403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.03.27.txt
 ## swap threshold exceeded
## server overview
2025-11-21.03.27 load[1] mem[62/68] mysql[3/10] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1377          84          96         901         713
Swap:          1999        1442         557
 03:27:02 up  8:37,  0 users,  load average: 1.52, 0.64, 0.88
## system overview
top - 03:27:02 up  8:37,  0 users,  load average: 1.52, 0.64, 0.88
Tasks: 203 total,   4 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 67.7 us, 29.0 sy,  0.0 ni,  3.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    91272 free,  1422500 used,   906528 buff/cache
KiB Swap:  2047996 total,   571008 free,  1476988 used.   718820 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 270920   3604 S 100.0 11.2   6:12.43 /usr/sbin+
 70288 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44396   3504   1632 S   0.0  0.1   0:42.80 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.50 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:30.79 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.47 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.29 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.01 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.62 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.63 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.96 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   4972   4660 S   0.0  0.2   0:16.20 /usr/lib/+
   386 root      20   0   45360    404    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    588    460 S   0.0  0.0   0:02.63 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    528    444 S   0.0  0.0   0:00.68 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   6772   1692 S   0.0  0.3   0:00.38 queueproc+
   486 dbus      20   0   58728   1612    860 S   0.0  0.1   0:16.65 /usr/bin/+
   496 rpc       20   0   69256    268    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    524    412 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:07.29 /usr/lib/+
   522 nscd      20   0 1344744   2288    924 S   0.0  0.1   0:25.17 /usr/sbin+
   523 polkitd   20   0  610540   1108    708 S   0.0  0.0   0:04.27 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.87 /usr/sbin+
   575 root      20   0   24208    212    192 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   3968   1016 S   0.0  0.2   0:00.84 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.27 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13508   2724 S   0.0  0.6   0:07.44 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.64 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.66 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.33 sw-engine+
   916 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056   8812    276 S   0.0  0.4   0:35.80 /usr/bin/+
   923 root      20   0  396248    696    524 S   0.0  0.0   0:00.76 php-fpm: +
   927 root      20   0  439788   2228   1280 S   0.0  0.1   0:00.87 php-fpm: +
   929 named     20   0 1054792  43664   2120 S   0.0  1.8   0:16.08 /usr/sbin+
   930 root      20   0 1763340 157956    800 S   0.0  6.5   0:14.10 /usr/loca+
   937 root      20   0  261160   7524   2016 S   0.0  0.3   0:44.51 cpsrvd (S+
   944 systuser  20   0  113932     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   948 root      20   0   51656   1248    908 S   0.0  0.1   0:00.41 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.67 /usr/bin/+
   952 cpanelc+  20   0   10592   3596   2376 S   0.0  0.1   0:26.49 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  306512   5796   4540 S   0.0  0.2   0:08.11 /usr/sbin+
   966 root      20   0  389508    896    684 S   0.0  0.0   0:00.84 php-fpm: +
   975 root      20   0  400740   2464    840 S   0.0  0.1   0:03.73 php-fpm: +
   976 telegraf  20   0 5654304  36552   6032 S   0.0  1.5   0:16.82 /usr/loca+
   985 root      20   0  388892    960    748 S   0.0  0.0   0:00.81 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.21 /usr/bin/+
   987 root      20   0  572372   1252    676 S   0.0  0.1   0:02.65 /usr/bin/+
  1080 dovecot   20   0   10320    572    456 S   0.0  0.0   0:00.14 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:06.47 /usr/loca+
  1156 systuser  20   0  157708   3148   1148 S   0.0  0.1   0:00.14 SonarPush+
  1161 wp-tool+  20   0  387556  13440   1788 S   0.0  0.6   0:00.31 /usr/bin/+
  1162 wp-tool+  20   0  412396  32792   1984 S   0.0  1.4   0:09.86 /usr/bin/+
  1235 root      20   0  262224  22876   4952 S   0.0  0.9   0:02.90 cpdavd - +
  1239 root      20   0  167452   4100   2728 S   0.0  0.2   0:00.54 dnsadmin +
  1241 root      20   0  209680  12560   2520 S   0.0  0.5   0:03.84 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.84 php-fpm: +
  1658 root      38  18  130416   1552    812 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  30648   5360 S   0.0  1.3   0:03.13 /usr/sbin+
  2729 dovenull  20   0   46912   4004   2956 S   0.0  0.2   0:00.11 dovecot/p+
  2730 dovenull  20   0   47148   4380   3160 S   0.0  0.2   0:00.05 dovecot/i+
  2731 root      20   0   10452   1204    832 S   0.0  0.0   0:00.07 dovecot/l+
  2732 dovenull  20   0   46912   4212   3156 S   0.0  0.2   0:00.14 dovecot/p+
  2733 dovenull  20   0   47184   4332   3140 S   0.0  0.2   0:00.03 dovecot/i+
  2734 root      20   0   24564  11952   1028 S   0.0  0.5   0:00.05 dovecot/c+
  2735 dovecot   20   0   13568   1200    932 S   0.0  0.0   0:00.01 dovecot/s+
  2736 dovecot   20   0   41188   2508   1648 S   0.0  0.1   0:00.21 dovecot/a+
  2737 root      20   0   12792   1388   1180 S   0.0  0.1   0:00.77 /usr/loca+
  2738 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.67 /usr/loca+
  2739 root      20   0   12816   1404   1180 S   0.0  0.1   0:00.72 /usr/loca+
  2740 root      20   0   53252  11804   2420 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263284 129684   2684 S   0.0  5.4   0:05.77 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.57 [kworker]
 28480 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 31417 nobody    20   0  277752  36496   5052 S   0.0  1.5   0:04.95 /usr/sbin+
 36137 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40404 root      20   0  182664  30704   2284 S   0.0  1.3   0:11.54 lfd - sle+
 48017 nobody    20   0  277940  36672   5028 S   0.0  1.5   0:03.00 /usr/sbin+
 51541 root      20   0  123364    728    500 S   0.0  0.0   0:00.00 /usr/sbin+
 51578 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 52998 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 56662 nobody    20   0  277632  36292   5008 S   0.0  1.5   0:01.77 /usr/sbin+
 57883 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58580 nobody    20   0  277940  36436   4856 S   0.0  1.5   0:01.46 /usr/sbin+
 59394 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 60330 nobody    20   0  277616  36020   4748 S   0.0  1.5   0:01.28 /usr/sbin+
 60717 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 63594 nobody    20   0  277940  35952   4496 S   0.0  1.5   0:00.92 /usr/sbin+
 65217 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66737 nobody    20   0  277576  35376   4156 S   0.0  1.5   0:00.48 /usr/sbin+
 67412 nobody    20   0  277616  35408   4144 S   0.0  1.5   0:00.37 /usr/sbin+
 68110 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68932 nobody    20   0  277612  35244   3988 S   0.0  1.5   0:00.17 /usr/sbin+
 68988 root      20   0   41052   2804   2136 S   0.0  0.1   0:00.00 dovecot/a+
 69332 nobody    20   0  277956  35444   4036 S   0.0  1.5   0:00.11 /usr/sbin+
 69381 root      20   0   60820   4516   3524 S   0.0  0.2   0:00.00 dovecot/l+
 69399 nobody    20   0  277616  34972   3716 S   0.0  1.4   0:00.13 /usr/sbin+
 69400 nobody    20   0  277616  35172   3912 S   0.0  1.5   0:00.10 /usr/sbin+
 69464 nobody    20   0  277976  35360   3932 S   0.0  1.5   0:00.16 /usr/sbin+
 69465 nobody    20   0  277940  35240   3856 S   0.0  1.5   0:00.07 /usr/sbin+
 69466 nobody    20   0  277616  34972   3716 S   0.0  1.4   0:00.11 /usr/sbin+
 69467 nobody    20   0  277616  35332   3996 S   0.0  1.5   0:00.15 /usr/sbin+
 69728 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 69729 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 70022 mailnull  20   0   91016   4984   1792 S   0.0  0.2   0:00.00 /usr/sbin+
 70054 nobody    20   0  277616  34948   3692 S   0.0  1.4   0:00.02 /usr/sbin+
 70068 nobody    20   0  277616  34908   3660 S   0.0  1.4   0:00.01 /usr/sbin+
 70069 nobody    20   0  277568  34564   3360 S   0.0  1.4   0:00.05 /usr/sbin+
 70088 nobody    20   0  277616  34476   3228 S   0.0  1.4   0:00.04 /usr/sbin+
 70215 root      20   0  162436   5824   4336 S   0.0  0.2   0:00.01 sshd: roo+
 70216 nigeria   20   0  493800  30428   6180 S   0.0  1.3   0:00.21 php-fpm: +
 70217 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 70219 healtho+  20   0  518124  54724   6232 S   0.0  2.3   0:00.62 php-fpm: +
 70222 nigeria   20   0  419612  26032   3904 S   0.0  1.1   0:00.19 php-fpm: +
 70224 healtho+  20   0  427868  33852   3996 S   0.0  1.4   0:00.26 php-fpm: +
 70229 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 70230 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 70247 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70248 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70249 root      20   0  183040   2208   1632 R   0.0  0.1   0:00.00 /usr/sbin+
 70250 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70251 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70252 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70253 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70255 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70256 root      20   0  183040   2200   1632 R   0.0  0.1   0:00.00 /usr/sbin+
 70257 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70259 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70265 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70266 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70268 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70269 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70270 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 70271 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 70273 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70274 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 70276 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70282 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 70284 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 70286 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 70298 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 70303 root      20   0  111304   4452   3416 S   0.0  0.2   0:00.00 sshd: [ac+
 70304 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 70311 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 70328 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 70329 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.00 /opt/cpan+
 70331 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.00 /opt/cpan+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [kworker/+
 84944 root      20   0  183048   2060   1532 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284    724    544 S   0.0  0.0   0:00.00 /bin/sh -+
 85029 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 5h +
 89738 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:03  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:01  \_ [kworker/u200:2]
root      89738  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/u200:0]
root      28480  0.0  0.0      0     0 ?        S    02:33   0:00  \_ [kworker/0:0]
root      36137  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:1]
root      51578  0.0  0.0      0     0 ?        S    03:01   0:00  \_ [kworker/1:1]
root      52998  0.0  0.0      0     0 ?        R    03:03   0:00  \_ [kworker/0:4]
root      57883  0.0  0.0      0     0 ?        D    03:10   0:00  \_ [kworker/0:2]
root      59394  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:3]
root      60717  0.0  0.0      0     0 ?        S    03:14   0:00  \_ [kworker/1:4]
root      65217  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:0]
root      68110  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44396  3504 ?        Ss   Nov20   0:42 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  4972 ?        Ss   Nov20   0:16 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   404 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   588 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   528 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224288  6772 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1612 ?        Ss   Nov20   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   268 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   524 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:07 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2288 ?        Ssl  Nov20   0:25 /usr/sbin/nscd
polkitd     523  0.0  0.0 610540  1108 ?        Ssl  Nov20   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284   724 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      70247  0.0  0.0 183044  2148 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70270  0.0  0.0 113284  1212 ?        Ss   03:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      70282  0.0  0.0 108052   360 ?        S    03:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      70286  0.0  0.0 113288  1516 ?        S    03:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      70341  0.0  0.0 153840  2096 ?        R    03:27   0:00  |               \_ ps auxf
root      70248  0.0  0.0 183044  2148 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70273  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      70250  0.0  0.0 183044  2148 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70269  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      70251  0.0  0.0 183044  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70265  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      70252  0.0  0.0 183044  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70276  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      70253  0.0  0.0 183044  2140 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70268  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      70255  0.0  0.0 183044  2140 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70266  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      70257  0.0  0.0 183044  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70274  0.0  0.0  20164   964 ?        Ss   03:27   0:00  |   \_ jailshell (pactpay) [70298] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70298  0.0  0.0  20164   256 ?        S    03:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70304  0.0  0.7 480124 17672 ?        S    03:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      70259  0.0  0.0 183044  2140 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root      70271  0.0  0.0  20164   968 ?        Ss   03:27   0:00      \_ jailshell (nigeria) [70284] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70284  0.0  0.0  20164   260 ?        S    03:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70288  0.0  0.6 404052 16140 ?        S    03:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   212 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  3968 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  70022  0.0  0.2  91016  4984 ?        S    03:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13508 ?        Ssl  Nov20   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      69728  0.0  0.1 111304  4268 ?        Ss   03:26   0:00  \_ sshd: [accepted]
sshd      69729  0.0  0.1 115644  2628 ?        S    03:26   0:00  |   \_ sshd: [net]
root      70215  0.3  0.2 162436  5824 ?        Ss   03:26   0:00  \_ sshd: root [priv]
sshd      70229  0.0  0.1 115644  2628 ?        S    03:26   0:00  |   \_ sshd: root [net]
root      70303  0.0  0.1 111304  4452 ?        Ss   03:27   0:00  \_ sshd: [accepted]
sshd      70311  0.0  0.1 115644  2624 ?        S    03:27   0:00      \_ sshd: [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  70230  0.0  0.0 445028   324 ?        S    03:26   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.3 1277056 8812 ?        Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   696 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.0 439788  2228 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.8 1054792 43664 ?       Ssl  Nov20   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 157956 ?      Ssl  Nov20   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.1  0.3 261160  7524 ?        Ss   Nov20   0:44 cpsrvd (SSL) - waiting for connections                   
root      70217  0.0  0.0      0     0 ?        Z    03:26   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1248 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   572 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  4004 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4380 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1204 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  4212 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47184  4332 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.4  24564 11952 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1200 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41188  2508 ?        S    01:25   0:00  \_ dovecot/auth
root      68988  0.0  0.1  41052  2804 ?        S    03:25   0:00  \_ dovecot/auth -w
root      69381  0.0  0.1  60820  4516 ?        S    03:25   0:00  \_ dovecot/lmtp
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3596 ?        Rs   Nov20   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 306512  5796 ?        Ssl  Nov20   0:08 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   896 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2464 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   70216  7.0  1.2 493800 30428 ?        S    03:26   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  70219 20.6  2.2 518124 54724 ?        S    03:26   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   70222  6.3  1.0 419612 26032 ?        S    03:26   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  70224  8.6  1.3 427868 33852 ?        S    03:26   0:00  \_ php-fpm: pool health_oyostate_gov_ng
telegraf    976  0.0  1.5 5654304 36552 ?       SLsl Nov20   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   960 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1252 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263284 129684 ?       S    Nov20   0:05  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3148 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13440 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 32792 ?        Ss   Nov20   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.9 262224 22876 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.1 167452  4100 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12560 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1552 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 30648 ?        Ss   Nov20   0:03 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12792  1388 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1364 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12816  1404 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11804 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31417  0.1  1.5 277752 36496 ?        S    02:36   0:04  \_ /usr/sbin/httpd -k start
nobody    48017  0.1  1.5 277940 36672 ?        S    02:56   0:03  \_ /usr/sbin/httpd -k start
nobody    56662  0.1  1.4 277632 36292 ?        S    03:08   0:01  \_ /usr/sbin/httpd -k start
nobody    58580  0.1  1.5 277940 36436 ?        S    03:10   0:01  \_ /usr/sbin/httpd -k start
nobody    60330  0.1  1.4 277616 36020 ?        S    03:13   0:01  \_ /usr/sbin/httpd -k start
nobody    63594  0.1  1.4 277940 35952 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    66737  0.1  1.4 277576 35376 ?        S    03:22   0:00  \_ /usr/sbin/httpd -k start
nobody    67412  0.1  1.4 277616 35408 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    68932  0.1  1.4 277612 35244 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69332  0.1  1.4 277956 35444 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69399  0.1  1.4 277616 34972 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69400  0.1  1.4 277616 35172 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69464  0.2  1.4 277976 35360 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69465  0.0  1.4 277940 35240 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69466  0.1  1.4 277616 34972 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69467  0.2  1.4 277616 35332 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    70331  0.0  0.6 353712 15972 ?        S    03:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70054  0.0  1.4 277616 34948 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    70068  0.0  1.4 277616 34908 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    70069  0.2  1.4 277568 34564 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    70329  0.0  0.6 353712 15968 ?        S    03:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70088  0.2  1.4 277616 34476 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.2 11.1 1462240 270920 ?      Sl   Nov20   6:12 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 182664 30704 ?        Ss   00:00   0:11 lfd - sleeping
root      51541  0.0  0.0 123364   728 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 30959  Threads: 3  Questions: 2284318  Slow queries: 0  Opens: 8350  Flush tables: 1  Open tables: 2000  Queries per second avg: 73.785
*************************** 1. row ***************************
     Id: 37831
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 37835
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 37841
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 109.70.100.4 TIME_WAIT
      1 109.71.252.182 TIME_WAIT
      1 146.70.65.7 TIME_WAIT
      1 154.53.58.161 TIME_WAIT
      1 172.236.119.165 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 176.125.230.156 TIME_WAIT
      1 185.107.80.250 TIME_WAIT
      1 185.220.69.107 TIME_WAIT
      1 192.42.116.210 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.166.37.119 TIME_WAIT
      1 45.84.107.222 TIME_WAIT
      1 51.161.37.57 TIME_WAIT
      1 51.210.105.194 TIME_WAIT
      1 51.210.110.194 TIME_WAIT
      1 51.210.110.89 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.153.16 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 185.220.101.54 TIME_WAIT
      3 203.75.213.2 TIME_WAIT
      4 115.231.78.3 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 03:27:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 8 hours 36 minutes 45 seconds
   Server load: 1.52 0.64 0.88
   Total accesses: 158759 - Total Traffic: 4.0 GB - Total Duration: 85945787
   CPU Usage: u11.51 s6.97 cu2098.94 cs1674.9 - 12.2% CPU load
   5.12 requests/sec - 135.4 kB/second - 26.4 kB/request - 541.36 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

__.KC_K.KKK_K_K.WCKWKWK.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-1  63594 0/147/7912 _ 4.16  2     3   4218814 0.0   4.01  206.29 173.199.190.172 http/1.1 health.oyostate.gov.ng:443 POST /wp-cron.php?doing_wp_cron=1763692019.80589008331298828125
   1-1  69332 0/24/7692  _ 0.66  0     301 4047993 0.0   0.47  197.43 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=3585865762 HTTP/1.1
   2-1  -     0/0/7157   . 0.00  14    0   3856154 0.0   0.00  183.45 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-1  70054 1/6/7554   K 0.04  1     343 4213034 34.1  0.08  198.28 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=997634317 HTTP/1.1
   4-1  60330 1/294/7822 C 5.08  0     12  4083699 6.2   5.86  205.92 115.231.78.3    http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/download-manager/assets/js/wpdm.min.js?
   5-1  69399 0/24/7291  _ 0.52  0     288 4164437 0.0   0.59  190.85 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=4220876996 HTTP/1.1
   6-1  31417 4/910/7793 K 20.53 4     257 4222857 126.1 21.69 216.69 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=1191141345 HTTP/1.1
   7-1  -     0/0/7378   . 0.00  15    0   4024020 0.0   0.00  195.23 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-1  68932 2/36/7430  K 0.84  3     289 4036668 65.0  0.73  189.78 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=4154190756 HTTP/1.1
   9-1  48017 2/516/7259 K 12.37 1     266 3777174 67.8  13.19 178.45 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3431371048 HTTP/1.1
   10-1 69400 2/21/7227  K 0.35  2     295 3714390 64.6  0.51  178.18 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=4179332275 HTTP/1.1
   11-1 67412 0/64/6827  _ 1.55  1     1   3664506 0.0   1.74  175.38 115.231.78.3    http/1.1 health.oyostate.gov.ng:443 GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP
   12-1 66737 2/81/7132  K 2.03  0     347 3789089 12.5  2.21  182.28 69.163.199.171  http/1.1 health.oyostate.gov.ng:443 POST /wp-login.php HTTP/1.1
   13-1 58580 0/247/7152 _ 6.12  0     0   3727765 0.0   6.35  178.23 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-1 69464 9/28/6701  K 0.69  1     263 3460448 283.0 0.73  163.80 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=1256950351 HTTP/1.1
   15-1 -     0/0/6283   . 0.00  13    0   3539649 0.0   0.00  162.45 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 56662 0/345/5711 W 7.38  0     0   3025581 0.0   7.95  156.28 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-1 69465 1/16/4691  C 0.22  2     285 2708500 28.8  0.34  117.40 43.173.182.128  http/1.1 nigeriadecide.org:443      GET /blog/page/9/ HTTP/1.1
   18-1 69466 1/65/4927  K 0.24  0     349 2739483 33.5  0.27  123.23 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=1695625841 HTTP/1.1
   19-1 69467 0/28/4368  W 0.56  0     0   2438945 0.0   0.63  128.09 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=3253345133 HTTP/1.1
   20-1 70068 1/4/3947   K 0.02  3     9   2284968 10.3  0.06  108.13 179.124.196.97  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ipokia&state=Ogun&ward=Ifony
   21-1 70069 7/9/3107   W 0.18  0     0   1662141 219.3 0.22  79.16  192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=2570738405 HTTP/1.1
   22-1 70088 5/7/3975   K 0.17  4     262 2150813 158.2 0.22  98.19  192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=1072350944 HTTP/1.1
   23-1 -     0/0/3368   . 0.00  1394  0   1866174 0.0   0.00  86.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 -     0/0/1928   . 0.00  4977  0   963238  0.0   0.00  46.70  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1 -     0/0/1261   . 0.00  4007  0   817594  0.0   0.00  34.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-1 -     0/0/715    . 0.00  5021  0   428654  0.0   0.00  18.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1 -     0/0/506    . 0.00  4733  0   297127  0.0   0.00  11.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1 -     0/0/543    . 0.00  4933  0   356892  0.0   0.00  15.93  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-1 -     0/0/434    . 0.00  5023  0   260477  0.0   0.00  11.18  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 -     0/0/332    . 0.00  5010  0   200777  0.0   0.00  7.47   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-1 -     0/0/274    . 0.00  5032  0   193753  0.0   0.00  6.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00  11843 0   371705  0.0   0.00  14.42  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00  11383 0   111013  0.0   0.00  5.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00  13572 0   15090   0.0   0.00  0.72   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00  13579 0   640     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00  13451 0   36928   0.0   0.00  1.90   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00  13408 0   25914   0.0   0.00  1.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00  13501 0   27597   0.0   0.00  1.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00  13532 0   13821   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00  12681 0   139506  0.0   0.00  7.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00  13588 0   8       0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  13587 0   4242    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00  13313 0   42251   0.0   0.00  2.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00  13576 0   2792    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00  13314 0   25889   0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00  12266 0   190150  0.0   0.00  10.76  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00  13592 0   2404    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 955
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...26)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 24571
   total entries replaced since starting: 0
   total entries expired since starting: 23607
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 77 miss
   total removes since starting: 9 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit