403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-12.03.03.txt
 ## swap threshold exceeded
## server overview
2025-11-12.03.03 load[0] mem[60/68] mysql[3/8] httpd[33]
              total        used        free      shared  buff/cache   available
Mem:           2363        1308         158          34         896         834
Swap:          1999        1464         535
 03:03:02 up  2:07,  0 users,  load average: 0.88, 0.65, 0.69
## system overview
top - 03:03:02 up  2:07,  0 users,  load average: 0.88, 0.65, 0.69
Tasks: 202 total,   5 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 74.2 us, 22.6 sy,  0.0 ni,  3.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   164260 free,  1337796 used,   918244 buff/cache
KiB Swap:  2047996 total,   548348 free,  1499648 used.   857140 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1763 mysql     20   0 1462620 229636   3240 S 100.0  9.5   1:50.76 /usr/sbin+
 53247 nigeria   20   0  400652  15932  10220 R  12.5  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44404   3740   1708 S   6.2  0.2   0:14.83 /usr/lib/+
   528 root      20   0   24896   1452    832 S   6.2  0.1   0:01.92 /usr/lib/+
 52140 nobody    20   0  277460  34112   3076 S   6.2  1.4   0:00.12 /usr/sbin+
 52162 nobody    20   0  277660  34524   3264 S   6.2  1.4   0:00.20 /usr/sbin+
 53267 cloudw    20   0  350316  16620  10332 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.89 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:10.62 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.56 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.26 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.96 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   253 root       0 -20       0      0      0 S   0.0  0.0   0:01.06 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:00.86 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   4080   3772 S   0.0  0.2   0:04.72 /usr/lib/+
   391 root      20   0   45352    172    152 S   0.0  0.0   0:00.34 /usr/lib/+
   413 root      16  -4   55532    496    368 S   0.0  0.0   0:00.80 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   522 root      20   0  152780    172    128 S   0.0  0.0   0:00.00 /usr/sbin+
   526 rpc       20   0   69256    156     92 S   0.0  0.0   0:00.01 /sbin/rpc+
   527 polkitd   20   0  612240   2904    500 S   0.0  0.1   0:01.12 /usr/lib/+
   529 root      20   0   52852    408    312 S   0.0  0.0   0:00.01 /usr/sbin+
   531 root      20   0  224420   7116   1740 S   0.0  0.3   0:00.17 queueproc+
   535 root      20   0   21540    384    300 S   0.0  0.0   0:00.16 /usr/sbin+
   536 dbus      20   0   58728   1388    644 S   0.0  0.1   0:04.36 /usr/bin/+
   538 nscd      20   0  926904   1272    648 S   0.0  0.1   0:09.52 /usr/sbin+
   545 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   546 root      20   0    4388     84     80 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   576 root      20   0  124476    588    432 S   0.0  0.0   0:00.21 /usr/sbin+
   577 root      20   0   24208    120     96 S   0.0  0.0   0:00.00 /usr/sbin+
   595 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   629 mailnull  20   0   89068   3968    940 S   0.0  0.2   0:00.18 /usr/sbin+
   683 root       0 -20       0      0      0 S   0.0  0.0   0:01.60 [loop0]
   734 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   735 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   929 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   930 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.00 /usr/loca+
   933 root      20   0  392856    608    432 S   0.0  0.0   0:00.25 php-fpm: +
   936 root      20   0 1763048 114584    624 S   0.0  4.7   0:13.61 /usr/loca+
   938 named     20   0 1185864  36044   1936 S   0.0  1.5   0:06.92 /usr/sbin+
   940 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 systuser  20   0   13012     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   948 root      20   0  240976   4000   3352 S   0.0  0.2   0:02.27 /usr/sbin+
   950 root      20   0  572372    908    336 S   0.0  0.0   0:00.74 /usr/bin/+
   951 root      20   0  153404    348    264 S   0.0  0.0   0:00.16 pure-ftpd+
   952 systuser  20   0  114016  13232   2632 S   0.0  0.5   0:01.85 /usr/loca+
   953 root      20   0   51656   1120    776 S   0.0  0.0   0:00.11 /usr/sbin+
   956 root      20   0  261160   7064   1960 S   0.0  0.3   0:02.47 cpsrvd (S+
   957 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.17 /usr/bin/+
   959 cpanelc+  20   0   10532   3668   2360 R   0.0  0.2   0:07.43 /usr/loca+
   962 root      20   0  385496    792    584 S   0.0  0.0   0:00.24 php-fpm: +
   986 root      20   0  397344   3108    676 S   0.0  0.1   0:01.50 php-fpm: +
   991 root      20   0  436392   1044    844 S   0.0  0.0   0:00.32 php-fpm: +
   997 root      20   0  386112    704    496 S   0.0  0.0   0:00.25 php-fpm: +
   998 telegraf  20   0 5654048  37420   5788 S   0.0  1.5   0:04.17 /usr/loca+
   999 root      20   0  111304    456    356 S   0.0  0.0   0:01.06 /usr/sbin+
  1006 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.00 /usr/loca+
  1096 dovecot   20   0   10320    472    356 S   0.0  0.0   0:00.02 dovecot/a+
  1113 root      20   0  108296     84     80 S   0.0  0.0   0:00.00 /sbin/age+
  1137 wp-tool+  20   0  387528  13316   1692 S   0.0  0.6   0:00.14 /usr/bin/+
  1138 wp-tool+  20   0  410452  35980   1960 S   0.0  1.5   0:06.50 /usr/bin/+
  1142 root      20   0  248024 116980    904 S   0.0  4.8   0:03.75 /usr/loca+
  1168 systuser  20   0  157704   2836    816 S   0.0  0.1   0:00.04 SonarPush+
  1213 root      20   0  262224  24624   6760 S   0.0  1.0   0:00.48 cpdavd - +
  1214 root      20   0  167452   3836   2460 S   0.0  0.2   0:00.20 dnsadmin +
  1217 root      20   0  209492  12296   2508 S   0.0  0.5   0:01.38 tailwatchd
  1635 root      20   0  299272    692    316 S   0.0  0.0   0:00.20 php-fpm: +
  1666 root      38  18  130416   1436    708 S   0.0  0.1   0:00.02 cpanellog+
  1981 root      20   0  267128  30348   5052 S   0.0  1.3   0:02.61 /usr/sbin+
  2043 root      20   0  182148   9512   1140 S   0.0  0.4   0:07.58 lfd - sle+
  6254 root      20   0  183048    600    112 S   0.0  0.0   0:00.00 /usr/sbin+
  6286 root      20   0  113284    176      0 S   0.0  0.0   0:00.00 /bin/sh -+
  6322 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 3h +
  6378 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  6384 oysipao+  20   0    3152    528     40 S   0.0  0.0   0:00.13 [kworker]
  8825 root      20   0  261212 125756   1152 S   0.0  5.2   0:00.84 spamd chi+
  8827 root      20   0  248024 116396    352 S   0.0  4.8   0:00.00 spamd chi+
 13580 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 25128 root      20   0       0      0      0 D   0.0  0.0   0:00.07 [kworker/+
 25149 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 28482 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 37909 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39597 dovenull  20   0   46916   3152   2200 S   0.0  0.1   0:00.06 dovecot/p+
 39598 dovenull  20   0   47256   4180   2812 S   0.0  0.2   0:00.07 dovecot/i+
 39599 root      20   0   10452   1180    812 S   0.0  0.0   0:00.05 dovecot/l+
 39600 dovenull  20   0   46772   2908   2060 S   0.0  0.1   0:00.08 dovecot/p+
 39601 dovenull  20   0   47192   4096   2796 S   0.0  0.2   0:00.08 dovecot/i+
 39602 root      20   0   24396  11888   1056 S   0.0  0.5   0:00.05 dovecot/c+
 39603 dovecot   20   0   13568   1164    896 S   0.0  0.0   0:00.00 dovecot/s+
 39604 dovecot   20   0   41056   2328   1572 S   0.0  0.1   0:00.11 dovecot/a+
 39605 root      20   0   12816   1388   1180 S   0.0  0.1   0:01.00 /usr/loca+
 39606 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.87 /usr/loca+
 39607 root      20   0   12840   1396   1180 S   0.0  0.1   0:00.93 /usr/loca+
 39608 root      20   0   53268  11480   2092 S   0.0  0.5   0:00.05 /usr/loca+
 44230 nobody    20   0  277624  35568   4340 S   0.0  1.5   0:00.66 /usr/sbin+
 44232 nobody    20   0  277624  35380   4148 S   0.0  1.5   0:00.66 /usr/sbin+
 44303 nobody    20   0  277624  35576   4340 S   0.0  1.5   0:00.84 /usr/sbin+
 44589 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46818 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46932 nobody    20   0  277660  35480   4192 S   0.0  1.5   0:00.71 /usr/sbin+
 46968 nobody    20   0  277660  35456   4188 S   0.0  1.5   0:00.69 /usr/sbin+
 47761 nobody    20   0  277660  35532   4264 S   0.0  1.5   0:00.55 /usr/sbin+
 47801 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 47904 nobody    20   0  277660  35448   4176 S   0.0  1.5   0:00.60 /usr/sbin+
 48639 nobody    20   0  277980  35536   4132 S   0.0  1.5   0:00.53 /usr/sbin+
 48785 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49584 nobody    20   0  277984  35456   4052 S   0.0  1.5   0:00.27 /usr/sbin+
 50209 nobody    20   0  277660  34952   3684 S   0.0  1.4   0:00.42 /usr/sbin+
 50446 root      20   0 1276100  10552    596 S   0.0  0.4   0:00.04 /usr/bin/+
 50482 root      20   0 1277312  15192    596 S   0.0  0.6   0:00.06 /usr/bin/+
 50733 nobody    20   0  277660  35312   4048 S   0.0  1.5   0:00.23 /usr/sbin+
 51007 nobody    20   0  277656  35184   3924 S   0.0  1.5   0:00.20 /usr/sbin+
 51040 nobody    20   0  277984  35336   3928 S   0.0  1.5   0:00.19 /usr/sbin+
 51041 nobody    20   0  277588  35124   3928 S   0.0  1.5   0:00.23 /usr/sbin+
 51103 nobody    20   0  277660  35140   3876 S   0.0  1.5   0:00.21 /usr/sbin+
 51191 root      20   0  123364    760    532 S   0.0  0.0   0:00.00 /usr/sbin+
 51829 nobody    20   0  277952  35236   3864 S   0.0  1.5   0:00.12 /usr/sbin+
 51855 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52078 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52161 nobody    20   0  277664  34736   3464 S   0.0  1.4   0:00.11 /usr/sbin+
 52163 nobody    20   0  277660  35236   3972 S   0.0  1.5   0:00.08 /usr/sbin+
 52164 nobody    20   0  277660  35100   3816 S   0.0  1.5   0:00.08 /usr/sbin+
 52182 nobody    20   0  277660  34540   3280 S   0.0  1.4   0:00.09 /usr/sbin+
 52184 nobody    20   0  277660  35020   3760 S   0.0  1.4   0:00.04 /usr/sbin+
 52185 nobody    20   0  277660  34968   3708 S   0.0  1.4   0:00.08 /usr/sbin+
 52189 nobody    20   0  277612  34732   3512 S   0.0  1.4   0:00.13 /usr/sbin+
 52961 nobody    20   0  277644  34504   3260 S   0.0  1.4   0:00.02 /usr/sbin+
 52967 nobody    20   0  277660  34448   3184 S   0.0  1.4   0:00.02 /usr/sbin+
 52968 nobody    20   0  277660  34876   3612 S   0.0  1.4   0:00.03 /usr/sbin+
 52986 nobody    20   0  277660  34632   3372 S   0.0  1.4   0:00.02 /usr/sbin+
 52987 nobody    20   0  277660  34440   3180 S   0.0  1.4   0:00.02 /usr/sbin+
 52988 nobody    20   0  277644  34480   3236 S   0.0  1.4   0:00.01 /usr/sbin+
 52989 nobody    20   0  277660  34444   3184 S   0.0  1.4   0:00.02 /usr/sbin+
 53045 nobody    20   0  277660  34424   3168 S   0.0  1.4   0:00.01 /usr/sbin+
 53066 nobody    20   0  277660  34428   3172 S   0.0  1.4   0:00.02 /usr/sbin+
 53067 nobody    20   0  277984  35004   3604 S   0.0  1.4   0:00.02 /usr/sbin+
 53140 nigeria   20   0  397064   5372   2188 S   0.0  0.2   0:00.00 php-fpm: +
 53164 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 53175 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 53177 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53180 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53182 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53184 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53185 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53187 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53193 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 53194 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53196 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 53197 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 53206 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53212 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53214 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 53215 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53217 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 53227 pactpay   20   0   20164    276      0 S   0.0  0.0   0:00.00 jailshell+
 53235 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 53242 nigeria   20   0   20164    280      0 S   0.0  0.0   0:00.00 jailshell+
 53254 cloudw    20   0  350316  16616  10324 S   0.0  0.7   0:00.01 /opt/cpan+
 53266 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 53276 cloudw    20   0  280912  11068   7684 R   0.0  0.5   0:00.00 /opt/cpan+
 75198 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
100160 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:55   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    00:55   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:55   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:55   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:55   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:55   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [scsi_tmf_1]
root        252  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ttm_swap]
root        253  0.0  0.0      0     0 ?        S<   00:55   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [xprtiod]
root        569  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kvm-irqfd-clean]
root        683  0.0  0.0      0     0 ?        S<   00:55   0:01  \_ [loop0]
root        734  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [jbd2/loop0-8]
root        735  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ext4-rsv-conver]
root      75198  0.0  0.0      0     0 ?        S    01:54   0:00  \_ [kworker/0:2]
root     100160  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/u200:2]
root      13580  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/1:5]
root      25128  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:0]
root      25149  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/u200:1]
root      28482  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:2]
root      37909  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:1]
root      44589  0.0  0.0      0     0 ?        S    02:55   0:00  \_ [kworker/0:3]
root      46818  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:1]
root      47801  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:4]
root      48785  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/0:5]
root      51855  0.0  0.0      0     0 ?        S    03:01   0:00  \_ [kworker/u200:0]
root      52078  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44404  3740 ?        Ss   00:55   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  4080 ?        Ss   00:55   0:04 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45352   172 ?        Ss   00:55   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   496 ?        S<sl 00:55   0:00 /sbin/auditd
root        522  0.0  0.0 152780   172 ?        Ss   00:55   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
rpc         526  0.0  0.0  69256   156 ?        Ss   00:55   0:00 /sbin/rpcbind -w
polkitd     527  0.0  0.1 612240  2904 ?        Ssl  00:55   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        528  0.0  0.0  24896  1452 ?        Ss   00:55   0:01 /usr/lib/systemd/systemd-logind
root        529  0.0  0.0  52852   408 ?        Ss   00:55   0:00 /usr/sbin/smartd -n -q never
root        531  0.0  0.2 224420  7116 ?        Ss   00:55   0:00 queueprocd - waiting up to 60s to process a task
root        535  0.0  0.0  21540   384 ?        Ss   00:55   0:00 /usr/sbin/irqbalance --foreground
dbus        536  0.0  0.0  58728  1388 ?        Ss   00:55   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        538  0.1  0.0 926904  1272 ?        Ssl  00:55   0:09 /usr/sbin/nscd
root        545  0.0  0.0 195208     0 ?        Ssl  00:55   0:00 /usr/sbin/gssproxy -D
root        546  0.0  0.0   4388    84 ?        Ss   00:55   0:00 /usr/sbin/acpid
root        576  0.0  0.0 124476   588 ?        Ss   00:55   0:00 /usr/sbin/crond -n
root       6254  0.0  0.0 183048   600 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6286  0.0  0.0 113284   176 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6322  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 3h 5m
root      53175  0.0  0.0 183044  2144 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      53193  0.0  0.0 113284  1212 ?        Ss   03:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      53196  0.0  0.0 108052   356 ?        S    03:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      53197  0.0  0.0 113288  1520 ?        S    03:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      53277  0.0  0.0 153840  2092 ?        R    03:03   0:00  |               \_ ps auxf
root      53177  0.0  0.0 183044  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      53194  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      53180  0.0  0.0 183044  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      53206  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      53182  0.0  0.0 183044  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      53212  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      53184  0.0  0.0 183044  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      53215  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      53185  0.0  0.0 183044  2152 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      53217  0.0  0.0  20164   964 ?        Ss   03:03   0:00  |   \_ jailshell (pactpay) [53227] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53227  0.0  0.0  20164   276 ?        S    03:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53235  1.0  0.7 476724 17484 ?        S    03:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      53187  0.0  0.0 183044  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      53214  0.0  0.0  20164   968 ?        Ss   03:03   0:00      \_ jailshell (nigeria) [53242] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53242  0.0  0.0  20164   280 ?        S    03:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53247  4.0  0.6 400652 15932 ?        S    03:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   120 ?        Ss   00:55   0:00 /usr/sbin/atd -f
root        595  0.0  0.0 114704    84 ttyS0    Ss+  00:55   0:00 /bin/bash
mailnull    629  0.0  0.1  89068  3968 ?        Ss   00:55   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        929  0.0  0.0 445028     0 ?        Ss   00:55   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    930  0.0  0.0 113932  2096 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 392856   608 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        936  0.1  4.7 1763048 114584 ?      Ssl  00:55   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       938  0.0  1.4 1185864 36044 ?       Ssl  00:55   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    940  0.0  0.0  10388    52 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    945  0.0  0.0  13012    44 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        948  0.0  0.1 240976  4000 ?        Ssl  00:55   0:02 /usr/sbin/rsyslogd -n
root        950  0.0  0.0 572372   908 ?        Ssl  00:55   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        951  0.0  0.0 153404   348 ?        Ss   00:55   0:00 pure-ftpd (SERVER)
systuser    952  0.0  0.5 114016 13232 ?        Ssl  00:55   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        953  0.0  0.0  51656  1120 ?        Ss   00:55   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1096  0.0  0.0  10320   472 ?        S    00:55   0:00  \_ dovecot/anvil
dovenull  39597  0.0  0.1  46916  3152 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  39598  0.0  0.1  47256  4180 ?        S    01:26   0:00  \_ dovecot/imap-login
root      39599  0.0  0.0  10452  1180 ?        S    01:26   0:00  \_ dovecot/log
dovenull  39600  0.0  0.1  46772  2908 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  39601  0.0  0.1  47192  4096 ?        S    01:26   0:00  \_ dovecot/imap-login
root      39602  0.0  0.4  24396 11888 ?        S    01:26   0:00  \_ dovecot/config
dovecot   39603  0.0  0.0  13568  1164 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   39604  0.0  0.0  41056  2328 ?        S    01:26   0:00  \_ dovecot/auth
root        956  0.0  0.2 261160  7064 ?        Ss   00:55   0:02 cpsrvd (SSL) - waiting for connections                   
root      53164  0.0  0.0      0     0 ?        Z    03:02   0:00  \_ [cpaneld - servi] <defunct>
memcach+    957  0.0  0.0 342400     0 ?        Ssl  00:55   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    959  0.0  0.1  10532  3668 ?        Rs   00:55   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        962  0.0  0.0 385496   792 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.1 397344  3108 ?        Ss   00:55   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   53140  0.0  0.2 397064  5372 ?        S    03:02   0:00  \_ php-fpm: pool nigeriadecide_org
root        991  0.0  0.0 436392  1044 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        997  0.0  0.0 386112   704 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    998  0.0  1.5 5654048 37420 ?       SLsl 00:55   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        999  0.0  0.0 111304   456 ?        Ss   00:55   0:01 /usr/sbin/sshd -D
systuser   1006  0.0  0.0 111864    64 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1113  0.0  0.0 108296    84 tty1     Ss+  00:55   0:00 /sbin/agetty --noclear tty1 linux
wp-tool+   1137  0.0  0.5 387528 13316 ?        Ss   00:55   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1138  0.0  1.4 410452 35980 ?        Ss   00:55   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1142  0.0  4.8 248024 116980 ?       Ss   00:55   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8825  0.0  5.1 261212 125756 ?       S    01:01   0:00  \_ spamd child
root       8827  0.0  4.8 248024 116396 ?       S    01:01   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2836 ?        S    00:55   0:00 SonarPush 0.6.12 [sleeping]
root       1213  0.0  1.0 262224 24624 ?        Ss   00:55   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1214  0.0  0.1 167452  3836 ?        Ss   00:55   0:00 dnsadmin - dormant mode
root       1217  0.0  0.5 209492 12296 ?        Ss   00:55   0:01 tailwatchd
root       1635  0.0  0.0 299272   692 ?        Ss   00:55   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1666  0.0  0.0 130416  1436 ?        SN   00:55   0:00 cpanellogd - sleeping for logs
mysql      1763  1.4  9.4 1462620 229636 ?      Sl   00:55   1:50 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1981  0.0  1.2 267128 30348 ?        Ss   00:55   0:02 /usr/sbin/httpd -k start
root      39605  0.0  0.0  12816  1388 ?        S    01:26   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      39606  0.0  0.0  12732  1364 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      39607  0.0  0.0  12840  1396 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      39608  0.0  0.4  53268 11480 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    44230  0.1  1.4 277624 35568 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44232  0.1  1.4 277624 35380 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    44303  0.1  1.4 277624 35576 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    46932  0.1  1.4 277660 35480 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    46968  0.1  1.4 277660 35456 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
cloudw    53254  0.0  0.6 350316 16616 ?        S    03:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    47761  0.1  1.4 277660 35532 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    47904  0.2  1.4 277660 35448 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48639  0.2  1.4 277980 35536 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    49584  0.1  1.4 277984 35456 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    50209  0.2  1.4 277660 34952 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    50733  0.1  1.4 277660 35312 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    51007  0.1  1.4 277656 35184 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    51040  0.1  1.4 277984 35336 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    51041  0.1  1.4 277588 35124 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    51103  0.1  1.4 277660 35140 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    51829  0.1  1.4 277952 35236 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    53276  0.0  0.6 284780 16596 ?        Rl   03:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    52140  0.2  1.4 277460 34112 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52161  0.1  1.4 277664 34736 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52162  0.3  1.4 277660 34524 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52163  0.1  1.4 277660 35236 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52164  0.1  1.4 277660 35100 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52182  0.1  1.4 277660 34540 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52184  0.0  1.4 277660 35020 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52185  0.1  1.4 277660 34968 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52189  0.2  1.4 277612 34732 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52961  0.1  1.4 277644 34504 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52967  0.1  1.4 277660 34448 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52968  0.2  1.4 277660 34876 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
cloudw    53267  0.0  0.6 350316 16620 ?        S    03:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    52986  0.1  1.4 277660 34632 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52987  0.1  1.4 277660 34440 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52988  0.0  1.4 277644 34480 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    52989  0.1  1.4 277660 34444 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    53045  0.1  1.4 277660 34424 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    53066  0.2  1.4 277660 34428 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    53067  0.2  1.4 277984 35004 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
root       2043  0.0  0.3 182148  9512 ?        Ss   00:55   0:07 lfd - sleeping
oysipao+   6378  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   6384  0.0  0.0   3152   528 ?        S    01:00   0:00  \_ [kworker]
root      50446  0.0  0.4 1276100 10552 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      50482  0.0  0.6 1277312 15192 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      51191  0.0  0.0 123364   760 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 7646  Threads: 3  Questions: 638501  Slow queries: 0  Opens: 3531  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.507
*************************** 1. row ***************************
     Id: 9718
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 9723
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: System lock
   Info: SELECT * FROM `31` WHERE `phone`='2348087680494' LIMIT 1
*************************** 3. row ***************************
     Id: 9728
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 103.175.8.61 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 148.113.130.147 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.150 TIME_WAIT
      1 208.240.29.114 TIME_WAIT
      1 43.173.1.69 TIME_WAIT
      1 47.128.122.108 TIME_WAIT
      1 51.161.65.76 TIME_WAIT
      1 52.167.144.215 TIME_WAIT
      1 66.249.64.13 TIME_WAIT
      1 66.249.70.37 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 74.7.227.203 TIME_WAIT
      1 74.7.228.53 TIME_WAIT
      1 77.75.76.162 TIME_WAIT
      1 92.71.99.192 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.193 TIME_WAIT
      3 148.113.212.55 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 12-Nov-2025 03:03:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 00:55:41 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 2 hours 7 minutes 20 seconds
   Server load: 0.88 0.65 0.69
   Total accesses: 61784 - Total Traffic: 1.7 GB - Total Duration: 36005250
   CPU Usage: u6.06 s4.76 cu947.52 cs715.42 - 21.9% CPU load
   8.09 requests/sec - 239.9 kB/second - 29.7 kB/request - 582.76 ms/request
   31 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KK_KKWWKK_KKKKKWKWKKKKKKK_KKKKK_KK..K...........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-1  48639 1/85/1746  K 2.42 3    405 1006811 35.5  2.41  45.86 66.249.64.172   http/1.1 support.cloudware.ng:443   GET /?c=828936562 HTTP/1.1
   1-1  46932 1/113/1879 K 3.43 3    346 1051545 34.1  3.13  48.13 66.249.64.67    http/1.1 support.cloudware.ng:443   GET /?c=1340047582 HTTP/1.1
   2-1  51007 0/31/1614  _ 0.84 0    290 965641  0.0   0.88  45.34 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3630354298 HTTP/1.1
   3-1  52961 1/3/1711   K 0.06 2    417 1013889 35.4  0.10  52.91 66.249.64.33    http/1.1 support.cloudware.ng:443   GET /?c=1235251302 HTTP/1.1
   4-1  50733 1/38/1506  K 0.94 4    307 891509  36.2  0.95  43.29 66.249.70.68    http/1.1 support.cloudware.ng:443   GET /?c=1020566886 HTTP/1.1
   5-1  46968 0/108/1473 W 3.08 0    0   837585  0.0   3.06  41.04 192.178.4.99    http/1.1 support.cloudware.ng:443   GET /?c=814508287 HTTP/1.1
   6-1  51829 0/21/1576  W 0.50 0    0   905982  0.0   0.57  46.96 192.178.4.105   http/1.1 support.cloudware.ng:443   GET /?c=1304682516 HTTP/1.1
   7-1  51040 1/28/1686  K 0.79 1    340 928189  35.2  0.86  67.21 66.249.64.64    http/1.1 support.cloudware.ng:443   GET /?c=2834625682 HTTP/1.1
   8-1  49584 2/45/1719  K 1.12 4    255 996745  65.5  1.22  44.80 66.249.70.71    http/1.1 support.cloudware.ng:443   GET /?c=3752987563 HTTP/1.1
   9-1  50209 0/65/1553  _ 1.97 0    270 920249  0.0   1.91  46.89 66.249.70.71    http/1.1 support.cloudware.ng:443   GET /?c=3258517956 HTTP/1.1
   10-1 52967 1/3/1521   K 0.06 1    253 899949  29.6  0.10  44.18 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4204891465 HTTP/1.1
   11-1 51041 1/36/1522  K 1.27 4    269 919367  35.3  1.01  44.13 192.178.4.104   http/1.1 support.cloudware.ng:443   GET /?c=3208739394 HTTP/1.1
   12-1 47761 1/89/1542  K 2.42 2    400 840646  36.8  2.70  42.13 66.249.70.174   http/1.1 support.cloudware.ng:443   GET /?c=2247179608 HTTP/1.1
   13-1 52968 1/5/1609   K 0.07 0    364 927759  33.3  0.11  48.02 66.249.64.230   http/1.1 support.cloudware.ng:443   GET /?c=916186246 HTTP/1.1
   14-1 52140 35/35/1498 K 0.89 0    35  842750  238.4 0.23  42.20 147.135.213.9   http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   15-1 51103 0/33/1434  W 0.92 0    0   864503  0.0   0.97  43.97 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-1 52986 1/3/1625   K 0.06 0    21  908090  9.9   0.08  44.44 189.203.158.204 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Wasagu%2Fdanko&state=Kebbi&w
   17-1 52987 1/3/1499   W 0.06 0    0   860517  35.2  0.10  41.95 66.249.64.227   http/1.1 support.cloudware.ng:443   GET /?c=1779051720 HTTP/1.1
   18-1 44230 1/104/1501 K 2.83 4    409 892032  35.4  2.94  41.21 66.249.70.161   http/1.1 support.cloudware.ng:443   GET /?c=3888158207 HTTP/1.1
   19-1 52988 1/3/1447   K 0.05 1    384 875370  36.0  0.11  45.27 66.249.64.132   http/1.1 support.cloudware.ng:443   GET /?c=1699005527 HTTP/1.1
   20-1 52989 1/3/1429   K 0.06 0    402 1157403 37.3  0.11  53.73 66.249.64.69    http/1.1 support.cloudware.ng:443   GET /?c=1344800940 HTTP/1.1
   21-1 52161 1/17/1579  K 0.47 0    401 881764  35.3  0.49  42.74 66.249.70.141   http/1.1 support.cloudware.ng:443   GET /?c=1853046457 HTTP/1.1
   22-1 53045 1/2/1467   K 0.02 2    340 842778  35.1  0.07  41.71 66.249.70.106   http/1.1 support.cloudware.ng:443   GET /?c=604981993 HTTP/1.1
   23-1 47904 1/92/1501  K 2.69 2    342 886943  34.2  2.82  42.07 66.249.64.234   http/1.1 support.cloudware.ng:443   GET /?c=4101941174 HTTP/1.1
   24-1 52162 1/30/1422  K 0.91 0    427 772241  36.2  0.92  38.50 66.249.70.199   http/1.1 support.cloudware.ng:443   GET /?c=674452881 HTTP/1.1
   25-1 52163 0/14/1670  _ 0.36 0    0   927892  0.0   0.39  43.25 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   26-1 44232 1/105/1439 K 2.94 0    405 810157  36.7  2.98  39.58 66.249.70.200   http/1.1 support.cloudware.ng:443   GET /?c=1680187427 HTTP/1.1
   27-1 52164 1/12/1415  K 0.31 3    336 867322  34.7  0.37  40.63 66.249.70.1     http/1.1 support.cloudware.ng:443   GET /?c=3395701932 HTTP/1.1
   28-1 52182 3/14/1564  K 0.40 2    296 940831  93.3  0.44  47.38 66.249.70.164   http/1.1 support.cloudware.ng:443   GET /?c=1521475728 HTTP/1.1
   29-1 53066 1/2/1705   K 0.04 1    396 1034626 36.0  0.07  58.85 192.178.4.102   http/1.1 support.cloudware.ng:443   GET /?c=2130580025 HTTP/1.1
   30-1 52184 1/8/1522   K 0.13 3    264 856646  33.9  0.18  44.87 66.249.64.130   http/1.1 support.cloudware.ng:443   GET /?c=1347463074 HTTP/1.1
   31-1 52185 0/14/1466  _ 0.35 0    266 853636  0.0   0.39  40.75 66.249.70.102   http/1.1 support.cloudware.ng:443   GET /?c=2403214766 HTTP/1.1
   32-1 53067 1/3/1307   K 0.03 0    403 755567  36.1  0.08  34.57 66.249.64.65    http/1.1 support.cloudware.ng:443   GET /?c=3349897480 HTTP/1.1
   33-1 44303 1/130/1477 K 3.69 3    399 802586  35.7  3.76  40.22 66.249.64.38    http/1.1 support.cloudware.ng:443   GET /?c=827432297 HTTP/1.1
   34-1 -     0/0/1300   . 0.00 44   0   739713  0.0   0.00  37.97 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/1146   . 0.00 0    0   656111  0.0   0.00  29.37 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-1 52189 1/21/1284  K 0.57 2    398 667708  36.7  0.60  31.33 66.249.64.15    http/1.1 support.cloudware.ng:443   GET /?c=1751110986 HTTP/1.1
   37-1 -     0/0/1050   . 0.00 232  0   599661  0.0   0.00  29.91 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1 -     0/0/1008   . 0.00 231  0   587578  0.0   0.00  28.87 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/861    . 0.00 104  0   495122  0.0   0.00  24.10 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 -     0/0/422    . 0.00 398  0   236002  0.0   0.00  11.51 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/387    . 0.00 649  0   223885  0.0   0.00  11.01 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/438    . 0.00 703  0   268421  0.0   0.00  20.37 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/277    . 0.00 522  0   174786  0.0   0.00  7.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/86     . 0.00 1062 0   44341   0.0   0.00  3.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-1 -     0/0/104    . 0.00 4369 0   61560   0.0   0.00  3.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/62     . 0.00 4593 0   45695   0.0   0.00  1.69  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/9      . 0.00 5804 340 3828    0.0   0.00  0.21  66.249.64.37    http/1.1 support.cloudware.ng:443   GET /?c=4046043491 HTTP/1.1
   48-0 -     0/0/8      . 0.00 5807 302 6872    0.0   0.00  0.15  66.249.64.166   http/1.1 support.cloudware.ng:443   GET /?c=3263167811 HTTP/1.1
   49-0 -     0/0/9      . 0.00 5803 301 3993    0.0   0.00  0.24  66.249.64.131   http/1.1 support.cloudware.ng:443   GET /ctg/apiAllLCate/ HTTP/1.1
   50-0 -     0/0/7      . 0.00 5807 261 2379    0.0   0.00  0.15  66.249.64.12    http/1.1 support.cloudware.ng:443   GET /?c=7694191 HTTP/1.1
   51-0 -     0/0/4      . 0.00 5824 0   21      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 5807 310 2988    0.0   0.00  0.18  66.249.70.71    http/1.1 support.cloudware.ng:443   GET /?c=2805280654 HTTP/1.1
   53-0 -     0/0/7      . 0.00 5805 389 2921    0.0   0.00  0.15  66.249.64.41    http/1.1 support.cloudware.ng:443   GET /?c=2219441606 HTTP/1.1
   54-0 -     0/0/15     . 0.00 5807 371 7465    0.0   0.00  0.41  66.249.64.167   http/1.1 support.cloudware.ng:443   GET /?c=1955810583 HTTP/1.1
   55-0 -     0/0/8      . 0.00 5808 0   2009    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 5805 364 4324    0.0   0.00  0.22  66.249.70.196   http/1.1 support.cloudware.ng:443   GET /?c=2781961612 HTTP/1.1
   57-0 -     0/0/8      . 0.00 5804 274 3765    0.0   0.00  0.22  66.249.64.169   http/1.1 support.cloudware.ng:443   GET /?c=3422996470 HTTP/1.1
   58-0 -     0/0/7      . 0.00 5807 290 2162    0.0   0.00  0.12  66.249.64.102   http/1.1 support.cloudware.ng:443   GET /ctg/apiAllLCate/ HTTP/1.1
   59-0 -     0/0/7      . 0.00 5825 0   2566    0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/109    . 0.00 5803 355 72059   0.0   0.00  3.30  66.249.64.227   http/1.1 support.cloudware.ng:443   GET /?c=159050180 HTTP/1.1
   61-0 -     0/0/13     . 0.00 5805 389 7067    0.0   0.00  0.55  66.249.70.37    http/1.1 support.cloudware.ng:443   GET /ctg/apiAllLCate/ HTTP/1.1
   62-0 -     0/0/7      . 0.00 5800 1   2036    0.0   0.00  0.12  195.211.77.140  http/1.1 2way.cloudsms.com.ng:443   HEAD / HTTP/1.1
   63-0 -     0/0/5      . 0.00 5806 358 2411    0.0   0.00  0.12  66.249.64.97    http/1.1 support.cloudware.ng:443   GET /?c=4138812099 HTTP/1.1
   64-0 -     0/0/7      . 0.00 5806 286 3301    0.0   0.00  0.19  66.249.70.67    http/1.1 support.cloudware.ng:443   GET /?c=4182583832 HTTP/1.1
   65-0 -     0/0/5      . 0.00 5818 0   1428    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/29     . 0.00 5807 405 19448   0.0   0.00  0.69  66.249.70.96    http/1.1 support.cloudware.ng:443   GET /?c=3173469163 HTTP/1.1
   67-0 -     0/0/3      . 0.00 6879 0   6090    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/47     . 0.00 6690 0   37978   0.0   0.00  1.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/28     . 0.00 6820 0   22441   0.0   0.00  0.80  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/10     . 0.00 6830 0   5153    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/36     . 0.00 6756 0   24623   0.0   0.00  1.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/24     . 0.00 6821 0   14324   0.0   0.00  0.74  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 6895 0   4677    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/3      . 0.00 6883 0   690     0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/3      . 0.00 6885 0   894     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/3      . 0.00 6755 0   7306    0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/25     . 0.00 6793 0   18526   0.0   0.00  0.80  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/19     . 0.00 6824 0   10965   0.0   0.00  0.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/11     . 0.00 6812 0   4509    0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/8      . 0.00 6860 0   3867    0.0   0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/11     . 0.00 6823 0   5134    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/46     . 0.00 6768 0   34553   0.0   0.00  1.44  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/4      . 0.00 6863 0   2617    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/5      . 0.00 6858 0   609     0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/5      . 0.00 6853 0   2114    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   86-0 -     0/0/18     . 0.00 6819 0   12954   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   87-0 -     0/0/4      . 0.00 6859 0   1460    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   88-0 -     0/0/61     . 0.00 6588 0   38942   0.0   0.00  1.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   89-0 -     0/0/44     . 0.00 6703 0   27053   0.0   0.00  1.19  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   90-0 -     0/0/29     . 0.00 6760 0   20306   0.0   0.00  0.94  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   91-0 -     0/0/4      . 0.00 6877 0   2386    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   92-0 -     0/0/2      . 0.00 6894 0   1884    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1380
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 3 seconds, (range: 0...20)
   index usage: 24%, cache usage: 33%
   total entries stored since starting: 36051
   total entries replaced since starting: 0
   total entries expired since starting: 34625
   total (pre-expiry) entries scrolled out of the cache: 38
   total retrieves since starting: 0 hit, 14 miss
   total removes since starting: 8 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit