403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.01.42.txt
 ## swap threshold exceeded
## server overview
2025-11-22.01.42 load[0] mem[57/57] mysql[1/8] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1306         108          30         949         873
Swap:          1999        1237         762
 01:42:01 up 45 min,  0 users,  load average: 0.12, 0.19, 0.25
## system overview
top - 01:42:01 up 45 min,  0 users,  load average: 0.12, 0.19, 0.25
Tasks: 207 total,   4 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 59.4 us, 40.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    74228 free,  1374112 used,   971960 buff/cache
KiB Swap:  2047996 total,   780540 free,  1267456 used.   857660 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 205076   3148 S  37.5  8.5   0:31.79 /usr/sbin+
 32967 nigeria   20   0  404052  16136  10380 S  12.5  0.7   0:00.02 /opt/cpan+
 32135 nobody    20   0  277908  19256   3784 S   6.2  0.8   0:00.18 /usr/sbin+
 32968 pactpay   20   0  479860  16164  10572 S   6.2  0.7   0:00.01 /opt/cpan+
 32973 saboakin  20   0  404052  15608  10156 R   6.2  0.6   0:00.01 /opt/cpan+
 32974 cloudw    20   0  353712  15968  10484 S   6.2  0.7   0:00.01 /opt/cpan+
 32978 cloudsms  20   0  400380  12412   8452 R   6.2  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44264   3272   1456 S   0.0  0.1   0:04.20 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:02.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:08.61 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.72 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.66 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   2396   2096 S   0.0  0.1   0:01.56 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    184     72 S   0.0  0.0   0:00.22 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.05 /usr/sbin+
   485 root      20   0   24712   1148    804 S   0.0  0.0   0:00.65 /usr/lib/+
   486 root      20   0  152780     96     56 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5660    936 S   0.0  0.2   0:00.12 queueproc+
   488 root      20   0   52852    108     24 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    900    468 S   0.0  0.0   0:00.40 /usr/lib/+
   498 dbus      20   0   58748   1352    612 S   0.0  0.1   0:01.47 /usr/bin/+
   506 rpc       20   0   69256    152     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1380    672 S   0.0  0.1   0:01.88 /usr/sbin+
   554 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.08 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3424    420 S   0.0  0.1   0:00.16 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.15 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    628    164 S   0.0  0.0   0:00.33 /usr/bin/+
   920 root      20   0  224592   2068   1580 S   0.0  0.1   0:00.74 /usr/sbin+
   926 root      20   0 1689392 419768    232 S   0.0 17.3   0:13.50 /usr/loca+
   927 named     20   0  923720  30848   2028 S   0.0  1.3   0:01.56 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.05 /usr/bin/+
   931 root      20   0  389508    460    252 S   0.0  0.0   0:00.13 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.16 sw-engine+
   939 root      20   0  439788  11380  11048 S   0.0  0.5   0:00.17 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
   943 root      20   0  388892    288    204 S   0.0  0.0   0:00.13 php-fpm: +
   944 cpanelc+  20   0    9960   2952   2300 S   0.0  0.1   0:02.13 /usr/loca+
   946 systuser  20   0  114016  15584   2648 S   0.0  0.6   0:00.81 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    348    172 S   0.0  0.0   0:00.14 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.29 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.07 /usr/sbin+
   962 root      20   0  261024   5732   1060 S   0.0  0.2   0:00.47 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   972 root      20   0  400740   2640    636 S   0.0  0.1   0:00.37 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.05 pure-ftpd+
   974 root      20   0 1277312  10444     40 S   0.0  0.4   0:27.98 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.43 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   992 telegraf  20   0 5654304  36348   5988 S   0.0  1.5   0:01.76 /usr/loca+
  1079 dovenull  20   0   47136   3364   2380 S   0.0  0.1   0:00.09 dovecot/p+
  1080 dovenull  20   0   47392   3632   2532 S   0.0  0.2   0:00.07 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.02 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.05 dovecot/l+
  1083 dovenull  20   0   47300   3440   2416 S   0.0  0.1   0:00.14 dovecot/p+
  1084 dovenull  20   0   47424   2688   1796 S   0.0  0.1   0:00.05 dovecot/i+
  1090 root      20   0   24396   2036    496 S   0.0  0.1   0:00.04 dovecot/c+
  1091 dovecot   20   0   13568    608    404 S   0.0  0.0   0:00.00 dovecot/s+
  1141 root      20   0  247944 117444    932 S   0.0  4.9   0:03.18 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.16 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.03 SonarPush+
  1177 wp-tool+  20   0  387528  13008   1380 S   0.0  0.5   0:00.11 /usr/bin/+
  1178 wp-tool+  20   0  412368  31908   1120 S   0.0  1.3   0:01.08 /usr/bin/+
  1261 root      20   0  183900   3272     44 S   0.0  0.1   0:00.27 cpdavd - +
  1262 root      20   0  209240   9796   1088 S   0.0  0.4   0:00.59 tailwatchd
  1263 root      20   0  167452   2264    888 S   0.0  0.1   0:00.13 dnsadmin +
  1662 root      38  18  130416   1416    688 S   0.0  0.1   0:00.00 cpanellog+
  1690 root      20   0  299272    656    280 S   0.0  0.0   0:00.07 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.33 /usr/sbin+
  1929 root      20   0   12796    192     56 S   0.0  0.0   0:00.25 /usr/loca+
  1930 root      20   0   12732    160     80 S   0.0  0.0   0:00.22 /usr/loca+
  1931 root      20   0   12824    180     28 S   0.0  0.0   0:00.23 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  181372   9780   1120 S   0.0  0.4   0:02.50 lfd - sle+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.05 [kworker]
  6717 root      20   0  249208 118636    948 S   0.0  4.9   0:00.21 spamd chi+
  6719 root      20   0  247944 116768    288 S   0.0  4.8   0:00.00 spamd chi+
  6915 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 19162 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 19204 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 20084 nobody    20   0  277584  19992   4476 S   0.0  0.8   0:01.81 /usr/sbin+
 22434 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 23103 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 24439 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26965 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 27047 nobody    20   0  277556  19696   4272 S   0.0  0.8   0:00.65 /usr/sbin+
 27055 nobody    20   0  277512  19516   4196 S   0.0  0.8   0:00.78 /usr/sbin+
 27056 nobody    20   0  277576  19804   4332 S   0.0  0.8   0:00.64 /usr/sbin+
 27066 nobody    20   0  277452  19524   4280 S   0.0  0.8   0:00.81 /usr/sbin+
 27082 nobody    20   0  277568  19604   4224 S   0.0  0.8   0:00.66 /usr/sbin+
 27091 nobody    20   0  277528  19680   4220 S   0.0  0.8   0:00.63 /usr/sbin+
 27118 nobody    20   0  277572  19688   4272 S   0.0  0.8   0:00.72 /usr/sbin+
 27127 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 28826 nobody    20   0  277908  20052   4380 S   0.0  0.8   0:00.52 /usr/sbin+
 28875 nobody    20   0  277780  19860   4280 S   0.0  0.8   0:00.48 /usr/sbin+
 29133 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29794 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 30056 nobody    20   0  277908  19788   4268 S   0.0  0.8   0:00.32 /usr/sbin+
 31553 nobody    20   0  277916  19528   4060 S   0.0  0.8   0:00.15 /usr/sbin+
 32149 nobody    20   0  277520  19260   3976 S   0.0  0.8   0:00.09 /usr/sbin+
 32150 nobody    20   0  277520  19104   3824 S   0.0  0.8   0:00.12 /usr/sbin+
 32224 nobody    20   0  277908  19240   3772 S   0.0  0.8   0:00.10 /usr/sbin+
 32421 nobody    20   0  277780  19072   3576 S   0.0  0.8   0:00.08 /usr/sbin+
 32624 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 32702 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 32703 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 32723 wp-tool+  20   0  445028    316    188 S   0.0  0.0   0:00.00 sw-engine+
 32788 nigeria   20   0  400460   5200   2416 S   0.0  0.2   0:00.00 php-fpm: +
 32842 nobody    20   0  277520  18348   3132 S   0.0  0.8   0:00.02 /usr/sbin+
 32876 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 32893 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 32898 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 32900 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32901 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32902 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32903 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32904 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32905 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32906 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32907 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32908 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32909 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32910 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 32911 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32912 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32913 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 32914 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 32915 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 32916 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 32939 root      20   0  160248   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 32941 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32942 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32943 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 32944 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 32945 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32946 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 32947 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32948 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32949 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32950 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 32951 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 32952 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32953 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32954 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32962 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 32963 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 32964 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32966 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32970 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 32972 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    00:56   0:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/0:2]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root       6915  0.0  0.0      0     0 ?        S    01:03   0:00  \_ [kworker/0:1]
root      19162  0.0  0.0      0     0 ?        R    01:21   0:00  \_ [kworker/1:1]
root      19204  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/0:0]
root      22434  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/1:0]
root      23103  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root      24439  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:4]
root      26965  0.0  0.0      0     0 ?        D    01:33   0:00  \_ [kworker/1:2]
root      27127  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/u200:1]
root      29133  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:4]
root      29794  0.0  0.0      0     0 ?        S    01:37   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44264  3272 ?        Ss   00:56   0:04 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.0  40244  2396 ?        Ss   00:56   0:01 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   184 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1148 ?        Rs   00:56   0:00 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    96 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5660 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   108 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   900 ?        Ssl  00:56   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1352 ?        Rs   00:56   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   152 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1380 ?        Ssl  00:56   0:01 /usr/sbin/nscd
root        554  0.0  0.0  24208     0 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      32898  0.0  0.0 183044  2156 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32914  0.0  0.0 113284  1212 ?        Ss   01:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      32915  0.0  0.0 108052   360 ?        S    01:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      32916  0.0  0.0 113288  1516 ?        S    01:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      32979  0.0  0.0 153840  2096 ?        R    01:42   0:00  |               \_ ps auxf
root      32900  0.0  0.0 183044  2152 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32954  0.0  0.0  20164   804 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      32901  0.0  0.0 183044  2152 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32941  0.0  0.0  20164   808 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      32902  0.0  0.0 183044  2152 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32948  0.0  0.0  20164   804 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      32903  0.0  0.0 183044  2152 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32952  0.0  0.0  20164   808 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      32904  0.0  0.0 183044  2148 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32945  0.0  0.0  20164   804 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      32905  0.0  0.0 183044  2148 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32943  0.0  0.0  20164   972 ?        Ss   01:42   0:00  |   \_ jailshell (cloudsms) [32966] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  32966  0.0  0.0      0     0 ?        D    01:42   0:00  |       \_ [jailshell]
root      32906  0.0  0.0 183044  2148 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32953  0.0  0.0  20164   808 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      32907  0.0  0.0 183044  2144 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32949  0.0  0.0  20164   808 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      32908  0.0  0.0 183044  2144 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32942  0.0  0.0  20164   808 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      32909  0.0  0.0 183044  2144 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32947  0.0  0.0  20164   808 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      32910  0.0  0.0 183044  2148 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32946  0.0  0.0  20164   968 ?        Ss   01:42   0:00  |   \_ jailshell (pactpay) [32964] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32964  0.0  0.0  20164   260 ?        S    01:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32968  0.0  0.6 479860 16164 ?        Sl   01:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      32912  0.0  0.0 183044  2144 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      32950  0.0  0.0  20164   968 ?        Ss   01:42   0:00  |   \_ jailshell (nigeria) [32962] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32962  0.0  0.0  20164   256 ?        S    01:42   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32967  0.0  0.6 404052 16136 ?        R    01:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      32913  0.0  0.0 183040  2208 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3424 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   628 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.0 224592  2068 ?        Ssl  00:56   0:00 /usr/sbin/rsyslogd -n
root        926  0.4 17.3 1689392 419768 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.2 923720 30848 ?        Ssl  00:56   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   460 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  32723  0.0  0.0 445028   316 ?        S    01:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11380 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   288 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1   9960  2952 ?        Ss   00:56   0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15584 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   348 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root      32702  0.0  0.1 111304  4448 ?        Ss   01:41   0:00  \_ sshd: [accepted]
sshd      32703  0.0  0.1 115644  2624 ?        S    01:41   0:00  |   \_ sshd: [net]
root      32876  0.0  0.1 111304  4264 ?        Ss   01:41   0:00  \_ sshd: [accepted]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3364 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3632 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3440 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2688 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24396  2036 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   608 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
root      32624  0.0  0.1  41052  2728 ?        S    01:41   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261024  5732 ?        Ss   00:56   0:00 cpsrvd (SSL) - waiting for connections                   
root      32893  0.0  0.0      0     0 ?        Z    01:41   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2640 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   32788  0.0  0.2 400460  5200 ?        S    01:41   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  1.0  0.4 1277312 10444 ?       Ssl  00:56   0:27 /usr/bin/checkstatus
root        975  0.9  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.5 5654304 36348 ?       SLsl 00:56   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.1  4.8 247944 117444 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.9 249208 118636 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116768 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13008 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 31908 ?        Ss   00:56   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.1 183900  3272 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.4 209240  9796 ?        Ss   00:56   0:00 tailwatchd
root       1263  0.0  0.0 167452  2264 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1416 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   656 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  8.4 1457824 205076 ?      Sl   00:56   0:31 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12796   192 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   160 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12824   180 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    20084  0.1  0.8 277584 19992 ?        S    01:22   0:01  \_ /usr/sbin/httpd -k start
nobody    27047  0.1  0.8 277556 19696 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    27055  0.1  0.8 277512 19516 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    27056  0.1  0.8 277576 19804 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    27066  0.1  0.8 277452 19524 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    27082  0.1  0.8 277568 19604 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    27091  0.1  0.8 277528 19680 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    27118  0.1  0.8 277572 19688 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    28826  0.1  0.8 277908 20052 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    28875  0.1  0.8 277780 19860 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    30056  0.1  0.8 277908 19788 ?        S    01:37   0:00  \_ /usr/sbin/httpd -k start
nobody    31553  0.1  0.8 277916 19528 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    32135  0.2  0.7 277908 19256 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
cloudw    32974  0.0  0.6 353712 15968 ?        S    01:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    32149  0.1  0.7 277520 19260 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    32150  0.1  0.7 277520 19104 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    32224  0.1  0.7 277908 19240 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    32421  0.1  0.7 277780 19072 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    32842  0.2  0.7 277520 18348 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181372  9780 ?        Ss   00:56   0:02 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 2710  Threads: 3  Questions: 160655  Slow queries: 0  Opens: 1708  Flush tables: 1  Open tables: 1646  Queries per second avg: 59.282
*************************** 1. row ***************************
     Id: 3141
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 3142
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 3147
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 185.220.101.19 TIME_WAIT
      1 185.220.101.28 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.12.53.157 TIME_WAIT
      1 51.222.168.245 TIME_WAIT
      1 57.141.0.41 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 34.7.241.92 TIME_WAIT
      3 34.158.91.7 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 01:42:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 45 minutes 6 seconds
   Server load: 0.12 0.19 0.25
   Total accesses: 11070 - Total Traffic: 277.8 MB - Total Duration: 5294890
   CPU Usage: u6.58 s2.5 cu138.02 cs111.94 - 9.57% CPU load
   4.09 requests/sec - 105.1 kB/second - 25.7 kB/request - 478.31 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKKW_KKKW_K..KK..._............K...._........_..................
......K.........................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn  Child  Slot     Client      Protocol         VHost                                      Request
   0-0  28826 7/113/488 K 2.06 2   267 231092 218.4 2.69  11.42 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=2866128882 HTTP/1.1
   1-0  31553 11/38/531 K 0.58 0   7   243468 56.0  0.72  15.51 217.182.195.179 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Enugu&lga=Oji-river&ward=U
   2-0  30056 1/61/536  K 1.44 3   297 259744 35.9  1.58  16.42 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3068176138 HTTP/1.1
   3-0  32135 0/28/475  W 0.76 0   0   227395 0.0   0.75  11.63 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=2249501988 HTTP/1.1
   4-0  27047 0/123/542 _ 2.73 1   1   242147 0.0   3.22  12.45 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   5-0  32149 1/18/447  K 0.54 1   266 216136 33.5  0.38  10.98 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=3688079789 HTTP/1.1
   6-0  32150 5/21/577  K 0.46 0   260 250350 154.1 0.52  13.03 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=4122501358 HTTP/1.1
   7-0  32224 4/19/532  K 0.37 1   299 257771 127.6 0.43  13.23 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=2292004295 HTTP/1.1
   8-0  28875 0/89/442  W 1.94 0   0   216093 0.0   2.36  13.69 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   9-0  32421 0/13/297  _ 0.35 0   7   151800 0.0   0.36  7.73  18.213.240.226  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/images/images/poll
   10-0 32842 3/3/202   K 0.06 2   264 95605  96.2  0.09  5.05  192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=2917166397 HTTP/1.1
   11-0 -     0/0/381   . 0.00 500 0   203380 0.0   0.00  9.55  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 -     0/0/262   . 0.00 492 0   122026 0.0   0.00  6.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 27055 2/147/320 K 3.24 1   268 174573 64.9  3.49  8.39  192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=4136658746 HTTP/1.1
   14-0 20084 1/307/550 K 7.64 4   295 296099 38.9  8.08  14.31 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=4176300260 HTTP/1.1
   15-0 -     0/0/209   . 0.00 526 0   109104 0.0   0.00  5.29  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/339   . 0.00 504 0   167394 0.0   0.00  8.49  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/427   . 0.00 503 0   223669 0.0   0.00  11.26 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 27056 0/124/363 _ 2.59 0   0   173192 0.0   2.76  9.35  ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   19-0 -     0/0/279   . 0.00 490 0   137555 0.0   0.00  6.48  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/438   . 0.00 508 0   185416 0.0   0.00  9.68  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/426   . 0.00 476 0   213842 0.0   0.00  10.94 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/372   . 0.00 527 0   192062 0.0   0.00  9.18  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/443   . 0.00 84  0   197568 0.0   0.00  10.17 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2     . 0.00 530 0   5      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/7     . 0.00 471 0   3826   0.0   0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/3     . 0.00 498 0   753    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/3     . 0.00 495 0   57     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/4     . 0.00 483 0   743    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/8     . 0.00 477 0   4677   0.0   0.00  0.21  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/3     . 0.00 499 0   14     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 27066 2/153/153 K 3.38 0   314 70832  65.3  3.76  3.76  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=616563202 HTTP/1.1
   32-0 -     0/0/2     . 0.00 525 0   7      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 480 0   1824   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/2     . 0.00 522 0   21     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/145   . 0.00 83  0   57340  0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 27082 0/136/136 _ 2.71 1   1   62027  0.0   3.39  3.39  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   37-0 -     0/0/2     . 0.00 506 0   4587   0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/3     . 0.00 501 0   34     0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 524 0   8      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/3     . 0.00 487 0   4408   0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/5     . 0.00 481 0   2050   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/9     . 0.00 488 0   4574   0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/2     . 0.00 521 0   12     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/31    . 0.00 388 0   20604  0.0   0.00  0.82  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 27091 0/129/129 _ 2.47 1   261 50361  0.0   2.72  2.72  192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=2395236525 HTTP/1.1
   46-0 -     0/0/2     . 0.00 529 0   4      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 496 0   766    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 523 0   48     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/2     . 0.00 494 0   10     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/3     . 0.00 479 0   695    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/7     . 0.00 472 0   3150   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/4     . 0.00 475 0   538    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/13    . 0.00 473 0   8196   0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 486 0   519    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/1     . 0.00 510 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/110   . 0.00 81  0   48080  0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44    . 0.00 364 0   13507  0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/12    . 0.00 482 0   7269   0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/6     . 0.00 466 0   1848   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1     . 0.00 519 0   1      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/48    . 0.00 357 0   10684  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2     . 0.00 491 0   7      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1     . 0.00 517 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/5     . 0.00 478 0   1750   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/1     . 0.00 515 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/1     . 0.00 516 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 493 0   6      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/5     . 0.00 467 0   859    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/74    . 0.00 235 0   36843  0.0   0.00  1.92  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 27118 1/124/124 K 3.07 4   266 62432  35.3  3.94  3.94  192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=608880546 HTTP/1.1
   71-0 -     0/0/1     . 0.00 511 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1     . 0.00 514 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/6     . 0.00 470 0   3305   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6     . 0.00 465 0   2230   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1     . 0.00 513 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/1     . 0.00 512 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/40    . 0.00 374 0   15854  0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/1     . 0.00 518 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1     . 0.00 509 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1025
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 1...16)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 8496
   total entries replaced since starting: 0
   total entries expired since starting: 7471
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 11 miss
   total removes since starting: 0 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit