403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.03.15.txt
 ## swap threshold exceeded
## server overview
2025-11-11.03.15 load[0] mem[64/59] mysql[3/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1424         165          27         773         746
Swap:          1999        1316         683
 03:15:01 up  3:18,  0 users,  load average: 0.11, 0.24, 0.35
## system overview
top - 03:15:01 up  3:18,  0 users,  load average: 0.11, 0.24, 0.35
Tasks: 201 total,   4 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 71.0 us, 22.6 sy,  0.0 ni,  6.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   169556 free,  1456780 used,   793964 buff/cache
KiB Swap:  2047996 total,   699900 free,  1348096 used.   766168 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 288836   4280 S 120.0 11.9   3:09.98 /usr/sbin+
 42463 nigeria   20   0  400652  15936  10220 S  13.3  0.7   0:00.04 /opt/cpan+
   954 named     20   0  784392  38860   1856 S   6.7  1.6   0:07.49 /usr/sbin+
     1 root      20   0   44408   3476   1528 R   0.0  0.1   0:17.14 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.01 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:14.67 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.46 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.31 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.08 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:02.13 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.89 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.73 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40240   1992   1744 S   0.0  0.1   0:05.35 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    452    320 S   0.0  0.0   0:00.83 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    260    168 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1468    800 S   0.0  0.1   0:02.87 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.26 /usr/sbin+
   517 root      20   0  224148   3080    820 S   0.0  0.1   0:00.20 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1324    600 S   0.0  0.1   0:06.54 /usr/bin/+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1480    712 S   0.0  0.1   0:08.93 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    764    428 S   0.0  0.0   0:01.73 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    428    296 S   0.0  0.0   0:00.34 /usr/sbin+
   577 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3860    836 S   0.0  0.2   0:00.18 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.00 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  12964   2644 S   0.0  0.5   0:02.91 /usr/loca+
   916 systuser  20   0   14068     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.25 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.14 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.16 /usr/sbin+
   925 root      20   0  572372    680    116 S   0.0  0.0   0:01.11 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  34020   5832 S   0.0  1.4   0:06.84 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.26 /usr/bin/+
   930 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  249168   2056   1464 S   0.0  0.1   0:02.80 /usr/sbin+
   946 root      20   0  261824   9212   2384 S   0.0  0.4   0:02.87 cpsrvd (S+
   965 root      20   0  385496    472    376 S   0.0  0.0   0:00.47 php-fpm: +
   972 cpanelc+  20   0   10564   3508   2312 S   0.0  0.1   0:10.51 /usr/loca+
   973 root      20   0  397344   1932    600 S   0.0  0.1   0:01.98 php-fpm: +
   975 root      20   0  392856    564    380 S   0.0  0.0   0:00.41 php-fpm: +
   979 root      20   0  436392    396    308 S   0.0  0.0   0:00.50 php-fpm: +
   980 root      20   0 1828116 478836    532 S   0.0 19.8   0:29.93 /usr/loca+
   991 root      20   0  386112    456    252 S   0.0  0.0   0:00.39 php-fpm: +
  1070 dovenull  20   0   46912   2344   1772 S   0.0  0.1   0:00.20 dovecot/p+
  1071 dovenull  20   0   47648   3088   1824 S   0.0  0.1   0:00.21 dovecot/i+
  1072 dovecot   20   0   10320    360    256 S   0.0  0.0   0:00.03 dovecot/a+
  1073 root      20   0   10452    584    416 S   0.0  0.0   0:00.14 dovecot/l+
  1074 dovenull  20   0   46912   2272   1704 S   0.0  0.1   0:00.18 dovecot/p+
  1075 dovenull  20   0   47668   3008   1836 S   0.0  0.1   0:00.18 dovecot/i+
  1078 root      20   0   24528   1988    428 S   0.0  0.1   0:00.10 dovecot/c+
  1084 dovecot   20   0   13568    552    368 S   0.0  0.0   0:00.03 dovecot/s+
  1112 systuser  20   0  157704   2876    892 S   0.0  0.1   0:00.08 SonarPush+
  1127 root      20   0  248312   2712    696 S   0.0  0.1   0:04.26 /usr/loca+
  1152 dovecot   20   0   41180   1508   1016 S   0.0  0.1   0:00.28 dovecot/a+
  1157 wp-tool+  20   0  387556   3260   1396 S   0.0  0.1   0:00.18 /usr/bin/+
  1159 wp-tool+  20   0  410452  28316   1600 S   0.0  1.2   0:09.98 /usr/bin/+
  1210 root      20   0  209268   9980   2012 S   0.0  0.4   0:01.11 tailwatchd
  1211 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.39 cpdavd - +
  1213 root      20   0  167452   3672   2300 S   0.0  0.2   0:00.30 dnsadmin +
  1667 root      20   0  299272    488    328 S   0.0  0.0   0:00.32 php-fpm: +
  1700 root      38  18  130416   1372    688 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4792    532 S   0.0  0.2   0:00.97 /usr/sbin+
  1949 root      20   0   12824    324    212 S   0.0  0.0   0:01.38 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:01.16 /usr/loca+
  1951 root      20   0   12860    344    216 S   0.0  0.0   0:01.27 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     72     36 S   0.0  0.0   0:00.23 [kworker]
  5071 root      20   0  181800   9080   1100 S   0.0  0.4   0:09.84 lfd - sle+
  7555 root      20   0  269756 105060   2628 S   0.0  4.3   0:03.06 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 15112 nobody    20   0  277932  20736   4880 S   0.0  0.9   0:03.29 /usr/sbin+
 18725 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22178 nobody    20   0  277668  20212   4796 S   0.0  0.8   0:02.54 /usr/sbin+
 27864 nobody    20   0  277800  19924   4788 S   0.0  0.8   0:01.60 /usr/sbin+
 27949 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 28672 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 29155 nobody    20   0  277816  19436   4644 S   0.0  0.8   0:01.84 /usr/sbin+
 30173 nobody    20   0  277548  19584   4592 S   0.0  0.8   0:01.31 /usr/sbin+
 31594 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 31614 root      20   0 1275844  10336    600 S   0.0  0.4   0:00.06 /usr/bin/+
 31652 root      20   0 1277312  11836    600 S   0.0  0.5   0:00.06 /usr/bin/+
 32145 root      20   0  123576    656    428 S   0.0  0.0   0:00.00 /usr/sbin+
 32285 nobody    20   0  277736  19656   4744 S   0.0  0.8   0:01.46 /usr/sbin+
 32524 nobody    20   0  277572  19708   4676 S   0.0  0.8   0:01.50 /usr/sbin+
 32947 nobody    20   0  277960  19172   4404 S   0.0  0.8   0:00.90 /usr/sbin+
 33832 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33932 nobody    20   0  277800  19368   4484 S   0.0  0.8   0:00.98 /usr/sbin+
 34689 root      20   0       0      0      0 R   0.0  0.0   0:00.02 [kworker/+
 34691 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35918 nobody    20   0  277812  19560   4544 S   0.0  0.8   0:00.73 /usr/sbin+
 36537 nobody    20   0  277536  18420   4184 S   0.0  0.8   0:00.89 /usr/sbin+
 38184 nobody    20   0  277592  18852   4412 S   0.0  0.8   0:00.46 /usr/sbin+
 38388 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [kworker/+
 38785 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38791 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38904 nobody    20   0  277800  18432   4080 S   0.0  0.8   0:00.42 /usr/sbin+
 39466 root      30  10  113284   1484   1276 S   0.0  0.1   0:00.00 /bin/bash+
 39472 root      30  10  132964   4548   1012 S   0.0  0.2   0:00.00 ConfigSer+
 39483 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 129+
 39560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39753 root      30  10  113284   1492   1256 S   0.0  0.1   0:00.00 bash /etc+
 39754 root      30  10  113644    980    832 S   0.0  0.0   0:00.00 awk -v pr+
 39808 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 248
 40431 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 41007 nobody    20   0  277564  17992   3956 S   0.0  0.7   0:00.20 /usr/sbin+
 41031 nobody    20   0  277616  17768   3772 S   0.0  0.7   0:00.29 /usr/sbin+
 42222 nigeria   20   0  400152  11380   4060 S   0.0  0.5   0:00.40 php-fpm: +
 42334 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 42335 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 42348 root      20   0  111304   4436   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 42349 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 42376 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 42387 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42388 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42389 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42390 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42391 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42392 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42393 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42394 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42397 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42398 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42399 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42401 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42412 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42414 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42415 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 42416 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 42418 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42420 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42421 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 42422 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42423 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42424 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42425 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 42426 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42431 root      20   0  188208  11084   5148 S   0.0  0.5   0:00.02 /usr/loca+
 42432 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 42440 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 42442 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 42452 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 42459 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 42467 cloudw    20   0  350316  16620  10324 S   0.0  0.7   0:00.01 /opt/cpan+
 42482 root      20   0  160224   2348   1632 S   0.0  0.1   0:00.00 top -n 2 +
 42502 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 48267 root      20   0  183052   1656   1112 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  113284    696    520 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056    304    228 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov10   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      38388  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/u200:1]
root      18725  0.0  0.0      0     0 ?        S    02:45   0:00  \_ [kworker/0:3]
root      27949  0.0  0.0      0     0 ?        S    02:56   0:00  \_ [kworker/1:0]
root      28672  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:3]
root      31594  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      33832  0.0  0.0      0     0 ?        S    03:03   0:00  \_ [kworker/0:0]
root      34689  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/0:2]
root      34691  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/1:2]
root      38785  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/0:1]
root      38791  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:1]
root      39560  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/1:4]
root      40431  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44408  3476 ?        Ss   Nov10   0:17 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40240  1992 ?        Ss   Nov10   0:05 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   452 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   260 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1468 ?        Ss   Nov10   0:02 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3080 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Ss   Nov10   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1480 ?        Ssl  Nov10   0:08 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   764 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   428 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052  1656 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284   696 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      42387  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42425  0.0  0.0 113284  1208 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      42432  0.0  0.0 108052   360 ?        S    03:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      42440  0.0  0.0 113288  1520 ?        S    03:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      42543  0.0  0.0 153840  2088 ?        R    03:15   0:00  |               \_ ps auxf
root      42388  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42426  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      42389  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42422  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      42390  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42414  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      42391  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42423  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      42392  0.0  0.0 183048  2148 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42424  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      42393  0.0  0.0 183048  2148 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42418  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      42394  0.0  0.0 183048  2144 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42420  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      42397  0.0  0.0 183048  2144 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42412  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      42398  0.0  0.0 183048  2144 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42421  0.0  0.0 113284  1212 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      42431  0.0  0.4 188208 11084 ?        S    03:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      42482  0.0  0.0 160224  2348 ?        S    03:15   0:00  |           \_ top -n 2 -b -c
root      42399  0.0  0.0 183048  2144 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42415  0.0  0.0  20164   964 ?        Ss   03:15   0:00  |   \_ jailshell (pactpay) [42442] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42442  0.0  0.0  20164   256 ?        S    03:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42452  0.0  0.7 476724 17484 ?        S    03:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      42401  0.0  0.0 183048  2140 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      42416  0.0  0.0  20164   964 ?        Ss   03:15   0:00      \_ jailshell (nigeria) [42459] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42459  0.0  0.0  20164   260 ?        S    03:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42463  0.0  0.6 400652 15936 ?        R    03:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    24 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3860 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.5 114016 12964 ?        Ssl  Nov10   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    32 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    68 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root      42334  0.0  0.2 157100  5072 ?        Ss   03:14   0:00  \_ sshd: unknown [priv]
sshd      42335  0.0  0.1 115644  2624 ?        S    03:14   0:00  |   \_ sshd: unknown [net]
root      42348  0.0  0.1 111304  4436 ?        Ss   03:14   0:00  \_ sshd: [accepted]
sshd      42349  0.0  0.1 115644  2624 ?        S    03:14   0:00      \_ sshd: [net]
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  2344 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.1  47648  3088 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   360 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   584 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912  2272 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.1  47668  3008 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1988 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   552 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1508 ?        S    Nov10   0:00  \_ dovecot/auth
root        925  0.0  0.0 572372   680 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.4 5654048 34020 ?       SLsl Nov10   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    72 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.0 249168  2056 ?        Ssl  Nov10   0:02 /usr/sbin/rsyslogd -n
root        946  0.0  0.3 261824  9212 ?        Ss   Nov10   0:02 cpsrvd (SSL) - waiting for connections                   
root      42376  0.0  0.0      0     0 ?        Z    03:14   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.6 784392 38860 ?        Ssl  Nov10   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   472 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3508 ?        Rs   Nov10   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1932 ?        Ss   Nov10   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   42222  2.0  0.4 400152 11380 ?        S    03:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   564 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   396 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.2 19.7 1828116 478836 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   456 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2876 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2712 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  4.3 269756 105060 ?       S    00:03   0:03  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3260 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 28316 ?        Ss   Nov10   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.4 209268  9980 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  0.2 183900  6692 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.1 167452  3672 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   488 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1372 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.5 11.9 1462284 288836 ?      Sl   Nov10   3:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4792 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12824   324 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12860   344 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    15112  0.1  0.8 277932 20736 ?        S    02:40   0:03  \_ /usr/sbin/httpd -k start
nobody    22178  0.1  0.8 277668 20212 ?        S    02:48   0:02  \_ /usr/sbin/httpd -k start
nobody    27864  0.1  0.8 277800 19924 ?        S    02:55   0:01  \_ /usr/sbin/httpd -k start
nobody    29155  0.1  0.8 277816 19436 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    30173  0.1  0.8 277548 19584 ?        S    02:59   0:01  \_ /usr/sbin/httpd -k start
nobody    32285  0.1  0.8 277736 19656 ?        S    03:01   0:01  \_ /usr/sbin/httpd -k start
nobody    32524  0.1  0.8 277572 19708 ?        S    03:01   0:01  \_ /usr/sbin/httpd -k start
nobody    32947  0.1  0.7 277960 19172 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    33932  0.1  0.8 277800 19368 ?        S    03:03   0:00  \_ /usr/sbin/httpd -k start
cloudw    42467  0.0  0.6 350316 16620 ?        S    03:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    35918  0.1  0.8 277812 19560 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    36537  0.1  0.7 277536 18420 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    38184  0.1  0.7 277592 18852 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    38904  0.1  0.7 277800 18432 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    41007  0.1  0.7 277564 17992 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    41031  0.2  0.7 277616 17768 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    72 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.3 181800  9080 ?        Ss   00:00   0:09 lfd - sleeping
root      31614  0.0  0.4 1275844 10336 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      31652  0.0  0.4 1277312 11836 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      32145  0.0  0.0 123576   656 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      39466  0.0  0.0 113284  1484 ?        SN   03:11   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      39753  0.0  0.0 113284  1492 ?        SN   03:11   0:00      \_ bash /etc/cron.daily/maldet
root      39808  0.0  0.0 108056   360 ?        SN   03:11   0:00      |   \_ sleep 248
root      39754  0.0  0.0 113644   980 ?        SN   03:11   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      39472  0.0  0.1 132964  4548 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056   356 ?        SN   03:11   0:00  \_ sleep 12937
## mysql stats
Uptime: 11885  Threads: 3  Questions: 1272353  Slow queries: 0  Opens: 5717  Flush tables: 1  Open tables: 2000  Queries per second avg: 107.055
*************************** 1. row ***************************
     Id: 16049
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 16051
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 16056
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.130.13 TIME_WAIT
      1 114.119.131.163 TIME_WAIT
      1 114.119.136.120 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 166.0.179.178 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.153.123.3 TIME_WAIT
      1 45.138.251.145 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.0.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 03:15:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 17 minutes 59 seconds
   Server load: 0.11 0.24 0.35
   Total accesses: 57914 - Total Traffic: 1.5 GB - Total Duration: 30692759
   CPU Usage: u13.25 s6.13 cu778.63 cs593.3 - 11.7% CPU load
   4.88 requests/sec - 134.1 kB/second - 27.5 kB/request - 529.971 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

.K._KK.KKK_KKKW.KK...K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol          VHost                                       Request
   0-0  -     0/0/3076    . 0.00  69   0   1521660 0.0   0.00  75.78 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   1-0  15112 1/668/2995  K 15.62 1    341 1516386 33.5  14.02 79.70 66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=1860712085 HTTP/1.1
   2-0  -     0/0/3167    . 0.00  56   0   1537097 0.0   0.00  72.15 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   3-0  29155 0/340/2885  _ 8.99  0    0   1476430 0.0   7.60  67.65 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   4-0  35918 1/123/2951  K 3.16  2    351 2280433 34.5  3.41  96.17 66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=129729953 HTTP/1.1
   5-0  38904 2/77/3007   K 1.79  3    391 1587058 68.9  1.94  73.14 66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=490537707 HTTP/1.1
   6-0  -     0/0/2833    . 0.00  54   0   1561616 0.0   0.00  85.98 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   7-0  32947 3/215/3083  K 3.58  0    400 1417654 97.1  3.61  79.86 66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=1842549829 HTTP/1.1
   8-0  22178 1/477/2842  K 11.89 3    296 1492129 35.0  13.48 86.27 66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=2068881033 HTTP/1.1
   9-0  32285 1/278/2697  K 6.32  2    339 1428862 34.9  6.30  64.59 66.249.70.37    http/1.1 support.cloudware.ng:443 GET /?c=1123343350 HTTP/1.1
   10-0 36537 0/145/2845  _ 4.04  0    0   1390823 0.0   3.90  81.18 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   11-0 32524 2/327/2853  K 7.14  1    390 1496769 66.4  6.40  86.96 66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=3736857708 HTTP/1.1
   12-0 41007 1/35/2243   K 0.86  2    360 1235617 34.8  0.89  57.93 66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=4192138084 HTTP/1.1
   13-0 27864 1/302/1899  K 6.87  4    203 911844  11.1  6.90  45.51 108.165.249.167 http/1.1 nigeriadecide.org:443    GET /blog/final-list-of-presidential-candidates-for-2015-nigeri
   14-0 41031 0/46/2111   W 1.38  0    0   1188457 0.0   1.34  51.64 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   15-0 -     0/0/1545    . 0.00  333  0   775369  0.0   0.00  36.05 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 30173 36/285/2485 K 5.43  4    6   1332075 186.1 5.25  61.02 144.76.19.157   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Imo&lga=Mbaitoli%20%28nwao
   17-0 38184 1/82/2290   K 1.95  1    386 1196011 34.1  1.97  61.39 66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=976369403 HTTP/1.1
   18-0 -     0/0/1693    . 0.00  340  0   834430  0.0   0.00  42.29 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   19-0 -     0/0/1396    . 0.00  57   0   679428  0.0   0.00  32.67 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   20-0 -     0/0/917     . 0.00  650  0   447776  0.0   0.00  21.21 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 33932 3/184/987   K 4.15  0    433 550231  95.4  4.18  23.29 66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=1467790807 HTTP/1.1
   22-0 -     0/0/394     . 0.00  1130 0   194426  0.0   0.00  10.27 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/427     . 0.00  2009 0   218307  0.0   0.00  10.92 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/493     . 0.00  5568 0   234804  0.0   0.00  11.14 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/201     . 0.00  5647 0   83585   0.0   0.00  3.46  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/132     . 0.00  5641 0   63977   0.0   0.00  3.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/725     . 0.00  3867 0   427451  0.0   0.00  20.36 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/117     . 0.00  5430 0   78945   0.0   0.00  4.86  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/496     . 0.00  4272 0   299300  0.0   0.00  13.92 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/67      . 0.00  5431 0   36690   0.0   0.00  1.77  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/239     . 0.00  5608 0   99496   0.0   0.00  4.64  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/4       . 0.00  5644 0   178     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/2       . 0.00  5645 0   3       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/3       . 0.00  5646 0   4       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/3       . 0.00  5640 0   6       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/13      . 0.00  5601 0   5697    0.0   0.00  0.29  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00  5639 0   236     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/281     . 0.00  4860 0   158846  0.0   0.00  19.22 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/4       . 0.00  5642 0   264     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/725     . 0.00  3227 0   450086  0.0   0.00  35.37 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00  5632 0   1003    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/63      . 0.00  5410 0   33019   0.0   0.00  1.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/159     . 0.00  5038 0   93527   0.0   0.00  19.16 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/9       . 0.00  5627 0   4423    0.0   0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/18      . 0.00  5571 0   7447    0.0   0.00  0.41  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/13      . 0.00  5597 0   5454    0.0   0.00  0.65  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/513     . 0.00  4193 0   335229  0.0   0.00  11.08 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/6       . 0.00  5634 0   2176    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 776
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 1...41)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 31950
   total entries replaced since starting: 0
   total entries expired since starting: 31151
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 150 miss
   total removes since starting: 23 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit