403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.02.57.txt
 ## swap threshold exceeded
## server overview
2025-11-21.02.57 load[0] mem[61/68] mysql[1/10] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1305          95          92         962         780
Swap:          1999        1438         561
 02:57:01 up  8:07,  0 users,  load average: 0.73, 0.71, 2.65
## system overview
top - 02:57:01 up  8:07,  0 users,  load average: 1.31, 0.83, 2.68
Tasks: 201 total,   4 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 40.6 sy,  0.0 ni,  3.1 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    92112 free,  1353088 used,   975100 buff/cache
KiB Swap:  2047996 total,   574096 free,  1473900 used.   783420 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 270624   3236 S  25.0 11.2   5:49.59 /usr/sbin+
 48373 pactpay   20   0  480124  16780  11080 S  12.5  0.7   0:00.02 /opt/cpan+
 48378 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:18.05 [kswapd0]
   357 root      20   0   40244   7824   7512 S   6.2  0.3   0:15.41 /usr/lib/+
   486 dbus      20   0   58728   1520    792 R   6.2  0.1   0:15.66 /usr/bin/+
 48017 nobody    20   0  277940  35116   3724 S   6.2  1.5   0:00.05 /usr/sbin+
 48380 cloudw    20   0  353712  15968  10484 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44396   3512   1640 S   0.0  0.1   0:40.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.70 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.42 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:28.93 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.39 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.97 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.01 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.16 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:02.09 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.86 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   386 root      20   0   45360    404    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    588    460 S   0.0  0.0   0:02.51 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    528    444 S   0.0  0.0   0:00.63 /usr/sbin+
   482 root      20   0  152780    368    328 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   6852   1772 S   0.0  0.3   0:00.37 queueproc+
   496 rpc       20   0   69256    268    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    564    452 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 R   0.0  0.1   0:06.86 /usr/lib/+
   522 nscd      20   0 1344744   2288    924 S   0.0  0.1   0:23.65 /usr/sbin+
   523 polkitd   20   0  610540   1108    708 S   0.0  0.0   0:04.03 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.82 /usr/sbin+
   575 root      20   0   24208    228    208 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   3916    972 S   0.0  0.2   0:00.76 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.26 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13212   2444 S   0.0  0.5   0:07.00 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.48 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.62 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.25 sw-engine+
   916 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056   8888    276 S   0.0  0.4   0:35.79 /usr/bin/+
   923 root      20   0  396248    632    460 S   0.0  0.0   0:00.73 php-fpm: +
   927 root      20   0  439788   2204   1256 S   0.0  0.1   0:00.82 php-fpm: +
   929 named     20   0 1054792  43008   2168 S   0.0  1.8   0:14.70 /usr/sbin+
   930 root      20   0 1763340 157920    700 S   0.0  6.5   0:14.10 /usr/loca+
   937 root      20   0  261160   7432   1924 S   0.0  0.3   0:44.29 cpsrvd (S+
   944 systuser  20   0  113932     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   948 root      20   0   51656   1248    908 S   0.0  0.1   0:00.39 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.64 /usr/bin/+
   952 cpanelc+  20   0   10592   3596   2376 S   0.0  0.1   0:25.01 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  298320   8188   6976 S   0.0  0.3   0:07.70 /usr/sbin+
   966 root      20   0  389508    868    656 S   0.0  0.0   0:00.79 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.48 php-fpm: +
   976 telegraf  20   0 5654304  36516   6008 S   0.0  1.5   0:15.84 /usr/loca+
   985 root      20   0  388892    892    684 S   0.0  0.0   0:00.75 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.19 /usr/bin/+
   987 root      20   0  572372   1252    676 S   0.0  0.1   0:02.51 /usr/bin/+
  1080 dovecot   20   0   10320    572    456 S   0.0  0.0   0:00.13 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:06.26 /usr/loca+
  1156 systuser  20   0  157708   3148   1148 S   0.0  0.1   0:00.14 SonarPush+
  1161 wp-tool+  20   0  387556  13440   1788 S   0.0  0.6   0:00.29 /usr/bin/+
  1162 wp-tool+  20   0  412396  32756   1948 S   0.0  1.4   0:09.30 /usr/bin/+
  1235 root      20   0  262224  24452   6588 S   0.0  1.0   0:02.87 cpdavd - +
  1239 root      20   0  167452   4100   2728 S   0.0  0.2   0:00.52 dnsadmin +
  1241 root      20   0  209680  12584   2544 S   0.0  0.5   0:03.56 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.78 php-fpm: +
  1658 root      38  18  130416   1548    808 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  30652   5364 S   0.0  1.3   0:03.01 /usr/sbin+
  2729 dovenull  20   0   46912   3768   2732 S   0.0  0.2   0:00.08 dovecot/p+
  2730 dovenull  20   0   47148   4120   2912 S   0.0  0.2   0:00.04 dovecot/i+
  2731 root      20   0   10452   1204    832 S   0.0  0.0   0:00.05 dovecot/l+
  2732 dovenull  20   0   46912   3976   2936 S   0.0  0.2   0:00.10 dovecot/p+
  2733 dovenull  20   0   47184   4352   3160 S   0.0  0.2   0:00.02 dovecot/i+
  2734 root      20   0   24564  11952   1028 S   0.0  0.5   0:00.04 dovecot/c+
  2735 dovecot   20   0   13568   1200    932 S   0.0  0.0   0:00.00 dovecot/s+
  2736 dovecot   20   0   41188   2484   1648 S   0.0  0.1   0:00.15 dovecot/a+
  2737 root      20   0   12812   1388   1180 S   0.0  0.1   0:00.57 /usr/loca+
  2738 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.49 /usr/loca+
  2739 root      20   0   12864   1404   1180 S   0.0  0.1   0:00.53 /usr/loca+
  2740 root      20   0   53252  11812   2428 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263284 129684   2684 S   0.0  5.4   0:05.61 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.52 [kworker]
 22313 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 24525 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27685 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 28480 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 31402 nobody    20   0  277692  36336   5036 S   0.0  1.5   0:01.96 /usr/sbin+
 31417 nobody    20   0  277668  36368   5016 S   0.0  1.5   0:01.80 /usr/sbin+
 31508 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 31822 nobody    20   0  277940  36296   4868 S   0.0  1.5   0:01.84 /usr/sbin+
 36137 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36776 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40404 root      20   0  182388  30372   2284 S   0.0  1.3   0:09.72 lfd - sle+
 40593 nobody    20   0  277620  36016   4696 S   0.0  1.5   0:00.99 /usr/sbin+
 42326 nobody    20   0  277616  35840   4576 S   0.0  1.5   0:00.74 /usr/sbin+
 42579 nobody    20   0  277612  35532   4272 S   0.0  1.5   0:00.67 /usr/sbin+
 43702 nobody    20   0  277936  35804   4276 S   0.0  1.5   0:00.56 /usr/sbin+
 43703 nobody    20   0  277616  35648   4380 S   0.0  1.5   0:00.57 /usr/sbin+
 44483 nobody    20   0  277576  35452   4232 S   0.0  1.5   0:00.53 /usr/sbin+
 44679 nobody    20   0  277944  35736   4332 S   0.0  1.5   0:00.46 /usr/sbin+
 44701 nobody    20   0  277616  35504   4244 S   0.0  1.5   0:00.46 /usr/sbin+
 44764 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45064 nobody    20   0  277940  35444   4052 S   0.0  1.5   0:00.37 /usr/sbin+
 45338 nobody    20   0  277612  35364   4112 S   0.0  1.5   0:00.39 /usr/sbin+
 47149 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 47211 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 47514 nobody    20   0  277944  35336   3944 S   0.0  1.5   0:00.08 /usr/sbin+
 47642 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47839 nobody    20   0  277996  35356   3916 S   0.0  1.5   0:00.08 /usr/sbin+
 47995 nobody    20   0  277588  35160   3932 S   0.0  1.5   0:00.05 /usr/sbin+
 48018 nobody    20   0  277948  34720   3332 S   0.0  1.4   0:00.07 /usr/sbin+
 48036 nigeria   20   0  487944  21708   4756 S   0.0  0.9   0:00.59 php-fpm: +
 48049 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 48175 nigeria   20   0  401180   8900   3916 S   0.0  0.4   0:00.19 php-fpm: +
 48223 root      20   0  262224  19216   1296 S   0.0  0.8   0:00.00 cpdavd - +
 48258 healtho+  20   0  457640  64240   4108 S   0.0  2.7   0:00.68 php-fpm: +
 48286 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 48287 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 48298 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 48299 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 48309 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 48310 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48311 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48312 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48313 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48314 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48315 root      20   0  183040   2208   1640 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48317 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48318 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 48319 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48321 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48322 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48323 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 48325 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 48326 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 48348 root      20   0  160248   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 48349 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48351 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48352 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 48353 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48355 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 48356 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48357 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48358 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48359 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48360 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 48362 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48367 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48369 saboakin  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 48376 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:01.09 [kworker/+
 84944 root      20   0  183048   2060   1532 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1108    928 S   0.0  0.0   0:00.00 /bin/sh -+
 85029 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 5h +
 89738 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:03  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        D    00:46   0:01  \_ [kworker/u200:2]
root      48386  0.0  0.0      0     0 ?        R    02:57   0:00  |   \_ [kworker/u200:2]
root      89738  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/u200:0]
root      22313  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/1:4]
root      24525  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:3]
root      27685  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/1:3]
root      28480  0.0  0.0      0     0 ?        D    02:33   0:00  \_ [kworker/0:0]
root      31508  0.0  0.0      0     0 ?        S    02:37   0:00  \_ [kworker/1:1]
root      36137  0.0  0.0      0     0 ?        D    02:43   0:00  \_ [kworker/0:1]
root      36776  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/0:2]
root      44764  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/0:4]
root      47642  0.0  0.0      0     0 ?        S    02:56   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44396  3512 ?        Ss   Nov20   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  40244  7828 ?        Ss   Nov20   0:15 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   404 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   588 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   528 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   368 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224288  6852 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Rs   Nov20   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   268 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   564 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:06 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2288 ?        Ssl  Nov20   0:23 /usr/sbin/nscd
polkitd     523  0.0  0.0 610540  1108 ?        Ssl  Nov20   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1108 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      48309  0.0  0.0 183044  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48323  0.0  0.0 113284  1212 ?        Ss   02:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      48325  0.0  0.0 108052   356 ?        S    02:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      48326  0.0  0.0 113288  1516 ?        S    02:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      48385  0.0  0.0 153840  2096 ?        R    02:57   0:00  |               \_ ps auxf
root      48310  0.0  0.0 183044  2156 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48349  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      48311  0.0  0.0 183044  2156 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48353  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      48312  0.0  0.0 183044  2152 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48359  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      48313  0.0  0.0 183044  2152 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48351  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      48314  0.0  0.0 183044  2152 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48356  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      48316  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48358  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      48317  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48357  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      48318  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48362  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      48319  0.0  0.0 183044  2140 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48352  0.0  0.0  20164   968 ?        Ss   02:57   0:00  |   \_ jailshell (pactpay) [48367] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48367  0.0  0.0  20164   264 ?        S    02:57   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48373  0.0  0.7 480124 17308 ?        S    02:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      48321  0.0  0.0 183044  2140 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      48355  0.0  0.0  20164   964 ?        Ss   02:57   0:00  |   \_ jailshell (nigeria) [48376] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48376  0.0  0.0  20164   260 ?        S    02:57   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48378  0.0  0.6 404052 16140 ?        S    02:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      48322  0.0  0.0 183040  2204 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root        575  0.0  0.0  24208   228 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  3916 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13212 ?        Ssl  Nov20   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      48286  0.0  0.1 111304  4264 ?        Ss   02:56   0:00  \_ sshd: [accepted]
root      48298  0.0  0.1 111304  4268 ?        Ss   02:57   0:00  \_ sshd: [accepted]
sshd      48299  0.0  0.1 115644  2632 ?        S    02:57   0:00      \_ sshd: [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  48049  0.0  0.0 445028   552 ?        S    02:56   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.3 1277056 8888 ?        Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   632 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.0 439788  2204 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 43008 ?       Ssl  Nov20   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 157920 ?      Ssl  Nov20   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.1  0.3 261160  7432 ?        Ss   Nov20   0:44 cpsrvd (SSL) - waiting for connections                   
root      48287  0.0  0.0      0     0 ?        Z    02:56   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1248 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   572 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  3768 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4120 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1204 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  3976 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47184  4352 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.4  24564 11952 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1200 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41188  2484 ?        S    01:25   0:00  \_ dovecot/auth
root      47149  0.0  0.1  41052  2728 ?        S    02:55   0:00  \_ dovecot/auth -w
root      47211  0.0  0.1  60820  4512 ?        S    02:55   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3596 ?        Rs   Nov20   0:25 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.3 298320  8188 ?        Ssl  Nov20   0:07 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   868 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   48036  1.9  0.8 487944 21708 ?        S    02:56   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   48175  1.3  0.3 401180  8900 ?        S    02:56   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  48258 11.3  2.6 457640 64240 ?        S    02:56   0:00  \_ php-fpm: pool health_oyostate_gov_ng
telegraf    976  0.0  1.5 5654304 36516 ?       SLsl Nov20   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   892 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1252 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263284 129684 ?       S    Nov20   0:05  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3148 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13440 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32756 ?        Ss   Nov20   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  1.0 262224 24452 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root      48223  0.0  0.7 262224 19216 ?        S    02:56   0:00  \_ cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.1 167452  4100 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12584 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1548 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 30652 ?        Ss   Nov20   0:03 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12812  1388 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1364 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12864  1404 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11812 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31402  0.1  1.5 277692 36336 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    31417  0.1  1.5 277668 36368 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    31822  0.1  1.4 277940 36296 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    40593  0.1  1.4 277620 36016 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    42326  0.1  1.4 277616 35840 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    42579  0.1  1.4 277612 35532 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    43702  0.1  1.4 277936 35804 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    43703  0.1  1.4 277616 35648 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    48380  0.0  0.6 353712 15968 ?        S    02:57   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    44483  0.1  1.4 277576 35452 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    44679  0.1  1.4 277944 35736 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    44701  0.1  1.4 277616 35504 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    45064  0.1  1.4 277940 35444 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    45338  0.1  1.4 277612 35364 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    47514  0.1  1.4 277944 35336 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    47839  0.1  1.4 277996 35356 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
nobody    47995  0.1  1.4 277588 35160 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
nobody    48017  0.1  1.4 277940 35116 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
nobody    48018  0.2  1.4 277948 34720 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.1 1462240 270624 ?      Sl   Nov20   5:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 182388 30372 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 29158  Threads: 3  Questions: 2152411  Slow queries: 0  Opens: 7821  Flush tables: 1  Open tables: 2000  Queries per second avg: 73.818
*************************** 1. row ***************************
     Id: 35814
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 35815
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 35819
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 114.119.134.79 TIME_WAIT
      1 142.44.225.98 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.224 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 51.68.111.205 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 180.93.137.9 TIME_WAIT
     28 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 02:57:01 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 8 hours 6 minutes 44 seconds
   Server load: 1.31 0.83 2.68
   Total accesses: 149949 - Total Traffic: 3.8 GB - Total Duration: 81489729
   CPU Usage: u8.76 s5.92 cu1982.07 cs1585.92 - 12.3% CPU load
   5.13 requests/sec - 136.1 kB/second - 26.5 kB/request - 543.45 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

_K__K____KKKK__..._...WW........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-1  44483 0/95/7412  _ 2.13 2     2   4005344 0.0   2.30  195.26 52.200.251.20   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/2019elections/images
   1-1  31822 1/311/7198 K 7.58 4     360 3795565 34.9  8.39  185.02 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1574408239 HTTP/1.1
   2-1  44679 0/83/6721  _ 1.91 1     302 3614182 0.0   2.02  171.54 180.93.137.9    http/1.1 health.oyostate.gov.ng:443 GET /wp-login.php HTTP/1.1
   3-1  47514 0/22/7120  _ 0.30 0     0   3981394 0.0   0.38  187.16 190.111.108.124 http/1.1 nigeriadecide.org:80       GET http://nigeriadecide.orghttp/nigeriadecide.org/blog/2014/02
   4-1  31402 3/343/7269 K 8.02 1     344 3816149 95.7  8.74  193.56 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3113452076 HTTP/1.1
   5-1  40593 0/162/6922 _ 4.18 0     352 3958858 0.0   4.38  181.80 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=772622283 HTTP/1.1
   6-1  31417 0/333/7216 _ 7.34 2     4   3957213 0.0   7.98  202.98 100.28.118.16   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/images/images/2019
   7-1  44701 0/82/6848  _ 1.86 1     260 3791257 0.0   2.02  183.70 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=995752954 HTTP/1.1
   8-1  47995 0/11/7036  _ 0.16 0     345 3808108 0.0   0.24  178.28 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=1893877497 HTTP/1.1
   9-1  48017 2/9/6752   K 0.16 0     411 3498274 67.6  0.21  165.48 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=1783689959 HTTP/1.1
   10-1 47839 1/17/6815  K 0.30 0     276 3507616 34.2  0.42  167.61 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=1657803356 HTTP/1.1
   11-1 45064 1/55/6452  K 1.50 0     369 3463814 33.7  1.67  165.42 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=4261002043 HTTP/1.1
   12-1 42579 6/118/6555 K 3.17 2     354 3528234 193.4 2.85  169.22 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=1348225014 HTTP/1.1
   13-1 45338 0/66/6751  _ 1.63 0     298 3507974 0.0   1.77  167.46 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=1482755339 HTTP/1.1
   14-1 48018 0/12/6403  _ 0.33 0     342 3306800 0.0   0.34  156.05 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=3515940843 HTTP/1.1
   15-1 -     0/0/5951   . 0.00 260   0   3347190 0.0   0.00  154.03 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 -     0/0/5357   . 0.00 259   0   2864326 0.0   0.00  148.16 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-1 -     0/0/4573   . 0.00 15    0   2652904 0.0   0.00  114.05 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 42326 0/130/4563 _ 2.98 0     0   2581773 0.0   3.50  114.29 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-1 -     0/0/4255   . 0.00 22    0   2382817 0.0   0.00  125.38 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-1 -     0/0/3866   . 0.00 42    0   2251178 0.0   0.00  105.87 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-1 -     0/0/3098   . 0.00 328   0   1656832 0.0   0.00  78.93  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-1 43702 0/132/3507 W 3.05 0     0   1894494 0.0   2.12  85.58  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   23-1 43703 1/100/3254 W 2.28 0     0   1788949 33.5  2.52  83.43  192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=271897013 HTTP/1.1
   24-1 -     0/0/1928   . 0.00 3176  0   963238  0.0   0.00  46.70  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1 -     0/0/1261   . 0.00 2206  0   817594  0.0   0.00  34.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-1 -     0/0/715    . 0.00 3220  0   428654  0.0   0.00  18.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1 -     0/0/506    . 0.00 2932  0   297127  0.0   0.00  11.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1 -     0/0/543    . 0.00 3132  0   356892  0.0   0.00  15.93  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-1 -     0/0/434    . 0.00 3222  0   260477  0.0   0.00  11.18  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 -     0/0/332    . 0.00 3209  0   200777  0.0   0.00  7.47   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-1 -     0/0/274    . 0.00 3231  0   193753  0.0   0.00  6.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00 10043 0   371705  0.0   0.00  14.42  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00 9582  0   111013  0.0   0.00  5.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00 11772 0   15090   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 11779 0   640     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00 11650 0   36928   0.0   0.00  1.90   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00 11607 0   25914   0.0   0.00  1.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00 11701 0   27597   0.0   0.00  1.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00 11732 0   13821   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00 10881 0   139506  0.0   0.00  7.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00 11788 0   8       0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00 11787 0   4242    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00 11512 0   42251   0.0   0.00  2.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00 11776 0   2792    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00 11513 0   25889   0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00 10465 0   190150  0.0   0.00  10.76  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00 11792 0   2404    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1092
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...63)
   index usage: 19%, cache usage: 25%
   total entries stored since starting: 18503
   total entries replaced since starting: 0
   total entries expired since starting: 17403
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 46 miss
   total removes since starting: 8 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit