403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.12.09.txt
 ## swap threshold exceeded
## server overview
2025-11-20.12.09 load[1] mem[65/56] mysql[3/9] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1479          83          37         800         683
Swap:          1999        1508         491
 12:09:02 up  2:28,  0 users,  load average: 1.66, 0.73, 0.66
## system overview
top - 12:09:02 up  2:28,  0 users,  load average: 1.66, 0.73, 0.66
Tasks: 207 total,   3 running, 202 sleeping,   0 stopped,   2 zombie
%Cpu(s): 74.2 us, 22.6 sy,  0.0 ni,  0.0 id,  3.2 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    86208 free,  1528316 used,   805776 buff/cache
KiB Swap:  2047996 total,   503292 free,  1544704 used.   687012 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 225784   3404 S 100.0  9.3   2:03.74 /usr/sbin+
 19167 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.04 /opt/cpan+
 19200 root      20   0  185492   7856   4184 R  13.3  0.3   0:00.02 /usr/bin/+
    36 root      20   0       0      0      0 S   6.7  0.0   0:17.15 [kswapd0]
 17536 nobody    20   0  277772  18204   3732 S   6.7  0.8   0:00.17 /usr/sbin+
 19157 root      20   0  169872  16848   2876 S   6.7  0.7   0:00.08 /usr/loca+
     1 root      20   0   44268   3332   1484 S   0.0  0.1   0:13.67 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.44 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.89 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.41 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.71 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.52 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.73 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   7804   7568 S   0.0  0.3   0:05.50 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    304    176 S   0.0  0.0   0:00.92 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:02.18 /usr/lib/+
   471 root      20   0   52852    320    224 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58652   1416    684 S   0.0  0.1   0:04.93 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1124    776 S   0.0  0.0   0:01.34 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.20 /usr/sbin+
   492 root      20   0  152780    240    196 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5452   1040 S   0.0  0.2   0:00.26 queueproc+
   507 nscd      20   0  928956   1384    712 S   0.0  0.1   0:07.41 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    180    156 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.27 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3856    948 S   0.0  0.2   0:00.25 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.50 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.18 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:00.85 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15276   2568 S   0.0  0.6   0:02.42 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.12 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.37 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.25 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8488    128 S   0.0  0.4   0:28.09 /usr/bin/+
   945 root      20   0   51508    612    432 S   0.0  0.0   0:00.14 /usr/sbin+
   946 telegraf  20   0 5654304  35076   5832 S   0.0  1.4   0:05.32 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.20 /usr/bin/+
   948 root      20   0 1763312 469552    308 S   0.0 19.4   0:14.87 /usr/loca+
   949 root      20   0  389508    584    492 S   0.0  0.0   0:00.32 php-fpm: +
   950 root      20   0  261160   6388   1764 S   0.0  0.3   0:01.92 cpsrvd (S+
   953 root      20   0  388892    348    264 S   0.0  0.0   0:00.27 php-fpm: +
   958 root      20   0  240976   7036   6364 S   0.0  0.3   0:02.70 /usr/sbin+
   986 root      20   0  396248    564    472 S   0.0  0.0   0:00.28 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.38 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.31 php-fpm: +
   996 named     20   0  924724  34380   1720 S   0.0  1.4   0:06.24 /usr/sbin+
  1013 cpanelc+  20   0   10228   3300   2412 S   0.0  0.1   0:07.12 /usr/loca+
  1093 dovenull  20   0   47044   2696   1968 S   0.0  0.1   0:00.16 dovecot/p+
  1094 dovenull  20   0   47888   3176   1908 S   0.0  0.1   0:00.15 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.03 dovecot/a+
  1096 root      20   0   10452    492    312 S   0.0  0.0   0:00.11 dovecot/l+
  1097 dovenull  20   0   46916   2284   1696 S   0.0  0.1   0:00.14 dovecot/p+
  1098 dovenull  20   0   47868   3004   1856 S   0.0  0.1   0:00.15 dovecot/i+
  1104 root      20   0   24396   2292    544 S   0.0  0.1   0:00.08 dovecot/c+
  1110 dovecot   20   0   13568    644    444 S   0.0  0.0   0:00.02 dovecot/s+
  1145 systuser  20   0  157704   3072   1096 S   0.0  0.1   0:00.06 SonarPush+
  1170 dovecot   20   0   41192   1540   1044 S   0.0  0.1   0:00.35 dovecot/a+
  1175 wp-tool+  20   0  412368  27824   1924 S   0.0  1.1   0:03.03 /usr/bin/+
  1176 wp-tool+  20   0  387528   8936   1804 S   0.0  0.4   0:00.17 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.17 dnsadmin +
  1235 root      20   0  262228  19180   1256 S   0.0  0.8   0:00.61 cpdavd - +
  1237 root      20   0  209308  19688   2324 S   0.0  0.8   0:01.39 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.23 php-fpm: +
  1701 root      38  18  130416   1396    728 S   0.0  0.1   0:00.02 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:00.81 /usr/sbin+
  1962 root      20   0   12800    400    296 S   0.0  0.0   0:01.06 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:00.90 /usr/loca+
  1964 root      20   0   12820    416    296 S   0.0  0.0   0:00.98 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182364   9548   1168 S   0.0  0.4   0:08.40 lfd - sle+
  3549 nobody    20   0  277896  19892   4748 S   0.0  0.8   0:01.66 /usr/sbin+
  4647 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
  6982 nobody    20   0  277588  19000   4540 S   0.0  0.8   0:01.25 /usr/sbin+
  7084 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9136 nobody    20   0  277760  18892   4364 S   0.0  0.8   0:01.05 /usr/sbin+
  9810 nobody    20   0  277760  19268   4476 S   0.0  0.8   0:00.85 /usr/sbin+
 10025 nobody    20   0  277760  19228   4604 S   0.0  0.8   0:00.97 /usr/sbin+
 10333 nobody    20   0  277760  19060   4528 S   0.0  0.8   0:00.98 /usr/sbin+
 10369 nobody    20   0  277892  19192   4416 S   0.0  0.8   0:01.01 /usr/sbin+
 12526 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13727 nobody    20   0  277760  19152   4284 S   0.0  0.8   0:00.65 /usr/sbin+
 14203 nobody    20   0  277760  18824   4260 S   0.0  0.8   0:00.52 /usr/sbin+
 14218 nobody    20   0  277756  18864   4420 S   0.0  0.8   0:00.59 /usr/sbin+
 14532 nobody    20   0  277828  18604   4172 S   0.0  0.8   0:00.48 /usr/sbin+
 16036 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 16434 nobody    20   0  277772  18568   4040 S   0.0  0.8   0:00.33 /usr/sbin+
 16440 nobody    20   0  277764  18740   4268 S   0.0  0.8   0:00.28 /usr/sbin+
 16924 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17233 nobody    20   0  277892  18468   4044 S   0.0  0.8   0:00.25 /usr/sbin+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.14 [kworker]
 18352 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18434 root      20   0   41052   2808   2144 S   0.0  0.1   0:00.00 dovecot/a+
 18592 mailnull  20   0   89496   4908   1752 S   0.0  0.2   0:00.00 /usr/sbin+
 18710 mailnull  20   0   89496   4908   1752 S   0.0  0.2   0:00.00 /usr/sbin+
 18712 nobody    20   0  277904  18276   3904 S   0.0  0.8   0:00.06 /usr/sbin+
 18870 nigeria   20   0  401440   9632   4052 S   0.0  0.4   0:00.39 php-fpm: +
 18896 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 18973 mailnull  20   0   89292   5736   2504 S   0.0  0.2   0:00.00 /usr/sbin+
 19010 mailnull  20   0   89496   5676   2464 S   0.0  0.2   0:00.00 /usr/sbin+
 19022 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 19048 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 19080 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 19081 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 19088 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.02 sshd: roo+
 19089 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 19106 nobody    20   0  277336  17020   3220 S   0.0  0.7   0:00.00 /usr/sbin+
 19107 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 19111 cloudw    20   0  524220  59096   6648 S   0.0  2.4   0:00.47 php-fpm: +
 19112 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 19119 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19120 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19121 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19122 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19123 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19124 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19125 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19126 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [crond] <+
 19127 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19129 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19130 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19132 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19135 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 19136 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 19138 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 19139 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19140 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19141 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 19143 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 19144 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19145 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 19147 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19148 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 19150 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19151 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 19158 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 19163 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 19170 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 19186 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19198 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 19199 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
 19206 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 19207 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 19208 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.00 /opt/cpan+
 41201 root      20   0       0      0      0 D   0.0  0.0   0:00.10 [kworker/+
 56404 root      20   0  248036 117532   1084 S   0.0  4.9   0:03.32 /usr/loca+
 64340 root      20   0  249300 118752   1080 S   0.0  4.9   0:00.36 spamd chi+
 64341 root      20   0  248036 116828    416 S   0.0  4.8   0:00.00 spamd chi+
 67652 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 95180 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 97838 nobody    20   0  277760  20592   4872 S   0.0  0.9   0:02.91 /usr/sbin+
 98596 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
100685 worencom  20   0   38480   2984   1964 S   0.0  0.1   0:00.00 dovecot/i+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:40   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        R    09:40   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      41201  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root      67652  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/1:1]
root      95180  0.0  0.0      0     0 ?        S    11:38   0:00  \_ [kworker/1:4]
root      98596  0.0  0.0      0     0 ?        S    11:42   0:00  \_ [kworker/0:4]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root       4647  0.0  0.0      0     0 ?        S    11:52   0:00  \_ [kworker/1:3]
root       7084  0.0  0.0      0     0 ?        S    11:55   0:00  \_ [kworker/0:3]
root      12526  0.0  0.0      0     0 ?        S    12:01   0:00  \_ [kworker/0:2]
root      16036  0.0  0.0      0     0 ?        S    12:05   0:00  \_ [kworker/1:0]
root      16924  0.0  0.0      0     0 ?        S    12:06   0:00  \_ [kworker/0:0]
root      18352  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/1:2]
root      19186  0.0  0.0      0     0 ?        S    12:09   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44268  3332 ?        Ss   09:40   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  40244  7804 ?        Ss   09:40   0:05 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   304 ?        S<sl 09:40   0:00 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:02 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   320 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58652  1416 ?        Ss   09:40   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1124 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   240 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5452 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1384 ?        Ssl  09:40   0:07 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   180 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      19119  0.0  0.0 183048  2152 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19135  0.0  0.0 113284  1208 ?        Ss   12:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      19141  0.0  0.0 108052   360 ?        S    12:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      19145  0.0  0.0 113288  1516 ?        S    12:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      19210  0.0  0.0 153840  2088 ?        R    12:09   0:00  |               \_ ps auxf
root      19120  0.0  0.0 183048  2152 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19139  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      19121  0.0  0.0 183048  2152 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19150  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      19122  0.0  0.0 183048  2152 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19144  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      19123  0.0  0.0 183048  2152 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19151  0.0  0.0  20164   984 ?        Ss   12:09   0:00  |   \_ jailshell (cloudsms) [19206] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  19206  0.0  0.0  20164   256 ?        S    12:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  19207  0.0  0.0 113284  1212 ?        S    12:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  19208  0.0  0.6 404052 15612 ?        S    12:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      19124  0.0  0.0 183048  2148 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19140  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      19125  0.0  0.0 183048  2148 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19138  0.0  0.0  20164   808 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      19127  0.0  0.0 183048  2144 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19147  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      19129  0.0  0.0 183048  2144 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19148  0.0  0.0 113284  1208 ?        Ss   12:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      19157  8.0  0.6 169872 16848 ?        S    12:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      19199  0.0  0.0 113496  1420 ?        S    12:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      19200  0.0  0.5 248752 12252 ?        R    12:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      19130  0.0  0.0 183048  2144 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19136  0.0  0.0  20164   964 ?        Ss   12:09   0:00  |   \_ jailshell (pactpay) [19158] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   19158  0.0  0.0  20164   260 ?        S    12:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   19170  2.0  0.7 480124 17692 ?        S    12:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      19132  0.0  0.0 183048  2144 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      19143  0.0  0.0  20164   968 ?        Ss   12:09   0:00      \_ jailshell (nigeria) [19163] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   19163  0.0  0.0  20164   260 ?        S    12:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   19167  4.0  0.6 404052 16140 ?        S    12:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3856 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  18592  0.0  0.2  89496  4908 ?        S    12:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  18710  0.0  0.2  89496  4908 ?        S    12:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  18973  0.0  0.2  89292  5736 ?        S    12:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  19010  0.0  0.2  89496  5676 ?        S    12:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15276 ?        Ssl  09:40   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.2  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  18896  0.0  0.0 445028   320 ?        S    12:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root      19022  0.0  0.1 111304  4272 ?        Ss   12:08   0:00  \_ sshd: [accepted]
root      19048  0.0  0.1 111304  4272 ?        Ss   12:08   0:00  \_ sshd: [accepted]
sshd      19107  0.0  0.1 115644  2628 ?        S    12:09   0:00  |   \_ sshd: [net]
root      19080  0.2  0.2 162436  5836 ?        Ss   12:08   0:00  \_ sshd: root [priv]
sshd      19081  0.0  0.1 115644  2632 ?        S    12:08   0:00  |   \_ sshd: root [net]
root      19088  0.6  0.2 162436  5832 ?        Ss   12:08   0:00  \_ sshd: root [priv]
sshd      19089  0.0  0.1 115644  2628 ?        S    12:08   0:00      \_ sshd: root [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.3  0.3 1349832 8488 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47044  2696 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  47888  3176 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   492 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.0  46916  2284 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47868  3004 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24396  2292 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   644 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1540 ?        S    09:40   0:00  \_ dovecot/auth
worencom 100685  0.0  0.1  38480  2984 ?        S    11:44   0:00  \_ dovecot/imap
root      18434  0.0  0.1  41052  2808 ?        S    12:08   0:00  \_ dovecot/auth -w
telegraf    946  0.0  1.4 5654304 35076 ?       SLsl 09:40   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 19.4 1763312 469552 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   584 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6388 ?        Ss   09:40   0:01 cpsrvd (SSL) - waiting for connections                   
root      19112  0.0  0.0      0     0 ?        Z    12:09   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        953  0.0  0.0 388892   348 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 240976  7036 ?        Ssl  09:40   0:02 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   564 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   18870  1.9  0.3 401440  9632 ?        S    12:08   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    19111 23.5  2.4 524220 59096 ?        S    12:09   0:00  \_ php-fpm: pool cloudware_ng
named       996  0.0  1.4 924724 34380 ?        Ssl  09:40   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10228  3300 ?        Rs   09:40   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3072 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27824 ?        Ss   09:40   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8936 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.7 262228 19180 ?        Ss   09:40   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209308 19688 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1396 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.3 1463376 225784 ?      Sl   09:40   2:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12800   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12820   416 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    97838  0.1  0.8 277760 20592 ?        S    11:41   0:02  \_ /usr/sbin/httpd -k start
nobody     3549  0.1  0.8 277896 19892 ?        S    11:50   0:01  \_ /usr/sbin/httpd -k start
nobody     6982  0.1  0.7 277588 19000 ?        S    11:55   0:01  \_ /usr/sbin/httpd -k start
nobody     9136  0.1  0.7 277760 18892 ?        S    11:57   0:01  \_ /usr/sbin/httpd -k start
nobody     9810  0.1  0.7 277760 19268 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10025  0.1  0.7 277760 19228 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10333  0.1  0.7 277760 19060 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    10369  0.1  0.7 277892 19192 ?        S    11:59   0:01  \_ /usr/sbin/httpd -k start
nobody    13727  0.1  0.7 277760 19152 ?        S    12:02   0:00  \_ /usr/sbin/httpd -k start
nobody    14203  0.1  0.7 277760 18824 ?        S    12:02   0:00  \_ /usr/sbin/httpd -k start
nobody    14218  0.1  0.7 277756 18864 ?        S    12:03   0:00  \_ /usr/sbin/httpd -k start
nobody    14532  0.1  0.7 277828 18604 ?        S    12:03   0:00  \_ /usr/sbin/httpd -k start
nobody    16434  0.1  0.7 277772 18568 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    16440  0.1  0.7 277764 18740 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    17233  0.1  0.7 277892 18468 ?        S    12:06   0:00  \_ /usr/sbin/httpd -k start
nobody    17536  0.1  0.7 277772 18240 ?        S    12:07   0:00  \_ /usr/sbin/httpd -k start
nobody    19211  0.0  0.7 277772 17780 ?        R    12:09   0:00  |   \_ /usr/sbin/httpd -k start
nobody    18712  0.1  0.7 277904 18276 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody    19106  0.0  0.7 277336 17020 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.3 182364  9548 ?        Ss   09:40   0:08 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117532 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.9 249300 118752 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116828 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 30626  Threads: 3  Questions: 644489  Slow queries: 0  Opens: 4394  Flush tables: 1  Open tables: 2000  Queries per second avg: 21.043
*************************** 1. row ***************************
     Id: 10650
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 10651
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 10659
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 102.212.220.218 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 17.22.237.188 TIME_WAIT
      1 17.22.253.100 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.37.31 TIME_WAIT
      1 74.7.228.38 TIME_WAIT
      1 74.7.229.52 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 12:09:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 30 minutes 21 seconds
   Server load: 1.66 0.73 0.66
   Total accesses: 45586 - Total Traffic: 1.1 GB - Total Duration: 65444545
   CPU Usage: u10.28 s4.52 cu587.66 cs462.95 - 3.48% CPU load
   1.49 requests/sec - 38.8 kB/second - 26.1 kB/request - 1435.63 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

R__KKKKKKKKKW_W.___.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  14203 0/89/2341   R 2.61  56    282 1177542  0.0   2.39  71.01 118.0.122.129  http/1.1
   1-0  3549  0/282/2202  _ 7.41  1     23  44494481 0.0   7.96  59.38 128.140.8.200  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   2-0  10333 0/166/2215  _ 4.29  0     581 1146794  0.0   4.38  58.72 14.169.41.39   http/1.1 cloudware.ng:443       GET /author/azeez/ HTTP/1.1
   3-0  14218 5/101/2659  K 2.57  0     343 1182494  156.7 2.63  62.93 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=3334478701 HTTP/1.1
   4-0  13727 23/107/2198 K 2.99  3     265 1143918  706.9 2.89  55.68 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=2955471304 HTTP/1.1
   5-0  14532 1/88/2106   K 1.94  3     264 967425   33.5  2.08  53.20 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=1900726130 HTTP/1.1
   6-0  18712 5/15/2043   K 0.25  2     255 1035403  155.0 0.24  51.61 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3812400706 HTTP/1.1
   7-0  9136  3/172/2160  K 4.56  3     261 1028751  95.3  4.66  60.41 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=2092298721 HTTP/1.1
   8-0  9810  3/147/1937  K 3.55  1     349 998185   94.4  4.24  64.87 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=830274637 HTTP/1.1
   9-0  6982  2/232/2357  K 5.48  3     297 1056092  66.9  6.66  55.16 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=1366573629 HTTP/1.1
   10-0 16434 4/57/1951   K 1.42  4     265 1023400  127.1 1.73  50.60 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=2083884410 HTTP/1.1
   11-0 97838 4/510/2192  K 12.82 0     308 1013583  130.9 13.96 50.06 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=1700000616 HTTP/1.1
   12-0 17233 0/47/1891   W 1.16  0     0   976141   0.0   1.13  46.54 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 19106 0/1/1651    _ 0.00  0     10  869191   0.0   0.01  41.53 34.239.85.139  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/2019elections/imag
   14-0 17536 0/31/1497   W 0.72  0     0   767620   0.0   0.71  38.99 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=2391026161 HTTP/1.1
   15-0 -     0/0/1573    . 0.00  169   0   684053   0.0   0.00  33.16 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 10025 0/177/1371  _ 4.73  1     22  646102   0.0   4.15  33.89 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue2.php HTTP/1.1
   17-0 16440 0/48/1239   _ 1.22  0     254 646648   0.0   1.29  32.18 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1164745041 HTTP/1.1
   18-0 10369 0/174/1716  _ 4.57  0     0   792169   0.0   4.83  33.74 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   19-0 -     0/0/1480    . 0.00  177   0   602881   0.0   0.00  38.43 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/1178    . 0.00  1481  0   567414   0.0   0.00  30.61 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/1011    . 0.00  792   0   405490   0.0   0.00  20.81 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/1016    . 0.00  1590  0   425033   0.0   0.00  25.78 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/447     . 0.00  1341  0   208661   0.0   0.00  10.72 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/731     . 0.00  599   0   365298   0.0   0.00  18.00 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/543     . 0.00  1976  0   276383   0.0   0.00  13.91 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/14      . 0.00  2518  0   7758     0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/475     . 0.00  2360  0   233214   0.0   0.00  13.25 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/231     . 0.00  1762  0   127638   0.0   0.00  5.41  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/483     . 0.00  1882  0   242729   0.0   0.00  13.15 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/150     . 0.00  2501  0   68176    0.0   0.00  2.88  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/49      . 0.00  2516  0   18776    0.0   0.00  0.89  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/23      . 0.00  2519  0   15181    0.0   0.00  0.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5       . 0.00  2881  0   879      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/19      . 0.00  30337 0   9074     0.0   0.00  0.45  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/4       . 0.00  30387 0   2048     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/2       . 0.00  30404 0   738      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/8       . 0.00  30394 0   3463     0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/4       . 0.00  30388 0   1877     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00  30399 0   599      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/6       . 0.00  30393 0   3057     0.0   0.00  0.15  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/3       . 0.00  30389 0   840      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/227     . 0.00  29495 0   110452   0.0   0.00  5.70  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/9       . 0.00  30392 0   4927     0.0   0.00  0.24  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/154     . 0.00  29870 0   84969    0.0   0.00  4.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/13      . 0.00  30359 0   6975     0.0   0.00  0.32  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 922
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...55)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 29007
   total entries replaced since starting: 0
   total entries expired since starting: 28072
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 16 hit, 41 miss
   total removes since starting: 13 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit