403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-12.02.57.txt
 ## swap threshold exceeded
## server overview
2025-11-12.02.57 load[0] mem[55/68] mysql[1/8] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1171         314          34         878         972
Swap:          1999        1457         542
 02:57:01 up  2:01,  0 users,  load average: 0.23, 0.54, 0.69
## system overview
top - 02:57:01 up  2:01,  0 users,  load average: 0.23, 0.54, 0.69
Tasks: 199 total,   6 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 43.8 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   309936 free,  1211120 used,   899244 buff/cache
KiB Swap:  2047996 total,   555260 free,  1492736 used.   983792 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1763 mysql     20   0 1462620 229460   3324 S  33.3  9.5   1:45.48 /usr/sbin+
 46808 nigeria   20   0  400652  15936  10220 S  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44404   3560   1528 S   6.7  0.1   0:14.00 /usr/lib/+
   360 root      20   0   40244   3136   2828 R   6.7  0.1   0:04.56 /usr/lib/+
   948 root      20   0  240976   3192   2552 S   6.7  0.1   0:02.19 /usr/sbin+
 45522 nobody    20   0  277624  34900   3668 S   6.7  1.4   0:00.16 /usr/sbin+
 46810 pactpay   20   0  476460  15964  10408 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.85 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.57 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:10.13 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.16 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.81 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   253 root       0 -20       0      0      0 S   0.0  0.0   0:01.04 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:00.84 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.51 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   391 root      20   0   45352    172    152 S   0.0  0.0   0:00.34 /usr/lib/+
   413 root      16  -4   55532    496    368 S   0.0  0.0   0:00.78 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   522 root      20   0  152780    164    120 S   0.0  0.0   0:00.00 /usr/sbin+
   526 rpc       20   0   69256    156     92 S   0.0  0.0   0:00.01 /sbin/rpc+
   527 polkitd   20   0  612240   2904    500 R   0.0  0.1   0:01.06 /usr/lib/+
   528 root      20   0   24896   1452    832 D   0.0  0.1   0:01.80 /usr/lib/+
   529 root      20   0   52852    408    312 S   0.0  0.0   0:00.01 /usr/sbin+
   531 root      20   0  224420   7116   1740 S   0.0  0.3   0:00.17 queueproc+
   535 root      20   0   21540    384    300 S   0.0  0.0   0:00.16 /usr/sbin+
   536 dbus      20   0   58728   1388    644 S   0.0  0.1   0:04.10 /usr/bin/+
   538 nscd      20   0  926904   1276    652 S   0.0  0.1   0:09.12 /usr/sbin+
   545 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   546 root      20   0    4388     84     80 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   576 root      20   0  124476    588    432 S   0.0  0.0   0:00.20 /usr/sbin+
   577 root      20   0   24208    120     96 S   0.0  0.0   0:00.00 /usr/sbin+
   595 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   629 mailnull  20   0   89068   3696    668 S   0.0  0.2   0:00.16 /usr/sbin+
   683 root       0 -20       0      0      0 S   0.0  0.0   0:01.60 [loop0]
   734 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   735 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   929 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   930 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.00 /usr/loca+
   933 root      20   0  392856    608    432 S   0.0  0.0   0:00.24 php-fpm: +
   936 root      20   0 1763048 122208    624 S   0.0  5.0   0:13.61 /usr/loca+
   938 named     20   0 1185864  35816   1932 S   0.0  1.5   0:06.61 /usr/sbin+
   940 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 systuser  20   0   13012     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   950 root      20   0  572372    908    336 S   0.0  0.0   0:00.71 /usr/bin/+
   951 root      20   0  153404    348    264 S   0.0  0.0   0:00.15 pure-ftpd+
   952 systuser  20   0  114016  13336   2736 S   0.0  0.6   0:01.77 /usr/loca+
   953 root      20   0   51656   1120    776 S   0.0  0.0   0:00.11 /usr/sbin+
   956 root      20   0  261160   7072   1980 S   0.0  0.3   0:02.40 cpsrvd (S+
   957 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.16 /usr/bin/+
   959 cpanelc+  20   0   10532   3668   2360 S   0.0  0.2   0:07.09 /usr/loca+
   962 root      20   0  385496    628    420 S   0.0  0.0   0:00.23 php-fpm: +
   986 root      20   0  397344   3108    676 S   0.0  0.1   0:01.43 php-fpm: +
   991 root      20   0  436392   1044    844 S   0.0  0.0   0:00.31 php-fpm: +
   997 root      20   0  386112    704    496 S   0.0  0.0   0:00.25 php-fpm: +
   998 telegraf  20   0 5654048  37824   5856 S   0.0  1.6   0:03.98 /usr/loca+
   999 root      20   0  111304    456    356 S   0.0  0.0   0:01.03 /usr/sbin+
  1006 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.00 /usr/loca+
  1096 dovecot   20   0   10320    472    356 S   0.0  0.0   0:00.02 dovecot/a+
  1113 root      20   0  108296     84     80 S   0.0  0.0   0:00.00 /sbin/age+
  1137 wp-tool+  20   0  387528  13088   1464 S   0.0  0.5   0:00.14 /usr/bin/+
  1138 wp-tool+  20   0  410452  35540   1520 S   0.0  1.5   0:06.21 /usr/bin/+
  1142 root      20   0  248024 116980    904 S   0.0  4.8   0:03.72 /usr/loca+
  1168 systuser  20   0  157704   2836    816 S   0.0  0.1   0:00.03 SonarPush+
  1213 root      20   0  183900   5696   2468 S   0.0  0.2   0:00.41 cpdavd - +
  1214 root      20   0  167452   3844   2468 S   0.0  0.2   0:00.19 dnsadmin +
  1217 root      20   0  209492  12292   2516 S   0.0  0.5   0:01.37 tailwatchd
  1635 root      20   0  299272    692    316 S   0.0  0.0   0:00.20 php-fpm: +
  1666 root      38  18  130416   1436    708 S   0.0  0.1   0:00.02 cpanellog+
  1981 root      20   0  267128  30348   5052 S   0.0  1.3   0:02.52 /usr/sbin+
  2043 root      20   0  182148   9456   1140 S   0.0  0.4   0:07.23 lfd - sle+
  6254 root      20   0  183048    600    112 S   0.0  0.0   0:00.00 /usr/sbin+
  6286 root      20   0  113284    176      0 S   0.0  0.0   0:00.00 /bin/sh -+
  6322 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 3h +
  6378 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  6384 oysipao+  20   0    3152    528     40 S   0.0  0.0   0:00.13 [kworker]
  8825 root      20   0  261212 125756   1152 S   0.0  5.2   0:00.81 spamd chi+
  8827 root      20   0  248024 116396    352 S   0.0  4.8   0:00.00 spamd chi+
 13580 root      20   0       0      0      0 D   0.0  0.0   0:00.05 [kworker/+
 25128 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 25149 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 28482 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 31992 nobody    20   0  277660  35464   4188 S   0.0  1.5   0:00.84 /usr/sbin+
 37909 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39597 dovenull  20   0   46916   3152   2200 S   0.0  0.1   0:00.05 dovecot/p+
 39598 dovenull  20   0   47256   4180   2812 S   0.0  0.2   0:00.07 dovecot/i+
 39599 root      20   0   10452   1180    812 S   0.0  0.0   0:00.05 dovecot/l+
 39600 dovenull  20   0   46772   2908   2060 S   0.0  0.1   0:00.06 dovecot/p+
 39601 dovenull  20   0   47192   4096   2796 S   0.0  0.2   0:00.08 dovecot/i+
 39602 root      20   0   24396  11888   1056 S   0.0  0.5   0:00.05 dovecot/c+
 39603 dovecot   20   0   13568   1164    896 S   0.0  0.0   0:00.00 dovecot/s+
 39604 dovecot   20   0   41056   2276   1520 S   0.0  0.1   0:00.10 dovecot/a+
 39605 root      20   0   12780   1388   1180 S   0.0  0.1   0:00.94 /usr/loca+
 39606 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.82 /usr/loca+
 39607 root      20   0   12788   1396   1180 S   0.0  0.1   0:00.87 /usr/loca+
 39608 root      20   0   53268  11480   2092 S   0.0  0.5   0:00.05 /usr/loca+
 39977 nobody    20   0  277664  35344   4068 S   0.0  1.5   0:00.47 /usr/sbin+
 42678 nobody    20   0  277604  34864   3656 S   0.0  1.4   0:00.40 /usr/sbin+
 42715 nobody    20   0  277660  35176   3908 S   0.0  1.5   0:00.30 /usr/sbin+
 43105 nobody    20   0  277624  34832   3604 S   0.0  1.4   0:00.37 /usr/sbin+
 43379 nobody    20   0  277636  34520   3272 S   0.0  1.4   0:00.30 /usr/sbin+
 43396 nobody    20   0  277624  35024   3792 S   0.0  1.4   0:00.24 /usr/sbin+
 44229 nobody    20   0  277624  34944   3660 S   0.0  1.4   0:00.23 /usr/sbin+
 44230 nobody    20   0  277624  35016   3788 S   0.0  1.4   0:00.17 /usr/sbin+
 44232 nobody    20   0  277624  34592   3364 S   0.0  1.4   0:00.27 /usr/sbin+
 44303 nobody    20   0  277624  34984   3752 S   0.0  1.4   0:00.18 /usr/sbin+
 44327 nobody    20   0  277624  34912   3684 S   0.0  1.4   0:00.24 /usr/sbin+
 44386 nobody    20   0  277624  34964   3736 S   0.0  1.4   0:00.21 /usr/sbin+
 44589 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45470 nobody    20   0  277612  34756   3540 S   0.0  1.4   0:00.12 /usr/sbin+
 45471 nobody    20   0  277660  34580   3316 S   0.0  1.4   0:00.10 /usr/sbin+
 45487 nobody    20   0  277624  34984   3756 S   0.0  1.4   0:00.09 /usr/sbin+
 45526 nobody    20   0  277624  34684   3456 S   0.0  1.4   0:00.08 /usr/sbin+
 45528 nobody    20   0  277624  34900   3668 S   0.0  1.4   0:00.10 /usr/sbin+
 45596 nobody    20   0  277668  34940   3664 S   0.0  1.4   0:00.12 /usr/sbin+
 45624 nobody    20   0  277624  34452   3220 S   0.0  1.4   0:00.14 /usr/sbin+
 45625 nobody    20   0  277624  34900   3672 S   0.0  1.4   0:00.09 /usr/sbin+
 45824 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 45944 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 45960 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 46675 nigeria   20   0  397064   5372   2188 S   0.0  0.2   0:00.00 php-fpm: +
 46743 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 46748 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 46749 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46750 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46751 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46752 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46753 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46754 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46755 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46756 root      20   0  183040   2208   1632 S   0.0  0.1   0:00.00 /usr/sbin+
 46757 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46758 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46759 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46760 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46762 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 46763 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 46764 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 46786 root      20   0  160244   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 46787 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46788 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46789 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46790 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 46791 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46792 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 46793 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46795 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46796 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46797 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 46799 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 46805 nigeria   20   0   20164    280      0 S   0.0  0.0   0:00.00 jailshell+
 46806 pactpay   20   0   20164    276      0 S   0.0  0.0   0:00.00 jailshell+
 46813 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 46818 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kthreadd]
 46819 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 75198 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 75815 worencom  20   0   38380   2420   1596 S   0.0  0.1   0:00.01 dovecot/i+
 83076 root      20   0 1341636  10696    600 S   0.0  0.4   0:00.08 /usr/bin/+
 83114 root      20   0 1277312  11732    596 S   0.0  0.5   0:00.07 /usr/bin/+
 88719 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
100160 root      20   0       0      0      0 D   0.0  0.0   0:00.11 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:55   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:55   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:55   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:55   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:55   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:55   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [scsi_tmf_1]
root        252  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ttm_swap]
root        253  0.0  0.0      0     0 ?        S<   00:55   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [xprtiod]
root        569  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kvm-irqfd-clean]
root        683  0.0  0.0      0     0 ?        S<   00:55   0:01  \_ [loop0]
root        734  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [jbd2/loop0-8]
root        735  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ext4-rsv-conver]
root      75198  0.0  0.0      0     0 ?        R    01:54   0:00  \_ [kworker/0:2]
root      88719  0.0  0.0      0     0 ?        S    02:05   0:00  \_ [kworker/1:0]
root     100160  0.0  0.0      0     0 ?        D    02:15   0:00  \_ [kworker/u200:2]
root      46819  0.0  0.0      0     0 ?        R    02:57   0:00  |   \_ [kworker/u200:2]
root      13580  0.0  0.0      0     0 ?        D    02:28   0:00  \_ [kworker/1:5]
root      25128  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:0]
root      25149  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/u200:1]
root      28482  0.0  0.0      0     0 ?        D    02:42   0:00  \_ [kworker/1:2]
root      37909  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:1]
root      44589  0.0  0.0      0     0 ?        S    02:55   0:00  \_ [kworker/0:3]
root      46818  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44404  3560 ?        Ss   00:55   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  3140 ?        Ss   00:55   0:04 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45352   172 ?        Ss   00:55   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   496 ?        S<sl 00:55   0:00 /sbin/auditd
root        522  0.0  0.0 152780   164 ?        Ss   00:55   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
rpc         526  0.0  0.0  69256   156 ?        Ss   00:55   0:00 /sbin/rpcbind -w
polkitd     527  0.0  0.1 612240  2904 ?        Ssl  00:55   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        528  0.0  0.0  24896  1452 ?        Ds   00:55   0:01 /usr/lib/systemd/systemd-logind
root        529  0.0  0.0  52852   408 ?        Ss   00:55   0:00 /usr/sbin/smartd -n -q never
root        531  0.0  0.2 224420  7116 ?        Ss   00:55   0:00 queueprocd - waiting up to 60s to process a task
root        535  0.0  0.0  21540   384 ?        Ss   00:55   0:00 /usr/sbin/irqbalance --foreground
dbus        536  0.0  0.0  58728  1388 ?        Ss   00:55   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        538  0.1  0.0 926904  1276 ?        Ssl  00:55   0:09 /usr/sbin/nscd
root        545  0.0  0.0 195208     0 ?        Ssl  00:55   0:00 /usr/sbin/gssproxy -D
root        546  0.0  0.0   4388    84 ?        Ss   00:55   0:00 /usr/sbin/acpid
root        576  0.0  0.0 124476   588 ?        Ss   00:55   0:00 /usr/sbin/crond -n
root       6254  0.0  0.0 183048   600 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6286  0.0  0.0 113284   176 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6322  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 3h 5m
root      46748  0.0  0.0 183044  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46762  0.0  0.0 113284  1208 ?        Ss   02:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      46763  0.0  0.0 108052   360 ?        S    02:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      46764  0.0  0.0 113288  1516 ?        S    02:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      46820  0.0  0.0 153840  2092 ?        R    02:57   0:00  |               \_ ps auxf
root      46749  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46788  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      46750  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46789  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      46751  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46787  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      46752  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46796  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      46753  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46795  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      46754  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46790  0.0  0.0  20164   812 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      46755  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46793  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      46756  0.0  0.0 183040  2208 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46757  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46791  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      46758  0.0  0.0 183044  2152 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46797  0.0  0.0  20164   964 ?        Ss   02:57   0:00  |   \_ jailshell (pactpay) [46806] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46806  0.0  0.0  20164   276 ?        S    02:57   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46810  0.0  0.6 476460 15964 ?        Sl   02:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      46759  0.0  0.0 183044  2152 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46799  0.0  0.0  20164   968 ?        Rs   02:57   0:00  |   \_ jailshell (robocallscloudsm) [46813]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  46813  0.0  0.0      0     0 ?        Z    02:57   0:00  |       \_ [jailshell] <defunct>
root      46760  0.0  0.0 183044  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      46792  0.0  0.0  20164   968 ?        Ss   02:57   0:00      \_ jailshell (nigeria) [46805] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46805  0.0  0.0  20164   280 ?        S    02:57   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46808  0.0  0.6 400652 15936 ?        S    02:57   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   120 ?        Ss   00:55   0:00 /usr/sbin/atd -f
root        595  0.0  0.0 114704    84 ttyS0    Ss+  00:55   0:00 /bin/bash
mailnull    629  0.0  0.1  89068  3696 ?        Ss   00:55   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        929  0.0  0.0 445028     0 ?        Ss   00:55   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    930  0.0  0.0 113932  2096 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 392856   608 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        936  0.1  5.0 1763048 122208 ?      Ssl  00:55   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       938  0.0  1.4 1185864 35816 ?       Ssl  00:55   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    940  0.0  0.0  10388    52 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    945  0.0  0.0  13012    44 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        948  0.0  0.1 240976  3192 ?        Ssl  00:55   0:02 /usr/sbin/rsyslogd -n
root        950  0.0  0.0 572372   908 ?        Ssl  00:55   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        951  0.0  0.0 153404   348 ?        Ss   00:55   0:00 pure-ftpd (SERVER)
systuser    952  0.0  0.5 114016 13336 ?        Ssl  00:55   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        953  0.0  0.0  51656  1120 ?        Ss   00:55   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1096  0.0  0.0  10320   472 ?        S    00:55   0:00  \_ dovecot/anvil
dovenull  39597  0.0  0.1  46916  3152 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  39598  0.0  0.1  47256  4180 ?        S    01:26   0:00  \_ dovecot/imap-login
root      39599  0.0  0.0  10452  1180 ?        S    01:26   0:00  \_ dovecot/log
dovenull  39600  0.0  0.1  46772  2908 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  39601  0.0  0.1  47192  4096 ?        S    01:26   0:00  \_ dovecot/imap-login
root      39602  0.0  0.4  24396 11888 ?        S    01:26   0:00  \_ dovecot/config
dovecot   39603  0.0  0.0  13568  1164 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   39604  0.0  0.0  41056  2276 ?        S    01:26   0:00  \_ dovecot/auth
worencom  75815  0.0  0.0  38380  2420 ?        S    01:54   0:00  \_ dovecot/imap
root        956  0.0  0.2 261160  7072 ?        Ss   00:55   0:02 cpsrvd (SSL) - waiting for connections                   
root      46743  0.0  0.0      0     0 ?        Z    02:56   0:00  \_ [cpaneld - servi] <defunct>
memcach+    957  0.0  0.0 342400     0 ?        Ssl  00:55   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    959  0.0  0.1  10532  3668 ?        Ss   00:55   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        962  0.0  0.0 385496   628 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.1 397344  3108 ?        Ss   00:55   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   46675  0.0  0.2 397064  5372 ?        S    02:56   0:00  \_ php-fpm: pool nigeriadecide_org
root        991  0.0  0.0 436392  1044 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        997  0.0  0.0 386112   704 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    998  0.0  1.5 5654048 37824 ?       SLsl 00:55   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        999  0.0  0.0 111304   456 ?        Ss   00:55   0:01 /usr/sbin/sshd -D
root      45824  0.0  0.1 111304  4264 ?        Ss   02:56   0:00  \_ sshd: [accepted]
root      45944  0.0  0.1 111304  4264 ?        Ss   02:56   0:00  \_ sshd: [accepted]
sshd      45960  0.0  0.1 115644  2628 ?        S    02:56   0:00      \_ sshd: [net]
systuser   1006  0.0  0.0 111864    64 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1113  0.0  0.0 108296    84 tty1     Ss+  00:55   0:00 /sbin/agetty --noclear tty1 linux
wp-tool+   1137  0.0  0.5 387528 13088 ?        Ss   00:55   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1138  0.0  1.4 410452 35540 ?        Ss   00:55   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1142  0.0  4.8 248024 116980 ?       Ss   00:55   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8825  0.0  5.1 261212 125756 ?       S    01:01   0:00  \_ spamd child
root       8827  0.0  4.8 248024 116396 ?       S    01:01   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2836 ?        S    00:55   0:00 SonarPush 0.6.12 [sleeping]
root       1213  0.0  0.2 183900  5696 ?        Ss   00:55   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1214  0.0  0.1 167452  3844 ?        Ss   00:55   0:00 dnsadmin - dormant mode
root       1217  0.0  0.5 209492 12292 ?        Ss   00:55   0:01 tailwatchd
root       1635  0.0  0.0 299272   692 ?        Ss   00:55   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1666  0.0  0.0 130416  1436 ?        SN   00:55   0:00 cpanellogd - sleeping for logs
mysql      1763  1.4  9.4 1462620 229460 ?      Sl   00:55   1:45 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1981  0.0  1.2 267128 30348 ?        Ss   00:55   0:02 /usr/sbin/httpd -k start
root      39605  0.0  0.0  12780  1388 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      39606  0.0  0.0  12732  1364 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      39607  0.0  0.0  12788  1396 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      39608  0.0  0.4  53268 11480 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31992  0.1  1.4 277660 35464 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    39977  0.1  1.4 277664 35344 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    42678  0.1  1.4 277604 34864 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    42715  0.1  1.4 277660 35176 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    43105  0.2  1.4 277624 34832 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    43379  0.1  1.4 277636 34520 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    43396  0.1  1.4 277624 35024 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44229  0.1  1.4 277624 34944 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44230  0.1  1.4 277624 35016 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44232  0.2  1.4 277624 34592 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44303  0.1  1.4 277624 34984 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44327  0.1  1.4 277624 34912 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44386  0.1  1.4 277624 34964 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    45470  0.1  1.4 277612 34756 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45471  0.1  1.4 277660 34580 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45487  0.1  1.4 277624 34984 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45522  0.2  1.4 277624 34900 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45526  0.1  1.4 277624 34684 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45528  0.1  1.4 277624 34900 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45596  0.1  1.4 277668 34940 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45624  0.2  1.4 277624 34452 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    45625  0.1  1.4 277624 34900 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
root       2043  0.0  0.3 182148  9456 ?        Ss   00:55   0:07 lfd - sleeping
oysipao+   6378  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   6384  0.0  0.0   3152   528 ?        S    01:00   0:00  \_ [kworker]
root      83076  0.0  0.4 1341636 10696 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      83114  0.0  0.4 1277312 11732 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 7285  Threads: 3  Questions: 607749  Slow queries: 0  Opens: 3395  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.424
*************************** 1. row ***************************
     Id: 9186
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `24` WHERE `phone`='2348179092255' LIMIT 1
*************************** 2. row ***************************
     Id: 9188
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 9191
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.220.60 TIME_WAIT
      1 14.246.1.76 TIME_WAIT
      1 148.113.130.134 TIME_WAIT
      1 157.55.39.7 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 185.244.8.153 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.165.69.68 TIME_WAIT
      1 43.166.136.202 TIME_WAIT
      1 45.38.156.248 TIME_WAIT
      1 51.222.168.203 TIME_WAIT
      1 66.249.64.130 TIME_WAIT
      1 66.249.64.15 TIME_WAIT
      1 66.249.70.172 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 87.250.224.31 TIME_WAIT
      1 95.108.213.162 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 12-Nov-2025 02:57:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 00:55:41 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 2 hours 1 minute 19 seconds
   Server load: 0.23 0.54 0.69
   Total accesses: 59281 - Total Traffic: 1.7 GB - Total Duration: 34573016
   CPU Usage: u3.92 s3.82 cu901.97 cs684.78 - 21.9% CPU load
   8.14 requests/sec - 242.2 kB/second - 29.7 kB/request - 583.206 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

_.KK....K_K_..K_.RK..W..KKK...K_.K..KK__........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-1  42678 0/67/1643  _ 1.79 1    1   947566  0.0   1.90  43.07 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   1-1  -     0/0/1766   . 0.00 51   0   972923  0.0   0.00  45.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-1  45470 1/19/1509  K 0.51 4    24  902913  11.3  0.53  42.36 52.167.144.174 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/SendToAll/recharge/help_center.php HT
   3-1  45471 1/16/1635  K 0.45 3    347 967881  35.9  0.51  50.77 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=1928250850 HTTP/1.1
   4-1  -     0/0/1431   . 0.00 35   0   853483  0.0   0.00  41.41 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-1  -     0/0/1365   . 0.00 41   0   773783  0.0   0.00  37.98 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-1  -     0/0/1480   . 0.00 17   0   851828  0.0   0.00  44.87 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-1  -     0/0/1643   . 0.00 10   0   908787  0.0   0.00  66.18 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-1  45487 1/15/1654  K 0.37 0    268 959623  34.3  0.42  43.07 66.249.70.174  http/1.1 support.cloudware.ng:443   GET /?c=3491118209 HTTP/1.1
   9-1  42715 0/49/1471  _ 1.26 1    338 875003  0.0   1.34  44.57 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3621035646 HTTP/1.1
   10-1 39977 1/83/1474  K 1.93 0    295 861895  36.5  2.16  43.00 66.249.64.109  http/1.1 support.cloudware.ng:443   GET /?c=2482277074 HTTP/1.1
   11-1 43105 0/61/1471  _ 1.63 1    393 888386  0.0   1.75  42.71 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=818076701 HTTP/1.1
   12-1 -     0/0/1453   . 0.00 42   0   787736  0.0   0.00  39.43 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 -     0/0/1513   . 0.00 36   0   890349  0.0   0.00  46.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1 45522 1/24/1397  K 0.69 0    306 805013  35.9  0.70  40.22 66.249.64.165  http/1.1 support.cloudware.ng:443   GET /?c=1430574362 HTTP/1.1
   15-1 44229 0/39/1370  _ 1.03 1    1   824012  0.0   1.06  39.71 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   16-1 -     0/0/1590   . 0.00 43   0   888223  0.0   0.00  43.47 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-1 31992 0/152/1424 R 4.12 2    346 796502  0.0   3.60  39.62 66.249.64.231  http/1.1 support.cloudware.ng:443
   18-1 44230 10/29/1426 K 0.70 1    300 834628  318.0 0.80  39.06 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=1421554798 HTTP/1.1
   19-1 -     0/0/1440   . 0.00 46   0   871576  0.0   0.00  45.09 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-1 -     0/0/1405   . 0.00 38   0   1142025 0.0   0.00  53.02 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-1 45526 0/14/1514  W 0.36 0    0   847009  0.0   0.43  40.94 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   22-1 -     0/0/1399   . 0.00 18   0   803617  0.0   0.00  39.82 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-1 -     0/0/1409   . 0.00 40   0   828646  0.0   0.00  39.24 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 43379 64/81/1320 K 2.11 1    26  732669  429.3 0.91  36.47 147.135.213.9  http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   25-1 45528 1/19/1641  K 0.42 0    306 913247  35.5  0.48  42.42 66.249.64.230  http/1.1 support.cloudware.ng:443   GET /?c=1725848193 HTTP/1.1
   26-1 44232 6/43/1377  K 1.19 1    275 775380  186.8 1.25  37.85 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3322106472 HTTP/1.1
   27-1 -     0/0/1381   . 0.00 39   0   848298  0.0   0.00  39.69 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1 -     0/0/1533   . 0.00 44   0   922343  0.0   0.00  46.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-1 -     0/0/1655   . 0.00 0    0   1007547 0.0   0.00  57.99 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 45596 8/20/1484  K 0.55 2    400 834869  249.3 0.60  43.81 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=1505547614 HTTP/1.1
   31-1 43396 0/45/1385  _ 1.04 1    340 808494  0.0   1.10  38.56 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3942356822 HTTP/1.1
   32-1 -     0/0/1299   . 0.00 11   0   753389  0.0   0.00  34.44 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-1 44303 1/27/1374  K 0.73 4    356 741685  35.0  0.81  37.27 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3988139695 HTTP/1.1
   34-1 -     0/0/1289   . 0.00 8    0   735019  0.0   0.00  37.71 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/1129   . 0.00 45   0   646282  0.0   0.00  28.90 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-1 44327 2/39/1246  K 1.04 1    355 647363  64.4  1.11  30.34 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=1737121095 HTTP/1.1
   37-1 45624 4/21/1009  K 0.61 1    405 575613  126.0 0.64  28.75 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=171420530 HTTP/1.1
   38-1 45625 0/16/964   _ 0.38 0    403 563873  0.0   0.44  27.67 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=2930503658 HTTP/1.1
   39-1 44386 0/37/802   _ 0.95 0    0   463702  0.0   1.02  22.46 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   40-1 -     0/0/422    . 0.00 37   0   236002  0.0   0.00  11.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/387    . 0.00 288  0   223885  0.0   0.00  11.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/438    . 0.00 342  0   268421  0.0   0.00  20.37 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/277    . 0.00 161  0   174786  0.0   0.00  7.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/86     . 0.00 701  0   44341   0.0   0.00  3.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-1 -     0/0/104    . 0.00 4008 0   61560   0.0   0.00  3.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/62     . 0.00 4232 0   45695   0.0   0.00  1.69  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/9      . 0.00 5443 340 3828    0.0   0.00  0.21  66.249.64.37   http/1.1 support.cloudware.ng:443   GET /?c=4046043491 HTTP/1.1
   48-0 -     0/0/8      . 0.00 5446 302 6872    0.0   0.00  0.15  66.249.64.166  http/1.1 support.cloudware.ng:443   GET /?c=3263167811 HTTP/1.1
   49-0 -     0/0/9      . 0.00 5442 301 3993    0.0   0.00  0.24  66.249.64.131  http/1.1 support.cloudware.ng:443   GET /ctg/apiAllLCate/ HTTP/1.1
   50-0 -     0/0/7      . 0.00 5446 261 2379    0.0   0.00  0.15  66.249.64.12   http/1.1 support.cloudware.ng:443   GET /?c=7694191 HTTP/1.1
   51-0 -     0/0/4      . 0.00 5463 0   21      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 5446 310 2988    0.0   0.00  0.18  66.249.70.71   http/1.1 support.cloudware.ng:443   GET /?c=2805280654 HTTP/1.1
   53-0 -     0/0/7      . 0.00 5444 389 2921    0.0   0.00  0.15  66.249.64.41   http/1.1 support.cloudware.ng:443   GET /?c=2219441606 HTTP/1.1
   54-0 -     0/0/15     . 0.00 5446 371 7465    0.0   0.00  0.41  66.249.64.167  http/1.1 support.cloudware.ng:443   GET /?c=1955810583 HTTP/1.1
   55-0 -     0/0/8      . 0.00 5447 0   2009    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 5444 364 4324    0.0   0.00  0.22  66.249.70.196  http/1.1 support.cloudware.ng:443   GET /?c=2781961612 HTTP/1.1
   57-0 -     0/0/8      . 0.00 5443 274 3765    0.0   0.00  0.22  66.249.64.169  http/1.1 support.cloudware.ng:443   GET /?c=3422996470 HTTP/1.1
   58-0 -     0/0/7      . 0.00 5446 290 2162    0.0   0.00  0.12  66.249.64.102  http/1.1 support.cloudware.ng:443   GET /ctg/apiAllLCate/ HTTP/1.1
   59-0 -     0/0/7      . 0.00 5464 0   2566    0.0   0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/109    . 0.00 5442 355 72059   0.0   0.00  3.30  66.249.64.227  http/1.1 support.cloudware.ng:443   GET /?c=159050180 HTTP/1.1
   61-0 -     0/0/13     . 0.00 5444 389 7067    0.0   0.00  0.55  66.249.70.37   http/1.1 support.cloudware.ng:443   GET /ctg/apiAllLCate/ HTTP/1.1
   62-0 -     0/0/7      . 0.00 5439 1   2036    0.0   0.00  0.12  195.211.77.140 http/1.1 2way.cloudsms.com.ng:443   HEAD / HTTP/1.1
   63-0 -     0/0/5      . 0.00 5445 358 2411    0.0   0.00  0.12  66.249.64.97   http/1.1 support.cloudware.ng:443   GET /?c=4138812099 HTTP/1.1
   64-0 -     0/0/7      . 0.00 5445 286 3301    0.0   0.00  0.19  66.249.70.67   http/1.1 support.cloudware.ng:443   GET /?c=4182583832 HTTP/1.1
   65-0 -     0/0/5      . 0.00 5457 0   1428    0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/29     . 0.00 5446 405 19448   0.0   0.00  0.69  66.249.70.96   http/1.1 support.cloudware.ng:443   GET /?c=3173469163 HTTP/1.1
   67-0 -     0/0/3      . 0.00 6518 0   6090    0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/47     . 0.00 6329 0   37978   0.0   0.00  1.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/28     . 0.00 6459 0   22441   0.0   0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/10     . 0.00 6469 0   5153    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/36     . 0.00 6395 0   24623   0.0   0.00  1.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/24     . 0.00 6460 0   14324   0.0   0.00  0.74  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 6534 0   4677    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/3      . 0.00 6522 0   690     0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/3      . 0.00 6524 0   894     0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/3      . 0.00 6394 0   7306    0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/25     . 0.00 6432 0   18526   0.0   0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/19     . 0.00 6463 0   10965   0.0   0.00  0.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/11     . 0.00 6451 0   4509    0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/8      . 0.00 6499 0   3867    0.0   0.00  0.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/11     . 0.00 6462 0   5134    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/46     . 0.00 6407 0   34553   0.0   0.00  1.44  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/4      . 0.00 6502 0   2617    0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/5      . 0.00 6497 0   609     0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/5      . 0.00 6492 0   2114    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   86-0 -     0/0/18     . 0.00 6458 0   12954   0.0   0.00  0.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   87-0 -     0/0/4      . 0.00 6498 0   1460    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   88-0 -     0/0/61     . 0.00 6227 0   38942   0.0   0.00  1.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   89-0 -     0/0/44     . 0.00 6342 0   27053   0.0   0.00  1.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   90-0 -     0/0/29     . 0.00 6399 0   20306   0.0   0.00  0.94  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   91-0 -     0/0/4      . 0.00 6516 0   2386    0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   92-0 -     0/0/2      . 0.00 6533 0   1884    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 722
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...79)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 34348
   total entries replaced since starting: 0
   total entries expired since starting: 33580
   total (pre-expiry) entries scrolled out of the cache: 38
   total retrieves since starting: 0 hit, 9 miss
   total removes since starting: 8 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit