403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.02.09.txt
 ## swap threshold exceeded
## server overview
2025-11-21.02.09 load[0] mem[55/66] mysql[1/10] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1235         169          98         959         857
Swap:          1999        1404         595
 02:09:02 up  7:19,  0 users,  load average: 0.10, 0.37, 0.33
## system overview
top - 02:09:02 up  7:19,  0 users,  load average: 0.10, 0.37, 0.33
Tasks: 201 total,   5 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.9 us, 31.7 sy,  0.0 ni,  0.0 id,  2.4 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   149880 free,  1282944 used,   987476 buff/cache
KiB Swap:  2047996 total,   609532 free,  1438464 used.   859532 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 268156   3696 S  70.0 11.1   5:14.27 /usr/sbin+
 37904 root      20   0  169872  16852   2884 S  35.0  0.7   0:00.08 /usr/loca+
 37928 pactpay   20   0  480124  16784  11080 S  10.0  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44396   3512   1640 S   5.0  0.1   0:36.68 /usr/lib/+
  2739 root      20   0   12828   1412   1192 S   5.0  0.1   0:00.26 /usr/loca+
 37923 nigeria   20   0  404052  16144  10384 R   5.0  0.7   0:00.02 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.31 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.12 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.27 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.57 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.83 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.89 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.79 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.29 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   6848   6532 S   0.0  0.3   0:13.70 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    600    472 S   0.0  0.0   0:02.21 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.57 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   8432   1808 S   0.0  0.3   0:00.34 queueproc+
   486 dbus      20   0   58728   1528    792 S   0.0  0.1   0:13.93 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    444    332 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:06.12 /usr/lib/+
   522 nscd      20   0 1344744   2308    936 S   0.0  0.1   0:21.31 /usr/sbin+
   523 polkitd   20   0  610540   3220    712 S   0.0  0.1   0:03.57 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.74 /usr/sbin+
   575 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4244   1156 S   0.0  0.2   0:00.70 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.61 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13348   2648 S   0.0  0.6   0:06.34 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.09 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.56 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.13 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  10944    276 S   0.0  0.5   0:35.78 /usr/bin/+
   923 root      20   0  396248    684    512 S   0.0  0.0   0:00.66 php-fpm: +
   927 root      20   0  439788  11432  10484 S   0.0  0.5   0:00.75 php-fpm: +
   929 named     20   0 1054792  42552   2232 S   0.0  1.8   0:12.92 /usr/sbin+
   930 root      20   0 1763340 157860   1208 S   0.0  6.5   0:13.95 /usr/loca+
   937 root      20   0  261160   7180   2068 S   0.0  0.3   0:03.64 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51656   1300    960 S   0.0  0.1   0:00.36 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.58 /usr/bin/+
   952 cpanelc+  20   0   10592   3600   2380 S   0.0  0.1   0:21.58 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  290128   7220   6092 S   0.0  0.3   0:06.83 /usr/sbin+
   966 root      20   0  389508    904    688 S   0.0  0.0   0:00.72 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.16 php-fpm: +
   976 telegraf  20   0 5654304  35932   5888 S   0.0  1.5   0:14.25 /usr/loca+
   985 root      20   0  388892    812    604 S   0.0  0.0   0:00.67 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.16 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:02.27 /usr/bin/+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.11 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.93 /usr/loca+
  1156 systuser  20   0  157708   3028   1044 S   0.0  0.1   0:00.12 SonarPush+
  1161 wp-tool+  20   0  387556  13692   2032 S   0.0  0.6   0:00.28 /usr/bin/+
  1162 wp-tool+  20   0  412396  33184   2376 S   0.0  1.4   0:08.41 /usr/bin/+
  1235 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.59 cpdavd - +
  1239 root      20   0  167452   4208   2836 S   0.0  0.2   0:00.48 dnsadmin +
  1241 root      20   0  209680  12624   2532 S   0.0  0.5   0:03.26 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.71 php-fpm: +
  1658 root      38  18  130416   1552    812 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  31032   5712 S   0.0  1.3   0:02.73 /usr/sbin+
  2729 dovenull  20   0   46912   4588   3552 S   0.0  0.2   0:00.04 dovecot/p+
  2730 dovenull  20   0   47148   4728   3596 S   0.0  0.2   0:00.02 dovecot/i+
  2731 root      20   0   10452   1520   1148 S   0.0  0.1   0:00.02 dovecot/l+
  2732 dovenull  20   0   46912   4600   3560 S   0.0  0.2   0:00.05 dovecot/p+
  2733 dovenull  20   0   47056   4596   3568 S   0.0  0.2   0:00.01 dovecot/i+
  2734 root      20   0   24572  12420   1416 S   0.0  0.5   0:00.03 dovecot/c+
  2735 dovecot   20   0   13568   1532   1264 S   0.0  0.1   0:00.00 dovecot/s+
  2736 dovecot   20   0   41188   3004   2184 S   0.0  0.1   0:00.08 dovecot/a+
  2737 root      20   0   12796   1404   1196 S   0.0  0.1   0:00.27 /usr/loca+
  2738 root      20   0   12732   1376   1192 S   0.0  0.1   0:00.24 /usr/loca+
  2740 root      20   0   53252  11908   2524 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263028 130272   3528 S   0.0  5.4   0:03.96 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.47 [kworker]
 11223 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 12520 nobody    20   0  277748  36312   4852 S   0.0  1.5   0:02.88 /usr/sbin+
 16412 nobody    20   0  277624  36192   4888 S   0.0  1.5   0:02.48 /usr/sbin+
 16752 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21417 nobody    20   0  277932  36640   5072 S   0.0  1.5   0:01.58 /usr/sbin+
 23196 nobody    20   0  277932  36292   4740 S   0.0  1.5   0:01.80 /usr/sbin+
 28778 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 29486 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 29506 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32584 nobody    20   0  277620  35592   4300 S   0.0  1.5   0:00.54 /usr/sbin+
 33124 nobody    20   0  277932  35944   4312 S   0.0  1.5   0:00.51 /usr/sbin+
 33175 nobody    20   0  277560  35532   4292 S   0.0  1.5   0:00.33 /usr/sbin+
 33185 nobody    20   0  277764  35840   4392 S   0.0  1.5   0:00.49 /usr/sbin+
 33816 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 33820 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33833 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34187 nobody    20   0  277616  35408   4116 S   0.0  1.5   0:00.44 /usr/sbin+
 34774 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35612 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35676 nobody    20   0  277568  35268   4024 S   0.0  1.5   0:00.29 /usr/sbin+
 36308 nobody    20   0  277932  35288   3872 S   0.0  1.5   0:00.20 /usr/sbin+
 36437 nobody    20   0  277940  35292   3868 S   0.0  1.5   0:00.22 /usr/sbin+
 37062 nobody    20   0  277584  35276   4024 S   0.0  1.5   0:00.10 /usr/sbin+
 37072 nobody    20   0  277976  35356   3904 S   0.0  1.5   0:00.10 /usr/sbin+
 37081 nobody    20   0  277616  35080   3796 S   0.0  1.4   0:00.10 /usr/sbin+
 37082 nobody    20   0  277884  35336   3888 S   0.0  1.5   0:00.08 /usr/sbin+
 37083 nobody    20   0  277592  35060   3788 S   0.0  1.4   0:00.07 /usr/sbin+
 37386 nobody    20   0  277932  35092   3676 S   0.0  1.4   0:00.04 /usr/sbin+
 37712 mailnull  20   0   91012   5760   2504 S   0.0  0.2   0:00.00 /usr/sbin+
 37771 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 37784 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 37785 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 37817 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 37830 nigeria   20   0  400460   2292    572 S   0.0  0.1   0:00.00 php-fpm: +
 37833 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 37834 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 37852 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37854 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37855 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37857 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37858 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37859 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37860 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37861 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 37862 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37863 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37865 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37867 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 37869 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 37870 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 37890 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37891 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 37892 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 37893 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37897 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37898 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 37899 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 /usr/loca+
 37900 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37901 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 37902 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37916 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 37919 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 37925 root      20   0  160220   2068   1584 R   0.0  0.1   0:00.00 top -bcn1
 37935 root      20   0  113496   1428   1236 S   0.0  0.1   0:00.00 bash /usr+
 37936 root      20   0  150496   5100   2092 R   0.0  0.2   0:00.00 /usr/bin/+
 37938 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 37939 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 37940 cloudsms  20   0  131852   3328   2388 R   0.0  0.1   0:00.00 /usr/loca+
 37941 root      20   0   38648   6056   2992 R   0.0  0.3   0:00.00 /usr/loca+
 40404 root      20   0  181976  30020   2296 S   0.0  1.2   0:07.18 lfd - sle+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 84944 root      20   0  183048   2120   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85029 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 5h +
 96689 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:2]
root      96689  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:0]
root      11223  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:2]
root      16752  0.0  0.0      0     0 ?        S    01:43   0:00  \_ [kworker/0:3]
root      28778  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/1:3]
root      29486  0.0  0.0      0     0 ?        S    01:59   0:00  \_ [kworker/u200:1]
root      29506  0.0  0.0      0     0 ?        S    01:59   0:00  \_ [kworker/0:1]
root      33816  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/1:1]
root      33820  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/1:4]
root      33833  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/0:2]
root      34774  0.0  0.0      0     0 ?        S    02:05   0:00  \_ [kworker/0:4]
root      35612  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44396  3512 ?        Ss   Nov20   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  6848 ?        Ss   Nov20   0:13 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   600 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.3 224288  8432 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1528 ?        Ss   Nov20   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   444 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:06 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2308 ?        Ssl  Nov20   0:21 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2120 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      37852  0.0  0.0 183044  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37867  0.0  0.0 113284  1212 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      37869  0.0  0.0 108052   356 ?        S    02:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      37870  0.0  0.0 113288  1516 ?        S    02:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      37942  0.0  0.0 153840  2096 ?        R    02:09   0:00  |               \_ ps auxf
root      37854  0.0  0.0 183044  2156 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37892  0.0  0.0  20164   988 ?        Ss   02:09   0:00  |   \_ jailshell (cloudsms) [37938] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  37938  0.0  0.0  20164   256 ?        S    02:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  37939  0.0  0.0 113284  1212 ?        S    02:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  37940  0.0  0.4 399656 10968 ?        R    02:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root      37855  0.0  0.0 183044  2156 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37902  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      37857  0.0  0.0 183044  2152 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37899  0.0  0.0  20164   992 ?        Ss   02:09   0:00  |   \_ jailshell (cloudsms) [37943] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  37943  0.0  0.0  20164   260 ?        S    02:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      37858  0.0  0.0 183044  2152 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37893  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      37859  0.0  0.0 183044  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37900  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      37860  0.0  0.0 183044  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37890  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      37861  0.0  0.0 183044  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37897  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      37862  0.0  0.0 183044  2140 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37891  0.0  0.0 113284  1212 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      37904  0.0  0.6 169872 16852 ?        S    02:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      37935  0.0  0.0 113496  1428 ?        S    02:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      37936  0.0  0.2 176644  6012 ?        S    02:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      37863  0.0  0.0 183044  2144 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37901  0.0  0.0  20164   972 ?        Ss   02:09   0:00  |   \_ jailshell (pactpay) [37916] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37916  0.0  0.0  20164   264 ?        S    02:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   37928  0.0  0.7 480124 17312 ?        S    02:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      37865  0.0  0.0 183044  2144 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      37898  0.0  0.0  20164   972 ?        Ss   02:09   0:00      \_ jailshell (nigeria) [37919] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37919  0.0  0.0  20164   264 ?        S    02:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   37923  0.0  0.6 404052 16144 ?        S    02:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   244 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4244 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  37712  0.0  0.2  91012  5760 ?        S    02:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13348 ?        Ssl  Nov20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      37784  0.0  0.1 111304  4268 ?        Ss   02:08   0:00  \_ sshd: [accepted]
sshd      37785  0.0  0.1 115644  2632 ?        S    02:08   0:00  |   \_ sshd: [net]
root      37833  0.0  0.2 157100  5072 ?        Ss   02:08   0:00  \_ sshd: unknown [priv]
sshd      37834  0.0  0.1 115644  2628 ?        S    02:08   0:00      \_ sshd: unknown [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  37771  0.0  0.0 445028   324 ?        S    02:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 10944 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   684 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.4 439788 11432 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 42552 ?       Ssl  Nov20   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 157860 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261160  7180 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root      37817  0.0  0.0      0     0 ?        Z    02:08   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1300 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  4588 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4728 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1520 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  4600 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47056  4596 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.5  24572 12420 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1532 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41188  3004 ?        S    01:25   0:00  \_ dovecot/auth
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3600 ?        Ss   Nov20   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 290128  7220 ?        Ssl  Nov20   0:06 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   904 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   37830  0.0  0.0 400460  2292 ?        S    02:08   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.4 5654304 35932 ?       SLsl Nov20   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   812 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263028 130272 ?       S    Nov20   0:03  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3028 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13692 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 33184 ?        Ss   Nov20   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.2 183900  6692 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.1 167452  4208 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12624 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1552 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 31032 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12796  1404 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1376 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12828  1412 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11908 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    12520  0.1  1.5 277748 36312 ?        S    01:37   0:02  \_ /usr/sbin/httpd -k start
nobody    16412  0.1  1.4 277624 36192 ?        S    01:42   0:02  \_ /usr/sbin/httpd -k start
nobody    21417  0.1  1.5 277932 36640 ?        S    01:48   0:01  \_ /usr/sbin/httpd -k start
nobody    23196  0.1  1.4 277932 36292 ?        S    01:50   0:01  \_ /usr/sbin/httpd -k start
nobody    32584  0.1  1.4 277620 35592 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    33124  0.1  1.4 277932 35944 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    33175  0.0  1.4 277560 35532 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    33185  0.1  1.4 277764 35840 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    34187  0.1  1.4 277616 35408 ?        S    02:04   0:00  \_ /usr/sbin/httpd -k start
nobody    35676  0.1  1.4 277568 35268 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    36308  0.1  1.4 277932 35288 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    36437  0.1  1.4 277940 35292 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37062  0.1  1.4 277584 35276 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37072  0.1  1.4 277976 35356 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37081  0.1  1.4 277616 35080 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37082  0.1  1.4 277884 35336 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37083  0.1  1.4 277592 35060 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37386  0.0  1.4 277932 35092 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.0 1462240 268156 ?      Sl   Nov20   5:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181976 30020 ?        Ss   00:00   0:07 lfd - sleeping
## mysql stats
Uptime: 26279  Threads: 5  Questions: 1956839  Slow queries: 0  Opens: 7011  Flush tables: 1  Open tables: 2000  Queries per second avg: 74.463
*************************** 1. row ***************************
     Id: 32308
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 2. row ***************************
     Id: 32313
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 32317
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 109.243.7.20 TIME_WAIT
      1 114.119.128.143 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 172.237.112.133 TIME_WAIT
      1 185.12.250.104 TIME_WAIT
      1 185.6.10.201 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 ::1 TIME_WAIT
      1 5.133.192.184 TIME_WAIT
      1 54.225.135.222 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 43.173.174.33 TIME_WAIT
      2 46.205.196.168 TIME_WAIT
      5 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 02:09:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 18 minutes 44 seconds
   Server load: 0.10 0.37 0.33
   Total accesses: 136758 - Total Traffic: 3.4 GB - Total Duration: 73145580
   CPU Usage: u9.13 s5.84 cu1802.46 cs1449.26 - 12.4% CPU load
   5.2 requests/sec - 136.3 kB/second - 26.2 kB/request - 534.854 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

___K_KKW.KK.W_K_KK...K..._......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client      Protocol         VHost                                      Request
   0-1  37062 0/17/6732   _ 0.36  0    0   3591128 0.0   0.42  178.67 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   1-1  37386 0/12/6480   _ 0.13  3    1   3358874 0.0   0.16  164.56 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   2-1  33124 0/88/6156   _ 2.08  3    2   3261700 0.0   2.48  157.36 98.82.63.147    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/2019elections/2019
   3-1  23196 3/307/6552  K 7.94  2    400 3636383 96.1  8.55  173.49 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=2443719484 HTTP/1.1
   4-1  35676 0/50/6549   _ 1.22  0    303 3361281 0.0   1.31  164.29 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3383200862 HTTP/1.1
   5-1  12520 4/476/6237  K 12.66 0    401 3522691 125.2 13.35 163.69 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=3308890865 HTTP/1.1
   6-1  36308 2/35/6491   K 0.87  2    358 3510435 66.0  0.96  184.26 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=2663557063 HTTP/1.1
   7-1  37072 0/21/6293   W 0.37  0    0   3415456 0.0   0.44  168.36 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   8-1  -     0/0/6403    . 0.00  55   0   3402934 0.0   0.00  159.57 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-1  34187 9/73/6153   K 1.81  3    270 3082461 280.5 1.99  149.48 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=2313046728 HTTP/1.1
   10-1 37081 1/17/6234   K 0.39  4    299 3139718 34.5  0.49  148.01 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=2530316962 HTTP/1.1
   11-1 -     0/0/5897    . 0.00  52   0   3092198 0.0   0.00  150.48 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-1 36437 5/37/5983   W 0.94  0    0   3193317 153.4 1.01  154.65 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=1988964951 HTTP/1.1
   13-1 37082 0/17/6132   _ 0.30  3    1   3145590 0.0   0.36  150.85 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   14-1 16412 8/465/5835  K 11.74 3    350 2992752 248.7 10.11 141.58 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=979648246 HTTP/1.1
   15-1 37083 0/15/5332   _ 0.29  3    157 2947929 0.0   0.31  138.06 217.113.194.124 http/1.1 team.cloudware.ng:80   GET /vendor/phpunit/php-code-coverage/tests/_files/CoverageNone
   16-1 21417 10/275/4844 K 6.48  0    351 2566991 304.3 8.03  131.56 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=647004657 HTTP/1.1
   17-1 33175 4/62/3940   K 1.38  2    348 2280488 126.6 1.57  97.22  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=1948340119 HTTP/1.1
   18-1 -     0/0/4189    . 0.00  61   0   2285096 0.0   0.00  103.32 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-1 -     0/0/3769    . 0.00  340  0   2095353 0.0   0.00  99.59  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-1 -     0/0/3480    . 0.00  206  0   2003150 0.0   0.00  96.62  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-1 32584 3/100/2927  K 2.18  3    411 1555859 93.1  2.68  73.67  192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=3122306561 HTTP/1.1
   22-1 -     0/0/3189    . 0.00  54   0   1650947 0.0   0.00  78.69  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-1 -     0/0/3062    . 0.00  354  0   1667510 0.0   0.00  78.53  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-1 -     0/0/1928    . 0.00  297  0   963238  0.0   0.00  46.70  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-1 33185 0/87/1105   _ 2.22  2    5   674449  0.0   2.52  29.88  107.20.255.194  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/2019elections/imag
   26-1 -     0/0/715     . 0.00  341  0   428654  0.0   0.00  18.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-1 -     0/0/506     . 0.00  53   0   297127  0.0   0.00  11.85  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-1 -     0/0/543     . 0.00  253  0   356892  0.0   0.00  15.93  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-1 -     0/0/434     . 0.00  343  0   260477  0.0   0.00  11.18  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-1 -     0/0/332     . 0.00  330  0   200777  0.0   0.00  7.47   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-1 -     0/0/274     . 0.00  352  0   193753  0.0   0.00  6.38   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593     . 0.00  7163 0   371705  0.0   0.00  14.42  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301     . 0.00  6703 0   111013  0.0   0.00  5.26   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28      . 0.00  8892 0   15090   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7       . 0.00  8899 0   640     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74      . 0.00  8771 0   36928   0.0   0.00  1.90   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61      . 0.00  8728 0   25914   0.0   0.00  1.45   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65      . 0.00  8821 0   27597   0.0   0.00  1.54   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28      . 0.00  8852 0   13821   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265     . 0.00  8001 0   139506  0.0   0.00  7.31   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00  8908 0   8       0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12      . 0.00  8907 0   4242    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89      . 0.00  8633 0   42251   0.0   0.00  2.07   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10      . 0.00  8896 0   2792    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55      . 0.00  8634 0   25889   0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463     . 0.00  7586 0   190150  0.0   0.00  10.76  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7       . 0.00  8912 0   2404    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1033
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...23)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 8747
   total entries replaced since starting: 0
   total entries expired since starting: 7710
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 11 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit