403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.03.36.txt
 ## swap threshold exceeded
## server overview
2025-11-22.03.36 load[1] mem[59/72] mysql[1/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1223          74           5        1066         949
Swap:          1999        1663         336
 03:36:01 up  2:39,  0 users,  load average: 1.81, 1.10, 0.63
## system overview
top - 03:36:02 up  2:39,  0 users,  load average: 1.81, 1.10, 0.63
Tasks: 207 total,   3 running, 202 sleeping,   0 stopped,   2 zombie
%Cpu(s): 45.7 us, 37.1 sy,  0.0 ni,  8.6 id,  5.7 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    84188 free,  1253924 used,  1082188 buff/cache
KiB Swap:  2047996 total,   346552 free,  1701444 used.   971412 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464300 182256   3268 S  55.6  7.5   1:57.28 /usr/sbin+
     1 root      20   0   44396   3156   1452 S  11.1  0.1   0:12.87 /usr/lib/+
 13324 nigeria   20   0  404052  16140  10384 S  11.1  0.7   0:00.03 /opt/cpan+
     9 root      20   0       0      0      0 S   5.6  0.0   0:09.20 [rcu_sche+
    36 root      20   0       0      0      0 S   5.6  0.0   0:24.28 [kswapd0]
  5450 nobody    20   0  277628   9052   3428 S   5.6  0.4   0:00.76 /usr/sbin+
  5487 nobody    20   0  277584  10812   3188 S   5.6  0.4   0:00.98 /usr/sbin+
 13327 pactpay   20   0  480124  17668  11880 S   5.6  0.7   0:00.02 /opt/cpan+
 13342 cloudw    20   0  353712  15968  10484 S   5.6  0.7   0:00.01 /opt/cpan+
 13345 cloudw    20   0  353712  15964  10484 S   5.6  0.7   0:00.01 /opt/cpan+
 13352 cloudw    20   0  284568  11772   8020 R   5.6  0.5   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.42 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.40 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.84 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.54 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   3704   3544 S   0.0  0.2   0:05.13 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    264    152 S   0.0  0.0   0:00.78 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.21 /usr/sbin+
   485 root      20   0   24712   1068    788 S   0.0  0.0   0:02.29 /usr/lib/+
   486 root      20   0  152780     96     68 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   3124    936 S   0.0  0.1   0:00.18 queueproc+
   488 root      20   0   52852     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    780    412 S   0.0  0.0   0:01.39 /usr/lib/+
   498 dbus      20   0   58748   1240    604 S   0.0  0.1   0:05.27 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956    696    376 S   0.0  0.0   0:07.12 /usr/sbin+
   554 root      20   0   24208     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    424    292 S   0.0  0.0   0:00.27 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824    324    224 S   0.0  0.0   0:00.29 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.20 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    756    288 S   0.0  0.0   0:00.93 /usr/bin/+
   920 root      20   0  240976   1736   1436 S   0.0  0.1   0:02.52 /usr/sbin+
   926 root      20   0 1902000 448696   1088 S   0.0 18.5   0:36.89 /usr/loca+
   927 named     20   0 1054792  16604    920 S   0.0  0.7   0:05.23 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.22 /usr/bin/+
   931 root      20   0  389508    208    148 S   0.0  0.0   0:00.34 php-fpm: +
   932 root      20   0  445028    600    484 S   0.0  0.0   0:00.46 sw-engine+
   939 root      20   0  439788    316    240 S   0.0  0.0   0:00.38 php-fpm: +
   941 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    312    232 S   0.0  0.0   0:00.33 php-fpm: +
   944 cpanelc+  20   0   10608   3380   2312 S   0.0  0.1   0:07.62 /usr/loca+
   946 systuser  20   0  114016   8420   2356 S   0.0  0.3   0:02.46 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    248    184 S   0.0  0.0   0:00.36 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.05 /usr/sbin+
   960 root      20   0   51508    448    292 S   0.0  0.0   0:00.17 /usr/sbin+
   962 root      20   0  261024   3452    868 S   0.0  0.1   0:01.44 cpsrvd (S+
   965 systuser  20   0   14068     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1440    568 S   0.0  0.1   0:01.12 php-fpm: +
   973 root      20   0  153404    216    136 S   0.0  0.0   0:00.20 pure-ftpd+
   974 root      20   0 1277312   4004     32 S   0.0  0.2   0:28.02 /usr/bin/+
   975 root      20   0 1276356   6356      0 S   0.0  0.3   0:25.50 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  28160     84 S   0.0  1.2   0:05.57 /usr/loca+
  1079 dovenull  20   0   47136    784    524 S   0.0  0.0   0:00.28 dovecot/p+
  1080 dovenull  20   0   47392    960    648 S   0.0  0.0   0:00.15 dovecot/i+
  1081 dovecot   20   0   10320    212    108 S   0.0  0.0   0:00.08 dovecot/a+
  1082 root      20   0   10452    520    368 S   0.0  0.0   0:00.20 dovecot/l+
  1083 dovenull  20   0   47300    708    420 S   0.0  0.0   0:00.40 dovecot/p+
  1084 dovenull  20   0   47424    592    384 S   0.0  0.0   0:00.13 dovecot/i+
  1090 root      20   0   24528   1760    480 S   0.0  0.1   0:00.08 dovecot/c+
  1091 dovecot   20   0   13568    532    396 S   0.0  0.0   0:00.02 dovecot/s+
  1141 root      20   0  247944   2740    700 S   0.0  0.1   0:04.00 /usr/loca+
  1153 dovecot   20   0   41156   1012    640 S   0.0  0.0   0:00.56 dovecot/a+
  1158 systuser  20   0  157704   1968     76 S   0.0  0.1   0:00.06 SonarPush+
  1177 wp-tool+  20   0  387528   2528   1232 S   0.0  0.1   0:00.16 /usr/bin/+
  1178 wp-tool+  20   0  412368  22368   1116 S   0.0  0.9   0:03.24 /usr/bin/+
  1261 root      20   0  183900     48     48 S   0.0  0.0   0:00.57 cpdavd - +
  1262 root      20   0  209248   4580    868 S   0.0  0.2   0:01.28 tailwatchd
  1263 root      20   0  167452   1208    668 S   0.0  0.0   0:00.22 dnsadmin +
  1662 root      38  18  130416     72     68 S   0.0  0.0   0:00.02 cpanellog+
  1690 root      20   0  299272    476    316 S   0.0  0.0   0:00.27 php-fpm: +
  1927 root      20   0  267052   4920    500 S   0.0  0.2   0:00.87 /usr/sbin+
  1929 root      20   0   12788    116      0 S   0.0  0.0   0:00.97 /usr/loca+
  1930 root      20   0   12732     68      0 S   0.0  0.0   0:00.86 /usr/loca+
  1931 root      20   0   12808    248    128 S   0.0  0.0   0:00.89 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182184   7596   1040 S   0.0  0.3   0:08.31 lfd - sle+
  2472 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     52     16 S   0.0  0.0   0:00.19 [kworker]
  4610 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5286 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5466 nobody    20   0  277924  12924   3760 S   0.0  0.5   0:00.83 /usr/sbin+
  5472 nobody    20   0  277588  13408   3504 S   0.0  0.6   0:01.00 /usr/sbin+
  5497 nobody    20   0  277908  10832   3452 S   0.0  0.4   0:00.78 /usr/sbin+
  6717 root      20   0  258828  41936   1180 S   0.0  1.7   0:01.26 spamd chi+
  6719 root      20   0  247944    432     32 S   0.0  0.0   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
  9144 nobody    20   0  277580   9052   3412 S   0.0  0.4   0:00.36 /usr/sbin+
  9341 nobody    20   0  277508   9300   3560 S   0.0  0.4   0:00.31 /usr/sbin+
  9537 nobody    20   0  277584   9172   3536 S   0.0  0.4   0:00.47 /usr/sbin+
  9789 nobody    20   0  277908   9352   3568 S   0.0  0.4   0:00.38 /usr/sbin+
  9796 nobody    20   0  277920   9352   3540 S   0.0  0.4   0:00.43 /usr/sbin+
  9961 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10263 nobody    20   0  277908   9548   3716 S   0.0  0.4   0:00.38 /usr/sbin+
 10716 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12060 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 12284 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12623 root      20   0  111304   1944    924 S   0.0  0.1   0:00.00 sshd: [ac+
 12624 sshd      20   0  115644   1760    692 S   0.0  0.1   0:00.00 sshd: [ne+
 12728 nobody    20   0  277924  17760   3848 S   0.0  0.7   0:00.07 /usr/sbin+
 12729 nobody    20   0  277780  17804   3796 S   0.0  0.7   0:00.08 /usr/sbin+
 12759 root      20   0   60820   4508   3520 S   0.0  0.2   0:00.00 dovecot/l+
 13110 nobody    20   0  277520  16720   3252 S   0.0  0.7   0:00.03 /usr/sbin+
 13174 nigeria   20   0  400460   4584   2420 S   0.0  0.2   0:00.01 php-fpm: +
 13194 wp-tool+  20   0  445028    316    184 S   0.0  0.0   0:00.00 sw-engine+
 13233 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 13234 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 13237 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 13238 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 13240 root      20   0  261156   6000   1500 S   0.0  0.2   0:00.00 whostmgrd+
 13252 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 13263 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13264 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13266 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13267 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13268 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13269 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13270 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13271 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13272 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13273 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13274 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13275 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13277 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13281 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13282 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13283 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13285 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 13286 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13288 root      20   0   20164    988    784 R   0.0  0.0   0:00.00 jailshell+
 13290 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13291 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13292 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13293 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 13294 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13295 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 13296 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13297 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 13301 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 13320 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13323 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13338 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 13349 cloudsms  20   0       0      0      0 Z   0.0  0.0   0:00.00 [jailshel+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 80786 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 82223 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 88705 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 90413 worencom  20   0   38500   1464    976 S   0.0  0.1   0:00.01 dovecot/i+
 94906 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 97243 nobody    20   0  277600   9684   3648 S   0.0  0.4   0:02.02 /usr/sbin+
101349 nobody    20   0  277960  10132   3668 S   0.0  0.4   0:01.50 /usr/sbin+
101572 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:56   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      80786  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:0]
root      82223  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:4]
root      88705  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:2]
root      94906  0.0  0.0      0     0 ?        D    03:09   0:00  \_ [kworker/1:2]
root     101572  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/1:3]
root       2472  0.0  0.0      0     0 ?        S    03:22   0:00  \_ [kworker/0:1]
root       4610  0.0  0.0      0     0 ?        S    03:25   0:00  \_ [kworker/1:1]
root       5286  0.0  0.0      0     0 ?        S    03:26   0:00  \_ [kworker/0:4]
root       9961  0.0  0.0      0     0 ?        S    03:32   0:00  \_ [kworker/1:0]
root      10716  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/0:2]
root      12060  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root      12284  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:3]
root          1  0.1  0.1  44396  3156 ?        Ss   00:56   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  39500  3704 ?        Ss   00:56   0:05 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   264 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1068 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    96 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  3124 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852    56 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   780 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1240 ?        Ss   00:56   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956   696 ?        Ssl  00:56   0:07 /usr/sbin/nscd
root        554  0.0  0.0  24208    28 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   424 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      13263  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13293  0.0  0.0 113284  1208 ?        Ss   03:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      13297  0.0  0.0 108052   356 ?        S    03:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      13301  0.0  0.0 113288  1520 ?        S    03:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      13355  0.0  0.0 153840  2096 ?        R    03:36   0:00  |               \_ ps auxf
root      13266  0.0  0.0 183044  2152 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13290  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      13267  0.0  0.0 183044  2152 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13296  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      13268  0.0  0.0 183044  2152 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13283  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      13269  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13282  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      13270  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13291  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      13271  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13292  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      13272  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13281  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      13273  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13286  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      13274  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13294  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      13275  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13295  0.0  0.0  20164   968 ?        Ss   03:36   0:00  |   \_ jailshell (pactpay) [13323] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13323  0.0  0.0  20164   260 ?        S    03:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13327  2.0  0.7 480124 17668 ?        S    03:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      13277  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      13285  0.0  0.0  20164   968 ?        Ss   03:36   0:00      \_ jailshell (nigeria) [13320] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13320  0.0  0.0  20164   260 ?        S    03:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13324  3.0  0.6 404052 16140 ?        S    03:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.0  90824   324 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   756 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.0 240976  1736 ?        Ssl  00:56   0:02 /usr/sbin/rsyslogd -n
root        926  0.3 18.5 1902000 448696 ?      Ssl  00:56   0:36 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  0.6 1054792 16604 ?       Ssl  00:56   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   208 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   600 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  13194  0.0  0.0 445028   316 ?        S    03:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   316 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932     4 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   312 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3380 ?        Rs   00:56   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.3 114016  8420 ?        Ssl  00:56   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   248 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root      12623  0.0  0.0 111304  1944 ?        Ss   03:35   0:00  \_ sshd: [accepted]
sshd      12624  0.0  0.0 115644  1760 ?        S    03:35   0:00  |   \_ sshd: [net]
root      13233  0.0  0.2 157100  5076 ?        Ss   03:35   0:00  \_ sshd: unknown [priv]
sshd      13234  0.0  0.1 115644  2628 ?        S    03:35   0:00  |   \_ sshd: unknown [net]
root      13237  0.3  0.2 162436  5832 ?        Ss   03:35   0:00  \_ sshd: root [priv]
sshd      13238  0.0  0.1 115644  2632 ?        S    03:35   0:00      \_ sshd: root [net]
root        960  0.0  0.0  51508   448 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136   784 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392   960 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   212 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   520 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300   708 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  47424   592 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24528  1760 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   532 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1012 ?        S    00:56   0:00  \_ dovecot/auth
worencom  90413  0.0  0.0  38500  1464 ?        S    03:02   0:00  \_ dovecot/imap
root      12759  0.0  0.1  60820  4508 ?        S    03:35   0:00  \_ dovecot/lmtp
root        962  0.0  0.1 261024  3452 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      13240  0.0  0.2 261156  6000 ?        S    03:35   0:00  \_ whostmgrd - serving 3.134.148.59
root      13252  0.0  0.0      0     0 ?        Z    03:35   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1440 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   13174  0.1  0.1 400460  4584 ?        S    03:35   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   216 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4004 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.2  0.2 1276356 6356 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.1 5654304 28160 ?       SLsl 00:56   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2740 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  1.7 258828 41936 ?        S    01:02   0:01  \_ spamd child
root       6719  0.0  0.0 247944   432 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.0 157704  1968 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  2528 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 22368 ?        Ss   00:56   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.0 183900    48 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.1 209248  4580 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  1208 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416    72 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   476 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2  7.5 1464300 182256 ?      Sl   00:56   1:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4920 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12788   116 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732    68 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12808   248 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    97243  0.1  0.4 277600  9684 ?        S    03:11   0:02  \_ /usr/sbin/httpd -k start
nobody   101349  0.1  0.4 277960 10132 ?        S    03:17   0:01  \_ /usr/sbin/httpd -k start
nobody     5450  0.1  0.3 277628  9052 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    13345  1.0  0.6 353712 15964 ?        S    03:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     5466  0.1  0.5 277924 12924 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5472  0.1  0.5 277588 13408 ?        S    03:26   0:01  \_ /usr/sbin/httpd -k start
nobody     5487  0.1  0.4 277584 10812 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    13342  1.0  0.6 353712 15968 ?        S    03:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     5497  0.1  0.4 277908 10832 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     9144  0.1  0.3 277580  9052 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
cloudw    13352  0.0  0.6 353712 15964 ?        S    03:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     9341  0.1  0.3 277508  9300 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody     9537  0.1  0.3 277584  9172 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody     9789  0.1  0.3 277908  9352 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody     9796  0.1  0.3 277920  9352 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody    10263  0.1  0.3 277908  9548 ?        S    03:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12728  0.1  0.7 277924 17760 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    12729  0.1  0.7 277780 17804 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    13110  0.1  0.6 277520 16720 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.3 182184  7596 ?        Ss   00:56   0:08 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    52 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 9551  Threads: 3  Questions: 632592  Slow queries: 0  Opens: 4094  Flush tables: 1  Open tables: 2000  Queries per second avg: 66.233
*************************** 1. row ***************************
     Id: 11657
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `10` WHERE `phone`='2348035527957' LIMIT 1
*************************** 2. row ***************************
     Id: 11659
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 11664
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.215.214.18 TIME_WAIT
      1 20.215.214.27 TIME_WAIT
      1 3.83.76.234 TIME_WAIT
      1 49.51.233.46 TIME_WAIT
      1 74.7.243.32 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
    405 44.220.185.14 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 03:36:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 39 minutes 6 seconds
   Server load: 1.81 1.10 0.63
   Total accesses: 43164 - Total Traffic: 1.0 GB - Total Duration: 21067036
   CPU Usage: u7.25 s3.98 cu549 cs440.14 - 10.5% CPU load
   4.52 requests/sec - 113.8 kB/second - 25.2 kB/request - 488.07 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

K.KW_KW.KK..WK...RK..._......_W.........K.......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol         VHost                                      Request
   0-0  13110  1/5/2122   K 0.12 0    263 1068369 34.9  0.16  50.95 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=777442922 HTTP/1.1
   1-0  -      0/0/2135   . 0.00 35   0   994118  0.0   0.00  55.92 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   2-0  12728  2/11/2150  K 0.22 1    264 1063546 65.9  0.22  56.54 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3851242398 HTTP/1.1
   3-0  9144   3/50/2047  W 1.53 0    0   1165830 95.0  1.25  52.25 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=3734002141 HTTP/1.1
   4-0  12729  0/15/2173  _ 0.31 0    7   1086582 0.0   0.34  53.60 114.119.128.143 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Plateau&=Bukuru HTTP/1.1
   5-0  9341   6/51/1930  K 1.31 3    407 890847  183.6 1.12  44.39 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=1033203102 HTTP/1.1
   6-0  5450   0/131/2315 W 3.33 0    0   1061310 0.0   3.09  54.45 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=200875089 HTTP/1.1
   7-0  -      0/0/2275   . 0.00 172  0   1048597 0.0   0.00  52.37 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  97243  2/366/2236 K 9.85 0    279 1001934 66.6  8.02  54.07 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=4032334819 HTTP/1.1
   9-0  9537   1/77/1713  K 2.15 1    343 855634  34.2  1.98  42.32 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=2822831743 HTTP/1.1
   10-0 -      0/0/1509   . 0.00 144  0   740153  0.0   0.00  36.67 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 -      0/0/1942   . 0.00 36   0   938816  0.0   0.00  50.29 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 9789   0/58/1287  W 1.55 0    0   558799  0.0   1.32  29.47 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 101349 7/317/1888 K 6.86 2    29  1035316 50.9  6.95  48.19 51.75.116.202   http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   14-0 -      0/0/1521   . 0.00 167  0   775774  0.0   0.00  38.04 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -      0/0/1264   . 0.00 23   0   648848  0.0   0.00  33.45 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -      0/0/1324   . 0.00 137  0   632877  0.0   0.00  32.12 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 9796   0/65/866   R 1.93 1    3   447628  0.0   1.22  21.32 44.210.204.255  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/images/blog/blog/i
   18-0 10263  3/58/1734  K 1.63 0    263 683937  93.7  1.38  52.50 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=3416038354 HTTP/1.1
   19-0 -      0/0/583    . 0.00 563  0   302417  0.0   0.00  13.95 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -      0/0/605    . 0.00 554  0   276250  0.0   0.00  13.68 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -      0/0/1051   . 0.00 576  0   564464  0.0   0.00  27.34 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 5466   0/145/1530 _ 3.75 0    11  763395  0.0   3.31  36.93 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   23-0 -      0/0/849    . 0.00 553  0   577788  0.0   0.00  20.58 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -      0/0/333    . 0.00 570  0   186833  0.0   0.00  8.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -      0/0/50     . 0.00 561  0   31736   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -      0/0/238    . 0.00 574  0   130930  0.0   0.00  5.99  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -      0/0/172    . 0.00 21   0   67579   0.0   0.00  2.99  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -      0/0/57     . 0.00 558  0   59379   0.0   0.00  1.25  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 5472   0/166/205  _ 4.45 0    349 138226  0.0   4.05  5.08  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=4020511164 HTTP/1.1
   30-0 5487   1/183/211  W 4.24 0    0   95052   34.0  3.49  4.12  192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=612541188 HTTP/1.1
   31-0 -      0/0/609    . 0.00 566  0   309233  0.0   0.00  15.78 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/11     . 0.00 556  0   3774    0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -      0/0/7      . 0.00 568  0   1828    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -      0/0/117    . 0.00 143  0   46396   0.0   0.00  2.24  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -      0/0/146    . 0.00 580  0   57340   0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/240    . 0.00 552  0   105059  0.0   0.00  5.69  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -      0/0/3      . 0.00 579  0   4588    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -      0/0/102    . 0.00 145  0   37924   0.0   0.00  1.98  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -      0/0/196    . 0.00 96   3   51541   0.0   0.00  2.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 5497   1/154/157  K 4.15 4    356 66851   35.2  3.16  3.17  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=480876644 HTTP/1.1
   41-0 -      0/0/8      . 0.00 559  0   2066    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/12     . 0.00 555  0   5210    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -      0/0/3      . 0.00 578  0   13      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -      0/0/158    . 0.00 99   0   66237   0.0   0.00  3.12  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/522    . 0.00 463  0   184884  0.0   0.00  9.85  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -      0/0/2      . 0.00 7370 0   4       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -      0/0/3      . 0.00 7337 0   766     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -      0/0/2      . 0.00 7364 0   48      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -      0/0/2      . 0.00 7335 0   10      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -      0/0/3      . 0.00 7320 0   695     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -      0/0/7      . 0.00 7313 0   3150    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -      0/0/4      . 0.00 7316 0   538     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -      0/0/13     . 0.00 7314 0   8196    0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -      0/0/2      . 0.00 7327 0   519     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -      0/0/1      . 0.00 7351 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -      0/0/110    . 0.00 6921 0   48080   0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -      0/0/44     . 0.00 7204 0   13507   0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -      0/0/12     . 0.00 7323 0   7269    0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -      0/0/6      . 0.00 7307 0   1848    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -      0/0/1      . 0.00 7360 0   1       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -      0/0/48     . 0.00 7197 0   10684   0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -      0/0/2      . 0.00 7332 0   7       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -      0/0/1      . 0.00 7358 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -      0/0/5      . 0.00 7319 0   1750    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -      0/0/1      . 0.00 7356 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -      0/0/1      . 0.00 7357 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -      0/0/2      . 0.00 7334 0   6       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -      0/0/5      . 0.00 7308 0   859     0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -      0/0/74     . 0.00 7075 0   36843   0.0   0.00  1.92  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -      0/0/149    . 0.00 6712 0   74918   0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -      0/0/1      . 0.00 7352 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -      0/0/1      . 0.00 7355 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -      0/0/6      . 0.00 7311 0   3305    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -      0/0/6      . 0.00 7306 0   2230    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -      0/0/1      . 0.00 7354 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -      0/0/1      . 0.00 7353 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -      0/0/40     . 0.00 7214 0   15854   0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -      0/0/1      . 0.00 7359 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -      0/0/1      . 0.00 7350 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1015
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...30)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 31733
   total entries replaced since starting: 0
   total entries expired since starting: 30713
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 57 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit