403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.03.54.txt
 ## swap threshold exceeded
## server overview
2025-11-22.03.54 load[0] mem[59/67] mysql[1/25] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1269         291          17         803         891
Swap:          1999        1558         441
 03:54:01 up  2:57,  0 users,  load average: 0.37, 0.35, 0.39
## system overview
top - 03:54:01 up  2:57,  0 users,  load average: 0.37, 0.35, 0.39
Tasks: 206 total,   7 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 43.8 sy,  0.0 ni,  3.1 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   270760 free,  1326572 used,   822968 buff/cache
KiB Swap:  2047996 total,   452260 free,  1595736 used.   885456 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464300 221504   4080 S  53.3  9.2   2:09.55 /usr/sbin+
 25642 nigeria   20   0  404052  16144  10384 S  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44396   3196   1464 S   6.7  0.1   0:14.15 /usr/lib/+
   498 dbus      20   0   58748   1248    604 R   6.7  0.1   0:05.82 /usr/bin/+
 21291 nobody    20   0  277908  18448   4188 S   6.7  0.8   0:00.56 /usr/sbin+
 25645 cloudsms  20   0  404052  15612  10164 S   6.7  0.6   0:00.01 /opt/cpan+
 25647 pactpay   20   0  479860  16248  10640 S   6.7  0.7   0:00.01 /opt/cpan+
 25650 saboakin  20   0  404052  15616  10156 S   6.7  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:10.25 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.45 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:01.67 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.74 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.32 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.59 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   1852   1684 S   0.0  0.1   0:05.72 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    264    152 S   0.0  0.0   0:00.88 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.23 /usr/sbin+
   485 root      20   0   24712   1072    788 S   0.0  0.0   0:02.52 /usr/lib/+
   486 root      20   0  152780     96     68 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   4608   1284 S   0.0  0.2   0:00.20 queueproc+
   488 root      20   0   52852     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    780    412 S   0.0  0.0   0:01.53 /usr/lib/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1228    584 S   0.0  0.1   0:07.93 /usr/sbin+
   554 root      20   0   24208     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    424    292 S   0.0  0.0   0:00.31 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824    432    300 S   0.0  0.0   0:00.29 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.20 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    756    288 S   0.0  0.0   0:01.01 /usr/bin/+
   920 root      20   0  249168   1876   1480 S   0.0  0.1   0:02.83 /usr/sbin+
   926 root      20   0 1902000 429400    676 S   0.0 17.7   0:36.89 /usr/loca+
   927 named     20   0 1054792  27032   1976 S   0.0  1.1   0:05.76 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.24 /usr/bin/+
   931 root      20   0  389508    436    344 S   0.0  0.0   0:00.37 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.50 sw-engine+
   939 root      20   0  439788    432    340 S   0.0  0.0   0:00.40 php-fpm: +
   941 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    236    156 S   0.0  0.0   0:00.35 php-fpm: +
   944 cpanelc+  20   0   10608   3540   2312 R   0.0  0.1   0:08.47 /usr/loca+
   946 systuser  20   0  114016   9952   2840 S   0.0  0.4   0:02.72 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    436    352 S   0.0  0.0   0:00.38 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.18 /usr/sbin+
   960 root      20   0   51508    464    304 S   0.0  0.0   0:00.19 /usr/sbin+
   962 root      20   0  261024   3912    880 S   0.0  0.2   0:01.55 cpsrvd (S+
   965 systuser  20   0   14068     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1480    608 S   0.0  0.1   0:01.22 php-fpm: +
   973 root      20   0  153404    256    176 S   0.0  0.0   0:00.22 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.03 /usr/bin/+
   975 root      20   0 1276356   6472      0 S   0.0  0.3   0:25.52 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  34560   5896 S   0.0  1.4   0:06.15 /usr/loca+
  1079 dovenull  20   0   47136    984    680 S   0.0  0.0   0:00.31 dovecot/p+
  1080 dovenull  20   0   47392   2448   1712 S   0.0  0.1   0:00.17 dovecot/i+
  1081 dovecot   20   0   10320    212    108 S   0.0  0.0   0:00.10 dovecot/a+
  1082 root      20   0   10452    520    368 S   0.0  0.0   0:00.22 dovecot/l+
  1083 dovenull  20   0   47300    956    656 S   0.0  0.0   0:00.44 dovecot/p+
  1084 dovenull  20   0   47424   2464   1704 S   0.0  0.1   0:00.17 dovecot/i+
  1090 root      20   0   24528   1884    484 S   0.0  0.1   0:00.08 dovecot/c+
  1091 dovecot   20   0   13568    532    396 S   0.0  0.0   0:00.02 dovecot/s+
  1141 root      20   0  247944   2900    748 S   0.0  0.1   0:04.13 /usr/loca+
  1153 dovecot   20   0   41156   1484   1016 S   0.0  0.1   0:00.61 dovecot/a+
  1158 systuser  20   0  157704   2832    852 S   0.0  0.1   0:00.06 SonarPush+
  1177 wp-tool+  20   0  387528   2528   1232 S   0.0  0.1   0:00.18 /usr/bin/+
  1178 wp-tool+  20   0  412368  22368   1116 S   0.0  0.9   0:03.58 /usr/bin/+
  1261 root      20   0  183900   6688   3460 S   0.0  0.3   0:00.65 cpdavd - +
  1262 root      20   0  209248   6944   1584 S   0.0  0.3   0:01.37 tailwatchd
  1263 root      20   0  167452   1216    668 S   0.0  0.1   0:00.24 dnsadmin +
  1662 root      38  18  130416   1368    704 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    472    312 S   0.0  0.0   0:00.30 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:00.94 /usr/sbin+
  1929 root      20   0   12796    316    216 S   0.0  0.0   0:01.08 /usr/loca+
  1930 root      20   0   12732    260    188 S   0.0  0.0   0:00.96 /usr/loca+
  1931 root      20   0   12824    324    220 S   0.0  0.0   0:00.99 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182284   8960   1116 S   0.0  0.4   0:09.24 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     52     16 S   0.0  0.0   0:00.21 [kworker]
  5286 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5472 nobody    20   0  277612  15168   4564 S   0.0  0.6   0:02.76 /usr/sbin+
  6717 root      20   0  258828  42136   1208 S   0.0  1.7   0:01.33 spamd chi+
  6719 root      20   0  247944   1404    436 S   0.0  0.1   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
  9144 nobody    20   0  277580  12748   4764 S   0.0  0.5   0:02.11 /usr/sbin+
  9537 nobody    20   0  277584  11344   4568 S   0.0  0.5   0:02.20 /usr/sbin+
 10716 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 12060 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
 14841 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 16309 nobody    20   0  277908  19620   4720 S   0.0  0.8   0:01.02 /usr/sbin+
 17059 nobody    20   0  277908  19500   4780 S   0.0  0.8   0:01.13 /usr/sbin+
 17340 nobody    20   0  277908  19192   4556 S   0.0  0.8   0:01.06 /usr/sbin+
 17734 nobody    20   0  277912  19184   4768 S   0.0  0.8   0:01.23 /usr/sbin+
 18528 nobody    20   0  277584  18956   4628 S   0.0  0.8   0:00.91 /usr/sbin+
 18935 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21256 nobody    20   0  277520  18304   4336 S   0.0  0.8   0:00.37 /usr/sbin+
 23024 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 23065 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23794 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24021 nobody    20   0  277924  18520   4132 S   0.0  0.8   0:00.19 /usr/sbin+
 24035 nobody    20   0  277928  18028   4028 S   0.0  0.7   0:00.16 /usr/sbin+
 24185 nobody    20   0  277916  18188   4052 S   0.0  0.8   0:00.15 /usr/sbin+
 24191 nobody    20   0  277584  17760   3880 S   0.0  0.7   0:00.18 /usr/sbin+
 24192 nobody    20   0  277908  18048   3972 S   0.0  0.7   0:00.17 /usr/sbin+
 24441 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 24516 nobody    20   0  277520  16944   3396 S   0.0  0.7   0:00.19 /usr/sbin+
 25042 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25559 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.00 php-fpm: +
 25570 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 25571 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 25578 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25579 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25580 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25581 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25582 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25583 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25584 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25585 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25586 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25587 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25588 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25589 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25590 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25592 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25593 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25594 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 25595 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 25596 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 25618 root      20   0  160244   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 25619 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25621 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 25622 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 25623 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25624 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25625 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 25626 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25627 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25628 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25629 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25630 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 25631 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25632 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25633 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25638 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 25640 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 25641 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 25643 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 25646 saboakin  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 25652 root      20   0  110880   3708   2708 S   0.0  0.2   0:00.00 /usr/sbin+
 25653 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
 90413 worencom  20   0   38500   1648   1136 S   0.0  0.1   0:00.02 dovecot/i+
 94906 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
101572 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    00:56   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:56   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      94906  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root     101572  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/1:3]
root       5286  0.0  0.0      0     0 ?        S    03:26   0:00  \_ [kworker/0:4]
root      10716  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/0:2]
root      12060  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root      14841  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/1:0]
root      18935  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:3]
root      23024  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/1:1]
root      23065  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/0:0]
root      23794  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/0:1]
root      24441  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/1:4]
root      25042  0.0  0.0      0     0 ?        S    03:53   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44396  3196 ?        Ss   00:56   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.0  39500  1852 ?        Ss   00:56   0:05 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   264 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1072 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    96 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  4608 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852    56 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   780 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1248 ?        Ss   00:56   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1228 ?        Ssl  00:56   0:07 /usr/sbin/nscd
root        554  0.0  0.0  24208    28 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   424 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      25578  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25594  0.0  0.0 113284  1212 ?        Ss   03:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      25595  0.0  0.0 108052   356 ?        S    03:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      25596  0.0  0.0 113288  1516 ?        S    03:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      25654  0.0  0.0 153840  2100 ?        R    03:54   0:00  |               \_ ps auxf
root      25579  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25632  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      25580  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25631  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      25581  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25629  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      25582  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25627  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      25583  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25623  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      25584  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25621  0.0  0.0  20164   968 ?        Ss   03:54   0:00  |   \_ jailshell (cloudsms) [25641] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  25641  0.0  0.0  20164   264 ?        S    03:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  25643  0.0  0.0 113284  1212 ?        S    03:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  25645  0.0  0.6 404052 15612 ?        S    03:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      25585  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25628  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      25586  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25626  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      25587  0.0  0.0 183044  2140 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25633  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      25588  0.0  0.0 183044  2140 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25619  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      25589  0.0  0.0 183044  2140 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25624  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      25590  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25625  0.0  0.0  20164   964 ?        Ss   03:54   0:00  |   \_ jailshell (pactpay) [25640] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25640  0.0  0.0  20164   260 ?        S    03:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25647  0.0  0.7 480124 17304 ?        S    03:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      25592  0.0  0.0 183044  2140 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25630  0.0  0.0  20164   968 ?        Ss   03:54   0:00  |   \_ jailshell (nigeria) [25638] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25638  0.0  0.0  20164   264 ?        S    03:54   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25642  0.0  0.6 404052 16144 ?        S    03:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      25593  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      25622  0.0  0.0  20164   960 ?        Ss   03:54   0:00      \_ jailshell (saboakin) [25646] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  25646  0.0  0.0      0     0 ?        D    03:54   0:00          \_ [jailshell]
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.0  90824   432 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   756 ?        Ssl  00:56   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.0 249168  1876 ?        Ssl  00:56   0:02 /usr/sbin/rsyslogd -n
root        926  0.3 17.7 1902000 429400 ?      Ssl  00:56   0:36 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.1 1054792 27032 ?       Ssl  00:56   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   436 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  25570  0.0  0.0 445028   324 ?        S    03:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   432 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932     4 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   236 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3540 ?        Ss   00:56   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.4 114016  9952 ?        Ssl  00:56   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   436 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root      25652  0.0  0.1 111304  4272 ?        Ss   03:54   0:00  \_ sshd: [accepted]
sshd      25655  0.0  0.1 115644  2628 ?        S    03:54   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   464 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136   984 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  2448 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   212 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   520 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300   956 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2464 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24528  1884 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   532 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1484 ?        S    00:56   0:00  \_ dovecot/auth
worencom  90413  0.0  0.0  38500  1648 ?        S    03:02   0:00  \_ dovecot/imap
root        962  0.0  0.1 261024  3912 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      25571  0.0  0.0      0     0 ?        Z    03:53   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1480 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   25559  0.0  0.1 400460  4336 ?        S    03:53   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   256 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4164 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.2  0.2 1276356 6472 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 34560 ?       SLsl 00:56   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2900 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  1.7 258828 42136 ?        S    01:02   0:01  \_ spamd child
root       6719  0.0  0.0 247944  1404 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2832 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  2528 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 22368 ?        Ss   00:56   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  6688 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.2 209248  6944 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  1216 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1368 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   472 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2  9.1 1464300 221504 ?      Sl   00:56   2:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12796   316 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   260 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12824   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     5472  0.1  0.6 277612 15168 ?        S    03:26   0:02  \_ /usr/sbin/httpd -k start
nobody     9144  0.1  0.5 277580 12748 ?        S    03:30   0:02  \_ /usr/sbin/httpd -k start
nobody     9537  0.1  0.4 277584 11344 ?        S    03:31   0:02  \_ /usr/sbin/httpd -k start
nobody    16309  0.1  0.8 277908 19620 ?        S    03:40   0:01  \_ /usr/sbin/httpd -k start
nobody    17059  0.1  0.8 277908 19500 ?        S    03:41   0:01  \_ /usr/sbin/httpd -k start
nobody    17340  0.1  0.7 277908 19192 ?        S    03:41   0:01  \_ /usr/sbin/httpd -k start
nobody    17734  0.1  0.7 277912 19184 ?        S    03:42   0:01  \_ /usr/sbin/httpd -k start
nobody    18528  0.1  0.7 277584 18956 ?        S    03:43   0:00  \_ /usr/sbin/httpd -k start
nobody    21256  0.0  0.7 277520 18304 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody    21291  0.1  0.7 277908 18448 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody    24021  0.1  0.7 277924 18520 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24035  0.1  0.7 277928 18028 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24185  0.1  0.7 277916 18188 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24191  0.1  0.7 277584 17760 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24192  0.1  0.7 277908 18048 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24516  0.1  0.7 277520 16944 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.3 182284  8960 ?        Ss   00:56   0:09 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    52 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 10630  Threads: 3  Questions: 701271  Slow queries: 0  Opens: 4616  Flush tables: 1  Open tables: 2000  Queries per second avg: 65.970
*************************** 1. row ***************************
     Id: 13093
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 13094
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 13100
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 114.119.128.35 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 195.2.79.165 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 03:54:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 57 minutes 6 seconds
   Server load: 0.37 0.35 0.39
   Total accesses: 47987 - Total Traffic: 1.2 GB - Total Duration: 23393442
   CPU Usage: u10.55 s4.78 cu618.59 cs495.7 - 10.6% CPU load
   4.52 requests/sec - 113.8 kB/second - 25.2 kB/request - 487.495 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

._W_KK_K___K.KR..KK.........._..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol         VHost                                      Request
   0-0  -     0/0/2390   . 0.00  56   0   1194272 0.0   0.00  57.48 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   1-0  18528 0/152/2413 _ 4.10  0    7   1132473 0.0   4.02  62.99 114.119.154.181 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Kogi&lga=Idah&ward=Ukwaja
   2-0  16309 0/177/2379 W 5.08  0    0   1175475 0.0   4.33  62.04 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  9144  0/353/2350 _ 9.60  0    342 1334769 0.0   8.90  59.89 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=2757742881 HTTP/1.1
   4-0  24185 1/29/2436  K 0.80  3    343 1203444 34.5  0.62  59.66 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3305589417 HTTP/1.1
   5-0  21256 4/66/2150  K 1.78  2    294 990128  123.8 1.62  49.44 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3924477754 HTTP/1.1
   6-0  24021 0/37/2509  _ 1.04  1    1   1157168 0.0   0.82  59.05 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   7-0  24516 2/30/2439  K 0.84  2    268 1117475 65.3  0.92  56.04 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=1451666058 HTTP/1.1
   8-0  24035 0/26/2475  _ 0.65  0    0   1112361 0.0   4.53  63.53 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   9-0  9537  0/382/2018 _ 10.47 1    1   1008475 0.0   9.42  49.77 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   10-0 17059 0/202/1711 _ 5.41  0    361 838872  0.0   4.95  41.62 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3750062386 HTTP/1.1
   11-0 17340 4/185/2127 K 5.17  1    297 1034980 129.0 4.66  54.94 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=3390122666 HTTP/1.1
   12-0 -     0/0/1527   . 0.00  88   0   666748  0.0   0.00  35.09 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 24191 3/31/2178  K 1.26  1    274 1134976 94.6  0.78  53.57 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=14230559 HTTP/1.1
   14-0 17734 0/200/1724 R 5.81  1    343 888589  0.0   5.36  43.41 114.119.137.160 http/1.1 nigeriadecide.org:443
   15-0 -     0/0/1421   . 0.00  30   0   731499  0.0   0.00  37.80 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/1421   . 0.00  133  0   680661  0.0   0.00  34.56 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 24192 2/30/1151  K 0.97  0    297 582109  65.1  0.79  27.78 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=2250405273 HTTP/1.1
   18-0 21291 6/94/1892  K 2.30  0    264 762974  186.3 2.45  56.05 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=2091816575 HTTP/1.1
   19-0 -     0/0/583    . 0.00  1643 0   302417  0.0   0.00  13.95 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/605    . 0.00  1634 0   276250  0.0   0.00  13.68 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/1051   . 0.00  1656 0   564464  0.0   0.00  27.34 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/1622   . 0.00  735  0   805861  0.0   0.00  39.12 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/849    . 0.00  1633 0   577788  0.0   0.00  20.58 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/333    . 0.00  1650 0   186833  0.0   0.00  8.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/50     . 0.00  1641 0   31736   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/238    . 0.00  1654 0   130930  0.0   0.00  5.99  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/172    . 0.00  1100 0   67579   0.0   0.00  2.99  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/57     . 0.00  1638 0   59379   0.0   0.00  1.25  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 5472  0/461/500  _ 12.47 0    362 295410  0.0   12.27 13.29 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=3358795872 HTTP/1.1
   30-0 -     0/0/321    . 0.00  724  0   148504  0.0   0.00  6.83  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/609    . 0.00  1646 0   309233  0.0   0.00  15.78 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/11     . 0.00  1636 0   3774    0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00  1648 0   1828    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/117    . 0.00  1223 0   46396   0.0   0.00  2.24  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/146    . 0.00  1660 0   57340   0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/240    . 0.00  1632 0   105059  0.0   0.00  5.69  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00  1659 0   4588    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/102    . 0.00  1225 0   37924   0.0   0.00  1.98  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/196    . 0.00  1176 3   51541   0.0   0.00  2.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/203    . 0.00  932  0   91622   0.0   0.00  4.31  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  1639 0   2066    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  1635 0   5210    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  1658 0   13      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/158    . 0.00  1179 0   66237   0.0   0.00  3.12  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/522    . 0.00  1543 0   184884  0.0   0.00  9.85  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  8449 0   4       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  8416 0   766     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  8443 0   48      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  8414 0   10      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  8399 0   695     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  8392 0   3150    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  8395 0   538     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00  8393 0   8196    0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  8406 0   519     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00  8430 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00  8001 0   48080   0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  8284 0   13507   0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00  8402 0   7269    0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00  8386 0   1848    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00  8439 0   1       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00  8277 0   10684   0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  8411 0   7       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00  8437 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00  8398 0   1750    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  8435 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  8436 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  8413 0   6       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  8387 0   859     0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00  8155 0   36843   0.0   0.00  1.92  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00  7792 0   74918   0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00  8431 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00  8434 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00  8390 0   3305    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00  8385 0   2230    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  8433 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  8432 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00  8294 0   15854   0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00  8438 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  8429 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 939
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...43)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 35486
   total entries replaced since starting: 0
   total entries expired since starting: 34541
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 67 miss
   total removes since starting: 8 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit