403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.00.54.txt
 ## swap threshold exceeded
## server overview
2025-11-16.00.54 load[0] mem[49/79] mysql[1/10] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1090         176          90        1096         997
Swap:          1999        1675         324
 00:54:01 up 10:29,  0 users,  load average: 0.88, 0.84, 0.54
## system overview
top - 00:54:01 up 10:29,  0 users,  load average: 1.05, 0.87, 0.55
Tasks: 200 total,   4 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 21.9 sy,  0.0 ni, 28.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   193760 free,  1103496 used,  1123044 buff/cache
KiB Swap:  2047996 total,   332284 free,  1715712 used.  1034348 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 267656   3712 S  68.8 11.1   8:58.81 /usr/sbin+
 77082 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.04 /opt/cpan+
 48777 root      20   0  181460  29496   2352 S   6.2  1.2   0:03.50 lfd - sle+
 77073 pactpay   20   0  480124  17688  11892 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44412   3532   1668 S   0.0  0.1   0:52.50 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.32 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.82 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:38.55 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.69 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.86 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.82 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.65 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.88 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.47 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.38 [kworker/+
   358 root      20   0   39500   3904   3600 S   0.0  0.2   0:18.63 /usr/lib/+
   385 root      20   0   45444    412    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    620    492 S   0.0  0.0   0:02.75 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.85 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1336    956 S   0.0  0.1   0:08.73 /usr/lib/+
   523 nscd      20   0 1264844   1956    916 S   0.0  0.1   0:30.84 /usr/sbin+
   524 root      20   0   52852    548    436 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1304    908 S   0.0  0.1   0:05.13 /usr/lib/+
   529 root      20   0  224148   5476   1168 S   0.0  0.2   0:00.43 queueproc+
   531 dbus      20   0   58740   1504    788 S   0.0  0.1   0:19.81 /usr/bin/+
   539 rpc       20   0   69256    148     88 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.06 /usr/sbin+
   577 root      20   0   24208    108     80 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4036    996 S   0.0  0.2   0:00.68 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:03.80 /usr/sbin+
   919 root      20   0 1350088   8156    200 S   0.0  0.3   0:20.06 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  35616   5676 S   0.0  1.5   0:20.68 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.83 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.78 pure-ftpd+
   926 root      20   0  572372   1080    504 S   0.0  0.0   0:03.26 /usr/bin/+
   927 systuser  20   0  114016  15928   2872 S   0.0  0.7   0:08.93 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.44 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   7444    220 S   0.0  0.3   0:24.30 /usr/bin/+
   946 root      20   0  396248    712    528 S   0.0  0.0   0:00.95 php-fpm: +
   954 named     20   0 1055796  40700   2340 S   0.0  1.7   0:19.14 /usr/sbin+
   957 root      20   0  322896   5028   3772 S   0.0  0.2   0:09.53 /usr/sbin+
   973 root      20   0  400740   2996    884 S   0.0  0.1   0:05.78 php-fpm: +
   975 root      20   0  439788   1752   1544 S   0.0  0.1   0:01.12 php-fpm: +
   978 cpanelc+  20   0   10456   3700   2436 S   0.0  0.2   0:30.26 /usr/loca+
   980 root      20   0  388892    836    620 S   0.0  0.0   0:01.16 php-fpm: +
   991 root      20   0  389508    648    556 S   0.0  0.0   0:01.04 php-fpm: +
   992 root      20   0 1763124  72624    520 S   0.0  3.0   0:14.11 /usr/loca+
   993 root      20   0  261288   7024   1912 S   0.0  0.3   0:07.90 cpsrvd (S+
  1065 dovenull  20   0   47524   3156   1784 S   0.0  0.1   0:00.70 dovecot/p+
  1066 dovenull  20   0   47948   3604   1940 S   0.0  0.1   0:00.41 dovecot/i+
  1067 dovecot   20   0   10320    556    440 S   0.0  0.0   0:00.11 dovecot/a+
  1068 root      20   0   10452    636    440 S   0.0  0.0   0:00.42 dovecot/l+
  1069 dovenull  20   0   47600   3216   1816 S   0.0  0.1   0:00.56 dovecot/p+
  1070 dovenull  20   0   47816   3324   1836 S   0.0  0.1   0:00.35 dovecot/i+
  1077 root      20   0   24528   2624    524 S   0.0  0.1   0:00.22 dovecot/c+
  1078 dovecot   20   0   13568    620    372 S   0.0  0.0   0:00.09 dovecot/s+
  1150 root      20   0  248140  46304   1128 S   0.0  1.9   0:07.30 /usr/loca+
  1151 systuser  20   0  157704   3132   1088 S   0.0  0.1   0:00.17 SonarPush+
  1152 dovecot   20   0   41180   1628   1132 S   0.0  0.1   0:00.89 dovecot/a+
  1153 wp-tool+  20   0  387556   5148   1792 S   0.0  0.2   0:00.35 /usr/bin/+
  1154 wp-tool+  20   0  410480  30896   1844 S   0.0  1.3   0:31.85 /usr/bin/+
  1229 root      20   0  262224  23016   5160 S   0.0  1.0   0:02.38 cpdavd - +
  1231 root      20   0  209768  12576   2492 S   0.0  0.5   0:04.73 tailwatchd
  1232 root      20   0  167452   4268   2900 S   0.0  0.2   0:00.58 dnsadmin +
  1638 root      20   0  299272    880    500 S   0.0  0.0   0:01.01 php-fpm: +
  1681 root      38  18  130416   1516    808 S   0.0  0.1   0:00.09 cpanellog+
  1909 root      20   0  266984   8868    804 S   0.0  0.4   0:03.63 /usr/sbin+
  1911 root      20   0   12840    508    364 S   0.0  0.0   0:04.38 /usr/loca+
  1912 root      20   0   12732    464    356 S   0.0  0.0   0:03.84 /usr/loca+
  1913 root      20   0   12880    516    360 S   0.0  0.0   0:04.19 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  265880  91756   1468 S   0.0  3.8   0:04.27 spamd chi+
  8199 root      20   0  249268  67516    700 S   0.0  2.8   0:00.06 spamd chi+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.67 [kworker]
 47956 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51600 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 58444 nobody    20   0  277616  21408   4988 S   0.0  0.9   0:01.75 /usr/sbin+
 63080 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 65109 nobody    20   0  277864  21300   4848 S   0.0  0.9   0:00.85 /usr/sbin+
 65124 nobody    20   0  277576  20784   4796 S   0.0  0.9   0:01.40 /usr/sbin+
 66613 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 67242 nobody    20   0  277848  20604   4548 S   0.0  0.9   0:01.45 /usr/sbin+
 69175 nobody    20   0  277536  20528   4620 S   0.0  0.8   0:00.64 /usr/sbin+
 69415 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70308 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71265 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 73205 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73288 nobody    20   0  277876  20024   4160 S   0.0  0.8   0:00.41 /usr/sbin+
 73748 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 73902 nobody    20   0  277472  20064   4436 S   0.0  0.8   0:00.52 /usr/sbin+
 74572 nobody    20   0  277528  20092   4380 S   0.0  0.8   0:00.29 /usr/sbin+
 74616 nobody    20   0  277480  19880   4196 S   0.0  0.8   0:00.28 /usr/sbin+
 74649 nobody    20   0  277484  19656   4040 S   0.0  0.8   0:00.33 /usr/sbin+
 74862 nobody    20   0  277876  20064   4272 S   0.0  0.8   0:00.26 /usr/sbin+
 74877 nobody    20   0  277744  19756   3928 S   0.0  0.8   0:00.26 /usr/sbin+
 74878 nobody    20   0  277468  19680   4112 S   0.0  0.8   0:00.32 /usr/sbin+
 75175 nobody    20   0  277876  19728   3924 S   0.0  0.8   0:00.29 /usr/sbin+
 75660 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76296 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76360 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 76401 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 76406 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 76475 nobody    20   0  277468  19052   3488 S   0.0  0.8   0:00.08 /usr/sbin+
 76486 nobody    20   0  277748  19332   3508 S   0.0  0.8   0:00.08 /usr/sbin+
 76487 nobody    20   0  277880  19580   3808 S   0.0  0.8   0:00.05 /usr/sbin+
 76493 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 76514 nobody    20   0  277828  19404   3700 S   0.0  0.8   0:00.05 /usr/sbin+
 76605 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 76845 nigeria   20   0  401516  10140   5124 S   0.0  0.4   0:00.04 php-fpm: +
 76946 mailnull  20   0   89496   5688   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 76968 mailnull  20   0   89496   5688   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 77005 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 77009 cloudw    20   0  408568  15392   3424 S   0.0  0.6   0:00.04 php-fpm: +
 77013 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77014 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77015 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77016 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77017 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77018 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77019 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77020 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77022 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77023 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77024 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77025 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 77027 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77032 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 77033 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 77034 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 77045 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 77048 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77049 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77050 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 77051 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77053 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77054 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 77055 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77057 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 77058 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77060 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77061 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77062 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 77070 pactpay   20   0   20164    440    164 S   0.0  0.0   0:00.00 jailshell+
 77078 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 77093 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 77101 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 77102 root      20   0    4368      4      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov15   0:38  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      47956  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kworker/u200:0]
root      51600  0.0  0.0      0     0 ?        S    00:05   0:00  \_ [kworker/0:2]
root      56928  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      63080  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:0]
root      66613  0.0  0.0      0     0 ?        S    00:34   0:00  \_ [kworker/1:2]
root      69415  0.0  0.0      0     0 ?        S    00:40   0:00  \_ [kworker/0:3]
root      70308  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/0:4]
root      71265  0.0  0.0      0     0 ?        S    00:44   0:00  \_ [kworker/1:1]
root      73205  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/0:0]
root      73748  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:3]
root      75660  0.0  0.0      0     0 ?        S    00:52   0:00  \_ [kworker/1:4]
root      76296  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44412  3532 ?        Ss   Nov15   0:52 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39500  3904 ?        Ss   Nov15   0:18 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   412 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   620 ?        S<sl Nov15   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1336 ?        Ss   Nov15   0:08 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1956 ?        Ssl  Nov15   0:30 /usr/sbin/nscd
root        524  0.0  0.0  52852   548 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1304 ?        Ssl  Nov15   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5476 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1504 ?        Ss   Nov15   0:19 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   148 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      77013  0.0  0.0 183048  2160 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77032  0.0  0.0 113284  1208 ?        Ss   00:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      77033  0.0  0.0 108052   356 ?        S    00:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      77034  0.0  0.0 113288  1520 ?        S    00:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      77105  0.0  0.0 153840  2096 ?        R    00:54   0:00  |               \_ ps auxf
root      77014  0.0  0.0 183048  2160 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77053  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      77015  0.0  0.0 183048  2160 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77057  0.0  0.0  20164   984 ?        Ss   00:54   0:00  |   \_ jailshell (cloudsms) [77101] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  77101  0.0  0.0  20164   260 ?        S    00:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  77103  0.0  0.0 113284  1212 ?        S    00:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  77106  0.0  0.0 113284   376 ?        R    00:54   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      77016  0.0  0.0 183048  2160 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77051  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      77017  0.0  0.0 183048  2160 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77049  0.0  0.0  20164   804 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      77018  0.0  0.0 183048  2156 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77062  0.0  0.0  20164   988 ?        Ss   00:54   0:00  |   \_ jailshell (cloudsms) [77104] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  77104  0.0  0.0  20164   264 ?        S    00:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  77107  0.0  0.0 113284  1212 ?        S    00:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      77019  0.0  0.0 183048  2156 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77048  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      77020  0.0  0.0 183048  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77061  0.0  0.0  20164   804 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      77022  0.0  0.0 183048  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77060  0.0  0.0  20164   804 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      77023  0.0  0.0 183048  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77058  0.0  0.0  20164   808 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      77024  0.0  0.0 183048  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77055  0.0  0.0  20164   804 ?        Ss   00:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      77025  0.0  0.0 183048  2156 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77054  0.0  0.0  20164   972 ?        Ss   00:54   0:00  |   \_ jailshell (pactpay) [77070] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   77070  0.0  0.0  20164   440 ?        S    00:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   77073  0.0  0.7 480124 17688 ?        S    00:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      77027  0.0  0.0 183048  2152 ?        S    00:54   0:00  \_ /usr/sbin/CROND -n
root      77050  0.0  0.0  20164   972 ?        Ss   00:54   0:00      \_ jailshell (nigeria) [77078] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   77078  0.0  0.0  20164   260 ?        S    00:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   77082  0.0  0.6 404052 16140 ?        S    00:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   108 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4036 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  76946  0.0  0.2  89496  5688 ?        S    00:53   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  76968  0.0  0.2  89496  5688 ?        S    00:53   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:03 /usr/sbin/sshd -D
root      76360  0.0  0.1 111304  4268 ?        Ss   00:53   0:00  \_ sshd: [accepted]
root      76401  0.0  0.1 111304  4272 ?        Ss   00:53   0:00  \_ sshd: [accepted]
sshd      76406  0.0  0.1 115644  2628 ?        S    00:53   0:00  |   \_ sshd: [net]
root      76493  0.0  0.1 111304  4268 ?        Ss   00:53   0:00  \_ sshd: [accepted]
root        919  0.0  0.3 1350088 8156 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35616 ?       SLsl Nov15   0:20 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1080 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15928 ?        Ssl  Nov15   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3156 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3604 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   556 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   636 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3216 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47816  3324 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2624 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   620 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1628 ?        S    Nov15   0:00  \_ dovecot/auth
root      76605  0.0  0.1  60820  4508 ?        S    00:53   0:00  \_ dovecot/lmtp
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.3 1277312 7444 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   712 ?        Ss   Nov15   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.6 1055796 40700 ?       Ssl  Nov15   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.2 322896  5028 ?        Ssl  Nov15   0:09 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  2996 ?        Ss   Nov15   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   76845  0.2  0.4 401516 10140 ?        S    00:53   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    77009  4.0  0.6 408568 15392 ?        S    00:53   0:00  \_ php-fpm: pool cloudware_ng
root        975  0.0  0.0 439788  1752 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3700 ?        Ss   Nov15   0:30 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   836 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   648 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 72624 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7024 ?        Ss   Nov15   0:07 cpsrvd (SSL) - waiting for connections                   
root      77005  0.0  0.0      0     0 ?        Z    00:53   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  1.9 248140 46304 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  3.7 265880 91756 ?        S    Nov15   0:04  \_ spamd child
root       8199  0.0  2.7 249268 67516 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3132 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5148 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 30896 ?        Ss   Nov15   0:31 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.9 262224 23016 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1231  0.0  0.5 209768 12576 ?        Ss   Nov15   0:04 tailwatchd
root       1232  0.0  0.1 167452  4268 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   880 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1516 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.0 1458332 267656 ?      Sl   Nov15   8:58 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8868 ?        Ss   Nov15   0:03 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12840   508 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   464 ?        S    Nov15   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12880   516 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    58444  0.0  0.8 277616 21408 ?        S    00:18   0:01  \_ /usr/sbin/httpd -k start
nobody    65109  0.0  0.8 277864 21300 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody    65124  0.1  0.8 277576 20784 ?        S    00:31   0:01  \_ /usr/sbin/httpd -k start
nobody    67242  0.1  0.8 277848 20604 ?        S    00:35   0:01  \_ /usr/sbin/httpd -k start
nobody    69175  0.0  0.8 277536 20528 ?        S    00:39   0:00  \_ /usr/sbin/httpd -k start
nobody    73288  0.1  0.8 277876 20024 ?        S    00:48   0:00  \_ /usr/sbin/httpd -k start
nobody    73902  0.1  0.8 277472 20064 ?        S    00:49   0:00  \_ /usr/sbin/httpd -k start
nobody    74572  0.1  0.8 277528 20092 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74616  0.1  0.8 277480 19880 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74649  0.1  0.8 277484 19656 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74862  0.1  0.8 277876 20064 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74877  0.1  0.8 277744 19756 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    74878  0.1  0.8 277468 19680 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    75175  0.1  0.8 277876 19728 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    76475  0.1  0.7 277468 19052 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
nobody    76486  0.1  0.7 277748 19332 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
nobody    76487  0.1  0.8 277880 19580 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
nobody    76514  0.1  0.8 277828 19404 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   496 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181460 29496 ?        Ss   00:00   0:03 lfd - sleeping
## mysql stats
Uptime: 37775  Threads: 3  Questions: 3449697  Slow queries: 0  Opens: 10913  Flush tables: 1  Open tables: 2000  Queries per second avg: 91.322
*************************** 1. row ***************************
     Id: 48624
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: query end
   Info: INSERT INTO `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"messag
*************************** 2. row ***************************
     Id: 48626
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 48630
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 48631
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.143.119 TIME_WAIT
      1 114.119.145.216 TIME_WAIT
      1 114.119.154.89 TIME_WAIT
      1 142.147.199.184 TIME_WAIT
      1 154.30.72.55 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 190.106.180.51 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.173.175.230 TIME_WAIT
      1 44.209.35.147 TIME_WAIT
      1 45.82.78.114 TIME_WAIT
      1 47.128.59.58 TIME_WAIT
      1 51.222.168.56 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 92.205.186.4 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.174 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 00:54:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 29 minutes 31 seconds
   Server load: 1.05 0.87 0.55
   Total accesses: 202113 - Total Traffic: 4.3 GB - Total Duration: 106878365
   CPU Usage: u6.27 s6.67 cu2451.07 cs2088.81 - 12.1% CPU load
   5.35 requests/sec - 119.6 kB/second - 22.3 kB/request - 528.805 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

K_W.K_RC_KKK._.K_K__K...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                             Request
   0-0  65109 7/325/9886  K 3.91 1     24  5113309 10.7  2.42  207.16 66.249.70.7   http/1.1 test.cloudware.ng:443  GET /2991856755?goodscode=2987936342 HTTP/1.1
   1-0  69175 0/170/10043 _ 3.14 2     1   5360966 0.0   1.98  214.10 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   2-0  65124 0/429/9648  W 8.64 0     0   5045533 0.0   2.87  208.84 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  -     0/0/9811    . 0.00 31    0   4943481 0.0   0.00  205.84 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   4-0  76475 6/15/10551  K 0.33 2     352 5510461 187.7 0.42  214.98 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=1307266034 HTTP/1.1
   5-0  67242 0/447/9321  _ 9.17 2     261 5021673 0.0   2.67  201.12 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=2663334103 HTTP/1.1
   6-0  74572 0/60/9898   R 1.21 4     305 5041045 0.0   1.25  210.88 192.178.4.98  http/1.1 team.cloudware.ng:443
   7-0  74616 1/57/8891   C 1.20 1     57  4641494 24.4  1.06  191.51 92.205.186.4  http/1.1 cloudware.ng:443       POST /xmlrpc.php HTTP/1.1
   8-0  58444 0/497/8970  _ 9.67 1     304 4691752 0.0   4.93  192.60 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2244331756 HTTP/1.1
   9-0  74649 4/57/8729   K 1.35 3     401 4460571 128.8 1.47  210.51 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=755440183 HTTP/1.1
   10-0 76486 3/14/9013   K 0.31 2     356 4490600 94.3  0.35  199.58 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1226826295 HTTP/1.1
   11-0 73288 2/109/8404  K 2.26 0     363 4492152 66.1  1.23  192.28 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1985450308 HTTP/1.1
   12-0 -     0/0/7963    . 0.00 30    0   4635173 0.0   0.00  177.44 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 76487 0/9/8008    _ 0.20 2     1   4469054 0.0   0.18  183.68 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   14-0 -     0/0/7771    . 0.00 10    0   3904451 0.0   0.00  166.38 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 73902 2/110/7719  K 2.47 0     371 4151912 65.0  1.92  167.66 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=77656262 HTTP/1.1
   16-0 74862 0/52/6945   _ 1.02 0     0   3614436 0.0   1.11  153.84 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   17-0 74877 3/46/6531   K 1.03 0     359 3203729 94.3  1.13  134.91 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=720670057 HTTP/1.1
   18-0 74878 0/60/5887   _ 1.48 3     262 3262601 0.0   1.25  139.68 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3899575220 HTTP/1.1
   19-0 75175 0/61/6629   _ 1.44 1     456 3253069 0.0   1.12  133.36 52.0.218.219  http/1.1 nigeriadecide.org:443  GET /ALL_PROGRESSIVES_CONGRESS.php HTTP/1.1
   20-0 76514 5/10/3934   K 0.16 1     350 2230823 157.4 0.24  90.54  192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=1340320417 HTTP/1.1
   21-0 -     0/0/4054    . 0.00 1610  0   2227056 0.0   0.00  92.17  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/3807    . 0.00 1675  0   2231173 0.0   0.00  95.20  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/4103    . 0.00 1656  0   2264690 0.0   0.00  96.23  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2483    . 0.00 1674  0   1524414 0.0   0.00  60.33  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1233    . 0.00 1676  0   661151  0.0   0.00  28.08  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1018    . 0.00 1602  0   570230  0.0   0.00  24.14  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/652     . 0.00 2009  0   362478  0.0   0.00  14.29  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/509     . 0.00 2241  0   281598  0.0   0.00  11.72  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/458     . 0.00 2281  0   254403  0.0   0.00  10.31  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1106    . 0.00 2265  0   650529  0.0   0.00  26.63  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/476     . 0.00 1999  0   195797  0.0   0.00  7.80   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/326     . 0.00 2239  0   135048  0.0   0.00  4.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/147     . 0.00 2260  0   83222   0.0   0.00  2.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/586     . 0.00 2255  0   352682  0.0   0.00  11.17  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/222     . 0.00 2274  0   116759  0.0   0.00  2.54   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/112     . 0.00 2242  0   126228  0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/63      . 0.00 2144  0   10786   0.0   0.00  0.35   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/29      . 0.00 2289  0   15137   0.0   0.00  0.47   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/527     . 0.00 1663  0   236253  0.0   0.00  9.69   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/125     . 0.00 2156  0   109425  0.0   0.00  2.10   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/139     . 0.00 1992  0   76178   0.0   0.00  1.99   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/123     . 0.00 2244  0   72768   0.0   0.00  3.11   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/106     . 0.00 2287  0   64987   0.0   0.00  2.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/41      . 0.00 2301  0   9302    0.0   0.00  0.53   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/348     . 0.00 2269  0   196796  0.0   0.00  8.46   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/22      . 0.00 2251  0   14914   0.0   0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/21      . 0.00 2270  0   5053    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/194     . 0.00 1665  0   41020   0.0   0.00  1.24   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/48      . 0.00 2288  0   55353   0.0   0.00  2.36   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/444     . 0.00 2296  0   253169  0.0   0.00  9.85   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/35      . 0.00 2272  0   12386   0.0   0.00  0.57   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/26      . 0.00 2302  0   8755    0.0   0.00  0.36   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/118     . 0.00 2273  0   57707   0.0   0.00  2.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/266     . 0.00 2248  0   133476  0.0   0.00  5.87   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/410     . 0.00 2275  0   301035  0.0   0.00  13.69  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/73      . 0.00 2276  0   33087   0.0   0.00  0.78   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/27      . 0.00 2253  0   8189    0.0   0.00  0.33   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/200     . 0.00 2294  0   155909  0.0   0.00  4.53   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/16      . 0.00 2297  0   14884   0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/155     . 0.00 2293  0   87440   0.0   0.00  3.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/177     . 0.00 1671  0   37690   0.0   0.00  1.47   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/116     . 0.00 2298  0   68685   0.0   0.00  2.82   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/17      . 0.00 2295  0   10304   0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/226     . 0.00 1972  0   39016   0.0   0.00  1.65   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/65      . 0.00 2250  0   4299    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/48      . 0.00 2158  0   13648   0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/10      . 0.00 2299  0   56      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/17      . 0.00 2292  0   16258   0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/104     . 0.00 2257  0   33893   0.0   0.00  1.82   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/59      . 0.00 2300  0   64544   0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/922     . 0.00 2291  0   492825  0.0   0.00  20.57  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/133     . 0.00 2256  0   54728   0.0   0.00  1.76   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/140     . 0.00 2259  0   93013   0.0   0.00  3.19   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/54      . 0.00 8159  0   42053   0.0   0.00  1.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/13      . 0.00 8241  0   12308   0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/149     . 0.00 8242  0   87089   0.0   0.00  3.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/13      . 0.00 8263  0   1935    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/16      . 0.00 8239  0   16052   0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/41      . 0.00 8126  0   30094   0.0   0.00  0.73   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/19      . 0.00 12866 0   6786    0.0   0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/359     . 0.00 11592 0   198767  0.0   0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/3       . 0.00 26784 0   23      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   83-0 -     0/0/3       . 0.00 26758 0   644     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   84-0 -     0/0/2       . 0.00 26776 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   85-0 -     0/0/7       . 0.00 26743 0   3861    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 893
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...52)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 108142
   total entries replaced since starting: 0
   total entries expired since starting: 107206
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 482 miss
   total removes since starting: 43 hit, 55 miss
Youez - 2016 - github.com/yon3zu
LinuXploit