403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.04.39.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-20.04.39 load[0] mem[84/33] mysql[4/7] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1946          74          25         343         235
Swap:          1999        1069         930
 04:39:01 up  1:00,  0 users,  load average: 0.37, 0.30, 0.30
## system overview
top - 04:39:01 up  1:00,  0 users,  load average: 0.37, 0.30, 0.30
Tasks: 203 total,   7 running, 196 sleeping,   0 stopped,   0 zombie
%Cpu(s): 76.5 us, 23.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    71296 free,  2009880 used,   339124 buff/cache
KiB Swap:  2047996 total,   951036 free,  1096960 used.   224236 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1461972 226988   2120 S 118.8  9.4   0:47.86 /usr/sbin+
 48632 nigeria   20   0  404052  16136  10384 S  12.5  0.7   0:00.04 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:10.94 [kswapd0]
   950 root      20   0  261028   6884   2108 S   6.2  0.3   0:01.17 cpsrvd (S+
 37268 nobody    20   0  277756  20016   4380 S   6.2  0.8   0:01.25 /usr/sbin+
 48618 root      20   0  169872  16848   2880 S   6.2  0.7   0:00.09 /usr/loca+
 48652 cloudw    20   0  353712  15980  10492 S   6.2  0.7   0:00.02 /opt/cpan+
 48671 cpanell+  20   0  157920  10408   3608 R   6.2  0.4   0:00.01 /usr/loca+
     1 root      20   0   44268   3256   1444 S   0.0  0.1   0:05.77 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:03.53 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.71 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.90 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.02 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   5144   4856 S   0.0  0.2   0:02.08 /usr/lib/+
   387 root      20   0   45352    428    284 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    352    252 S   0.0  0.0   0:00.32 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1204    844 S   0.0  0.0   0:00.89 /usr/lib/+
   471 root      20   0   52852    376    300 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58612   1424    712 S   0.0  0.1   0:01.99 /usr/bin/+
   476 rpc       20   0   69256    220    112 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240    904    516 S   0.0  0.0   0:00.56 /usr/lib/+
   487 root      20   0   21540    444    332 S   0.0  0.0   0:00.08 /usr/sbin+
   492 root      20   0  152780    224    180 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224148   5436    800 S   0.0  0.2   0:00.13 queueproc+
   507 nscd      20   0  928956   1452    748 S   0.0  0.1   0:02.92 /usr/sbin+
   515 root      20   0  195208    100    100 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    180    176 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    544    412 S   0.0  0.0   0:00.11 /usr/sbin+
   562 root      20   0  108296    220    216 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    220    220 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   88992   3532    524 S   0.0  0.1   0:00.11 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.43 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    428    348 S   0.0  0.0   0:00.07 pure-ftpd+
   932 root      20   0  572372   1116    540 S   0.0  0.0   0:00.41 /usr/bin/+
   933 systuser  20   0  112268   1880      0 S   0.0  0.1   0:00.01 /usr/loca+
   935 systuser  20   0  114016  14824   2144 S   0.0  0.6   0:01.11 /usr/loca+
   936 root      20   0 1277056  10320    180 S   0.0  0.4   0:21.10 /usr/bin/+
   937 root      20   0  445028   3308   3196 S   0.0  0.1   0:00.15 sw-engine+
   938 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0  111608   1596      0 S   0.0  0.1   0:00.00 /usr/loca+
   942 root      20   0  111304    568    460 S   0.0  0.0   0:00.43 /usr/sbin+
   943 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0 1349832   9500    144 S   0.0  0.4   0:28.03 /usr/bin/+
   945 root      20   0   51508    612    456 S   0.0  0.0   0:00.08 /usr/sbin+
   946 telegraf  20   0 5654304  34888    768 S   0.0  1.4   0:02.38 /usr/loca+
   947 memcach+  20   0  342400    212    212 S   0.0  0.0   0:00.08 /usr/bin/+
   948 root      20   0 1763312 912628    216 S   0.0 37.7   0:14.83 /usr/loca+
   949 root      20   0  389508    588    384 S   0.0  0.0   0:00.18 php-fpm: +
   953 root      20   0  388892    480    396 S   0.0  0.0   0:00.15 php-fpm: +
   958 root      20   0  224592   5288   4032 S   0.0  0.2   0:01.04 /usr/sbin+
   986 root      20   0  396248    420    244 S   0.0  0.0   0:00.16 php-fpm: +
   990 root      20   0  439788  11280  11088 S   0.0  0.5   0:00.22 php-fpm: +
   994 root      20   0  400740   3104    728 S   0.0  0.1   0:00.56 php-fpm: +
   996 named     20   0  785456  29692   1480 S   0.0  1.2   0:02.68 /usr/sbin+
  1013 cpanelc+  20   0   10080   2956   2252 R   0.0  0.1   0:02.90 /usr/loca+
  1093 dovenull  20   0   46912   1320    708 S   0.0  0.1   0:00.06 dovecot/p+
  1094 dovenull  20   0   47888   1876    560 S   0.0  0.1   0:00.05 dovecot/i+
  1095 dovecot   20   0   10320    528    412 S   0.0  0.0   0:00.01 dovecot/a+
  1096 root      20   0   10452    656    472 S   0.0  0.0   0:00.04 dovecot/l+
  1097 dovenull  20   0   46916   1084    476 S   0.0  0.0   0:00.06 dovecot/p+
  1098 dovenull  20   0   47764   2528   1212 S   0.0  0.1   0:00.09 dovecot/i+
  1104 root      20   0   24396   2360    548 S   0.0  0.1   0:00.04 dovecot/c+
  1110 dovecot   20   0   13568    612    400 S   0.0  0.0   0:00.00 dovecot/s+
  1145 systuser  20   0  157704   2916    928 S   0.0  0.1   0:00.03 SonarPush+
  1166 root      20   0  248076 117208    808 S   0.0  4.8   0:03.26 /usr/loca+
  1170 dovecot   20   0   41192   1396    936 S   0.0  0.1   0:00.19 dovecot/a+
  1175 wp-tool+  20   0  412368  32168   1376 S   0.0  1.3   0:01.37 /usr/bin/+
  1176 wp-tool+  20   0  387528  13036   1408 S   0.0  0.5   0:00.13 /usr/bin/+
  1234 root      20   0  167452   1376    776 S   0.0  0.1   0:00.10 dnsadmin +
  1235 root      20   0  262224  18372    564 S   0.0  0.8   0:00.39 cpdavd - +
  1237 root      20   0  209224  11200   1660 S   0.0  0.5   0:00.58 tailwatchd
  1669 root      20   0  299272    652    272 S   0.0  0.0   0:00.09 php-fpm: +
  1701 root      38  18  130416   1440    708 S   0.0  0.1   0:00.01 cpanellog+
  1959 root      20   0  266992   8324    760 S   0.0  0.3   0:00.38 /usr/sbin+
  1962 root      20   0   12828    360    264 S   0.0  0.0   0:00.42 /usr/loca+
  1963 root      20   0   12732    324    252 S   0.0  0.0   0:00.35 /usr/loca+
  1964 root      20   0   12860    372    264 S   0.0  0.0   0:00.38 /usr/loca+
  1968 root      20   0   53340    244    244 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  181376  10196   1180 S   0.0  0.4   0:03.50 lfd - sle+
  6778 root      20   0  294996 158984   1060 S   0.0  6.6   0:00.63 spamd chi+
  6779 root      20   0  248076 116764    400 S   0.0  4.8   0:00.00 spamd chi+
 18294 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.04 [kworker]
 24769 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25497 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 28474 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29165 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 31884 nobody    20   0  277632  19824   4412 S   0.0  0.8   0:01.77 /usr/sbin+
 33105 nobody    20   0  277632  19704   4244 S   0.0  0.8   0:01.79 /usr/sbin+
 34629 nobody    20   0  277696  20004   4344 S   0.0  0.8   0:01.63 /usr/sbin+
 35940 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 36147 nobody    20   0  277884  20112   4336 S   0.0  0.8   0:01.44 /usr/sbin+
 38412 nobody    20   0  277548  19452   4048 S   0.0  0.8   0:01.17 /usr/sbin+
 39701 nobody    20   0  277896  20148   4392 S   0.0  0.8   0:01.04 /usr/sbin+
 41201 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42843 nobody    20   0  277760  19592   4188 S   0.0  0.8   0:00.57 /usr/sbin+
 43768 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43989 nobody    20   0  277760  19656   4232 S   0.0  0.8   0:00.52 /usr/sbin+
 44286 nobody    20   0  277760  19560   4100 S   0.0  0.8   0:00.51 /usr/sbin+
 45108 nobody    20   0  277892  19484   4140 S   0.0  0.8   0:00.33 /usr/sbin+
 45148 nobody    20   0  277768  19420   4068 S   0.0  0.8   0:00.30 /usr/sbin+
 45310 nobody    20   0  277736  19500   4128 S   0.0  0.8   0:00.37 /usr/sbin+
 45311 nobody    20   0  277760  19688   4240 S   0.0  0.8   0:00.42 /usr/sbin+
 45581 nobody    20   0  277760  19888   4204 S   0.0  0.8   0:00.43 /usr/sbin+
 46108 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46920 nobody    20   0  277892  19136   3856 S   0.0  0.8   0:00.23 /usr/sbin+
 47389 nobody    20   0  277756  19156   3840 S   0.0  0.8   0:00.13 /usr/sbin+
 47567 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47640 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47844 nobody    20   0  277760  18496   3216 S   0.0  0.8   0:00.08 /usr/sbin+
 47853 root      20   0   84400   6392   3580 S   0.0  0.3   0:00.03 /usr/sbin+
 47925 root      20   0   88344  10380   3596 S   0.0  0.4   0:00.02 /usr/sbin+
 47927 mailnull  20   0   88556   8004   1148 S   0.0  0.3   0:00.00 /usr/sbin+
 48062 root      20   0   41052   2808   2144 S   0.0  0.1   0:00.00 dovecot/a+
 48276 mailnull  20   0   89496   5620   2464 S   0.0  0.2   0:00.00 /usr/sbin+
 48310 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 48415 nigeria   20   0  400460   5568   2328 S   0.0  0.2   0:00.00 php-fpm: +
 48453 mailnull  20   0   89292   5684   2504 S   0.0  0.2   0:00.00 /usr/sbin+
 48547 root      20   0  157100   5084   3792 S   0.0  0.2   0:00.00 sshd: unk+
 48548 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 48555 nobody    20   0  277056  16844   2320 S   0.0  0.7   0:00.00 /usr/sbin+
 48573 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48574 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48575 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48576 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48578 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48579 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48580 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48581 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48583 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48584 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48586 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48590 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 48592 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 48593 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 48599 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 48602 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 48603 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48605 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48606 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48607 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48608 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48609 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 48610 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48611 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 48627 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48629 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 48630 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 48656 nobody    20   0  276920  15036    668 S   0.0  0.6   0:00.00 /usr/sbin+
 48657 nobody    20   0  276920  15036    668 S   0.0  0.6   0:00.00 /usr/sbin+
 48661 root      20   0  160220   2056   1584 R   0.0  0.1   0:00.00 top -bcn1
 48666 cloudw    20   0   90136   4316   3124 R   0.0  0.2   0:00.00 /opt/cpan+
 48667 root      20   0  113496   1428   1236 S   0.0  0.1   0:00.00 bash /usr+
 48668 root      20   0  177280   6176   2872 R   0.0  0.3   0:00.00 /usr/bin/+
 48669 root      20   0  261412  10792   2436 S   0.0  0.4   0:00.00 webmaild +
 48672 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:38   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    03:38   0:03  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    03:38   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:38   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:38   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   03:38   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   03:38   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   03:38   0:00  \_ [ext4-rsv-conver]
root      24769  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/0:0]
root      25497  0.0  0.0      0     0 ?        S    04:09   0:00  \_ [kworker/1:2]
root      28474  0.0  0.0      0     0 ?        S    04:13   0:00  \_ [kworker/0:4]
root      29165  0.0  0.0      0     0 ?        S    04:14   0:00  \_ [kworker/1:1]
root      35940  0.0  0.0      0     0 ?        S    04:23   0:00  \_ [kworker/1:0]
root      41201  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/u200:1]
root      43768  0.0  0.0      0     0 ?        S    04:33   0:00  \_ [kworker/0:1]
root      46108  0.0  0.0      0     0 ?        S    04:36   0:00  \_ [kworker/1:3]
root      47567  0.0  0.0      0     0 ?        S    04:38   0:00  \_ [kworker/1:4]
root      47640  0.0  0.0      0     0 ?        S    04:38   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44268  3256 ?        Ss   03:38   0:05 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  5144 ?        Ss   03:38   0:02 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   428 ?        Ss   03:38   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   352 ?        S<sl 03:38   0:00 /sbin/auditd
root        470  0.0  0.0  24712  1204 ?        Ss   03:38   0:00 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   376 ?        Ss   03:38   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58612  1424 ?        Ss   03:38   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   220 ?        Ss   03:38   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   904 ?        Ssl  03:38   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   444 ?        Ss   03:38   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   224 ?        Ss   03:38   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224148  5436 ?        Ss   03:38   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1452 ?        Ssl  03:38   0:02 /usr/sbin/nscd
root        515  0.0  0.0 195208   100 ?        Ssl  03:38   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   180 ?        Ss   03:38   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208    24 ?        Ss   03:38   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   544 ?        Ss   03:38   0:00 /usr/sbin/crond -n
root      48573  0.0  0.0 183048  2152 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48590  0.0  0.0 113284  1212 ?        Ss   04:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      48592  0.0  0.0 108052   360 ?        S    04:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      48593  0.0  0.0 113288  1516 ?        S    04:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      48673  0.0  0.0 153840  2096 ?        R    04:39   0:00  |               \_ ps auxf
root      48574  0.0  0.0 183048  2160 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48605  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      48575  0.0  0.0 183048  2160 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48606  0.0  0.0  20164   804 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      48576  0.0  0.0 183048  2160 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48607  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      48578  0.0  0.0 183048  2156 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48603  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      48579  0.0  0.0 183048  2152 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48610  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      48580  0.0  0.0 183048  2152 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48608  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      48581  0.0  0.0 183048  2152 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48611  0.0  0.0  20164   984 ?        Rs   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      48672  0.0  0.0      0     0 ?        Z    04:39   0:00  |       \_ [setupvirtfs] <defunct>
root      48583  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48609  0.0  0.0 113284  1212 ?        Ss   04:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      48618  9.0  0.6 169872 16848 ?        S    04:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      48667  0.0  0.0 113496  1428 ?        S    04:39   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      48668  1.0  0.2 185196  6920 ?        R    04:39   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      48584  0.0  0.0 183048  2148 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48599  0.0  0.0  20164   972 ?        Ss   04:39   0:00  |   \_ jailshell (pactpay) [48627] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48627  0.0  0.0  20164   264 ?        S    04:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48630  1.0  0.7 480124 17692 ?        S    04:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      48586  0.0  0.0 183048  2148 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      48602  0.0  0.0  20164   968 ?        Ss   04:39   0:00      \_ jailshell (nigeria) [48629] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48629  0.0  0.0  20164   260 ?        S    04:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48632  5.0  0.6 404052 16136 ?        S    04:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   220 tty1     Ss+  03:38   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   220 ttyS0    Ss+  03:38   0:00 /bin/bash
mailnull    613  0.0  0.1  88992  3532 ?        Ss   03:38   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      47853  0.0  0.2  84400  6392 ?        S    04:38   0:00  \_ /usr/sbin/exim -q
root      47925  0.0  0.4  88344 10380 ?        S    04:38   0:00  |   \_ /usr/sbin/exim -q
mailnull  47927  0.0  0.3  88556  8004 ?        S    04:38   0:00  |       \_ /usr/sbin/exim -q
mailnull  48276  0.0  0.2  89496  5620 ?        S    04:38   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  48453  0.0  0.2  89292  5684 ?        S    04:38   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   428 ?        Ss   03:38   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1116 ?        Ssl  03:38   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268  1880 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 14824 ?        Ssl  03:38   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.5  0.4 1277056 10320 ?       Ssl  03:38   0:21 /usr/bin/checkstatus
root        937  0.0  0.1 445028  3308 ?        Ss   03:38   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  48310  0.0  0.0 445028   324 ?        S    04:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    44 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608  1596 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   568 ?        Ss   03:38   0:00 /usr/sbin/sshd -D
root      48547  0.0  0.2 157100  5084 ?        Ss   04:38   0:00  \_ sshd: unknown [priv]
sshd      48548  0.0  0.1 115644  2632 ?        S    04:38   0:00      \_ sshd: unknown [net]
systuser    943  0.0  0.0  11348    36 ?        Ssl  03:38   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.7  0.3 1349832 9500 ?        Ssl  03:38   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   03:38   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.0  46912  1320 ?        S    03:38   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.0  47888  1876 ?        S    03:38   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   528 ?        S    03:38   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   656 ?        S    03:38   0:00  \_ dovecot/log
dovenull   1097  0.0  0.0  46916  1084 ?        S    03:38   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47764  2528 ?        S    03:38   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24396  2360 ?        S    03:38   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   612 ?        S    03:38   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1396 ?        S    03:38   0:00  \_ dovecot/auth
root      48062  0.0  0.1  41052  2808 ?        S    04:38   0:00  \_ dovecot/auth -w
telegraf    946  0.0  1.4 5654304 34888 ?       SLsl 03:38   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   212 ?        Ssl  03:38   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.4 37.7 1763312 912628 ?      Ssl  03:38   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   588 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261028  6884 ?        Ss   03:38   0:01 cpsrvd (SSL) - waiting for connections                   
root      48669  0.0  0.0      0     0 ?        Z    04:39   0:00  \_ [webmaild - serv] <defunct>
root        953  0.0  0.0 388892   480 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 224592  5288 ?        Ssl  03:38   0:01 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   420 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.4 439788 11280 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3104 ?        Ss   03:38   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   48415  0.0  0.2 400460  5568 ?        S    04:38   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.2 785456 29692 ?        Ssl  03:38   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10080  2956 ?        Ss   03:38   0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  2916 ?        S    03:38   0:00 SonarPush 0.6.12 [sleeping]
root       1166  0.0  4.8 248076 117208 ?       Ss   03:38   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6778  0.0  6.5 294996 158984 ?       S    03:44   0:00  \_ spamd child
root       6779  0.0  4.8 248076 116764 ?       S    03:44   0:00  \_ spamd child
wp-tool+   1175  0.0  1.3 412368 32168 ?        Ss   03:38   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.5 387528 13036 ?        Ss   03:38   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1376 ?        Ss   03:38   0:00 dnsadmin - dormant mode
root       1235  0.0  0.7 262224 18372 ?        Ss   03:38   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.4 209224 11200 ?        Ss   03:38   0:00 tailwatchd
root       1669  0.0  0.0 299272   652 ?        Ss   03:38   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1440 ?        SN   03:38   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.3 1461972 226956 ?      Sl   03:38   0:47 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  8324 ?        Ss   03:38   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12828   360 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   324 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12860   372 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   244 ?        S    03:38   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31884  0.1  0.8 277632 19824 ?        S    04:17   0:01  \_ /usr/sbin/httpd -k start
nobody    33105  0.1  0.8 277632 19704 ?        S    04:19   0:01  \_ /usr/sbin/httpd -k start
nobody    34629  0.1  0.8 277696 20004 ?        S    04:21   0:01  \_ /usr/sbin/httpd -k start
nobody    36147  0.1  0.8 277884 20112 ?        S    04:23   0:01  \_ /usr/sbin/httpd -k start
nobody    37268  0.1  0.8 277756 20016 ?        S    04:24   0:01  \_ /usr/sbin/httpd -k start
cloudw    48666  0.0  0.5 285108 12940 ?        S    04:39   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    38412  0.1  0.8 277548 19452 ?        S    04:26   0:01  \_ /usr/sbin/httpd -k start
nobody    39701  0.1  0.8 277896 20148 ?        S    04:28   0:01  \_ /usr/sbin/httpd -k start
nobody    42843  0.1  0.8 277760 19592 ?        S    04:32   0:00  \_ /usr/sbin/httpd -k start
nobody    43989  0.1  0.8 277760 19656 ?        S    04:33   0:00  \_ /usr/sbin/httpd -k start
cloudw    48652  2.0  0.6 353712 15980 ?        S    04:39   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    44286  0.1  0.8 277760 19560 ?        S    04:33   0:00  \_ /usr/sbin/httpd -k start
nobody    45108  0.1  0.8 277892 19484 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
nobody    45148  0.1  0.8 277768 19420 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45310  0.1  0.8 277736 19500 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45311  0.1  0.8 277760 19688 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45581  0.1  0.8 277760 19888 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    46920  0.1  0.7 277892 19136 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    47389  0.1  0.7 277756 19156 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    47844  0.2  0.7 277760 18496 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    48555  0.0  0.6 277056 16844 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    48656  0.0  0.6 276920 15036 ?        S    04:39   0:00  \_ /usr/sbin/httpd -k start
nobody    48657  0.0  0.6 276920 15036 ?        S    04:39   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 181376 10196 ?        Ss   03:38   0:03 lfd - sleeping
oysipao+  18294  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152   492 ?        S    04:00   0:00  \_ [kworker]
## mysql stats
Uptime: 3626  Threads: 3  Questions: 231756  Slow queries: 0  Opens: 2223  Flush tables: 1  Open tables: 1926  Queries per second avg: 63.915
*************************** 1. row ***************************
     Id: 3697
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 3698
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 3705
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.135 TIME_WAIT
      1 104.210.140.139 TIME_WAIT
      1 114.119.128.35 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 52.187.246.143 TIME_WAIT
      1 54.39.0.110 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 04:39:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 21 seconds
   Server load: 0.37 0.30 0.30
   Total accesses: 17099 - Total Traffic: 460.5 MB - Total Duration: 8439654
   CPU Usage: u10.23 s4.12 cu219.11 cs176.12 - 11.3% CPU load
   4.72 requests/sec - 130.2 kB/second - 27.6 kB/request - 493.576 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

KRKKRKKKKKWKW__K.KKWK.K.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req  Dur    Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  38412 2/195/880   K 5.23 1    399 454069 67.6   5.02  25.16 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=1283422231 HTTP/1.1
   1-0  33105 0/287/873   R 7.81 93   265 379811 0.0    8.78  20.80 47.128.62.202   http/1.1
   2-0  31884 5/302/810   K 7.38 2    252 421131 154.6  8.29  22.95 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=1028082176 HTTP/1.1
   3-0  46920 1/37/1022   K 1.01 0    348 491197 33.6   1.09  25.99 192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=2596418540 HTTP/1.1
   4-0  42843 0/91/881    R 2.65 74   310 449577 0.0    2.47  21.70 47.128.122.11   http/1.1
   5-0  47389 2/23/619    K 0.52 0    338 317802 63.2   0.57  16.91 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=81540380 HTTP/1.1
   6-0  43989 3/85/762    K 2.26 0    489 391842 92.7   2.35  20.04 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=3776731647 HTTP/1.1
   7-0  45108 2/56/911    K 1.31 2    266 416268 64.5   1.39  28.86 192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=1695849647 HTTP/1.1
   8-0  36147 1/270/692   K 6.32 1    346 335126 33.7   7.33  19.80 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=329173667 HTTP/1.1
   9-0  45148 1/50/845    K 1.19 1    342 441400 33.5   1.29  22.61 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=1360031818 HTTP/1.1
   10-0 37268 3/200/732   W 5.30 0    0   385233 94.5   5.36  19.27 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=3883687276 HTTP/1.1
   11-0 47844 1/14/638    K 0.38 1    342 358132 36.1   0.43  17.62 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=4182641464 HTTP/1.1
   12-0 48555 0/1/620     W 0.00 0    0   329312 0.0    0.02  18.74 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   13-0 48656 0/0/511     _ 0.00 0    0   327565 0.0    0.00  13.73 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 48657 0/0/669     _ 0.00 0    0   366297 0.0    0.00  17.47 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 39701 1/166/371   K 4.62 3    262 201486 29.5   4.47  12.29 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=660582
   16-0 -     0/0/398     . 0.00 210  0   177810 0.0    0.00  10.85 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 44286 5/88/447    K 2.18 0    358 247428 157.8  2.23  11.67 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=3451877384 HTTP/1.1
   18-0 45310 1/61/766    K 1.62 3    8   286239 10.1   1.63  14.28 200.236.192.238 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Odeda&state=Ogun&ward=Ilugun
   19-0 45311 99/156/650  W 1.46 0    0   264554 3740.1 5.10  19.84 4.233.80.63     http/1.1 woren.com.ng:443                GET /1.php HTTP/1.1
   20-0 34629 7/353/691   K 6.47 2    295 306865 220.3  10.12 18.70 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=2757192753 HTTP/1.1
   21-0 -     0/0/153     . 0.00 51   0   47872  0.0    0.00  2.44  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 45581 100/158/450 K 1.68 0    25  186648 43.1   4.21  11.62 4.233.80.63     http/1.1 proxy-subdomains-vhost.localhos GET /1.php HTTP/1.1
   23-0 -     0/0/93      . 0.00 1042 0   50675  0.0    0.00  2.91  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/311     . 0.00 2263 0   158233 0.0    0.00  8.49  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/255     . 0.00 2378 0   127827 0.0    0.00  6.46  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/3       . 0.00 3401 0   1490   0.0    0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/374     . 0.00 2004 0   176667 0.0    0.00  10.38 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/12      . 0.00 3349 0   5446   0.0    0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/197     . 0.00 2654 0   101914 0.0    0.00  6.49  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/4       . 0.00 3403 0   2388   0.0    0.00  0.09  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/2       . 0.00 3410 0   760    0.0    0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/3       . 0.00 3397 0   695    0.0    0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/3       . 0.00 3396 0   853    0.0    0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/19      . 0.00 3337 0   9074   0.0    0.00  0.45  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/4       . 0.00 3387 0   2048   0.0    0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/2       . 0.00 3404 0   738    0.0    0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/8       . 0.00 3394 0   3463   0.0    0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/4       . 0.00 3388 0   1877   0.0    0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00 3399 0   599    0.0    0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/6       . 0.00 3393 0   3057   0.0    0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/3       . 0.00 3389 0   840    0.0    0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/227     . 0.00 2495 0   110452 0.0    0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/9       . 0.00 3392 0   4927   0.0    0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/154     . 0.00 2870 0   84969  0.0    0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/13      . 0.00 3359 0   6975   0.0    0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 945
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...50)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 11580
   total entries replaced since starting: 0
   total entries expired since starting: 10626
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 9 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit