403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-20.02.48 load[0] mem[64/63] mysql[3/10] httpd[26]
              total        used        free      shared  buff/cache   available
Mem:           2363        1466         117          51         779         680
Swap:          1999        1366         633
 02:48:02 up  1:53,  0 users,  load average: 0.59, 0.68, 0.71
## system overview
top - 02:48:02 up  1:53,  0 users,  load average: 0.59, 0.68, 0.71
Tasks: 213 total,   7 running, 204 sleeping,   0 stopped,   2 zombie
%Cpu(s): 64.7 us, 23.5 sy,  0.0 ni,  2.9 id,  5.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   124936 free,  1492348 used,   803016 buff/cache
KiB Swap:  2047996 total,   648956 free,  1399040 used.   706024 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 241576   3536 S  87.5 10.0   2:39.21 /usr/sbin+
 87956 nigeria   20   0  404052  16144  10384 S  18.8  0.7   0:00.05 /opt/cpan+
   669 root       0 -20       0      0      0 S   6.2  0.0   0:02.76 [loop0]
 86973 nobody    20   0  277760  18708   3656 S   6.2  0.8   0:00.06 /usr/sbin+
 87261 nobody    20   0  277760  18232   3212 S   6.2  0.8   0:00.06 /usr/sbin+
 87978 root      20   0  125060   6056    956 R   6.2  0.3   0:00.01 find /tmp+
 87995 cloudw    20   0       0      0      0 R   6.2  0.0   0:00.01 [php-cgi]
 88002 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44256   3336   1508 S   0.0  0.1   0:09.68 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.25 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.52 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.90 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.83 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.96 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.61 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   6204   5880 S   0.0  0.3   0:03.64 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 S   0.0  0.0   0:00.56 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    856    492 S   0.0  0.0   0:01.00 /usr/lib/+
   477 dbus      20   0   58724   1344    624 S   0.0  0.1   0:03.82 /usr/bin/+
   486 rpc       20   0   69256    164     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1164    812 S   0.0  0.0   0:01.67 /usr/lib/+
   499 root      20   0   52852    376    280 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    132     88 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1376    680 S   0.0  0.1   0:05.07 /usr/sbin+
   506 root      20   0  224144   6524    952 S   0.0  0.3   0:00.14 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.15 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.19 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3932    856 S   0.0  0.2   0:00.22 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.14 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.13 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.15 /usr/bin/+
   927 telegraf  20   0 5654048  38380   5120 S   0.0  1.6   0:03.91 /usr/loca+
   928 systuser  20   0  114016  14780   2608 S   0.0  0.6   0:01.68 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.50 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.25 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  232784   6600   4988 S   0.0  0.3   0:01.81 /usr/sbin+
   935 root      20   0  439788  11368  11160 S   0.0  0.5   0:00.31 php-fpm: +
   936 named     20   0  989260  32644   1532 S   0.0  1.3   0:05.33 /usr/sbin+
   938 root      20   0  261028   7128   2428 S   0.0  0.3   0:00.86 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:01.90 php-fpm: +
   947 root      20   0 1763312 254000    724 S   0.0 10.5   0:14.15 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.73 /usr/sbin+
   972 root      20   0  389508    692    484 S   0.0  0.0   0:00.26 php-fpm: +
   979 cpanelc+  20   0   10480   3280   2316 R   0.0  0.1   0:05.65 /usr/loca+
   982 root      20   0  396248    664    484 S   0.0  0.0   0:00.24 php-fpm: +
   984 root      20   0  388892    620    408 S   0.0  0.0   0:00.24 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.33 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    868    292 S   0.0  0.0   0:00.70 /usr/bin/+
  1116 dovenull  20   0   46912   2052   1428 S   0.0  0.1   0:00.08 dovecot/p+
  1117 dovenull  20   0   47592   2848   1720 S   0.0  0.1   0:00.10 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.02 dovecot/a+
  1119 root      20   0   10452    628    452 S   0.0  0.0   0:00.07 dovecot/l+
  1120 dovenull  20   0   46912   2008   1412 S   0.0  0.1   0:00.12 dovecot/p+
  1121 dovenull  20   0   47336   3288   2196 S   0.0  0.1   0:00.06 dovecot/i+
  1128 root      20   0   24564   2484    520 S   0.0  0.1   0:00.07 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.04 SonarPush+
  1137 dovecot   20   0   13568    688    464 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119756   2864 S   0.0  4.9   0:03.63 /usr/loca+
  1190 dovecot   20   0   41276   1656   1032 S   0.0  0.1   0:00.21 dovecot/a+
  1258 wp-tool+  20   0  412368  32628   1836 S   0.0  1.3   0:02.32 /usr/bin/+
  1259 wp-tool+  20   0  387528  13312   1684 S   0.0  0.6   0:00.15 /usr/bin/+
  1294 root      20   0  167452   4116   2744 S   0.0  0.2   0:00.19 dnsadmin +
  1298 root      20   0  262228  22828   4964 S   0.0  0.9   0:00.36 cpdavd - +
  1300 root      20   0  209492  12120   2248 S   0.0  0.5   0:01.75 tailwatchd
  1692 root      20   0  299272    844    464 S   0.0  0.0   0:00.18 php-fpm: +
  1709 root      38  18  130416   1432    704 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8056    772 S   0.0  0.3   0:00.69 /usr/sbin+
  1945 root      20   0   12848    428    292 S   0.0  0.0   0:00.94 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.81 /usr/loca+
  1947 root      20   0   12872    356    232 S   0.0  0.0   0:00.87 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182096  10780   1192 S   0.0  0.4   0:06.55 lfd - sle+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.12 [kworker]
  7285 root      20   0  265396 129488   2732 S   0.0  5.4   0:01.18 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 57206 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59263 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63882 nobody    20   0  277660  20692   4948 S   0.0  0.9   0:02.77 /usr/sbin+
 70227 nobody    20   0  277696  20340   4704 S   0.0  0.8   0:01.98 /usr/sbin+
 71282 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 71918 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74225 nobody    20   0  277636  20204   4688 S   0.0  0.8   0:01.48 /usr/sbin+
 75260 nobody    20   0  277884  20348   4752 S   0.0  0.8   0:01.18 /usr/sbin+
 75461 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76492 nobody    20   0  277892  20332   4672 S   0.0  0.8   0:01.05 /usr/sbin+
 76935 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 76958 nobody    20   0  277760  19892   4604 S   0.0  0.8   0:01.16 /usr/sbin+
 77817 nobody    20   0  277704  19916   4448 S   0.0  0.8   0:01.14 /usr/sbin+
 78955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80030 nobody    20   0  277764  20068   4560 S   0.0  0.8   0:00.80 /usr/sbin+
 81092 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83158 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 83266 nobody    20   0  277504  19344   4152 S   0.0  0.8   0:00.36 /usr/sbin+
 84639 nobody    20   0  277772  19172   4052 S   0.0  0.8   0:00.22 /usr/sbin+
 84674 nobody    20   0  277772  19412   4140 S   0.0  0.8   0:00.21 /usr/sbin+
 84675 nobody    20   0  277764  19372   4044 S   0.0  0.8   0:00.28 /usr/sbin+
 85887 nobody    20   0  277764  19060   3900 R   0.0  0.8   0:00.20 /usr/sbin+
 86456 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86501 nobody    20   0  277900  18976   3920 S   0.0  0.8   0:00.10 /usr/sbin+
 86523 nobody    20   0  277772  18764   3636 S   0.0  0.8   0:00.17 /usr/sbin+
 86581 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 86953 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 87006 nobody    20   0  277760  18636   3608 S   0.0  0.8   0:00.06 /usr/sbin+
 87007 nobody    20   0  277868  18664   3652 S   0.0  0.8   0:00.08 /usr/sbin+
 87171 nobody    20   0  277468  18304   3532 S   0.0  0.8   0:00.05 /usr/sbin+
 87186 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 87206 nobody    20   0  277760  18312   3380 S   0.0  0.8   0:00.02 /usr/sbin+
 87208 nobody    20   0  277612  18116   3304 S   0.0  0.7   0:00.02 /usr/sbin+
 87220 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 87259 nobody    20   0  277328  18332   3728 S   0.0  0.8   0:00.02 /usr/sbin+
 87260 nobody    20   0  277320  18044   3496 S   0.0  0.7   0:00.01 /usr/sbin+
 87262 nobody    20   0  277736  18688   3784 S   0.0  0.8   0:00.01 /usr/sbin+
 87263 nobody    20   0  277764  18560   3528 S   0.0  0.8   0:00.02 /usr/sbin+
 87264 nobody    20   0  277520  18488   3668 S   0.0  0.8   0:00.03 /usr/sbin+
 87265 nobody    20   0  277456  18280   3516 R   0.0  0.8   0:00.02 /usr/sbin+
 87314 healtho+  20   0  462688  69516   4236 S   0.0  2.9   0:03.65 php-fpm: +
 87400 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 87779 nigeria   20   0  400588   8584   5008 S   0.0  0.4   0:00.02 php-fpm: +
 87797 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 87860 nobody    20   0  277052  16296   2060 S   0.0  0.7   0:00.00 /usr/sbin+
 87863 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87865 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87866 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87868 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87869 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87871 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87873 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87875 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87876 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87878 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87881 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 87882 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 87884 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 87906 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87908 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87909 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 87912 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87913 root      20   0  113284   1200   1024 S   0.0  0.0   0:00.00 /bin/sh /+
 87914 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87916 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87919 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87921 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 87929 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87931 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 87933 root      20   0  129964   2324   1828 S   0.0  0.1   0:00.00 /usr/bin/+
 87937 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 87945 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 87965 cloudw    20   0  366220  16588  10892 S   0.0  0.7   0:00.01 /opt/cpan+
 87973 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87974 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 sh -c fin+
 87979 root      20   0  112812   1008    860 S   0.0  0.0   0:00.00 grep -Ef +
 87985 cloudw    20   0       0      0      0 Z   0.0  0.0   0:00.01 [php-cgi]+
 87994 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 88004 root      20   0  111304     96      0 R   0.0  0.0   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      57206  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/u200:2]
root      59263  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:1]
root      71282  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/1:1]
root      71918  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/0:4]
root      75461  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:0]
root      76935  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/1:0]
root      78955  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:3]
root      81092  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:2]
root      83158  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/u200:1]
root      86456  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:3]
root      87973  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44256  3336 ?        Ss   00:54   0:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  6204 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   856 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Ss   00:54   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   164 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1164 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   376 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   132 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1376 ?        Ssl  00:54   0:05 /usr/sbin/nscd
root        506  0.0  0.2 224144  6524 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      87863  0.0  0.0 183048  2156 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87881  0.0  0.0 113284  1212 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      87882  0.0  0.0 108052   360 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      87884  0.0  0.0 113288  1520 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      88005  0.0  0.0 153840  2092 ?        R    02:48   0:00  |               \_ ps auxf
root      87865  0.0  0.0 183048  2160 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87919  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      87866  0.0  0.0 183048  2160 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87908  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      87868  0.0  0.0 183048  2160 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87912  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      87869  0.0  0.0 183048  2160 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87916  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      87871  0.0  0.0 183048  2156 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87906  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      87873  0.0  0.0 183048  2152 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87914  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      87875  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87913  0.0  0.0 113284  1200 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      87933  0.0  0.0 129964  2324 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      87974  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      87978  0.0  0.2 125192  6056 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      87979  0.0  0.0 112812  1008 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      87876  0.0  0.0 183048  2152 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87921  0.0  0.0  20164   964 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [87929] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87929  0.0  0.0  20164   260 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87937  0.0  0.7 480124 17692 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      87878  0.0  0.0 183048  2152 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      87909  0.0  0.0  20164   968 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [87945] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87945  0.0  0.0  20164   264 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87956  0.0  0.6 404052 16144 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3932 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  2052 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  2848 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   628 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  2008 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  3288 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.1  24564  2484 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   688 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1656 ?        S    00:54   0:00  \_ dovecot/auth
root      86581  0.0  0.1  60820  4508 ?        S    02:47   0:00  \_ dovecot/lmtp
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.5 5654048 38380 ?       SLsl 00:54   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14780 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.4  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.3  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 232784  6600 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11368 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.3 989260 32644 ?        Ssl  00:54   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  7128 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      87797  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  87314 21.4  2.8 462688 69516 ?        S    02:47   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   87779  0.6  0.3 400588  8584 ?        S    02:47   0:00  \_ php-fpm: pool nigeriadecide_org
root        947  0.2 10.4 1763312 254000 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      86953  0.0  0.1 111304  4272 ?        Ss   02:47   0:00  \_ sshd: [accepted]
root      87186  0.0  0.1 111304  4268 ?        Ss   02:47   0:00  \_ sshd: [accepted]
sshd      87220  0.0  0.1 115644  2628 ?        S    02:47   0:00  |   \_ sshd: [net]
root      88004  0.0  0.1 111304  4264 ?        Ss   02:48   0:00  \_ sshd: [accepted]
root        972  0.0  0.0 389508   692 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10480  3280 ?        Ss   00:54   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   664 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   620 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  87400  0.0  0.0 445028   320 ?        S    02:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   868 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119756 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 129488 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32628 ?        Ss   00:54   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13312 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  4116 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.9 262228 22828 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.5 209492 12120 ?        Ss   00:54   0:01 tailwatchd
root       1692  0.0  0.0 299272   844 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1432 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.3  9.9 1462280 241576 ?      Sl   00:54   2:39 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8056 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12848   428 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12872   356 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    63882  0.1  0.8 277660 20692 ?        S    02:17   0:02  \_ /usr/sbin/httpd -k start
cloudw    87965  0.0  0.6 366220 16588 ?        S    02:48   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    70227  0.1  0.8 277696 20340 ?        S    02:26   0:01  \_ /usr/sbin/httpd -k start
nobody    74225  0.1  0.8 277636 20204 ?        S    02:32   0:01  \_ /usr/sbin/httpd -k start
nobody    75260  0.1  0.8 277884 20348 ?        S    02:33   0:01  \_ /usr/sbin/httpd -k start
nobody    76492  0.1  0.8 277892 20332 ?        S    02:35   0:01  \_ /usr/sbin/httpd -k start
cloudw    87931  0.0  0.6 353712 16240 ?        R    02:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    76958  0.1  0.8 277760 19892 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    77817  0.1  0.8 277704 19916 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    80030  0.1  0.8 277764 20068 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    83266  0.1  0.7 277504 19344 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    84639  0.1  0.7 277772 19172 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    84674  0.1  0.8 277772 19412 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    84675  0.1  0.8 277764 19372 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    85887  0.1  0.7 277764 19060 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86501  0.1  0.7 277900 18976 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    86523  0.2  0.7 277772 18764 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    86973  0.2  0.7 277760 18708 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
cloudw    88002  0.0  0.6 353712 15976 ?        S    02:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    87006  0.2  0.7 277760 18636 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87007  0.3  0.7 277868 18664 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87171  0.2  0.7 277468 18304 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87206  0.1  0.7 277760 18312 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87208  0.1  0.7 277612 18116 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87259  0.1  0.7 277328 18332 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87260  0.0  0.7 277320 18044 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87261  0.3  0.7 277760 18232 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87262  0.0  0.7 277736 18688 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87263  0.1  0.7 277764 18560 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87264  0.1  0.7 277520 18488 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87265  0.1  0.7 277456 18280 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87860  0.0  0.6 277052 16296 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 182096 10780 ?        Ss   00:54   0:06 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 6825  Threads: 3  Questions: 1229666  Slow queries: 0  Opens: 3819  Flush tables: 1  Open tables: 2000  Queries per second avg: 180.170
*************************** 1. row ***************************
     Id: 18662
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 18666
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29_19_05_001' LIMIT 1
*************************** 3. row ***************************
     Id: 18671
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 162.142.125.205 TIME_WAIT
      1 172.213.11.155 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.128.44.252 TIME_WAIT
      1 52.20.122.244 TIME_WAIT
      1 52.73.114.196 TIME_WAIT
      1 54.236.181.119 TIME_WAIT
      1 54.39.6.83 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      5 47.128.110.114 TIME_WAIT
     39 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 02:48:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 53 minutes 38 seconds
   Server load: 0.59 0.68 0.71
   Total accesses: 42180 - Total Traffic: 885.4 MB - Total Duration: 24467794
   CPU Usage: u9.75 s4.5 cu441.03 cs328.61 - 11.5% CPU load
   6.19 requests/sec - 133.0 kB/second - 21.5 kB/request - 580.08 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KC_KKC_WCWWKRKC_KK.K...KC.K.KKKKRKK.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  85887 5/47/2048   K 0.74  0    200 1129634 7.7   0.75  39.05 152.32.171.54 http/1.1 team.cloudware.ng:443      GET /syn/ HTTP/1.1
   1-0  76958 50/251/1869 C 5.67  6    174 1083224 30.6  4.45  39.53 152.32.171.54 http/1.1 team.cloudware.ng:80       GET /leftDao.php?callback=jQuery183016740860980352856_160430980
   2-0  83266 0/96/1813   _ 1.94  0    22  1015497 0.0   1.16  41.98 152.32.171.54 http/1.1 team.cloudware.ng:80       GET /Public/Mobile/ecshe_css/wapmain.css?v=1545408652 HTTP/1.1
   3-0  76492 2/206/1960  K 4.60  0    498 1141488 63.8  4.84  48.23 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=3362387386 HTTP/1.1
   4-0  86501 1/20/1683   K 0.34  0    292 1214443 35.3  0.42  35.42 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=652995118 HTTP/1.1
   5-0  77817 48/227/1914 C 5.58  6    119 1060984 29.4  4.73  38.61 152.32.171.54 http/1.1 team.cloudware.ng:80       GET /getConfig/listPopFrame.do?code=1&position=index&_=16014896
   6-0  86523 0/58/1818   _ 1.28  0    116 1052281 0.0   0.26  39.68 152.32.171.54 http/1.1 team.cloudware.ng:80       POST /api/system/systemConfigs/getCustomerServiceLink HTTP/1.1
   7-0  84639 0/50/1629   W 0.77  0    0   880673  0.0   1.10  32.21 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  74225 49/315/1797 C 6.82  6    140 1019852 29.5  5.88  36.06 152.32.171.54 http/1.1 team.cloudware.ng:80       GET /api/member/web/bus/list/notice?noticeType=INDEX_BANNER HTT
   9-0  63882 0/537/1772  W 10.73 0    0   1019592 0.0   12.05 35.81 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=762732
   10-0 86973 1/10/1618   W 0.19  0    0   944105  35.6  0.26  35.01 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=2905301058 HTTP/1.1
   11-0 84674 1/49/1749   K 0.78  0    300 1023421 35.4  2.49  39.69 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=407946183 HTTP/1.1
   12-0 87860 0/0/1699    R 0.00  0    0   1019368 0.0   0.00  40.25 157.15.40.56  http/1.1
   13-0 87006 6/13/1375   K 0.28  0    207 784508  8.4   0.20  28.81 152.32.171.54 http/1.1 team.cloudware.ng:443      GET /wap/ HTTP/1.1
   14-0 80030 47/181/1105 C 4.07  6    163 604068  28.9  3.03  22.91 152.32.171.54 http/1.1 team.cloudware.ng:80       GET /wap/api/syspara!getSyspara.action?code=customer_service_ur
   15-0 75260 0/257/1326  _ 5.41  0    0   738299  0.0   4.65  23.12 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 87007 5/12/994    K 0.29  0    384 576079  160.9 0.35  20.82 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=2911270677 HTTP/1.1
   17-0 84675 3/57/1215   K 1.07  3    342 686899  95.0  1.22  24.78 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=2873425051 HTTP/1.1
   18-0 -     0/0/1230    . 0.00  3    0   660507  0.0   0.00  24.21 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 87171 13/17/1056  K 0.36  0    125 614494  12.6  0.12  19.88 152.32.171.54 http/1.1 team.cloudware.ng:443      GET /h5/ HTTP/1.1
   20-0 -     0/0/571     . 0.00  5    0   320116  0.0   0.00  11.75 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/459     . 0.00  8    0   276691  0.0   0.00  10.34 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1162    . 0.00  2    0   647146  0.0   0.00  25.56 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 87206 5/8/1088    K 0.15  0    205 689341  7.7   0.05  27.92 152.32.171.54 http/1.1 team.cloudware.ng:443      GET /admin HTTP/1.1
   24-0 70227 43/397/862  C 8.75  6    168 437847  26.1  8.51  16.95 152.32.171.54 http/1.1 team.cloudware.ng:80       POST /api/heartbeat HTTP/1.1
   25-0 -     0/0/825     . 0.00  9    0   505866  0.0   0.00  15.07 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 87208 6/10/842    K 0.13  0    224 487926  8.3   0.05  18.93 152.32.171.54 http/1.1 team.cloudware.ng:443      GET /imei/ HTTP/1.1
   27-0 -     0/0/91      . 0.00  7    0   74231   0.0   0.00  0.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 87259 6/11/696    K 0.12  0    211 409663  8.2   0.04  13.76 152.32.171.54 http/1.1 team.cloudware.ng:443      GET /appx/ HTTP/1.1
   29-0 87260 5/8/414     K 0.08  0    150 262646  7.5   0.02  5.45  152.32.171.54 http/1.1 team.cloudware.ng:443      GET /app/ HTTP/1.1
   30-0 87261 6/9/475     K 0.23  0    447 301145  190.7 0.28  9.85  192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=2311457893 HTTP/1.1
   31-0 87262 1/5/145     K 0.01  1    264 79411   34.9  0.06  2.47  192.178.4.98  http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2295905
   32-0 87263 0/4/851     R 0.05  2    4   529850  0.0   0.07  15.42 47.128.44.252 http/1.1
   33-0 87264 2/7/832     K 0.10  1    263 465135  62.2  0.18  18.55 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=64701 H
   34-0 87265 5/11/216    K 0.10  0    152 138067  7.5   0.08  4.09  152.32.171.54 http/1.1 team.cloudware.ng:443      GET /apps/ HTTP/1.1
   35-0 -     0/0/157     . 0.00  3726 0   115547  0.0   0.00  4.68  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/466     . 0.00  3633 0   274598  0.0   0.00  9.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/22      . 0.00  3725 0   10578   0.0   0.00  0.40  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/23      . 0.00  3659 0   11684   0.0   0.00  0.51  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25      . 0.00  3660 0   15119   0.0   0.00  0.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/4       . 0.00  3949 0   1340    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/115     . 0.00  3443 0   65290   0.0   0.00  3.06  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2       . 0.00  3957 0   7       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/7       . 0.00  3933 0   2574    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4       . 0.00  3947 0   1141    0.0   0.00  0.06  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2       . 0.00  3956 0   60      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/4       . 0.00  3948 0   244     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/147     . 0.00  3403 0   75011   0.0   0.00  3.67  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/3       . 0.00  3950 0   77      0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1012
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...27)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 22017
   total entries replaced since starting: 0
   total entries expired since starting: 20990
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 83 miss
   total removes since starting: 15 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit