403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.00.54.txt
 ## swap threshold exceeded
## server overview
2025-11-21.00.54 load[0] mem[56/64] mysql[1/10] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1268         206          85         888         828
Swap:          1999        1366         633
 00:54:01 up  6:04,  0 users,  load average: 0.50, 0.37, 0.32
## system overview
top - 00:54:01 up  6:04,  0 users,  load average: 0.50, 0.37, 0.32
Tasks: 200 total,   4 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 48.5 us, 24.2 sy,  0.0 ni, 27.3 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   215972 free,  1294864 used,   909464 buff/cache
KiB Swap:  2047996 total,   649212 free,  1398784 used.   853168 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462004 273376   3652 S  68.8 11.3   4:23.08 /usr/sbin+
 80633 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.04 /opt/cpan+
 80635 pactpay   20   0  480124  17308  11572 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44396   3516   1640 S   0.0  0.1   0:31.03 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.26 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.08 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:21.57 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.05 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.80 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.64 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.68 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.62 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.08 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   6936   6624 S   0.0  0.3   0:10.88 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    584    456 S   0.0  0.0   0:01.71 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.48 /usr/sbin+
   482 root      20   0  152780    360    320 S   0.0  0.0   0:00.01 /usr/sbin+
   485 root      20   0  224148   6780   1196 S   0.0  0.3   0:00.29 queueproc+
   486 dbus      20   0   58728   1516    792 S   0.0  0.1   0:11.54 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    524    412 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1300    940 S   0.0  0.1   0:05.08 /usr/lib/+
   522 nscd      20   0 1344744   2300    932 S   0.0  0.1   0:17.58 /usr/sbin+
   523 polkitd   20   0  610540   3220    712 S   0.0  0.1   0:02.96 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.61 /usr/sbin+
   575 root      20   0   24208    260    240 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4060    976 S   0.0  0.2   0:00.56 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13104   2440 S   0.0  0.5   0:05.30 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:02.37 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.46 pure-ftpd+
   915 root      20   0  445028   3400   3284 S   0.0  0.1   0:00.94 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   920 root      20   0 1277056  11168    276 S   0.0  0.5   0:35.77 /usr/bin/+
   923 root      20   0  396248    736    564 S   0.0  0.0   0:00.57 php-fpm: +
   927 root      20   0  439788  12196  11248 S   0.0  0.5   0:00.63 php-fpm: +
   929 named     20   0 1055796  39076   2016 S   0.0  1.6   0:10.54 /usr/sbin+
   930 root      20   0 1763340 227888    768 S   0.0  9.4   0:13.74 /usr/loca+
   937 root      20   0  261028   6912   1948 S   0.0  0.3   0:03.19 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51508    724    560 S   0.0  0.0   0:00.30 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.47 /usr/bin/+
   952 cpanelc+  20   0   10592   3608   2388 R   0.0  0.1   0:17.87 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  273744   6980   5984 S   0.0  0.3   0:05.50 /usr/sbin+
   966 root      20   0  389508    824    608 S   0.0  0.0   0:00.62 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:02.65 php-fpm: +
   976 telegraf  20   0 5654304  37312   5884 S   0.0  1.5   0:11.88 /usr/loca+
   985 root      20   0  388892    888    680 S   0.0  0.0   0:00.56 php-fpm: +
   986 root      20   0 1341892   9740    280 S   0.0  0.4   0:23.11 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:01.90 /usr/bin/+
  1078 dovenull  20   0   47276   2784   1876 S   0.0  0.1   0:00.51 dovecot/p+
  1079 dovenull  20   0   47668   3264   1928 S   0.0  0.1   0:00.27 dovecot/i+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.09 dovecot/a+
  1081 root      20   0   10452    612    440 S   0.0  0.0   0:00.29 dovecot/l+
  1082 dovenull  20   0   47140   2740   1868 S   0.0  0.1   0:00.38 dovecot/p+
  1083 dovenull  20   0   48016   3624   1948 S   0.0  0.1   0:00.33 dovecot/i+
  1086 root      20   0   24528   2572    552 S   0.0  0.1   0:00.15 dovecot/c+
  1092 dovecot   20   0   13568    808    572 S   0.0  0.0   0:00.05 dovecot/s+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.41 /usr/loca+
  1156 systuser  20   0  157708   3040   1044 S   0.0  0.1   0:00.10 SonarPush+
  1161 wp-tool+  20   0  387556  13272   1612 S   0.0  0.5   0:00.25 /usr/bin/+
  1162 wp-tool+  20   0  412396  32428   1620 S   0.0  1.3   0:07.01 /usr/bin/+
  1171 dovecot   20   0   41192   1692   1156 S   0.0  0.1   0:00.66 dovecot/a+
  1235 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.39 cpdavd - +
  1239 root      20   0  167452   4272   2900 S   0.0  0.2   0:00.37 dnsadmin +
  1241 root      20   0  209680  12568   2492 S   0.0  0.5   0:02.81 tailwatchd
  1655 root      20   0  299272    948    552 S   0.0  0.0   0:00.59 php-fpm: +
  1658 root      38  18  130416   1548    812 S   0.0  0.1   0:00.05 cpanellog+
  1937 root      20   0  267084   8268    852 S   0.0  0.3   0:02.14 /usr/sbin+
  1938 root      20   0   12824    524    420 S   0.0  0.0   0:02.46 /usr/loca+
  1939 root      20   0   12732    484    408 S   0.0  0.0   0:02.18 /usr/loca+
  1940 root      20   0   12872    524    412 S   0.0  0.0   0:02.33 /usr/loca+
  1945 root      20   0   53268    372    372 S   0.0  0.0   0:00.04 /usr/loca+
  6916 root      20   0  261216 127300   2392 S   0.0  5.3   0:02.01 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.00 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.39 [kworker]
 40404 root      20   0  181260  29284   2296 S   0.0  1.2   0:02.95 lfd - sle+
 52112 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 55921 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58396 nobody    20   0  277616  20384   4868 S   0.0  0.8   0:02.77 /usr/sbin+
 60322 nobody    20   0  277900  20736   4936 S   0.0  0.9   0:02.47 /usr/sbin+
 60882 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 61348 nobody    20   0  277648  20500   4744 S   0.0  0.8   0:02.31 /usr/sbin+
 62260 nobody    20   0  277576  20176   4712 S   0.0  0.8   0:02.23 /usr/sbin+
 62339 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65615 nobody    20   0  277744  20332   4712 S   0.0  0.8   0:01.91 /usr/sbin+
 68020 nobody    20   0  277596  20076   4548 S   0.0  0.8   0:01.82 /usr/sbin+
 70610 nobody    20   0  277892  20060   4492 S   0.0  0.8   0:01.26 /usr/sbin+
 70725 nobody    20   0  277900  19948   4572 S   0.0  0.8   0:01.40 /usr/sbin+
 71035 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 71042 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72454 nobody    20   0  277904  19984   4512 S   0.0  0.8   0:00.95 /usr/sbin+
 72455 nobody    20   0  277572  19992   4616 S   0.0  0.8   0:00.95 /usr/sbin+
 72726 worencom  20   0   38444   2512   1600 S   0.0  0.1   0:00.00 dovecot/i+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75469 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 76237 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77390 nobody    20   0  277576  19116   3996 S   0.0  0.8   0:00.41 /usr/sbin+
 78548 nobody    20   0  277576  19048   3880 S   0.0  0.8   0:00.27 /usr/sbin+
 78699 nobody    20   0  277924  19220   3936 S   0.0  0.8   0:00.08 /usr/sbin+
 78737 mailnull  20   0   91200   4928   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 78818 nobody    20   0  277912  19268   3948 S   0.0  0.8   0:00.17 /usr/sbin+
 78827 nobody    20   0  277900  19088   3864 S   0.0  0.8   0:00.24 /usr/sbin+
 79335 nobody    20   0  277496  19020   3972 S   0.0  0.8   0:00.15 /usr/sbin+
 79624 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 79962 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80025 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80150 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80157 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 80192 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80253 nigeria   20   0  400460   4820   2388 S   0.0  0.2   0:00.00 php-fpm: +
 80487 wp-tool+  20   0  445028    320    188 S   0.0  0.0   0:00.00 sw-engine+
 80508 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 80542 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80545 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 80546 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 80557 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 80558 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 80561 root      20   0  261184   9532   2840 S   0.0  0.4   0:00.00 webmaild +
 80562 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80564 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80565 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80566 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80567 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80568 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80569 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80571 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80572 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80573 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80574 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80576 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80578 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 80579 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 80580 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 80601 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80602 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 80603 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80604 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80605 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80606 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 80607 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80608 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 80609 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80612 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 80614 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80616 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 80624 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 80626 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 80641 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 80648 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 80651 root      20   0   38516   6052   2988 R   0.0  0.3   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:21  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      52112  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      55921  0.0  0.0      0     0 ?        S    00:20   0:00  \_ [kworker/0:0]
root      60882  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:0]
root      62339  0.0  0.0      0     0 ?        S    00:29   0:00  \_ [kworker/0:3]
root      71035  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/1:2]
root      71042  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/0:2]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:2]
root      75469  0.0  0.0      0     0 ?        S    00:47   0:00  \_ [kworker/1:1]
root      76237  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/0:4]
root      79962  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44396  3516 ?        Ss   Nov20   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  6936 ?        Ss   Nov20   0:10 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   584 ?        S<sl Nov20   0:01 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   360 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224148  6780 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1516 ?        Ss   Nov20   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   524 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1300 ?        Ss   Nov20   0:05 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2300 ?        Ssl  Nov20   0:17 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      80562  0.0  0.0 183044  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80578  0.0  0.0 113284  1212 ?        Ss   00:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      80579  0.0  0.0 108052   360 ?        S    00:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      80580  0.0  0.0 113288  1520 ?        S    00:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      80652  0.0  0.0 153840  2096 ?        R    00:54   0:00  |               \_ ps auxf
root      80564  0.0  0.0 183044  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80608  0.0  0.0  20164   988 ?        Ss   00:54   0:00  |   \_ jailshell (cloudsms) [80653] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  80653  0.0  0.0  20164   264 ?        S    00:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  80654  0.0  0.0 113284  1212 ?        S    00:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  80655  0.0  0.6 404052 15616 ?        S    00:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php
root      80565  0.0  0.0 183044  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80601  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      80566  0.0  0.0 183044  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80609  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      80567  0.0  0.0 183044  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80604  0.0  0.0  20164   804 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      80568  0.0  0.0 183044  2148 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80607  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      80569  0.0  0.0 183044  2148 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80605  0.0  0.0  20164   804 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      80571  0.0  0.0 183044  2144 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80602  0.0  0.0  20164   980 ?        Ss   00:54   0:00  |   \_ jailshell (cloudsms) [80648] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  80648  0.0  0.0      0     0 ?        D    00:54   0:00  |       \_ [jailshell]
root      80572  0.0  0.0 183044  2144 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80614  0.0  0.0  20164   804 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      80573  0.0  0.0 183044  2144 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80603  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      80574  0.0  0.0 183044  2140 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80612  0.0  0.0  20164   964 ?        Ss   00:54   0:00  |   \_ jailshell (pactpay) [80626] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80626  0.0  0.0  20164   260 ?        S    00:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80635  0.0  0.7 480124 17308 ?        S    00:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      80576  0.0  0.0 183044  2140 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      80606  0.0  0.0  20164   972 ?        Ss   00:54   0:00      \_ jailshell (nigeria) [80624] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80624  0.0  0.0  20164   264 ?        S    00:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80633  0.0  0.6 404052 16140 ?        S    00:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   260 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4060 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  78737  0.0  0.2  91200  4928 ?        S    00:51   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13104 ?        Ssl  Nov20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:02 /usr/sbin/sshd -D
root      80025  0.0  0.1 111304  4264 ?        Ss   00:53   0:00  \_ sshd: [accepted]
root      80150  0.0  0.1 111304  4264 ?        Ss   00:53   0:00  \_ sshd: [accepted]
sshd      80157  0.0  0.1 115644  2628 ?        S    00:53   0:00  |   \_ sshd: [net]
root      80192  0.0  0.1 111304  4268 ?        Ss   00:53   0:00  \_ sshd: [accepted]
root      80542  0.0  0.1 111304  4268 ?        Ss   00:53   0:00  \_ sshd: [accepted]
root      80545  0.0  0.2 157100  5080 ?        Ss   00:53   0:00  \_ sshd: unknown [priv]
sshd      80546  0.0  0.1 115644  2628 ?        S    00:53   0:00  |   \_ sshd: unknown [net]
root      80557  0.0  0.1 111304  4448 ?        Ss   00:53   0:00  \_ sshd: [accepted]
sshd      80558  0.0  0.1 115644  2632 ?        R    00:53   0:00      \_ sshd: [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.1 445028  3400 ?        Ss   Nov20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  80487  0.0  0.0 445028   320 ?        S    00:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 11168 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   736 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.5 439788 12196 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.6 1055796 39076 ?       Ssl  Nov20   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  9.4 1763340 227888 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261028  6912 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root      80508  0.0  0.0      0     0 ?        Z    00:53   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root      80561  0.0  0.3 261184  9532 ?        S    00:53   0:00  \_ webmaild - serving 147.185.133.234
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51508   724 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1078  0.0  0.1  47276  2784 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1079  0.0  0.1  47668  3264 ?        S    Nov20   0:00  \_ dovecot/imap-login
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
root       1081  0.0  0.0  10452   612 ?        S    Nov20   0:00  \_ dovecot/log
dovenull   1082  0.0  0.1  47140  2740 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1083  0.0  0.1  48016  3624 ?        S    Nov20   0:00  \_ dovecot/imap-login
root       1086  0.0  0.1  24528  2572 ?        S    Nov20   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   808 ?        S    Nov20   0:00  \_ dovecot/stats
dovecot    1171  0.0  0.0  41192  1692 ?        S    Nov20   0:00  \_ dovecot/auth
worencom  72726  0.0  0.1  38444  2512 ?        S    00:43   0:00  \_ dovecot/imap
root      79624  0.0  0.1  60820  4512 ?        S    00:52   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3608 ?        Rs   Nov20   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 273744  6980 ?        Ssl  Nov20   0:05 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   824 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   80253  0.0  0.1 400460  4820 ?        S    00:53   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.5 5654304 37312 ?       SLsl Nov20   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   888 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.1  0.4 1341892 9740 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.2 261216 127300 ?       S    Nov20   0:02  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3040 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13272 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32428 ?        Ss   Nov20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.2 183900  6692 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.1 167452  4272 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12568 ?        Ss   Nov20   0:02 tailwatchd
root       1655  0.0  0.0 299272   948 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1548 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  0.3 267084  8268 ?        Rs   Nov20   0:02 /usr/sbin/httpd -k start
root       1938  0.0  0.0  12824   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1939  0.0  0.0  12732   484 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1940  0.0  0.0  12872   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1945  0.0  0.0  53268   372 ?        S    Nov20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    58396  0.1  0.8 277616 20384 ?        S    00:23   0:02  \_ /usr/sbin/httpd -k start
nobody    60322  0.1  0.8 277900 20736 ?        S    00:26   0:02  \_ /usr/sbin/httpd -k start
nobody    61348  0.1  0.8 277648 20500 ?        S    00:27   0:02  \_ /usr/sbin/httpd -k start
nobody    62260  0.1  0.8 277576 20176 ?        S    00:28   0:02  \_ /usr/sbin/httpd -k start
nobody    65615  0.1  0.8 277744 20332 ?        S    00:33   0:01  \_ /usr/sbin/httpd -k start
nobody    68020  0.1  0.8 277596 20076 ?        S    00:36   0:01  \_ /usr/sbin/httpd -k start
nobody    70610  0.1  0.8 277892 20060 ?        S    00:40   0:01  \_ /usr/sbin/httpd -k start
nobody    70725  0.1  0.8 277900 19948 ?        S    00:40   0:01  \_ /usr/sbin/httpd -k start
nobody    72454  0.1  0.8 277904 19984 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    72455  0.1  0.8 277572 19992 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    77390  0.1  0.7 277576 19116 ?        S    00:49   0:00  \_ /usr/sbin/httpd -k start
cloudw    80616  0.0  0.6 353712 15968 ?        S    00:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    78548  0.1  0.7 277576 19048 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    78699  0.0  0.7 277924 19220 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    78818  0.1  0.7 277912 19268 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    78827  0.1  0.7 277900 19088 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    79335  0.1  0.7 277496 19020 ?        S    00:52   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.2 11.2 1462004 273376 ?      Sl   Nov20   4:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181260 29284 ?        Ss   00:00   0:02 lfd - sleeping
## mysql stats
Uptime: 21778  Threads: 4  Questions: 1647897  Slow queries: 0  Opens: 5772  Flush tables: 1  Open tables: 2000  Queries per second avg: 75.667
*************************** 1. row ***************************
     Id: 27392
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 27393
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 3. row ***************************
     Id: 27397
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.201.66 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.136.54 TIME_WAIT
      1 66.249.70.109 TIME_WAIT
      1 89.252.169.182 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 00:54:01 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 3 minutes 43 seconds
   Server load: 0.50 0.37 0.32
   Total accesses: 115449 - Total Traffic: 2.9 GB - Total Duration: 62093336
   CPU Usage: u14.3 s7.23 cu1498.31 cs1213.43 - 12.5% CPU load
   5.29 requests/sec - 137.1 kB/second - 25.9 kB/request - 537.842 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

K.._KWK_K__.K__K.KK_............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  77390 6/72/5705  K 1.73  0    427 3082527 185.0 1.86  145.96 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2354267907 HTTP/1.1
   1-0  -     0/0/5412   . 0.00  37   0   2803374 0.0   0.00  132.63 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   2-0  -     0/0/5125   . 0.00  65   0   2707268 0.0   0.00  129.07 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  60322 0/431/5491 _ 10.40 0    264 3081301 0.0   11.00 145.18 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=2908951485 HTTP/1.1
   4-0  68020 4/313/5643 K 7.83  1    342 2885264 125.6 8.44  139.82 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=3844634251 HTTP/1.1
   5-0  70610 0/216/5306 W 5.27  0    0   3029544 0.0   5.65  138.63 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   6-0  65615 7/313/5387 K 8.47  0    284 2934524 216.5 8.69  155.98 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3950082616 HTTP/1.1
   7-0  72454 0/168/5147 _ 3.96  0    0   2807193 0.0   4.25  137.29 110.249.201.66 http/1.1 cloudware.ng:443       GET /robots.txt HTTP/1.1
   8-0  79335 2/25/5490  K 0.61  2    352 2936435 65.5  0.67  135.66 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=388955814 HTTP/1.1
   9-0  78548 0/50/5149  _ 1.13  0    410 2642353 0.0   1.22  125.70 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1670753855 HTTP/1.1
   10-0 78699 0/16/5324  _ 0.32  0    71  2689433 0.0   0.35  123.48 66.249.70.1    http/1.1 test.cloudware.ng:443  GET /?1020282923?goodscode=1018946486 HTTP/1.1
   11-0 -     0/0/4878   . 0.00  74   0   2552071 0.0   0.00  123.12 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 62260 1/397/5049 K 10.22 1    340 2646941 33.7  9.99  127.69 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=2006142900 HTTP/1.1
   13-0 78818 0/38/5148  _ 0.65  2    1   2609452 0.0   0.69  124.14 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   14-0 58396 0/476/4811 _ 11.73 0    0   2504317 0.0   15.37 115.75 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   15-0 70725 2/230/4407 K 5.95  3    398 2469443 65.1  6.31  113.00 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1089281857 HTTP/1.1
   16-0 -     0/0/4180   . 0.00  93   0   2226985 0.0   0.00  113.41 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 61348 1/392/3308 K 9.64  3    349 1832895 34.6  10.67 80.78  192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=4150554417 HTTP/1.1
   18-0 78827 6/44/3657  K 1.03  2    344 2020144 186.0 1.14  89.03  192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=1596267857 HTTP/1.1
   19-0 72455 0/168/3014 _ 3.91  1    3   1708148 0.0   4.12  79.05  44.220.2.97    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/2019elections/imag
   20-0 -     0/0/3121   . 0.00  1373 0   1838770 0.0   0.00  80.77  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/2302   . 0.00  1374 0   1261533 0.0   0.00  58.09  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2730   . 0.00  1349 0   1397795 0.0   0.00  65.38  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/2365   . 0.00  1220 0   1276872 0.0   0.00  58.96  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1555   . 0.00  1370 0   823579  0.0   0.00  39.33  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1018   . 0.00  2661 0   628117  0.0   0.00  27.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/703    . 0.00  2028 0   428614  0.0   0.00  18.18  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/420    . 0.00  2567 0   254505  0.0   0.00  9.65   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/523    . 0.00  2659 0   349352  0.0   0.00  15.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/430    . 0.00  2660 0   260468  0.0   0.00  11.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/318    . 0.00  2272 0   200447  0.0   0.00  7.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/271    . 0.00  2663 0   193700  0.0   0.00  6.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00  2662 0   371705  0.0   0.00  14.42  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00  2202 0   111013  0.0   0.00  5.26   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00  4391 0   15090   0.0   0.00  0.72   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00  4398 0   640     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00  4270 0   36928   0.0   0.00  1.90   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00  4227 0   25914   0.0   0.00  1.45   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00  4320 0   27597   0.0   0.00  1.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00  4351 0   13821   0.0   0.00  1.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00  3500 0   139506  0.0   0.00  7.31   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00  4407 0   8       0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  4406 0   4242    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00  4132 0   42251   0.0   0.00  2.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00  4395 0   2792    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00  4133 0   25889   0.0   0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00  3085 0   190150  0.0   0.00  10.76  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00  4411 0   2404    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 888
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 1...39)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 76505
   total entries replaced since starting: 0
   total entries expired since starting: 75592
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 171 miss
   total removes since starting: 25 hit, 19 miss
Youez - 2016 - github.com/yon3zu
LinuXploit