403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.00.30.txt
 ## swap threshold exceeded
## server overview
2025-11-23.00.30 load[0] mem[54/78] mysql[3/10] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1232          66         113        1064         848
Swap:          1999        1657         342
 00:30:02 up 13:27,  0 users,  load average: 0.27, 0.39, 0.53
## system overview
top - 00:30:02 up 13:27,  0 users,  load average: 0.27, 0.39, 0.53
Tasks: 205 total,   3 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 74.2 us, 25.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78140 free,  1245292 used,  1096868 buff/cache
KiB Swap:  2047996 total,   350460 free,  1697536 used.   885796 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478016 298748   4448 S 125.0 12.3  10:49.49 /usr/sbin+
 64341 nigeria   20   0  404052  16144  10384 S  18.8  0.7   0:00.04 /opt/cpan+
    14 root      20   0       0      0      0 S   6.2  0.0   0:07.37 [ksoftirq+
   502 dbus      20   0   58592   1468    776 S   6.2  0.1   0:25.08 /usr/bin/+
 64338 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
 64385 cloudw    20   0  353712  15972  10484 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44508   3472   1592 S   0.0  0.1   1:06.15 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.60 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.93 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:47.23 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.90 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.20 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.13 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.82 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.49 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   4064   3764 S   0.0  0.2   0:28.28 /usr/lib/+
   384 root      20   0   45352    312    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    552    424 S   0.0  0.0   0:04.63 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    456    368 S   0.0  0.0   0:01.10 /usr/sbin+
   501 root      20   0   24704   1268    888 S   0.0  0.1   0:10.97 /usr/lib/+
   504 rpc       20   0   69256    184    124 S   0.0  0.0   0:00.04 /sbin/rpc+
   514 root      20   0  224148   5136   1216 S   0.0  0.2   0:00.52 queueproc+
   515 polkitd   20   0  610540    860    460 S   0.0  0.0   0:06.35 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    420    304 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   2012    880 S   0.0  0.1   0:34.01 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:01.33 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4016    980 S   0.0  0.2   0:00.95 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.03 /usr/bin/+
   912 root      20   0 1277312   5996    140 S   0.0  0.2   0:24.72 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372   1096    512 S   0.0  0.0   0:04.13 /usr/bin/+
   915 root      20   0   51508    720    540 S   0.0  0.0   0:00.72 /usr/sbin+
   916 telegraf  20   0 5654304  36836   5892 S   0.0  1.5   0:25.65 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14596   2624 S   0.0  0.6   0:11.25 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:07.02 /usr/sbin+
   928 root      20   0 1276100   8520    104 S   0.0  0.4   0:25.62 /usr/bin/+
   930 root      20   0  445028   1408   1296 S   0.0  0.1   0:01.87 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:01.05 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788   1108    900 S   0.0  0.0   0:01.24 php-fpm: +
   938 root      20   0  388892    716    504 S   0.0  0.0   0:01.13 php-fpm: +
   939 root      20   0 1763124  77356    652 S   0.0  3.2   0:13.85 /usr/loca+
   940 root      20   0  331088   5144   3872 S   0.0  0.2   0:13.96 /usr/sbin+
   949 named     20   0 1055800  43948   2204 S   0.0  1.8   0:21.45 /usr/sbin+
   958 root      20   0  400740   3024    720 S   0.0  0.1   0:05.77 php-fpm: +
   962 root      20   0  261692   9252   2100 S   0.0  0.4   0:07.25 cpsrvd (S+
   969 cpanelc+  20   0   10564   3772   2368 S   0.0  0.2   0:38.44 /usr/loca+
   979 root      20   0  396248    628    452 S   0.0  0.0   0:01.18 php-fpm: +
   985 root      20   0  389508    848    636 S   0.0  0.0   0:01.24 php-fpm: +
  1083 dovenull  20   0   47116   3252   2316 S   0.0  0.1   0:01.54 dovecot/p+
  1084 dovenull  20   0   48236   4108   2280 S   0.0  0.2   0:00.50 dovecot/i+
  1085 dovecot   20   0   10320    548    428 S   0.0  0.0   0:00.36 dovecot/a+
  1086 root      20   0   10452    504    296 S   0.0  0.0   0:00.93 dovecot/l+
  1087 dovenull  20   0   47264   3408   2356 S   0.0  0.1   0:01.74 dovecot/p+
  1088 dovenull  20   0   48324   4180   2296 S   0.0  0.2   0:00.51 dovecot/i+
  1093 root      20   0   24528   2500    484 S   0.0  0.1   0:00.31 dovecot/c+
  1101 dovecot   20   0   13568    556    312 S   0.0  0.0   0:00.13 dovecot/s+
  1142 root      20   0  247932  51016   1124 S   0.0  2.1   0:08.56 /usr/loca+
  1161 dovecot   20   0   41320   1756   1104 S   0.0  0.1   0:02.35 dovecot/a+
  1175 systuser  20   0  157708   3112   1060 S   0.0  0.1   0:00.21 SonarPush+
  1177 wp-tool+  20   0  387556   5064   1708 S   0.0  0.2   0:00.42 /usr/bin/+
  1178 wp-tool+  20   0  412396  28760   1900 S   0.0  1.2   0:15.23 /usr/bin/+
  1260 root      20   0  262224  24688   6768 S   0.0  1.0   0:04.99 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.69 dnsadmin +
  1264 root      20   0  209648  12140   2216 S   0.0  0.5   0:05.70 tailwatchd
  1800 root      20   0  299272    872    496 S   0.0  0.0   0:01.27 php-fpm: +
  1834 root      38  18  130416   1460    776 S   0.0  0.1   0:00.12 cpanellog+
  2048 root      20   0  267052   9076    748 S   0.0  0.4   0:03.33 /usr/sbin+
  2050 root      20   0   12780    440    320 S   0.0  0.0   0:05.00 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:04.42 /usr/loca+
  2052 root      20   0   12800    440    308 S   0.0  0.0   0:04.68 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996 108684   2820 S   0.0  4.5   0:05.75 spamd chi+
  5634 root      20   0  247932  50488    452 S   0.0  2.1   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kworker/+
 33683 nobody    20   0  277920  21540   5052 S   0.0  0.9   0:04.02 /usr/sbin+
 34991 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 44973 root      20   0  181060  29248   2352 S   0.0  1.2   0:01.58 lfd - sle+
 45471 nobody    20   0  277780  21212   4864 S   0.0  0.9   0:02.42 /usr/sbin+
 46119 nobody    20   0  277584  21128   5020 S   0.0  0.9   0:02.25 /usr/sbin+
 46362 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 46761 nobody    20   0  277584  20908   4768 S   0.0  0.9   0:02.32 /usr/sbin+
 47035 nobody    20   0  277652  21424   5116 S   0.0  0.9   0:02.36 /usr/sbin+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.84 [kworker]
 49361 nobody    20   0  277528  21224   5052 S   0.0  0.9   0:01.84 /usr/sbin+
 50212 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 50331 nobody    20   0  277888  21344   4796 S   0.0  0.9   0:01.75 /usr/sbin+
 50635 nobody    20   0  277584  21044   4900 S   0.0  0.9   0:01.62 /usr/sbin+
 51603 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52077 nobody    20   0  277600  21112   4876 S   0.0  0.9   0:01.65 /usr/sbin+
 53972 nobody    20   0  277916  21156   4688 S   0.0  0.9   0:01.35 /usr/sbin+
 54251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54322 nobody    20   0  277544  20824   4760 S   0.0  0.9   0:01.42 /usr/sbin+
 56747 nobody    20   0  277652  20984   4816 S   0.0  0.9   0:01.08 /usr/sbin+
 56999 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 59572 nobody    20   0  277908  20568   4324 S   0.0  0.8   0:00.67 /usr/sbin+
 60169 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60844 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60856 nobody    20   0  277584  20248   4264 S   0.0  0.8   0:00.45 /usr/sbin+
 61367 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61832 nobody    20   0  277916  20452   4188 S   0.0  0.8   0:00.36 /usr/sbin+
 61970 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63897 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 63928 healtho+  20   0  463916  71728   4304 S   0.0  3.0   0:04.71 php-fpm: +
 63985 healtho+  20   0  462820  69820   4220 S   0.0  2.9   0:03.67 php-fpm: +
 64093 nigeria   20   0  400460   5496   2384 S   0.0  0.2   0:00.00 php-fpm: +
 64206 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 64207 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 64208 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 64242 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64243 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64244 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64247 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64248 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64249 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64250 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64251 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64252 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64255 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64256 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64257 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64258 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64259 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64261 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64271 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64274 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64275 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64276 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64277 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64278 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64279 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 64280 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 64281 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64282 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64286 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64289 root      20   0  114256   2432   1280 S   0.0  0.1   0:00.00 bash /usr+
 64290 root      20   0  188200  11080   5148 S   0.0  0.5   0:00.01 /usr/loca+
 64292 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 64293 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64295 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 64296 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 64299 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 64306 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 64314 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 64317 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 64319 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 64321 root      20   0  188860  12952   5544 R   0.0  0.5   0:00.04 /usr/loca+
 64325 cloudsms  20   0  404052  15344  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 64330 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 64344 root      20   0  160224   2352   1636 S   0.0  0.1   0:00.00 top -n 2 +
 64353 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64356 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64398 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 64419 root      20   0  114256   1152      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:47  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      34991  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/0:2]
root      46362  0.0  0.0      0     0 ?        S    00:02   0:00  \_ [kworker/0:0]
root      50212  0.0  0.0      0     0 ?        S    00:08   0:00  \_ [kworker/u200:2]
root      51603  0.0  0.0      0     0 ?        S    00:10   0:00  \_ [kworker/1:0]
root      54251  0.0  0.0      0     0 ?        S    00:14   0:00  \_ [kworker/1:3]
root      56999  0.0  0.0      0     0 ?        S    00:18   0:00  \_ [kworker/0:5]
root      60169  0.0  0.0      0     0 ?        S    00:23   0:00  \_ [kworker/1:1]
root      60844  0.0  0.0      0     0 ?        R    00:24   0:00  \_ [kworker/0:1]
root      61367  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/0:3]
root      61970  0.0  0.0      0     0 ?        S    00:26   0:00  \_ [kworker/u200:0]
root      64353  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:2]
root      64356  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44508  3472 ?        Ss   Nov22   1:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39500  4064 ?        Ss   Nov22   0:28 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   312 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   552 ?        S<sl Nov22   0:04 /sbin/auditd
root        499  0.0  0.0  21540   456 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1268 ?        Ss   Nov22   0:10 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58592  1468 ?        Ss   Nov22   0:25 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256   184 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5136 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   860 ?        Ssl  Nov22   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   420 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 2012 ?        Ssl  Nov22   0:34 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    20 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      64242  0.0  0.0 183044  2136 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64275  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      64289  0.0  0.1 114256  2432 ?        R    00:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      64419  0.0  0.0      0     0 ?        Z    00:30   0:00  |           \_ [bash] <defunct>
root      64243  0.0  0.0 183044  2136 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64293  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      64299  0.0  0.0 108052   356 ?        S    00:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      64314  0.0  0.0 113288  1516 ?        S    00:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      64420  0.0  0.0 153840  2096 ?        R    00:30   0:00  |               \_ ps auxf
root      64244  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64271  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      64247  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64277  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      64248  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64286  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      64249  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64281  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      64250  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64278  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      64251  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64274  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      64252  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64279  0.0  0.0  20164   972 ?        Ss   00:30   0:00  |   \_ jailshell (cloudsms) [64306] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  64306  0.0  0.0  20164   264 ?        S    00:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  64317  0.0  0.0 113284  1212 ?        S    00:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  64325  1.0  0.6 404052 15344 ?        S    00:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      64255  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64276  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      64256  0.0  0.0 183044  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64282  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      64257  0.0  0.0 183044  2136 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64295  0.0  0.0 113284  1208 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root      64321  4.0  0.5 188860 12952 ?        D    00:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root      64258  0.0  0.0 183044  2136 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64280  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      64290  1.0  0.4 188200 11080 ?        S    00:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      64344  0.0  0.0 160224  2352 ?        S    00:30   0:00  |           \_ top -n 2 -b -c
root      64259  0.0  0.0 183044  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64296  0.0  0.0  20164   968 ?        Ss   00:30   0:00  |   \_ jailshell (pactpay) [64319] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   64319  0.0  0.0      0     0 ?        D    00:30   0:00  |       \_ [jailshell]
root      64261  0.0  0.0 183044  2140 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64292  0.0  0.0  20164   968 ?        Ss   00:30   0:00      \_ jailshell (nigeria) [64330] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64330  0.0  0.0  20164   260 ?        S    00:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64341  4.0  0.6 404052 16144 ?        S    00:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296   136 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4016 ?        Ss   Nov22   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5996 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372  1096 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   720 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  47116  3252 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48236  4108 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   548 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   504 ?        S    Nov22   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47264  3408 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  4180 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2500 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1756 ?        S    Nov22   0:02  \_ dovecot/auth
root      64206  0.0  0.1  41052  2724 ?        S    00:29   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 36836 ?       SLsl Nov22   0:25 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.6 114016 14596 ?        Ssl  Nov22   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      63897  0.0  0.1 111304  4272 ?        Ss   00:29   0:00  \_ sshd: [accepted]
root        928  0.0  0.3 1276100 8520 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028  1408 ?        Ss   Nov22   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  64208  0.0  0.0 445028   320 ?        S    00:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788  1108 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   716 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  3.1 1763124 77356 ?       Ssl  Nov22   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  5144 ?        Ssl  Nov22   0:13 /usr/sbin/rsyslogd -n
named       949  0.0  1.8 1055800 43948 ?       Ssl  Nov22   0:21 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3024 ?        Ss   Nov22   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  63928 11.7  2.9 463916 71728 ?        S    00:29   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  63985 11.1  2.8 462820 69820 ?        S    00:29   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   64093  0.0  0.2 400460  5496 ?        S    00:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.3 261692  9252 ?        Ss   Nov22   0:07 cpsrvd (SSL) - waiting for connections                   
root      64207  0.0  0.0      0     0 ?        Z    00:29   0:00  \_ [cpsrvd (SSL) - ] <defunct>
cpanelc+    969  0.0  0.1  10564  3772 ?        Ss   Nov22   0:38 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   628 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   848 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  2.1 247932 51016 ?        Ss   Nov22   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  4.4 271996 108684 ?       S    Nov22   0:05  \_ spamd child
root       5634  0.0  2.0 247932 50488 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3112 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.2 387556  5064 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412396 28760 ?        Ss   Nov22   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  1.0 262224 24688 ?        Ss   Nov22   0:04 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.0 167452  1404 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.5 209648 12140 ?        Ss   Nov22   0:05 tailwatchd
root       1800  0.0  0.0 299272   872 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1460 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 12.3 1478016 298748 ?      Sl   Nov22  10:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9076 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12780   440 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12800   440 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    33683  0.1  0.8 277920 21540 ?        S    Nov22   0:04  \_ /usr/sbin/httpd -k start
nobody    45471  0.1  0.8 277780 21212 ?        S    00:00   0:02  \_ /usr/sbin/httpd -k start
nobody    46119  0.1  0.8 277584 21128 ?        S    00:01   0:02  \_ /usr/sbin/httpd -k start
nobody    46761  0.1  0.8 277584 20908 ?        S    00:02   0:02  \_ /usr/sbin/httpd -k start
nobody    47035  0.1  0.8 277652 21424 ?        S    00:03   0:02  \_ /usr/sbin/httpd -k start
nobody    49361  0.1  0.8 277528 21224 ?        S    00:06   0:01  \_ /usr/sbin/httpd -k start
nobody    50331  0.1  0.8 277888 21344 ?        S    00:08   0:01  \_ /usr/sbin/httpd -k start
nobody    50635  0.1  0.8 277584 21044 ?        S    00:08   0:01  \_ /usr/sbin/httpd -k start
nobody    52077  0.1  0.8 277600 21112 ?        S    00:10   0:01  \_ /usr/sbin/httpd -k start
cloudw    64385  0.0  0.6 353712 15972 ?        S    00:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    53972  0.1  0.8 277916 21156 ?        S    00:13   0:01  \_ /usr/sbin/httpd -k start
nobody    54322  0.1  0.8 277544 20824 ?        S    00:14   0:01  \_ /usr/sbin/httpd -k start
nobody    56747  0.1  0.8 277652 20984 ?        S    00:17   0:01  \_ /usr/sbin/httpd -k start
nobody    59572  0.1  0.8 277908 20568 ?        S    00:22   0:00  \_ /usr/sbin/httpd -k start
nobody    60856  0.1  0.8 277584 20248 ?        S    00:24   0:00  \_ /usr/sbin/httpd -k start
nobody    61832  0.1  0.8 277916 20452 ?        S    00:25   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  1.2 181060 29248 ?        Ss   00:00   0:01 lfd - sleeping
## mysql stats
Uptime: 48416  Threads: 2  Questions: 4109733  Slow queries: 0  Opens: 9783  Flush tables: 1  Open tables: 2000  Queries per second avg: 84.883
*************************** 1. row ***************************
     Id: 64381
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 64387
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 142.44.228.18 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.203.199 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     34 149.22.81.153 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 00:30:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 26 minutes 51 seconds
   Server load: 0.27 0.39 0.53
   Total accesses: 222695 - Total Traffic: 5.3 GB - Total Duration: 118701663
   CPU Usage: u19.04 s9.85 cu2735.93 cs2144.35 - 10.1% CPU load
   4.6 requests/sec - 114.0 kB/second - 24.8 kB/request - 533.023 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

__KWKW._R._KK__K...._...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req    Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  56747 0/210/11806 _ 4.37  0    350   6024005 0.0   4.69  283.36 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=1618751945 HTTP/1.1
   1-0  54322 0/267/11625 _ 5.59  0    352   6018114 0.0   6.02  283.09 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=3797395408 HTTP/1.1
   2-0  52077 1/304/11433 K 6.64  0    334   6177746 34.6  7.38  272.74 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=1244241106 HTTP/1.1
   3-0  61832 2/70/11151  W 1.59  0    0     5800607 63.7  1.54  277.32 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=2120308221 HTTP/1.1
   4-0  46761 6/493/11106 K 8.74  3    407   5807841 188.3 10.01 276.51 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=1805662226 HTTP/1.1
   5-0  53972 0/277/11396 W 5.43  0    0     5913602 0.0   5.63  302.95 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  -     0/0/10722   . 0.00  28   0     5403607 0.0   0.00  268.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  47035 0/463/10964 _ 8.81  1    419   5660537 0.0   11.35 266.34 192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=2368405374 HTTP/1.1
   8-0  59572 0/129/10691 R 2.67  2    1     5365779 0.0   2.95  255.41 149.22.81.153 http/1.1
   9-0  -     0/0/9668    . 0.00  263  0     5043281 0.0   0.00  241.31 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 45471 0/493/10040 _ 9.71  0    0     5150621 0.0   10.32 238.13 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   11-0 33683 7/785/9928  K 15.14 0    322   5052708 213.7 17.69 240.35 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=2064493918 HTTP/1.1
   12-0 46119 3/449/9908  K 9.25  1    360   5158997 93.6  12.04 251.22 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=451767399 HTTP/1.1
   13-0 50635 0/323/9081  _ 6.20  2    2     4668901 0.0   7.64  218.92 107.22.208.39 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/blog/images/2019elec
   14-0 49361 0/364/8363  _ 6.81  0    0     4303602 0.0   7.97  201.77 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 60856 3/90/6498   K 1.65  2    342   3299381 95.7  1.94  169.23 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=2302100072 HTTP/1.1
   16-0 -     0/0/7216    . 0.00  592  0     3636421 0.0   0.00  168.87 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/6643    . 0.00  1266 0     3403264 0.0   0.00  165.54 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/5550    . 0.00  928  0     2960427 0.0   0.00  134.04 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/6091    . 0.00  1262 0     2981582 0.0   0.00  140.91 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 50331 0/373/4824  _ 6.45  0    335   2589921 0.0   7.36  113.48 149.22.81.153 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   21-0 -     0/0/3759    . 0.00  650  0     2209531 0.0   0.00  91.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/3029    . 0.00  1261 0     1735053 0.0   0.00  81.73  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/2363    . 0.00  732  5     1216391 0.0   0.00  47.93  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/1411    . 0.00  2858 0     1067698 0.0   0.00  32.76  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/2419    . 0.00  2870 0     1072704 0.0   0.00  54.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1551    . 0.00  3221 0     994271  0.0   0.00  36.51  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1178    . 0.00  3676 0     781587  0.0   0.00  33.93  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1507    . 0.00  3453 0     732468  0.0   0.00  31.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/1468    . 0.00  2415 0     896900  0.0   0.00  31.64  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1287    . 0.00  3682 0     794356  0.0   0.00  30.29  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/528     . 0.00  3672 0     402740  0.0   0.00  9.57   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/518     . 0.00  5356 0     501315  0.0   0.00  10.45  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/208     . 0.00  4767 0     237017  0.0   0.00  4.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/585     . 0.00  5355 0     401414  0.0   0.00  8.75   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/643     . 0.00  4734 0     507088  0.0   0.00  14.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/74      . 0.00  5327 0     128926  0.0   0.00  0.43   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/181     . 0.00  5323 0     172759  0.0   0.00  4.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/655     . 0.00  5351 0     329138  0.0   0.00  12.59  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/543     . 0.00  4435 0     484400  0.0   0.00  12.38  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/224     . 0.00  5311 0     279837  0.0   0.00  4.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/409     . 0.00  5346 0     303799  0.0   0.00  9.44   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/118     . 0.00  5196 0     273924  0.0   0.00  1.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/73      . 0.00  5349 0     237945  0.0   0.00  0.86   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/289     . 0.00  5340 0     301814  0.0   0.00  6.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/180     . 0.00  5343 0     137352  0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00  5339 0     180509  0.0   0.00  0.80   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00  5361 0     226531  0.0   0.00  1.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00  5352 0     142085  0.0   0.00  4.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00  5003 0     181603  0.0   0.00  4.73   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00  5365 0     44788   0.0   0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00  5325 0     43835   0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00  5334 0     45747   0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00  5332 0     44492   0.0   0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/536     . 0.00  3449 0     268842  0.0   0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00  5369 0     23627   0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00  5328 0     47344   0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00  5330 0     44159   0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00  5371 11655 23366   0.0   0.00  0.07   45.94.58.4    http/1.1 cloudware.ng:80            GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141     . 0.00  4732 0     113874  0.0   0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/132     . 0.00  5362 0     76946   0.0   0.00  2.87   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00  5360 0     3701    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00  4919 0     97395   0.0   0.00  2.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00  5344 0     27806   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00  5337 0     25454   0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00  5357 0     28822   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00  6883 0     28      0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00  6888 0     46      0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00  6926 0     1240    0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00  6925 0     703     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00  6918 0     1790    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00  6866 0     737     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00  6937 0     0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00  5472 0     263682  0.0   0.00  8.36   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00  6914 0     4803    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  6936 0     0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00  6878 0     2942    0.0   0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00  6235 0     87870   0.0   0.00  4.44   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00  6738 0     25484   0.0   0.00  1.24   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 905
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...16)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 159997
   total entries replaced since starting: 0
   total entries expired since starting: 159032
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 429 miss
   total removes since starting: 60 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit