403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.01.09.txt
 ## swap threshold exceeded
## server overview
2025-11-11.01.09 load[0] mem[59/56] mysql[1/10] httpd[6]
              total        used        free      shared  buff/cache   available
Mem:           2363        1344         180           7         838         849
Swap:          1999        1265         734
 01:09:01 up  1:12,  0 users,  load average: 0.23, 0.50, 0.54
## system overview
top - 01:09:01 up  1:12,  0 users,  load average: 0.23, 0.50, 0.54
Tasks: 202 total,   5 running, 195 sleeping,   0 stopped,   2 zombie
%Cpu(s): 58.8 us, 41.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   161952 free,  1399376 used,   858972 buff/cache
KiB Swap:  2047996 total,   752184 free,  1295812 used.   847100 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1458324 184744   4296 S  23.5  7.6   0:41.43 /usr/sbin+
 54481 root      20   0  150768   9872   2628 R  23.5  0.4   0:00.04 /usr/loca+
     1 root      20   0   44408   3608   1692 R  11.8  0.1   0:07.31 /usr/lib/+
 54494 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.02 /opt/cpan+
   355 root      20   0   40240   6212   5964 S   5.9  0.3   0:02.34 /usr/lib/+
 54495 pactpay   20   0  476460  16056  10480 S   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:04.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.85 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.12 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.46 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.19 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.28 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    272    160 S   0.0  0.0   0:00.36 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852     88      0 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24896   1432    800 S   0.0  0.1   0:01.07 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.09 /usr/sbin+
   517 root      20   0  224148   3040    800 S   0.0  0.1   0:00.12 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1324    600 S   0.0  0.1   0:02.38 /usr/bin/+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   522 nscd      20   0  996544   1316    680 S   0.0  0.1   0:03.24 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    784    448 S   0.0  0.0   0:00.64 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    424    292 S   0.0  0.0   0:00.12 /usr/sbin+
   577 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3884    900 S   0.0  0.2   0:00.09 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  11768   2404 S   0.0  0.5   0:01.18 /usr/loca+
   916 systuser  20   0   14068     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.09 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:00.50 /usr/sbin+
   924 root      20   0   51508    456    296 S   0.0  0.0   0:00.08 /usr/sbin+
   925 root      20   0  572372    724    160 S   0.0  0.0   0:00.48 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33528   6024 S   0.0  1.4   0:02.72 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.09 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     32      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  224592   5320   4904 S   0.0  0.2   0:01.16 /usr/sbin+
   946 root      20   0  261292   4132    872 S   0.0  0.2   0:01.21 cpsrvd (S+
   954 named     20   0  637932  28068   1540 S   0.0  1.2   0:02.40 /usr/sbin+
   965 root      20   0  385496    312    224 S   0.0  0.0   0:00.22 php-fpm: +
   972 cpanelc+  20   0   10192   3268   2320 S   0.0  0.1   0:03.83 /usr/loca+
   973 root      20   0  397344   1912    580 S   0.0  0.1   0:00.70 php-fpm: +
   975 root      20   0  392856    196     16 S   0.0  0.0   0:00.22 php-fpm: +
   979 root      20   0  436392    220    140 S   0.0  0.0   0:00.29 php-fpm: +
   980 root      20   0 1828116 603936    220 S   0.0 25.0   0:29.78 /usr/loca+
   991 root      20   0  386112    336    136 S   0.0  0.0   0:00.20 php-fpm: +
  1070 dovenull  20   0   46912   1040    564 S   0.0  0.0   0:00.08 dovecot/p+
  1071 dovenull  20   0   47152   1480    988 S   0.0  0.1   0:00.07 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.00 dovecot/a+
  1073 root      20   0   10452    588    420 S   0.0  0.0   0:00.04 dovecot/l+
  1074 dovenull  20   0   46912    976    516 S   0.0  0.0   0:00.08 dovecot/p+
  1075 dovenull  20   0   47360   2056   1464 S   0.0  0.1   0:00.04 dovecot/i+
  1078 root      20   0   24528   1860    492 S   0.0  0.1   0:00.05 dovecot/c+
  1084 dovecot   20   0   13568    636    452 S   0.0  0.0   0:00.00 dovecot/s+
  1112 systuser  20   0  157704   2932    988 S   0.0  0.1   0:00.04 SonarPush+
  1127 root      20   0  248312   2736    716 S   0.0  0.1   0:03.36 /usr/loca+
  1152 dovecot   20   0   41056   1332    952 S   0.0  0.1   0:00.10 dovecot/a+
  1157 wp-tool+  20   0  387556   3520   1656 S   0.0  0.1   0:00.13 /usr/bin/+
  1159 wp-tool+  20   0  410452  28084   1676 S   0.0  1.2   0:03.80 /usr/bin/+
  1210 root      20   0  209268   7428   1496 S   0.0  0.3   0:00.53 tailwatchd
  1211 root      20   0  183900   3232      0 S   0.0  0.1   0:00.59 cpdavd - +
  1213 root      20   0  167452   1200    652 S   0.0  0.0   0:00.15 dnsadmin +
  1667 root      20   0  299272    396    240 S   0.0  0.0   0:00.12 php-fpm: +
  1700 root      38  18  130416   1344    676 S   0.0  0.1   0:00.01 cpanellog+
  1945 root      20   0  267016   4792    532 S   0.0  0.2   0:00.38 /usr/sbin+
  1949 root      20   0   12784    324    212 S   0.0  0.0   0:00.44 /usr/loca+
  1950 root      20   0   12732    248    176 S   0.0  0.0   0:00.37 /usr/loca+
  1951 root      20   0   12804    344    216 S   0.0  0.0   0:00.41 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.09 [kworker]
  5071 root      20   0  181264   6604   1100 S   0.0  0.3   0:03.66 lfd - sle+
  7555 root      20   0  249580  39204   1176 S   0.0  1.6   0:00.40 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 34728 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 38359 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 38388 root      20   0       0      0      0 D   0.0  0.0   0:00.29 [kworker/+
 39447 nobody    20   0  277932  11984   4232 S   0.0  0.5   0:02.09 /usr/sbin+
 39783 nobody    20   0  277736  11868   4252 S   0.0  0.5   0:01.81 /usr/sbin+
 41241 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42708 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46376 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46399 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46476 nobody    20   0  277800  11388   4192 S   0.0  0.5   0:01.22 /usr/sbin+
 46794 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 47369 nobody    20   0  277924  18928   4392 S   0.0  0.8   0:00.86 /usr/sbin+
 47595 nobody    20   0  277932  18928   4340 S   0.0  0.8   0:00.80 /usr/sbin+
 48267 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 48334 root      20   0  108056    360    284 S   0.0  0.0   0:00.00 sleep 4h +
 48815 root      20   0 1341636  10692    604 S   0.0  0.4   0:00.06 /usr/bin/+
 48851 root      20   0 1277312  11740    600 S   0.0  0.5   0:00.06 /usr/bin/+
 50073 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50236 nobody    20   0  277996  18712   4152 S   0.0  0.8   0:00.57 /usr/sbin+
 50704 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51035 nobody    20   0  277564  18184   3984 S   0.0  0.8   0:00.51 /usr/sbin+
 51075 worencom  20   0   38380   3672   2884 S   0.0  0.2   0:00.00 dovecot/i+
 51316 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52768 nobody    20   0  277800  17768   3848 S   0.0  0.7   0:00.17 /usr/sbin+
 53303 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 53534 nobody    20   0  277800  17660   3684 S   0.0  0.7   0:00.13 /usr/sbin+
 53542 nobody    20   0  277808  17948   3692 S   0.0  0.7   0:00.11 /usr/sbin+
 53554 nobody    20   0  277800  17108   3320 S   0.0  0.7   0:00.11 /usr/sbin+
 53556 nobody    20   0  277800  17324   3488 S   0.0  0.7   0:00.10 /usr/sbin+
 53557 nobody    20   0  277932  17668   3872 S   0.0  0.7   0:00.13 /usr/sbin+
 54056 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 54293 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 54294 mailnull  20   0   89496   5668   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 54354 mailnull  20   0   89356   4244   1148 S   0.0  0.2   0:00.00 /usr/sbin+
 54396 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 54398 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 54412 root      20   0   86616  10172   5132 S   0.0  0.4   0:00.03 /usr/sbin+
 54416 cloudsms  20   0   62068   6564   4484 S   0.0  0.3   0:00.01 dovecot/l+
 54417 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 54418 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 54419 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 54420 nigeria   20   0  397064   4272   2152 S   0.0  0.2   0:00.00 php-fpm: +
 54421 mailnull  20   0   87908   9500   3400 S   0.0  0.4   0:00.00 /usr/sbin+
 54422 mailnull  20   0   87916   9500   3396 S   0.0  0.4   0:00.00 /usr/sbin+
 54423 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54425 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54426 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54427 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54428 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54429 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54430 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54431 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54432 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54433 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54434 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54436 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54438 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 54439 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 54440 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 54464 root      20   0  160216   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 54468 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54469 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54470 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54471 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54472 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54473 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54476 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 54477 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 54478 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 54479 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 54480 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54487 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 54488 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 54490 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 54503 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kthreadd]
 54504 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    Nov10   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      34728  0.0  0.0      0     0 ?        D    00:40   0:00  \_ [kworker/0:1]
root      38359  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/1:1]
root      38388  0.0  0.0      0     0 ?        D    00:45   0:00  \_ [kworker/u200:1]
root      41241  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/0:4]
root      42708  0.0  0.0      0     0 ?        S    00:51   0:00  \_ [kworker/1:4]
root      46376  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/1:2]
root      46399  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/0:2]
root      46794  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:2]
root      50073  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      50704  0.0  0.0      0     0 ?        S    01:03   0:00  \_ [kworker/0:0]
root      51316  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/0:3]
root      53303  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:3]
root      54503  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44408  3608 ?        Rs   Nov10   0:07 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40240  6216 ?        Ss   Nov10   0:02 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   272 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852    88 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24896  1432 ?        Ss   Nov10   0:01 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3040 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Rs   Nov10   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 996544  1316 ?        Ssl  Nov10   0:03 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   784 ?        Ssl  Nov10   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   424 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   360 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      54423  0.0  0.0 183048  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54438  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      54439  0.0  0.0 108052   360 ?        S    01:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      54440  0.0  0.0 113288  1516 ?        S    01:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      54505  0.0  0.0 153840  2092 ?        R    01:09   0:00  |               \_ ps auxf
root      54425  0.0  0.0 183048  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54472  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      54427  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54468  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      54428  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54471  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      54429  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54469  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      54430  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54473  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      54431  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54470  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      54432  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54480  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      54433  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54477  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      54481  0.0  0.4 151028 10280 ?        R    01:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      54434  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54476  0.0  0.0  20164   960 ?        Ss   01:09   0:00  |   \_ jailshell (pactpay) [54488] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   54488  0.0  0.0  20164   256 ?        S    01:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   54495  0.0  0.6 476724 16584 ?        R    01:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      54436  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      54479  0.0  0.0  20164   964 ?        Ss   01:09   0:00      \_ jailshell (nigeria) [54487] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   54487  0.0  0.0  20164   260 ?        S    01:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   54494  0.0  0.6 400652 15936 ?        S    01:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     0 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3884 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  54294  0.0  0.2  89496  5668 ?        S    01:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  54354  0.0  0.1  89356  4244 ?        S    01:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.4 114016 11768 ?        Ssl  Nov10   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    24 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    56 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:00 /usr/sbin/sshd -D
root      54056  0.0  0.1 111304  4268 ?        Ss   01:08   0:00  \_ sshd: [accepted]
root      54293  0.0  0.1 111304  4268 ?        Ss   01:08   0:00  \_ sshd: [accepted]
root      54396  0.5  0.2 162436  5836 ?        Ss   01:08   0:00  \_ sshd: root [priv]
sshd      54398  0.0  0.1 115644  2628 ?        S    01:08   0:00      \_ sshd: root [net]
root        924  0.0  0.0  51508   456 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  1040 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  47152  1480 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   588 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912   976 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47360  2056 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1860 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   636 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41056  1332 ?        S    Nov10   0:00  \_ dovecot/auth
worencom  51075  0.0  0.1  38380  3672 ?        S    01:03   0:00  \_ dovecot/imap
cloudsms  54416  0.0  0.2  62068  6564 ?        S    01:09   0:00  \_ dovecot/lmtp
root      54417  0.0  0.1  41052  2724 ?        S    01:09   0:00  \_ dovecot/auth -w
root        925  0.0  0.0 572372   724 ?        Ssl  Nov10   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 33528 ?       SLsl Nov10   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    32 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.2 224592  5320 ?        Ssl  Nov10   0:01 /usr/sbin/rsyslogd -n
root        946  0.0  0.1 261292  4132 ?        Ss   Nov10   0:01 cpsrvd (SSL) - waiting for connections                   
root      54418  0.0  0.0      0     0 ?        Z    01:09   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root      54419  0.0  0.0      0     0 ?        Z    01:09   0:00  \_ [cpsrvd (SSL) - ] <defunct>
named       954  0.0  1.1 637932 28068 ?        Ssl  Nov10   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   312 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10192  3268 ?        Ss   Nov10   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1912 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   54420  0.0  0.1 397064  4272 ?        S    01:09   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   196 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   220 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.6 24.9 1828116 603936 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   336 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2736 ?        Ss   Nov10   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  1.6 249580 39204 ?        S    00:03   0:00  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3520 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 28084 ?        Ss   Nov10   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  7428 ?        Ss   Nov10   0:00 tailwatchd
root       1211  0.0  0.1 183900  3232 ?        Ss   Nov10   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452  1200 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   396 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1344 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  0.9  7.6 1458324 184744 ?      Sl   Nov10   0:41 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4792 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12784   324 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   248 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12804   344 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    39447  0.1  0.4 277932 11984 ?        S    00:46   0:02  \_ /usr/sbin/httpd -k start
nobody    39783  0.1  0.4 277736 11868 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    46476  0.1  0.4 277800 11388 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody    47369  0.1  0.7 277924 18928 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    47595  0.1  0.7 277932 18928 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody    50236  0.1  0.7 277996 18712 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    51035  0.1  0.7 277564 18184 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    52768  0.0  0.7 277800 17768 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    53534  0.1  0.7 277800 17660 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53542  0.1  0.7 277808 17948 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53554  0.1  0.7 277800 17108 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53556  0.1  0.7 277800 17324 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53557  0.1  0.7 277932 17668 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.2 181264  6604 ?        Ss   00:00   0:03 lfd - sleeping
root      48815  0.0  0.4 1341636 10692 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      48851  0.0  0.4 1277312 11740 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
root      54412  0.0  0.4  86616 10172 ?        Ss   01:09   0:00 /usr/sbin/exim -Mc 1vIbwT-00000000E9a-0Bfu
mailnull  54421  0.0  0.3  87908  9500 ?        S    01:09   0:00  \_ /usr/sbin/exim -Mc 1vIbwT-00000000E9a-0Bfu
mailnull  54422  0.0  0.3  87916  9500 ?        S    01:09   0:00  \_ /usr/sbin/exim -Mc 1vIbwT-00000000E9a-0Bfu
## mysql stats
Uptime: 4325  Threads: 3  Questions: 304337  Slow queries: 0  Opens: 2282  Flush tables: 1  Open tables: 1962  Queries per second avg: 70.366
*************************** 1. row ***************************
     Id: 3927
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: freeing items
   Info: SELECT * FROM `25` WHERE `phone`='2347068993992' LIMIT 1
*************************** 2. row ***************************
     Id: 3929
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 3932
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.41 TIME_WAIT
      1 154.53.48.160 TIME_WAIT
      1 185.11.166.192 TIME_WAIT
      1 ::1 TIME_WAIT
      1 36.235.164.248 TIME_WAIT
      1 54.39.89.172 TIME_WAIT
      1 74.7.228.37 TIME_WAIT
      1 92.205.29.137 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 178.23.189.67 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 01:09:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 11 minutes 59 seconds
   Server load: 0.23 0.50 0.54
   Total accesses: 18228 - Total Traffic: 465.3 MB - Total Duration: 9571692
   CPU Usage: u6.36 s2.63 cu259.23 cs205.01 - 11% CPU load
   4.22 requests/sec - 110.3 kB/second - 26.1 kB/request - 525.109 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

K_..__.K.____._.K.W_............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn Child  Slot     Client     Protocol              VHost                                          Request
   0-0  51035 1/86/1085  K 2.32 0    297 559216 36.3 2.28  26.66 66.249.70.36   http/1.1 support.cloudware.ng:443        GET /?c=765867421 HTTP/1.1
   1-0  39783 0/294/883  _ 8.30 1    38  473826 0.0  10.82 25.46 178.23.189.67  http/1.1 callertunes.cloudsms.com.ng:443 GET /simple-php-captcha-master/simple-php-captcha.php?_CAPTCHA&
   2-0  -     0/0/958    . 0.00 9    0   461416 0.0  0.00  22.24 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   3-0  -     0/0/990    . 0.00 3    0   477583 0.0  0.00  22.70 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   4-0  39447 0/340/1068 _ 9.64 0    410 594302 0.0  9.28  28.18 217.174.244.33 http/1.1
   5-0  53534 0/22/964   _ 0.60 1    1   520068 0.0  0.54  23.92 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   6-0  -     0/0/949    . 0.00 4    0   532432 0.0  0.00  25.42 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-0  46476 1/197/939  K 5.86 0    342 474314 34.2 5.29  22.94 66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=2145633625 HTTP/1.1
   8-0  -     0/0/1024   . 0.00 5    0   510659 0.0  0.00  23.88 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-0  53542 0/20/822   _ 0.48 0    59  445397 0.0  0.48  21.45 178.23.189.67  http/1.1 callertunes.cloudsms.com.ng:443 POST /index.php HTTP/1.0
   10-0 47369 0/144/821  _ 4.01 2    2   424596 0.0  3.85  20.69 178.23.189.67  http/1.1 callertunes.cloudsms.com.ng:80  GET / HTTP/1.0
   11-0 47595 0/137/842  _ 3.88 1    1   460922 0.0  3.68  21.99 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   12-0 50236 0/93/483   _ 2.66 2    27  256783 0.0  2.57  12.67 178.23.189.67  http/1.1 callertunes.cloudsms.com.ng:443 GET / HTTP/1.0
   13-0 -     0/0/583    . 0.00 59   0   328627 0.0  0.00  16.38 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 52768 0/33/702   _ 0.76 0    9   389907 0.0  0.76  18.34 34.206.193.60  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/blog/images/assets/css/blog/blog
   15-0 -     0/0/686    . 0.00 7    0   320284 0.0  0.00  15.25 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 53554 1/17/885   K 0.49 4    338 479337 35.0 0.51  22.05 66.249.70.32   http/1.1 support.cloudware.ng:443        GET /?c=1165409587 HTTP/1.1
   17-0 -     0/0/728    . 0.00 82   0   359681 0.0  0.00  21.85 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 53556 0/17/151   W 0.45 0    0   81472  0.0  0.48  4.15  ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   19-0 53557 0/22/301   _ 0.59 0    0   143700 0.0  0.68  8.71  ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   20-0 -     0/0/421    . 0.00 1505 2   215252 0.0  0.00  10.33 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/541    . 0.00 1381 0   316980 0.0  0.00  14.49 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/238    . 0.00 1316 0   121401 0.0  0.00  6.64  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/267    . 0.00 703  0   128759 0.0  0.00  6.71  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/357    . 0.00 237  0   207052 0.0  0.00  9.38  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/45     . 0.00 1359 0   37676  0.0  0.00  1.29  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/51     . 0.00 1380 0   27030  0.0  0.00  1.27  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/144    . 0.00 747  0   78322  0.0  0.00  3.72  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/5      . 0.00 1358 0   4112   0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/63     . 0.00 1314 0   38994  0.0  0.00  1.81  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/2      . 0.00 1499 0   3973   0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/230    . 0.00 663  2   97606  0.0  0.00  4.45  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 723
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...44)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 10862
   total entries replaced since starting: 0
   total entries expired since starting: 10133
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 44 miss
   total removes since starting: 6 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit