  388892    608    396 S   0.0  0.0   0:00.78 php-fpm: +
  1113 root      20   0  298320   4080   3048 S   0.0  0.2   0:07.30 /usr/sbin+
  1117 root      20   0 1763304  77796    912 S   0.0  3.2   0:14.06 /usr/loca+
  1123 root      20   0  439788    884    792 S   0.0  0.0   0:00.88 php-fpm: +
  1131 root      20   0  400740   2008    724 S   0.0  0.1   0:04.37 php-fpm: +
  1134 root      20   0  261284   6816   1812 S   0.0  0.3   0:03.25 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3728   2364 R   0.0  0.2   0:23.99 /usr/loca+
  1149 root      20   0  396248    688    504 S   0.0  0.0   0:00.80 php-fpm: +
  1213 dovenull  20   0   46984   2304   1584 S   0.0  0.1   0:00.48 dovecot/p+
  1214 dovenull  20   0   47936   3024   1724 S   0.0  0.1   0:00.35 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.09 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.38 dovecot/l+
  1217 dovenull  20   0   47056   2524   1712 S   0.0  0.1   0:00.68 dovecot/p+
  1218 dovenull  20   0   47752   2716   1632 S   0.0  0.1   0:00.25 dovecot/i+
  1226 root      20   0   24556   2528    564 S   0.0  0.1   0:00.19 dovecot/c+
  1227 dovecot   20   0   13568    712    516 S   0.0  0.0   0:00.07 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.13 SonarPush+
  1297 dovecot   20   0   41188   1584   1072 S   0.0  0.1   0:00.67 dovecot/a+
  1300 wp-tool+  20   0  412396  30028   2156 S   0.0  1.2   0:09.63 /usr/bin/+
  1301 wp-tool+  20   0  387556   3756   1792 S   0.0  0.2   0:00.30 /usr/bin/+
  1308 root      20   0  248116   4768    892 S   0.0  0.2   0:06.39 /usr/loca+
  1409 root      20   0  210332  10704   2104 S   0.0  0.4   0:04.08 tailwatchd
  1412 root      20   0  262224  21832   3908 S   0.0  0.9   0:01.50 cpdavd - +
  1413 root      20   0  167452   3480   2104 S   0.0  0.1   0:00.53 dnsadmin +
  1836 root      20   0  299272    572    408 S   0.0  0.0   0:00.81 php-fpm: +
  1853 root      38  18  130416   1428    756 S   0.0  0.1   0:00.07 cpanellog+
  2063 root      20   0  266984   7676    724 S   0.0  0.3   0:04.05 /usr/sbin+
  2067 root      20   0   12844    388    280 S   0.0  0.0   0:03.26 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:02.82 /usr/loca+
  2069 root      20   0   12884    400    280 S   0.0  0.0   0:03.04 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  266560  97744   3108 S   0.0  4.0   0:04.82 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
 13053 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.55 [kworker]
 14140 root      20   0  182160  29100   1240 S   0.0  1.2   0:11.30 lfd - sle+
 24663 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 31819 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 37624 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 40701 nobody    20   0  277540  19880   4928 S   0.0  0.8   0:01.50 /usr/sbin+
 41684 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 41687 nobody    20   0  277616  19708   4756 S   0.0  0.8   0:01.40 /usr/sbin+
 41818 nobody    20   0  277764  20076   4796 S   0.0  0.8   0:01.55 /usr/sbin+
 42229 nobody    20   0  277680  20296   4900 S   0.0  0.8   0:01.09 /usr/sbin+
 43228 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 44510 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44568 nobody    20   0  277752  19880   4700 S   0.0  0.8   0:00.91 /usr/sbin+
 44930 nobody    20   0  277680  19376   4540 S   0.0  0.8   0:01.00 /usr/sbin+
 45478 nobody    20   0  277608  19556   4600 S   0.0  0.8   0:00.93 /usr/sbin+
 45823 nobody    20   0  277780  19900   4592 S   0.0  0.8   0:00.74 /usr/sbin+
 46733 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46767 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46941 nobody    20   0  277744  19348   4516 S   0.0  0.8   0:00.76 /usr/sbin+
 47185 nobody    20   0  277572  19740   4732 S   0.0  0.8   0:00.85 /usr/sbin+
 47549 root      20   0  123364    756    532 S   0.0  0.0   0:00.00 /usr/sbin+
 48061 nobody    20   0  277744  19340   4456 S   0.0  0.8   0:00.67 /usr/sbin+
 48924 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 49911 nobody    20   0  277888  18940   4172 S   0.0  0.8   0:00.23 /usr/sbin+
 50495 nobody    20   0  277876  19356   4240 S   0.0  0.8   0:00.36 /usr/sbin+
 51053 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51270 nobody    20   0  277868  18856   4080 S   0.0  0.8   0:00.26 /usr/sbin+
 51279 nobody    20   0  277740  18868   4092 S   0.0  0.8   0:00.18 /usr/sbin+
 51281 nobody    20   0  277744  18608   3788 S   0.0  0.8   0:00.28 /usr/sbin+
 51282 nobody    20   0  277876  19140   4176 S   0.0  0.8   0:00.23 /usr/sbin+
 51939 nescrow+  20   0   29148   2724   2232 S   0.0  0.1   0:00.00 dovecot/q+
 51981 nescrow+  20   0   61768   6104   4432 S   0.0  0.3   0:00.00 dovecot/l+
 52371 nobody    20   0  277744  17828   3168 S   0.0  0.7   0:00.02 /usr/sbin+
 52571 nobody    20   0  277744  18188   3436 S   0.0  0.8   0:00.04 /usr/sbin+
 52665 nobody    20   0  277744  17896   3236 S   0.0  0.7   0:00.05 /usr/sbin+
 52704 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 52755 wp-tool+  20   0  445028    312    184 S   0.0  0.0   0:00.00 sw-engine+
 52774 nobody    20   0  277724  18208   3656 S   0.0  0.8   0:00.02 /usr/sbin+
 52775 nobody    20   0  277744  18176   3524 S   0.0  0.8   0:00.01 /usr/sbin+
 52776 nobody    20   0  277320  17316   3148 S   0.0  0.7   0:00.00 /usr/sbin+
 52802 nobody    20   0  277744  17812   3160 S   0.0  0.7   0:00.01 /usr/sbin+
 52814 nobody    20   0  277460  17812   3388 S   0.0  0.7   0:00.02 /usr/sbin+
 52815 nobody    20   0  277040  15704   1796 S   0.0  0.6   0:00.00 /usr/sbin+
 52818 nigeria   20   0  400460   4476   2364 S   0.0  0.2   0:00.00 php-fpm: +
 52845 mailnull  20   0   89488   4316   1176 S   0.0  0.2   0:00.00 /usr/sbin+
 52848 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 52849 root      20   0  157100   4992   3712 S   0.0  0.2   0:00.00 sshd: unk+
 52850 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 52853 healtho+  20   0  431968  39208   4256 S   0.0  1.6   0:00.36 php-fpm: +
 52855 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 52857 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52859 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52862 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52863 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52864 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52865 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 52866 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52868 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52877 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 52879 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 52880 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52882 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52883 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52884 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52885 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52886 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 52888 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 52893 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 52899 root      20   0  169972  16852   2876 S   0.0  0.7   0:00.08 /usr/loca+
 52900 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52901 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 52902 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52909 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 52945 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 52950 root      20   0  113496   1424   1232 S   0.0  0.1   0:00.00 bash /usr+
 52952 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 52954 root      20   0   18672   2944   1592 R   0.0  0.1   0:00.00 /usr/bin/+
 52957 root      20   0   38648   6508   3044 R   0.0  0.3   0:00.00 /usr/loca+
 52958 root      20   0  157100   1280      0 R   0.0  0.1   0:00.00 sshd: unk+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:03  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      24663  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:0]
root      31819  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:1]
root      37624  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/u200:2]
root      41684  0.0  0.0      0     0 ?        S    02:53   0:00  \_ [kworker/1:5]
root      43228  0.0  0.0      0     0 ?        S    02:55   0:00  \_ [kworker/0:2]
root      44510  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/u200:0]
root      46733  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/0:1]
root      46767  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/1:0]
root      48924  0.0  0.0      0     0 ?        S    03:03   0:00  \_ [kworker/0:3]
root      51053  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44412  3356 ?        Ss   Nov17   0:41 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.1  40244  3156 ?        Ss   Nov17   0:14 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   544 ?        S<sl Nov17   0:02 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3524 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   204 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   312 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1392 ?        Ss   Nov17   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1212 ?        Ss   Nov17   0:07 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      52855  0.0  0.0 182864  2408 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52879  0.0  0.0 113284  1212 ?        Ss   03:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      52893  0.0  0.0 108052   356 ?        S    03:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      52901  0.0  0.0 113288  1520 ?        S    03:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      52959  0.0  0.0 153840  2092 ?        R    03:09   0:00  |               \_ ps auxf
root      52857  0.0  0.0 182864  2412 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52882  0.0  0.0  20164   804 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      52859  0.0  0.0 182864  2412 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52884  0.0  0.0  20164   808 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      52862  0.0  0.0 182864  2412 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52877  0.0  0.0  20164   984 ?        Ss   03:09   0:00  |   \_ jailshell (cloudsms) [52960] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  52960  0.0  0.0  20164   260 ?        S    03:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      52863  0.0  0.0 182864  2412 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52885  0.0  0.0  20164   808 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      52864  0.0  0.0 182864  2412 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52880  0.0  0.0  20164   808 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      52865  0.0  0.0 182864  2408 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52883  0.0  0.0 113284  1212 ?        Ss   03:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      52899  0.0  0.6 169972 16852 ?        S    03:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      52950  0.0  0.0 113496  1424 ?        S    03:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      52954  0.0  0.1  19652  3964 ?        R    03:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      52866  0.0  0.0 182864  2412 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52888  0.0  0.0  20164   964 ?        Ss   03:09   0:00  |   \_ jailshell (pactpay) [52902] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52902  0.0  0.0  20164   260 ?        S    03:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52909  0.0  0.7 480124 17688 ?        S    03:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      52868  0.0  0.0 182864  2408 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      52886  0.0  0.0  20164   968 ?        Ss   03:09   0:00      \_ jailshell (nigeria) [52900] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52900  0.0  0.0  20164   260 ?        S    03:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52905  0.0  0.6 404052 16140 ?        S    03:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908   144 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1784 ?        Ssl  Nov17   0:24 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4076 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  52845  0.0  0.1  89488  4316 ?        S    03:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    68 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    40 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13124 ?        Ssl  Nov17   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.0  0.3 1276356 8572 ?        Ssl  Nov17   0:27 /usr/bin/cspdaemon
telegraf   1069  0.0  1.5 5654304 36756 ?       SLsl Nov17   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   572 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  2304 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  3024 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2524 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  2716 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.1  24556  2528 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   712 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1584 ?        S    Nov17   0:00  \_ dovecot/auth
nescrow+  51939  0.0  0.1  29148  2724 ?        S    03:07   0:00  \_ dovecot/quota-status -p postfix
nescrow+  51981  0.0  0.2  61768  6104 ?        S    03:07   0:00  \_ dovecot/lmtp
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      52704  0.0  0.1 111304  4260 ?        Ss   03:08   0:00  \_ sshd: [accepted]
root      52849  0.0  0.2 157100  4992 ?        Ss   03:08   0:00  \_ sshd: unknown [priv]
sshd      52850  0.0  0.1 115644  2632 ?        S    03:08   0:00      \_ sshd: unknown [net]
root      52958  0.0  0.0      0     0 ?        Zsl  03:09   0:00      \_ [lwauth] <defunct>
systuser   1087  0.0  0.0 111864    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1392 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  52755  0.0  0.0 445028   312 ?        S    03:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   524 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 43376 ?       Ssl  Nov17   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   608 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.1 298320  4080 ?        Ssl  Nov17   0:07 /usr/sbin/rsyslogd -n
root       1117  0.0  3.2 1763304 77796 ?       Ssl  Nov17   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788   884 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2008 ?        Ss   Nov17   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   52818  0.0  0.1 400460  4476 ?        S    03:08   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  52853  0.0  1.6 431968 39208 ?        S    03:09   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.2 261284  6816 ?        Ss   Nov17   0:03 cpsrvd (SSL) - waiting for connections                   
root      52848  0.0  0.0      0     0 ?        Z    03:08   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3728 ?        Ss   Nov17   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   688 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.2 412396 30028 ?        Ss   Nov17   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.1 387556  3756 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4768 ?        Ss   Nov17   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  4.0 266560 97744 ?        S    Nov17   0:04  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210332 10704 ?        Ss   Nov17   0:04 tailwatchd
root       1412  0.0  0.9 262224 21832 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  3480 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   572 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1428 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.4 10.9 1458600 264276 ?      Sl   Nov17   7:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7676 ?        Ss   Nov17   0:04 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12844   388 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12884   400 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    40701  0.1  0.8 277540 19880 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    41687  0.1  0.8 277616 19708 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    41818  0.1  0.8 277764 20076 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    42229  0.1  0.8 277680 20296 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    44568  0.1  0.8 277752 19880 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    44930  0.1  0.8 277680 19376 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    45478  0.1  0.8 277608 19556 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    45823  0.1  0.8 277780 19900 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    46941  0.1  0.7 277744 19348 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    47185  0.1  0.8 277572 19740 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    48061  0.1  0.7 277744 19340 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    49911  0.0  0.7 277888 18940 ?        S    03:04   0:00  \_ /usr/sbin/httpd -k start
nobody    50495  0.1  0.7 277876 19356 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    52953  0.0  0.6 353712 15976 ?        S    03:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    51270  0.1  0.7 277868 18856 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51279  0.1  0.7 277740 18868 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51281  0.1  0.7 277744 18608 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51282  0.1  0.7 277876 19140 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    52371  0.0  0.7 277744 17828 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52571  0.1  0.7 277744 18188 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52665  0.2  0.7 277744 17896 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52774  0.2  0.7 277724 18208 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    52945  0.0  0.6 353712 15980 ?        S    03:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    52775  0.1  0.7 277744 18176 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52776  0.0  0.7 277320 17316 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52802  0.1  0.7 277744 17812 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52814  0.4  0.7 277460 17812 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52815  0.0  0.6 277040 15704 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148     8 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152    40 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.0  1.2 182160 29100 ?        Ss   00:00   0:11 lfd - sleeping
root      47549  0.0  0.0 123364   756 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 30055  Threads: 3  Questions: 2640959  Slow queries: 0  Opens: 9245  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.870
*************************** 1. row ***************************
     Id: 40069
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 40070
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 40079
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 4. row ***************************
     Id: 40080
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
## network stats
      1 114.119.133.34 TIME_WAIT
      1 15.235.96.171 TIME_WAIT
      1 15.235.98.61 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 185.241.206.44 TIME_WAIT
      1 185.252.234.215 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.0.53.110 TIME_WAIT
      1 52.167.144.183 TIME_WAIT
      1 54.39.136.56 TIME_WAIT
      1 74.7.230.56 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 216.73.216.4 TIME_WAIT
      2 45.156.129.127 TIME_WAIT
      3 137.184.171.6 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 03:09:02 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 20 minutes 49 seconds
   Server load: 0.89 1.00 0.76
   Total accesses: 148566 - Total Traffic: 3.6 GB - Total Duration: 74383463
   CPU Usage: u9.69 s7.46 cu1913.06 cs1505.22 - 11.4% CPU load
   4.94 requests/sec - 123.9 kB/second - 25.1 kB/request - 500.676 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

R_RRRKKKKK__RR_K_W_R_KKKRR......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  52371 0/3/6830   R 0.06 47   261 3737118 0.0   0.10  158.52 104.194.147.43  http/1.1 training.cloudware.ng:443
   1-0  52571 0/10/7026  _ 0.43 1    1   3381930 0.0   0.19  164.58 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   2-0  44568 0/162/6743 R 3.76 36   298 3237532 0.0   3.93  157.31 45.90.57.71     http/1.1 training.cloudware.ng:443
   3-0  44930 0/166/6263 R 4.22 17   270 3186281 0.0   4.77  151.23 31.13.213.232   http/1.1 training.cloudware.ng:443
   4-0  40701 0/321/6763 R 7.59 45   6   3232826 0.0   7.01  157.51 45.61.133.121   http/1.1 training.cloudware.ng:443
   5-0  48061 1/125/6526 K 2.73 1    295 3178517 35.1  5.36  161.85 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=447943942 HTTP/1.1
   6-0  52665 6/8/6576   K 0.20 2    294 3213308 190.8 0.25  161.99 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=591021892 HTTP/1.1
   7-0  52774 1/3/6023   K 0.04 0    340 2938207 35.5  0.08  155.75 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=1482420956 HTTP/1.1
   8-0  46941 4/132/5959 K 3.08 4    256 2786790 125.7 3.35  138.33 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=4003195261 HTTP/1.1
   9-0  45478 1/177/5878 K 4.80 1    275 2850843 34.1  4.05  143.83 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=132682912 HTTP/1.1
   10-0 52775 0/3/5682   _ 0.05 0    0   2753705 0.0   0.09  139.85 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 45823 0/146/5921 _ 2.92 1    6   2812732 0.0   3.06  158.21 34.231.181.240  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/assets/js/polling_unit_cate
   12-0 49911 0/50/5188  R 0.90 121  1   2711074 0.0   0.95  127.06 167.88.171.183  http/1.1 training.cloudware.ng:443
   13-0 47185 0/166/5173 R 3.90 20   5   2444282 0.0   3.53  124.74 195.123.210.209 http/1.1 training.cloudware.ng:443
   14-0 41687 0/261/5021 _ 5.67 0    552 2568088 0.0   5.91  120.32 185.252.234.215 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   15-0 50495 1/61/5380  K 1.45 0    363 2598395 35.2  1.55  127.09 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=3728149938 HTTP/1.1
   16-0 41818 0/320/4915 _ 8.51 1    259 3160125 0.0   5.85  129.58 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=3279345911 HTTP/1.1
   17-0 52776 0/2/4840   W 0.00 0    0   2286953 0.0   0.01  123.22 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 51270 0/45/3827  _ 1.08 1    1   1908313 0.0   1.31  86.26  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   19-0 51279 0/33/3925  R 0.74 11   266 1870615 0.0   1.36  96.80  111.47.233.82   http/1.1
   20-0 52802 0/2/3875   _ 0.02 0    308 1900378 0.0   0.06  94.90  192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=2076517175 HTTP/1.1
   21-0 51281 2/46/2713  K 1.17 1    274 1370668 65.3  1.24  64.81  192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=3211495428 HTTP/1.1
   22-0 51282 4/41/2838  K 0.93 1    266 1331996 124.2 0.98  65.31  192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=1777393422 HTTP/1.1
   23-0 52814 3/4/2746   K 0.05 0    329 1303507 96.8  0.10  62.38  192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=1262794357 HTTP/1.1
   24-0 42229 0/196/2838 R 5.10 99   298 1521240 0.0   4.69  87.58  195.123.219.34  http/1.1 training.cloudware.ng:443
   25-0 52815 0/0/2066   R 0.00 5    0   1104467 0.0   0.00  50.04  45.61.133.122   http/1.1 training.cloudware.ng:443
   26-0 -     0/0/1470   . 0.00 4075 0   829882  0.0   0.00  36.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1640   . 0.00 4080 4   917792  0.0   0.00  38.58  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1502   . 0.00 4083 0   804838  0.0   0.00  33.41  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/1590   . 0.00 3217 0   853313  0.0   0.00  38.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1142   . 0.00 4082 0   645034  0.0   0.00  29.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/1240   . 0.00 4074 0   555517  0.0   0.00  33.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/747    . 0.00 3874 0   402640  0.0   0.00  20.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/1047   . 0.00 4079 0   641345  0.0   0.00  29.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/639    . 0.00 3833 0   329465  0.0   0.00  16.27  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/517    . 0.00 4064 0   284168  0.0   0.00  13.47  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/698    . 0.00 3666 0   340948  0.0   0.00  19.94  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/581    . 0.00 4081 0   316089  0.0   0.00  17.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/560    . 0.00 3311 0   281890  0.0   0.00  15.60  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/146    . 0.00 4078 0   69846   0.0   0.00  3.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/639    . 0.00 3787 0   332944  0.0   0.00  15.73  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/94     . 0.00 4172 0   46768   0.0   0.00  2.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/135    . 0.00 4171 0   70951   0.0   0.00  3.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/266    . 0.00 4157 0   100462  0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/210    . 0.00 4158 0   111671  0.0   0.00  5.35   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/202    . 0.00 3751 0   96196   0.0   0.00  5.80   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/290    . 0.00 4169 0   151806  0.0   0.00  7.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/70     . 0.00 4170 0   35217   0.0   0.00  1.50   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/408    . 0.00 3688 0   193592  0.0   0.00  9.83   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/48     . 0.00 4077 0   23887   0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/61     . 0.00 4166 0   37811   0.0   0.00  1.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/82     . 0.00 4167 0   40275   0.0   0.00  1.78   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/41     . 0.00 4159 0   14661   0.0   0.00  0.98   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/80     . 0.00 4185 0   38738   0.0   0.00  2.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/179    . 0.00 4151 0   93196   0.0   0.00  5.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/102    . 0.00 4070 0   53549   0.0   0.00  2.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/120    . 0.00 4188 0   56500   0.0   0.00  3.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/13     . 0.00 4152 0   3559    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/34     . 0.00 4107 0   13539   0.0   0.00  1.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 4162 0   103     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/192    . 0.00 4141 0   100024  0.0   0.00  5.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/12     . 0.00 4189 0   5547    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/50     . 0.00 4071 0   22451   0.0   0.00  1.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/25     . 0.00 4068 0   11908   0.0   0.00  0.43   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/9      . 0.00 4138 0   4843    0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00 4154 0   1793    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/9      . 0.00 4131 0   3592    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 4186 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/23     . 0.00 4103 0   11930   0.0   0.00  0.49   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/6      . 0.00 4150 0   2254    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 4168 0   27      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/7      . 0.00 4136 0   2309    0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/9      . 0.00 4137 0   3554    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/44     . 0.00 4017 0   21261   0.0   0.00  0.90   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00 4184 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/21     . 0.00 4087 0   9134    0.0   0.00  0.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/8      . 0.00 4140 0   4157    0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/1      . 0.00 4187 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 4164 0   529     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 4183 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 4165 0   29      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1231
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...33)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 107630
   total entries replaced since starting: 0
   total entries expired since starting: 106371
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 38 hit, 282 miss
   total removes since starting: 28 hit, 17 miss
Youez - 2016 - github.com/yon3zu
LinuXploit