403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.00.51.txt
 ## swap threshold exceeded
## server overview
2025-11-16.00.51 load[0] mem[50/79] mysql[1/10] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1101          76          90        1185         985
Swap:          1999        1674         325
 00:51:01 up 10:26,  0 users,  load average: 0.80, 0.57, 0.40
## system overview
top - 00:51:01 up 10:26,  0 users,  load average: 0.80, 0.57, 0.40
Tasks: 198 total,   5 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 22.2 sy,  0.0 ni, 25.0 id,  0.0 wa,  0.0 hi,  2.8 si,  0.0 st
KiB Mem :  2420300 total,    95664 free,  1126420 used,  1198216 buff/cache
KiB Swap:  2047996 total,   333564 free,  1714432 used.  1011500 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 267404   3188 S  70.6 11.0   8:57.05 /usr/sbin+
 74977 nigeria   20   0  404052  16140  10384 S  11.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44412   3532   1668 S   5.9  0.1   0:52.25 /usr/lib/+
   521 root      20   0   24708   1336    956 S   5.9  0.1   0:08.70 /usr/lib/+
   531 dbus      20   0   58740   1504    788 S   5.9  0.1   0:19.72 /usr/bin/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.31 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.81 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:38.37 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.68 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:06.82 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.78 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.65 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.88 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.46 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.38 [kworker/+
   358 root      20   0   39500   3368   3064 S   0.0  0.1   0:18.54 /usr/lib/+
   385 root      20   0   45444    412    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    620    492 S   0.0  0.0   0:02.74 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.84 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.02 /usr/sbin+
   523 nscd      20   0 1264844   1956    916 S   0.0  0.1   0:30.70 /usr/sbin+
   524 root      20   0   52852    548    436 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1304    908 S   0.0  0.1   0:05.10 /usr/lib/+
   529 root      20   0  224148   5476   1168 S   0.0  0.2   0:00.43 queueproc+
   539 rpc       20   0   69256    148     88 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.05 /usr/sbin+
   577 root      20   0   24208    108     80 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4036    996 S   0.0  0.2   0:00.68 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:03.78 /usr/sbin+
   919 root      20   0 1350088   8156    200 S   0.0  0.3   0:20.05 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  35536   5704 S   0.0  1.5   0:20.59 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.82 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.78 pure-ftpd+
   926 root      20   0  572372   1080    504 S   0.0  0.0   0:03.25 /usr/bin/+
   927 systuser  20   0  114016  15928   2872 S   0.0  0.7   0:08.88 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.44 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   7444    220 S   0.0  0.3   0:24.30 /usr/bin/+
   946 root      20   0  396248    712    528 S   0.0  0.0   0:00.95 php-fpm: +
   954 named     20   0 1055796  40700   2340 S   0.0  1.7   0:19.06 /usr/sbin+
   957 root      20   0  322896   4616   3360 S   0.0  0.2   0:09.49 /usr/sbin+
   973 root      20   0  400740   2996    884 S   0.0  0.1   0:05.76 php-fpm: +
   975 root      20   0  439788   1752   1544 S   0.0  0.1   0:01.12 php-fpm: +
   978 cpanelc+  20   0   10456   3700   2436 S   0.0  0.2   0:30.11 /usr/loca+
   980 root      20   0  388892    912    696 S   0.0  0.0   0:01.15 php-fpm: +
   991 root      20   0  389508    596    504 S   0.0  0.0   0:01.02 php-fpm: +
   992 root      20   0 1763124  72624    520 S   0.0  3.0   0:14.11 /usr/loca+
   993 root      20   0  261288   7024   1912 S   0.0  0.3   0:07.88 cpsrvd (S+
  1065 dovenull  20   0   47524   3156   1784 S   0.0  0.1   0:00.69 dovecot/p+
  1066 dovenull  20   0   47948   3604   1940 S   0.0  0.1   0:00.41 dovecot/i+
  1067 dovecot   20   0   10320    556    440 S   0.0  0.0   0:00.11 dovecot/a+
  1068 root      20   0   10452    636    440 S   0.0  0.0   0:00.42 dovecot/l+
  1069 dovenull  20   0   47600   3216   1816 S   0.0  0.1   0:00.56 dovecot/p+
  1070 dovenull  20   0   47816   3324   1836 S   0.0  0.1   0:00.35 dovecot/i+
  1077 root      20   0   24528   2624    524 S   0.0  0.1   0:00.22 dovecot/c+
  1078 dovecot   20   0   13568    620    372 S   0.0  0.0   0:00.09 dovecot/s+
  1150 root      20   0  248140  47448   1128 S   0.0  2.0   0:07.28 /usr/loca+
  1151 systuser  20   0  157704   3132   1088 S   0.0  0.1   0:00.17 SonarPush+
  1152 dovecot   20   0   41180   1628   1132 S   0.0  0.1   0:00.87 dovecot/a+
  1153 wp-tool+  20   0  387556   5148   1792 S   0.0  0.2   0:00.35 /usr/bin/+
  1154 wp-tool+  20   0  410480  30896   1844 S   0.0  1.3   0:31.70 /usr/bin/+
  1229 root      20   0  262224  23016   5160 S   0.0  1.0   0:02.38 cpdavd - +
  1231 root      20   0  209768  12560   2484 S   0.0  0.5   0:04.71 tailwatchd
  1232 root      20   0  228228  18604   5700 S   0.0  0.8   0:00.57 dnsadmin +
  1638 root      20   0  299272    876    496 S   0.0  0.0   0:01.01 php-fpm: +
  1681 root      38  18  130416   1516    808 S   0.0  0.1   0:00.09 cpanellog+
  1909 root      20   0  266984   8868    804 S   0.0  0.4   0:03.62 /usr/sbin+
  1911 root      20   0   12832    508    364 S   0.0  0.0   0:04.37 /usr/loca+
  1912 root      20   0   12732    464    356 S   0.0  0.0   0:03.81 /usr/loca+
  1913 root      20   0   12868    516    360 S   0.0  0.0   0:04.18 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  265880  92508   1468 S   0.0  3.8   0:04.25 spamd chi+
  8199 root      20   0  249268  68496    700 S   0.0  2.8   0:00.06 spamd chi+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.67 [kworker]
 47956 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48777 root      20   0  181340  29492   2352 R   0.0  1.2   0:03.31 lfd - sle+
 51600 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 58444 nobody    20   0  277612  21340   4944 S   0.0  0.9   0:01.45 /usr/sbin+
 62893 nobody    20   0  277640  21248   4904 S   0.0  0.9   0:01.46 /usr/sbin+
 63080 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 63667 nobody    20   0  277596  20832   4756 S   0.0  0.9   0:01.36 /usr/sbin+
 65109 nobody    20   0  277864  21176   4736 S   0.0  0.9   0:00.68 /usr/sbin+
 65124 nobody    20   0  277572  20660   4676 S   0.0  0.9   0:01.20 /usr/sbin+
 66613 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 67242 nobody    20   0  277848  20452   4400 S   0.0  0.8   0:01.17 /usr/sbin+
 69175 nobody    20   0  277536  20412   4504 S   0.0  0.8   0:00.41 /usr/sbin+
 69415 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70308 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71265 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 73205 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73288 nobody    20   0  277876  19848   4000 S   0.0  0.8   0:00.25 /usr/sbin+
 73748 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 73890 nobody    20   0  277880  19812   3972 S   0.0  0.8   0:00.11 /usr/sbin+
 73901 nobody    20   0  277884  19772   3952 S   0.0  0.8   0:00.13 /usr/sbin+
 73902 nobody    20   0  277468  19880   4280 S   0.0  0.8   0:00.18 /usr/sbin+
 74403 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 74572 nobody    20   0  277528  18856   3260 S   0.0  0.8   0:00.05 /usr/sbin+
 74588 nigeria   20   0  475168  10292   4744 S   0.0  0.4   0:00.41 php-fpm: +
 74600 nigeria   20   0  401180   8976   3924 S   0.0  0.4   0:00.20 php-fpm: +
 74616 nobody    20   0  277464  19380   3800 S   0.0  0.8   0:00.03 /usr/sbin+
 74649 nobody    20   0  277472  19148   3576 S   0.0  0.8   0:00.05 /usr/sbin+
 74674 nobody    20   0  277748  19548   3728 S   0.0  0.8   0:00.04 /usr/sbin+
 74675 nobody    20   0  277756  19208   3400 S   0.0  0.8   0:00.05 /usr/sbin+
 74785 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 74834 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 74835 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 74855 mailnull  20   0   89308   5752   2496 S   0.0  0.2   0:00.00 /usr/sbin+
 74861 root      20   0  261288   8256   1696 S   0.0  0.3   0:00.00 whostmgrd+
 74862 nobody    20   0  277356  19120   3764 S   0.0  0.8   0:00.00 /usr/sbin+
 74877 nobody    20   0  277600  18680   3148 S   0.0  0.8   0:00.00 /usr/sbin+
 74878 nobody    20   0  277304  18608   3336 S   0.0  0.8   0:00.00 /usr/sbin+
 74891 mailnull  20   0   89308   4984   1788 S   0.0  0.2   0:00.00 /usr/sbin+
 74894 mailnull  20   0   89300   5752   2496 S   0.0  0.2   0:00.00 /usr/sbin+
 74907 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 74912 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74913 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74914 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74915 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74916 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74918 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74919 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74920 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74921 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74922 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 74924 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74926 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 74927 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 74928 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 74944 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 74945 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 74948 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74949 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74950 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74951 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 74952 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74954 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74955 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74956 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 74964 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 74970 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 74972 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 74973 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74983 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 74988 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74989 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 74990 cloudsms  20   0  404052  15876  10224 R   0.0  0.7   0:00.00 /opt/cpan+
 74991 root      20   0   38648   6504   3040 R   0.0  0.3   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov15   0:38  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      47956  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kworker/u200:0]
root      51600  0.0  0.0      0     0 ?        S    00:05   0:00  \_ [kworker/0:2]
root      56928  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      63080  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:0]
root      66613  0.0  0.0      0     0 ?        S    00:34   0:00  \_ [kworker/1:2]
root      69415  0.0  0.0      0     0 ?        S    00:40   0:00  \_ [kworker/0:3]
root      70308  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/0:4]
root      71265  0.0  0.0      0     0 ?        S    00:44   0:00  \_ [kworker/1:1]
root      73205  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/0:0]
root      73748  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44412  3532 ?        Ss   Nov15   0:52 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39500  3368 ?        Ss   Nov15   0:18 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   412 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   620 ?        S<sl Nov15   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1336 ?        Ss   Nov15   0:08 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1956 ?        Ssl  Nov15   0:30 /usr/sbin/nscd
root        524  0.0  0.0  52852   548 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1304 ?        Ssl  Nov15   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5476 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1504 ?        Ss   Nov15   0:19 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   148 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      74912  0.0  0.0 183048  2156 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74926  0.0  0.0 113284  1212 ?        Ss   00:51   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      74927  0.0  0.0 108052   360 ?        S    00:51   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      74928  0.0  0.0 113288  1520 ?        S    00:51   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      74992  0.0  0.0 153840  2096 ?        R    00:51   0:00  |               \_ ps auxf
root      74913  0.0  0.0 183048  2156 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74949  0.0  0.0  20164   804 ?        Ss   00:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      74914  0.0  0.0 183048  2156 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74952  0.0  0.0  20164   808 ?        Ss   00:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      74915  0.0  0.0 183048  2156 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74948  0.0  0.0  20164   808 ?        Ss   00:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      74916  0.0  0.0 183048  2152 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74950  0.0  0.0  20164   808 ?        Ss   00:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      74918  0.0  0.0 183048  2152 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74951  0.0  0.0  20164   988 ?        Ss   00:51   0:00  |   \_ jailshell (cloudsms) [74993] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  74993  0.0  0.0  20164   264 ?        S    00:51   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  74995  0.0  0.0 113284  1212 ?        S    00:51   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  74997  0.0  0.6 404052 15876 ?        R    00:51   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      74919  0.0  0.0 183048  2148 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74954  0.0  0.0  20164   808 ?        Ss   00:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      74920  0.0  0.0 183048  2148 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74945  0.0  0.0  20164   984 ?        Ss   00:51   0:00  |   \_ jailshell (cloudsms) [74988] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  74988  0.0  0.0      0     0 ?        R    00:51   0:00  |       \_ [jailshell]
root      74921  0.0  0.0 183048  2148 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74955  0.0  0.0  20164   804 ?        Ss   00:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      74922  0.0  0.0 183048  2156 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74956  0.0  0.0  20164   968 ?        Ss   00:51   0:00  |   \_ jailshell (pactpay) [74970] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74970  0.0  0.0  20164   260 ?        S    00:51   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74972  0.0  0.7 480124 17692 ?        S    00:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      74924  0.0  0.0 183048  2152 ?        S    00:51   0:00  \_ /usr/sbin/CROND -n
root      74944  0.0  0.0  20164   968 ?        Ss   00:51   0:00      \_ jailshell (nigeria) [74973] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74973  0.0  0.0  20164   256 ?        S    00:51   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74977  0.0  0.6 404052 16140 ?        S    00:51   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   108 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4036 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  74855  0.0  0.2  89308  5752 ?        S    00:50   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  74891  0.0  0.2  89308  4984 ?        S    00:50   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  74894  0.0  0.2  89300  5752 ?        S    00:50   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:03 /usr/sbin/sshd -D
root      74403  0.0  0.1 111304  4260 ?        Ss   00:50   0:00  \_ sshd: [accepted]
root      74785  0.0  0.1 111304  4264 ?        Ss   00:50   0:00  \_ sshd: [accepted]
root      74834  0.0  0.2 157100  5068 ?        Ss   00:50   0:00  \_ sshd: unknown [priv]
sshd      74835  0.0  0.1 115644  2628 ?        R    00:50   0:00      \_ sshd: unknown [net]
root        919  0.0  0.3 1350088 8156 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35536 ?       SLsl Nov15   0:20 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1080 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15928 ?        Ssl  Nov15   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3156 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3604 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   556 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   636 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3216 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47816  3324 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2624 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   620 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1628 ?        S    Nov15   0:00  \_ dovecot/auth
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.3 1277312 7444 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   712 ?        Ss   Nov15   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.6 1055796 40700 ?       Ssl  Nov15   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.1 322896  4616 ?        Ssl  Nov15   0:09 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  2996 ?        Ss   Nov15   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   74588  1.4  0.4 475168 10292 ?        S    00:50   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   74600  0.7  0.3 401180  8976 ?        S    00:50   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1752 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3700 ?        Rs   Nov15   0:30 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   912 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   596 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 72624 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7024 ?        Ss   Nov15   0:07 cpsrvd (SSL) - waiting for connections                   
root      74861  0.0  0.3 261288  8256 ?        S    00:50   0:00  \_ whostmgrd - serving 40.124.172.146
root      74907  0.0  0.0      0     0 ?        Z    00:50   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  1.9 248140 47448 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  3.8 265880 92508 ?        S    Nov15   0:04  \_ spamd child
root       8199  0.0  2.8 249268 68496 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3132 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5148 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 30896 ?        Ss   Nov15   0:31 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.9 262224 23016 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1231  0.0  0.5 209768 12560 ?        Ss   Nov15   0:04 tailwatchd
root       1232  0.0  0.7 228228 18604 ?        Ss   Nov15   0:00 dnsadmin - server mode
root       1638  0.0  0.0 299272   876 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1516 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.0 1458332 267404 ?      Sl   Nov15   8:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8868 ?        Ss   Nov15   0:03 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12832   508 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   464 ?        S    Nov15   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12868   516 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    58444  0.0  0.8 277612 21340 ?        S    00:18   0:01  \_ /usr/sbin/httpd -k start
nobody    62893  0.1  0.8 277640 21248 ?        S    00:26   0:01  \_ /usr/sbin/httpd -k start
nobody    63667  0.0  0.8 277596 20832 ?        S    00:28   0:01  \_ /usr/sbin/httpd -k start
nobody    65109  0.0  0.8 277864 21176 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody    65124  0.1  0.8 277572 20660 ?        S    00:31   0:01  \_ /usr/sbin/httpd -k start
nobody    67242  0.1  0.8 277848 20452 ?        S    00:35   0:01  \_ /usr/sbin/httpd -k start
nobody    69175  0.0  0.8 277536 20412 ?        S    00:39   0:00  \_ /usr/sbin/httpd -k start
nobody    73288  0.1  0.8 277876 19848 ?        S    00:48   0:00  \_ /usr/sbin/httpd -k start
nobody    73890  0.1  0.8 277880 19812 ?        S    00:49   0:00  \_ /usr/sbin/httpd -k start
nobody    73901  0.1  0.8 277884 19772 ?        S    00:49   0:00  \_ /usr/sbin/httpd -k start
nobody    73902  0.1  0.8 277468 19880 ?        S    00:49   0:00  \_ /usr/sbin/httpd -k start
nobody    74572  0.1  0.7 277528 18856 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74616  0.1  0.8 277464 19380 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74649  0.2  0.7 277472 19148 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74674  0.1  0.8 277748 19548 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74675  0.2  0.7 277756 19208 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74862  0.0  0.7 277356 19120 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74877  0.0  0.7 277600 18680 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74878  0.0  0.7 277304 18608 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    74964  0.0  0.6 353712 15976 ?        S    00:51   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   496 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181340 29492 ?        Ss   00:00   0:03 lfd - sleeping
## mysql stats
Uptime: 37595  Threads: 3  Questions: 3437180  Slow queries: 0  Opens: 10852  Flush tables: 1  Open tables: 2000  Queries per second avg: 91.426
*************************** 1. row ***************************
     Id: 48379
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-15' LIMIT 1
*************************** 2. row ***************************
     Id: 48382
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 48387
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 157.245.245.246 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 18.214.129.114 TIME_WAIT
      1 185.247.137.70 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.95.133 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 95.217.109.26 TIME_WAIT
     13 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 00:51:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 26 minutes 30 seconds
   Server load: 0.80 0.57 0.40
   Total accesses: 201236 - Total Traffic: 4.3 GB - Total Duration: 106475775
   CPU Usage: u5.48 s6.76 cu2440.11 cs2079.44 - 12.1% CPU load
   5.35 requests/sec - 119.7 kB/second - 22.3 kB/request - 529.109 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KKR__KW_R__KK_K__KW.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  65109 1/288/9849  K 2.93 4     351 5099573 35.5  1.80  206.54 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=4138310698 HTTP/1.1
   1-0  69175 2/131/10004 K 2.23 2     402 5344023 67.1  1.06  213.18 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2170286531 HTTP/1.1
   2-0  65124 0/395/9614  R 7.85 32    7   5028265 0.0   2.01  207.98 102.89.82.213  http/1.1
   3-0  63667 0/445/9782  _ 8.58 1     1   4932840 0.0   2.10  205.20 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   4-0  62893 0/554/10529 _ 8.19 1     1   5498154 0.0   2.72  214.37 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   5-0  67242 19/394/9268 K 8.00 2     23  5000860 20.9  1.55  200.00 66.249.70.7    http/1.1 test.cloudware.ng:443  GET /886200564?goodscode=0885039858 HTTP/1.1
   6-0  74572 0/9/9847    W 0.20 0     0   5021673 0.0   0.25  209.87 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   7-0  74616 0/9/8843    _ 0.06 1     279 4621341 0.0   0.15  190.60 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=4167990607 HTTP/1.1
   8-0  58444 0/449/8922  R 8.39 29    2   4664567 0.0   3.57  191.25 102.89.82.213  http/1.1
   9-0  74649 0/10/8682   _ 0.18 0     297 4436566 0.0   0.24  209.28 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=3173328602 HTTP/1.1
   10-0 74674 0/8/8968    _ 0.17 0     5   4471600 0.0   0.21  198.58 35.170.205.140 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/polling_unit_categ
   11-0 73288 3/75/8370   K 1.40 2     400 4475704 101.4 0.50  191.56 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=3399945565 HTTP/1.1
   12-0 73890 3/33/7925   K 0.45 0     344 4606357 94.1  1.17  176.70 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=4268740074 HTTP/1.1
   13-0 73901 0/28/7992   _ 0.52 0     5   4463573 0.0   0.59  183.38 95.217.109.26  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Kebbi&lga=Ngaski&ward=Kamb
   14-0 74675 3/9/7727    K 0.21 3     342 3887860 98.8  0.25  165.54 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=1363246552 HTTP/1.1
   15-0 73902 0/41/7650   _ 0.69 0     309 4125930 0.0   0.79  166.53 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1962245659 HTTP/1.1
   16-0 74862 0/4/6897    _ 0.00 0     0   3584395 0.0   0.05  152.78 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   17-0 74877 1/1/6486    K 0.00 4     348 3182269 33.9  0.03  133.81 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=2538841034 HTTP/1.1
   18-0 74878 0/1/5828    W 0.00 0     0   3237256 0.0   0.01  138.44 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=3120404417 HTTP/1.1
   19-0 -     0/0/6568    . 0.00 88    0   3230339 0.0   0.00  132.24 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/3924    . 0.00 1490  0   2222550 0.0   0.00  90.30  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/4054    . 0.00 1430  0   2227056 0.0   0.00  92.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/3807    . 0.00 1495  0   2231173 0.0   0.00  95.20  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/4103    . 0.00 1476  0   2264690 0.0   0.00  96.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2483    . 0.00 1494  0   1524414 0.0   0.00  60.33  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1233    . 0.00 1496  0   661151  0.0   0.00  28.08  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1018    . 0.00 1422  0   570230  0.0   0.00  24.14  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/652     . 0.00 1828  0   362478  0.0   0.00  14.29  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/509     . 0.00 2061  0   281598  0.0   0.00  11.72  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/458     . 0.00 2101  0   254403  0.0   0.00  10.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1106    . 0.00 2085  0   650529  0.0   0.00  26.63  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/476     . 0.00 1818  0   195797  0.0   0.00  7.80   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/326     . 0.00 2059  0   135048  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/147     . 0.00 2080  0   83222   0.0   0.00  2.72   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/586     . 0.00 2075  0   352682  0.0   0.00  11.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/222     . 0.00 2094  0   116759  0.0   0.00  2.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/112     . 0.00 2062  0   126228  0.0   0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/63      . 0.00 1963  0   10786   0.0   0.00  0.35   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/29      . 0.00 2109  0   15137   0.0   0.00  0.47   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/527     . 0.00 1483  0   236253  0.0   0.00  9.69   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/125     . 0.00 1975  0   109425  0.0   0.00  2.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/139     . 0.00 1811  0   76178   0.0   0.00  1.99   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/123     . 0.00 2064  0   72768   0.0   0.00  3.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/106     . 0.00 2107  0   64987   0.0   0.00  2.45   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/41      . 0.00 2121  0   9302    0.0   0.00  0.53   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/348     . 0.00 2089  0   196796  0.0   0.00  8.46   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/22      . 0.00 2071  0   14914   0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/21      . 0.00 2090  0   5053    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/194     . 0.00 1485  0   41020   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/48      . 0.00 2108  0   55353   0.0   0.00  2.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/444     . 0.00 2116  0   253169  0.0   0.00  9.85   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/35      . 0.00 2092  0   12386   0.0   0.00  0.57   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/26      . 0.00 2122  0   8755    0.0   0.00  0.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/118     . 0.00 2093  0   57707   0.0   0.00  2.02   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/266     . 0.00 2068  0   133476  0.0   0.00  5.87   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/410     . 0.00 2095  0   301035  0.0   0.00  13.69  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/73      . 0.00 2096  0   33087   0.0   0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/27      . 0.00 2073  0   8189    0.0   0.00  0.33   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/200     . 0.00 2114  0   155909  0.0   0.00  4.53   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/16      . 0.00 2117  0   14884   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/155     . 0.00 2113  0   87440   0.0   0.00  3.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/177     . 0.00 1491  0   37690   0.0   0.00  1.47   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/116     . 0.00 2118  0   68685   0.0   0.00  2.82   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/17      . 0.00 2115  0   10304   0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/226     . 0.00 1791  0   39016   0.0   0.00  1.65   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/65      . 0.00 2070  0   4299    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/48      . 0.00 1977  0   13648   0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/10      . 0.00 2119  0   56      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/17      . 0.00 2112  0   16258   0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/104     . 0.00 2077  0   33893   0.0   0.00  1.82   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/59      . 0.00 2120  0   64544   0.0   0.00  1.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/922     . 0.00 2111  0   492825  0.0   0.00  20.57  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/133     . 0.00 2076  0   54728   0.0   0.00  1.76   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/140     . 0.00 2079  0   93013   0.0   0.00  3.19   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/54      . 0.00 7979  0   42053   0.0   0.00  1.34   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/13      . 0.00 8061  0   12308   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/149     . 0.00 8062  0   87089   0.0   0.00  3.26   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/13      . 0.00 8082  0   1935    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/16      . 0.00 8059  0   16052   0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/41      . 0.00 7946  0   30094   0.0   0.00  0.73   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/19      . 0.00 12686 0   6786    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/359     . 0.00 11411 0   198767  0.0   0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/3       . 0.00 26604 0   23      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   83-0 -     0/0/3       . 0.00 26578 0   644     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   84-0 -     0/0/2       . 0.00 26596 0   3       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   85-0 -     0/0/7       . 0.00 26563 0   3861    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 629
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...42)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 107577
   total entries replaced since starting: 0
   total entries expired since starting: 106905
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 482 miss
   total removes since starting: 43 hit, 55 miss
Youez - 2016 - github.com/yon3zu
LinuXploit