403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.03.09.txt
 ## swap threshold exceeded
## server overview
2025-11-22.03.09 load[0] mem[58/62] mysql[1/8] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1296         522          59         544         822
Swap:          1999        1356         643
 03:09:01 up  2:12,  0 users,  load average: 0.52, 0.34, 0.27
## system overview
top - 03:09:02 up  2:12,  0 users,  load average: 0.52, 0.34, 0.27
Tasks: 203 total,   3 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.7 us, 25.7 sy,  0.0 ni,  0.0 id,  5.7 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   506216 free,  1336332 used,   577752 buff/cache
KiB Swap:  2047996 total,   659452 free,  1388544 used.   833832 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 230996   3236 S  64.7  9.5   1:33.27 /usr/sbin+
 94875 root      20   0  169872  16844   2876 S  41.2  0.7   0:00.09 /usr/loca+
 94891 nigeria   20   0  404052  16136  10380 S  17.6  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44396   3308   1472 S  11.8  0.1   0:10.79 /usr/lib/+
 88705 root      20   0       0      0      0 S   5.9  0.0   0:00.01 [kworker/+
 94902 root      20   0  160220   2064   1580 R   5.9  0.1   0:00.01 top -bcn1
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.35 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:07.53 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.33 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.13 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:10.68 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.07 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.93 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   2116   1812 S   0.0  0.1   0:04.28 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    488    360 S   0.0  0.0   0:00.64 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.17 /usr/sbin+
   485 root      20   0   24712   1172    808 S   0.0  0.0   0:01.92 /usr/lib/+
   486 root      20   0  152780    124     84 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5684    980 S   0.0  0.2   0:00.16 queueproc+
   488 root      20   0   52852    220    124 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    896    464 S   0.0  0.0   0:01.17 /usr/lib/+
   498 dbus      20   0   58748   1352    612 S   0.0  0.1   0:04.40 /usr/bin/+
   506 rpc       20   0   69256    148     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1380    680 S   0.0  0.1   0:05.83 /usr/sbin+
   554 root      20   0   24208     64     44 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.23 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3996    912 S   0.0  0.2   0:00.25 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.85 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    976    392 S   0.0  0.0   0:00.76 /usr/bin/+
   920 root      20   0  240976   1980   1352 S   0.0  0.1   0:02.07 /usr/sbin+
   926 root      20   0 1689392 276464    240 S   0.0 11.4   0:13.51 /usr/loca+
   927 named     20   0 1054792  40124   2116 S   0.0  1.7   0:04.28 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.17 /usr/bin/+
   931 root      20   0  389508    496    288 S   0.0  0.0   0:00.27 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.37 sw-engine+
   939 root      20   0  439788  11296  10964 S   0.0  0.5   0:00.30 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.01 /usr/loca+
   943 root      20   0  388892    520    316 S   0.0  0.0   0:00.25 php-fpm: +
   944 cpanelc+  20   0   10608   3528   2324 S   0.0  0.1   0:06.27 /usr/loca+
   946 systuser  20   0  114016  15736   2556 S   0.0  0.7   0:02.04 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    548    372 S   0.0  0.0   0:00.27 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.84 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.14 /usr/sbin+
   962 root      20   0  261024   6600   1728 S   0.0  0.3   0:01.15 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   2648    644 S   0.0  0.1   0:00.89 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.17 pure-ftpd+
   974 root      20   0 1277312  10432     40 S   0.0  0.4   0:28.01 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.49 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  36408   5172 S   0.0  1.5   0:04.54 /usr/loca+
  1079 dovenull  20   0   47136   3216   2232 S   0.0  0.1   0:00.23 dovecot/p+
  1080 dovenull  20   0   47392   3632   2448 S   0.0  0.2   0:00.14 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.07 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.16 dovecot/l+
  1083 dovenull  20   0   47300   3216   2192 S   0.0  0.1   0:00.33 dovecot/p+
  1084 dovenull  20   0   47424   2744   1712 S   0.0  0.1   0:00.11 dovecot/i+
  1090 root      20   0   24396   2168    496 S   0.0  0.1   0:00.06 dovecot/c+
  1091 dovecot   20   0   13568    584    380 S   0.0  0.0   0:00.01 dovecot/s+
  1141 root      20   0  247944 116904    876 S   0.0  4.8   0:03.79 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.48 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.05 SonarPush+
  1177 wp-tool+  20   0  387528  13272   1644 S   0.0  0.5   0:00.15 /usr/bin/+
  1178 wp-tool+  20   0  412368  32468   1680 S   0.0  1.3   0:02.68 /usr/bin/+
  1261 root      20   0  262224  24400   6544 S   0.0  1.0   0:00.55 cpdavd - +
  1262 root      20   0  209248  11228   1764 S   0.0  0.5   0:01.11 tailwatchd
  1263 root      20   0  167452   2164    788 S   0.0  0.1   0:00.20 dnsadmin +
  1662 root      38  18  130416   1432    696 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    724    344 S   0.0  0.0   0:00.22 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.67 /usr/sbin+
  1929 root      20   0   12812    324    228 S   0.0  0.0   0:00.79 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.69 /usr/loca+
  1931 root      20   0   12848    332    228 S   0.0  0.0   0:00.72 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  181984  10772   1120 S   0.0  0.4   0:06.96 lfd - sle+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.15 [kworker]
  6717 root      20   0  249208 118404   1060 S   0.0  4.9   0:00.63 spamd chi+
  6719 root      20   0  247944 116292    288 S   0.0  4.8   0:00.00 spamd chi+
 57550 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 60213 nobody    20   0  277696  21092   4960 S   0.0  0.9   0:03.93 /usr/sbin+
 63157 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 70871 nobody    20   0  277608  20624   4944 S   0.0  0.9   0:02.64 /usr/sbin+
 80786 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 82223 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 82791 nobody    20   0  277716  20472   4836 S   0.0  0.8   0:01.52 /usr/sbin+
 83548 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85458 nobody    20   0  277908  20428   4776 S   0.0  0.8   0:01.21 /usr/sbin+
 85467 nobody    20   0  277908  20020   4468 S   0.0  0.8   0:01.14 /usr/sbin+
 85976 nobody    20   0  277916  20228   4596 S   0.0  0.8   0:01.03 /usr/sbin+
 86956 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 87590 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 89341 root      20   0  123364    704    476 S   0.0  0.0   0:00.00 /usr/sbin+
 90413 worencom  20   0   38500   3648   2788 S   0.0  0.2   0:00.00 dovecot/i+
 90873 nobody    20   0  277584  19804   4376 S   0.0  0.8   0:00.45 /usr/sbin+
 91432 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 92307 nobody    20   0  277908  19752   4192 S   0.0  0.8   0:00.29 /usr/sbin+
 92316 nobody    20   0  277916  19480   3996 S   0.0  0.8   0:00.39 /usr/sbin+
 92317 nobody    20   0  277716  19648   4088 S   0.0  0.8   0:00.39 /usr/sbin+
 92665 nobody    20   0  277592  19572   4096 S   0.0  0.8   0:00.26 /usr/sbin+
 93385 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 93550 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93590 nobody    20   0  277520  19180   3936 S   0.0  0.8   0:00.17 /usr/sbin+
 94101 nobody    20   0  277104  17968   3180 S   0.0  0.7   0:00.00 /usr/sbin+
 94321 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 94328 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 94454 nobody    20   0  277908  19132   3680 S   0.0  0.8   0:00.04 /usr/sbin+
 94510 nobody    20   0  277536  18928   3672 S   0.0  0.8   0:00.04 /usr/sbin+
 94512 nobody    20   0  277520  18948   3696 S   0.0  0.8   0:00.04 /usr/sbin+
 94537 nobody    20   0  277820  18968   3420 S   0.0  0.8   0:00.06 /usr/sbin+
 94538 nobody    20   0  277776  19148   3676 S   0.0  0.8   0:00.03 /usr/sbin+
 94542 nobody    20   0  277780  19192   3716 S   0.0  0.8   0:00.03 /usr/sbin+
 94543 nobody    20   0  277520  18412   3192 S   0.0  0.8   0:00.06 /usr/sbin+
 94759 nigeria   20   0  400460   5200   2404 S   0.0  0.2   0:00.00 php-fpm: +
 94787 mailnull  20   0   91208   5604   2348 S   0.0  0.2   0:00.00 /usr/sbin+
 94808 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 94809 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 94816 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 94825 wp-tool+  20   0  445028    316    188 S   0.0  0.0   0:00.00 sw-engine+
 94827 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 94828 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94830 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94831 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94833 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94834 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94835 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94836 root      20   0  139560   1544   1144 R   0.0  0.1   0:00.00 /usr/sbin+
 94837 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 94838 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94840 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94843 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 94844 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 94845 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 94858 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94859 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 94861 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94862 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94863 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94864 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94865 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 94867 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94871 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 94881 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 94890 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 94895 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 94897 pactpay   20   0  479860  16252  10640 S   0.0  0.7   0:00.01 /opt/cpan+
 94903 cloudw    20   0  353712  15972  10488 S   0.0  0.7   0:00.01 /opt/cpan+
 94906 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 94919 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
 94920 root      20   0   18276   2252   1320 R   0.0  0.1   0:00.00 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      57550  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:3]
root      63157  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:3]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      80786  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:0]
root      82223  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:4]
root      83548  0.0  0.0      0     0 ?        S    02:53   0:00  \_ [kworker/0:4]
root      86956  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/1:1]
root      87590  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/0:5]
root      88705  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:2]
root      91432  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/1:0]
root      93550  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/0:1]
root      94906  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44396  3308 ?        Ss   00:56   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.0  40244  2116 ?        Ss   00:56   0:04 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   488 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1172 ?        Ss   00:56   0:01 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   124 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5684 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   220 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   896 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1352 ?        Ss   00:56   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   148 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1380 ?        Ssl  00:56   0:05 /usr/sbin/nscd
root        554  0.0  0.0  24208    64 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      94827  0.0  0.0 183044  2144 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94843  0.0  0.0 113284  1212 ?        Ss   03:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      94844  0.0  0.0 108052   360 ?        S    03:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      94845  0.0  0.0 113288  1516 ?        S    03:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      94923  0.0  0.0 153840  2092 ?        R    03:09   0:00  |               \_ ps auxf
root      94828  0.0  0.0 183044  2148 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94863  0.0  0.0  20164   808 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      94830  0.0  0.0 183044  2148 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94858  0.0  0.0  20164   808 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      94831  0.0  0.0 183044  2144 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94867  0.0  0.0  20164   808 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      94833  0.0  0.0 183044  2144 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94861  0.0  0.0  20164   808 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      94834  0.0  0.0 183044  2144 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94862  0.0  0.0  20164   804 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      94835  0.0  0.0 183044  2140 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94864  0.0  0.0  20164   804 ?        Ss   03:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      94837  0.0  0.0 183044  2136 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94865  0.0  0.0 113284  1212 ?        Ss   03:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      94875  9.0  0.6 169872 16844 ?        S    03:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      94919  0.0  0.0 113496  1420 ?        S    03:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      94920  0.0  0.1 123344  3968 ?        D    03:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      94838  0.0  0.0 183044  2140 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94871  0.0  0.0  20164   968 ?        Ss   03:09   0:00  |   \_ jailshell (pactpay) [94895] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   94895  0.0  0.0  20164   264 ?        S    03:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   94897  2.0  0.6 480124 16780 ?        S    03:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      94840  0.0  0.0 183044  2140 ?        S    03:09   0:00  \_ /usr/sbin/CROND -n
root      94859  0.0  0.0  20164   964 ?        Ss   03:09   0:00      \_ jailshell (nigeria) [94890] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   94890  0.0  0.0  20164   260 ?        S    03:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   94891  5.0  0.6 404052 16136 ?        S    03:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3996 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  94787  0.0  0.2  91208  5604 ?        S    03:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   976 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.0 240976  1980 ?        Ssl  00:56   0:02 /usr/sbin/rsyslogd -n
root        926  0.1 11.4 1689392 276464 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.6 1054792 40124 ?       Ssl  00:56   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   496 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  94825  0.0  0.0 445028   316 ?        S    03:09   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11296 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   520 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3528 ?        Ss   00:56   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15736 ?        Ssl  00:56   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   548 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root      94321  0.0  0.1 111304  4264 ?        Ss   03:08   0:00  \_ sshd: [accepted]
sshd      94328  0.0  0.1 115644  2628 ?        S    03:08   0:00  |   \_ sshd: [net]
root      94808  0.0  0.2 157100  5072 ?        Ss   03:08   0:00  \_ sshd: unknown [priv]
sshd      94809  0.0  0.1 115644  2628 ?        S    03:08   0:00      \_ sshd: unknown [net]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3216 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3632 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3216 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2744 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24396  2168 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   584 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
worencom  90413  0.0  0.1  38500  3648 ?        S    03:02   0:00  \_ dovecot/imap
root      93385  0.0  0.1  41052  2728 ?        S    03:06   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261024  6600 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      94816  0.0  0.0      0     0 ?        Z    03:08   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2648 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   94759  0.0  0.2 400460  5200 ?        S    03:08   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.3  0.4 1277312 10432 ?       Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.3  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.5 5654304 36408 ?       SLsl 00:56   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 116904 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.8 249208 118404 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116292 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13272 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 32468 ?        Ss   00:56   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  1.0 262224 24400 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.4 209248 11228 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  2164 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1432 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   724 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  9.5 1457824 230996 ?      Sl   00:56   1:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12812   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12848   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60213  0.1  0.8 277696 21092 ?        S    02:21   0:03  \_ /usr/sbin/httpd -k start
nobody    70871  0.1  0.8 277608 20624 ?        S    02:37   0:02  \_ /usr/sbin/httpd -k start
nobody    82791  0.1  0.8 277716 20472 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    85458  0.1  0.8 277908 20428 ?        S    02:55   0:01  \_ /usr/sbin/httpd -k start
cloudw    94881  1.0  0.6 353712 15968 ?        S    03:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    85467  0.1  0.8 277908 20020 ?        S    02:55   0:01  \_ /usr/sbin/httpd -k start
cloudw    94903  1.0  0.6 353712 15972 ?        S    03:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    85976  0.1  0.8 277916 20228 ?        S    02:56   0:01  \_ /usr/sbin/httpd -k start
nobody    90873  0.1  0.8 277584 19804 ?        S    03:03   0:00  \_ /usr/sbin/httpd -k start
nobody    92307  0.1  0.8 277908 19752 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    92316  0.1  0.8 277916 19480 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    92317  0.1  0.8 277716 19648 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    92665  0.1  0.8 277592 19572 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    93590  0.1  0.7 277520 19180 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody    94101  0.0  0.7 277104 17968 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody    94454  0.1  0.7 277908 19132 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    94510  0.1  0.7 277536 18928 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    94512  0.1  0.7 277520 18948 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    94537  0.1  0.7 277820 18968 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    94538  0.0  0.7 277776 19148 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    94542  0.0  0.7 277780 19192 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    94543  0.1  0.7 277520 18412 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181984 10772 ?        Ss   00:56   0:06 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
root      89341  0.0  0.0 123364   704 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 7931  Threads: 3  Questions: 506411  Slow queries: 0  Opens: 2784  Flush tables: 1  Open tables: 2000  Queries per second avg: 63.852
*************************** 1. row ***************************
     Id: 9489
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 9490
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 9494
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.148.184 TIME_WAIT
      1 142.44.228.87 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 03:09:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 12 minutes 6 seconds
   Server load: 0.52 0.34 0.27
   Total accesses: 35138 - Total Traffic: 876.6 MB - Total Duration: 16809406
   CPU Usage: u10.18 s4.22 cu439.9 cs354.05 - 10.2% CPU load
   4.43 requests/sec - 113.2 kB/second - 25.5 kB/request - 478.383 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KKK_.KW._KWK.K_..K.._RK..__...K_................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  85458 3/206/1725 K 5.14  0    341 853156 94.4  5.53  41.64 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1884012803 HTTP/1.1
   1-0  94454 1/7/1879   K 0.15  3    262 858407 30.9  0.20  50.18 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2741627253 HTTP/1.1
   2-0  92307 3/53/1762  K 1.18  1    349 852697 100.4 1.25  47.62 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=293094486 HTTP/1.1
   3-0  94101 0/1/1733   _ 0.00  0    0   980536 0.0   0.02  44.27 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  -     0/0/1836   . 0.00  7    0   902301 0.0   0.00  45.47 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  82791 1/269/1646 K 6.24  0    306 730267 34.7  6.93  37.38 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=1407859166 HTTP/1.1
   6-0  85467 1/195/1946 W 4.74  0    0   853081 34.5  5.15  44.87 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=494488330 HTTP/1.1
   7-0  -     0/0/2028   . 0.00  29   0   907801 0.0   0.00  46.64 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  92316 0/63/1839  _ 1.67  0    2   799036 0.0   1.73  45.31 52.200.142.199 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/images/images/blog
   9-0  92665 1/51/1405  K 0.97  4    259 681217 34.4  1.12  34.47 66.249.74.38   http/1.1 team.cloudware.ng:443      GET /?l=3368590214 HTTP/1.1
   10-0 90873 0/82/1276  W 1.79  0    0   624372 0.0   2.04  31.09 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 93590 3/30/1683  K 0.64  3    261 801421 94.5  0.76  44.57 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=30385259 HTTP/1.1
   12-0 -     0/0/1104   . 0.00  23   0   459851 0.0   0.00  24.91 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 85976 2/185/1504 K 4.14  0    260 851439 66.2  4.55  39.68 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=1989325823 HTTP/1.1
   14-0 92317 0/68/1311  _ 1.98  0    259 654468 0.0   1.87  33.29 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=1072412433 HTTP/1.1
   15-0 -     0/0/979    . 0.00  28   0   496001 0.0   0.00  26.56 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/1124   . 0.00  22   0   529449 0.0   0.00  27.20 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 94510 1/9/635    K 0.15  0    0   313399 5.8   0.19  15.76 74.7.244.23    http/1.1 nigeriadecide.org:443      GET /robots.txt HTTP/1.1
   18-0 -     0/0/1469   . 0.00  27   0   553888 0.0   0.00  46.31 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/388    . 0.00  24   0   190047 0.0   0.00  9.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 94512 0/10/463   _ 0.15  1    1   193318 0.0   0.18  10.11 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   21-0 70871 0/449/1019 R 11.18 38   304 532803 0.0   11.96 26.62 60.107.148.119 http/1.1
   22-0 60213 1/699/1306 K 16.61 0    270 650262 34.8  17.49 31.73 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=2137080473 HTTP/1.1
   23-0 -     0/0/800    . 0.00  21   0   545313 0.0   0.00  19.41 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/245    . 0.00  25   0   118095 0.0   0.00  5.89  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 94537 0/10/17    _ 0.24  0    266 10546  0.0   0.30  0.48  192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=1790856735 HTTP/1.1
   26-0 94538 0/7/10     _ 0.12  1    1   5856   0.0   0.14  0.19  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   27-0 -     0/0/5      . 0.00  19   0   117    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/7      . 0.00  20   0   3564   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/10     . 0.00  26   0   7630   0.0   0.00  0.24  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 94542 2/7/10     K 0.07  0    258 7228   64.4  0.17  0.19  192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=3942538760 HTTP/1.1
   31-0 94543 0/10/513   _ 0.26  1    397 243652 0.0   0.31  13.08 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=1181361161 HTTP/1.1
   32-0 -     0/0/2      . 0.00  5746 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00  5700 0   1824   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00  5743 0   21     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/145    . 0.00  5303 0   57340  0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/234    . 0.00  4854 0   102124 0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00  5727 0   4587   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/3      . 0.00  5722 0   34     0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  5745 0   8      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00  5707 0   4408   0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/5      . 0.00  5701 0   2050   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/9      . 0.00  5708 0   4574   0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00  5742 0   12     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/31     . 0.00  5608 0   20604  0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/458    . 0.00  4287 0   169465 0.0   0.00  9.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  5750 0   4      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  5716 0   766    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  5744 0   48     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  5714 0   10     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  5699 0   695    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  5692 0   3150   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  5695 0   538    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00  5693 0   8196   0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  5706 0   519    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00  5731 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00  5301 0   48080  0.0   0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  5584 0   13507  0.0   0.00  0.78  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00  5702 0   7269   0.0   0.00  0.33  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00  5686 0   1848   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00  5740 0   1      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00  5577 0   10684  0.0   0.00  0.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  5711 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00  5738 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00  5698 0   1750   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  5736 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  5737 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  5713 0   6      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  5687 0   859    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00  5455 0   36843  0.0   0.00  1.92  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00  5092 0   74918  0.0   0.00  4.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00  5732 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00  5735 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00  5690 0   3305   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00  5685 0   2230   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  5734 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  5733 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00  5594 0   15854  0.0   0.00  0.86  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00  5739 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  5730 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1141
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...34)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 25656
   total entries replaced since starting: 0
   total entries expired since starting: 24510
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 27 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit