403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.03.24.txt
 ## swap threshold exceeded
## server overview
2025-11-16.03.24 load[0] mem[49/81] mysql[1/10] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1047         225         103        1090        1026
Swap:          1999        1710         289
 03:24:01 up 12:59,  0 users,  load average: 0.36, 0.38, 0.30
## system overview
top - 03:24:01 up 12:59,  0 users,  load average: 0.36, 0.38, 0.30
Tasks: 197 total,   1 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.8 us, 32.3 sy,  0.0 ni, 12.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   227376 free,  1076152 used,  1116772 buff/cache
KiB Swap:  2047996 total,   296188 free,  1751808 used.  1048140 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 264136   3892 S  66.7 10.9  11:00.81 /usr/sbin+
 70564 nigeria   20   0  404052  16140  10384 S  20.0  0.7   0:00.03 /opt/cpan+
   527 polkitd   20   0  612240   1184    792 S   6.7  0.0   0:06.41 /usr/lib/+
     1 root      20   0   44412   3484   1632 S   0.0  0.1   1:03.80 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.20 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:46.77 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.05 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.02 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.57 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.82 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.39 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:03.07 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.80 [kworker/+
   358 root      20   0   40244   5436   5184 S   0.0  0.2   0:23.21 /usr/lib/+
   385 root      20   0   45444    396    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    608    480 S   0.0  0.0   0:03.44 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:01.05 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.03 /usr/sbin+
   521 root      20   0   24708   1332    956 S   0.0  0.1   0:10.86 /usr/lib/+
   523 nscd      20   0 1264844   1956    916 S   0.0  0.1   0:37.40 /usr/sbin+
   524 root      20   0   52852    464    356 S   0.0  0.0   0:00.01 /usr/sbin+
   529 root      20   0  224148   3944   1028 S   0.0  0.2   0:00.52 queueproc+
   531 dbus      20   0   58740   1536    788 S   0.0  0.1   0:24.74 /usr/bin/+
   539 rpc       20   0   69256    132     72 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.33 /usr/sbin+
   577 root      20   0   24208     76     48 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4004   1072 S   0.0  0.2   0:00.88 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:03.44 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:04.76 /usr/sbin+
   919 root      20   0 1350088   7564    200 S   0.0  0.3   0:20.15 /usr/bin/+
   920 systuser  20   0  111864     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  35536   5924 S   0.0  1.5   0:25.47 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:01.03 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.97 pure-ftpd+
   926 root      20   0  572372   1072    496 S   0.0  0.0   0:04.04 /usr/bin/+
   927 systuser  20   0  114016  15724   2776 S   0.0  0.6   0:11.06 /usr/loca+
   928 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508    820    640 S   0.0  0.0   0:00.54 /usr/sbin+
   932 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   6304    220 S   0.0  0.3   0:24.34 /usr/bin/+
   946 root      20   0  396248    660    580 S   0.0  0.0   0:01.16 php-fpm: +
   954 named     20   0 1185864  43204   2312 S   0.0  1.8   0:23.84 /usr/sbin+
   957 root      20   0  331088   6680   5372 S   0.0  0.3   0:11.93 /usr/sbin+
   973 root      20   0  400740   3000    888 S   0.0  0.1   0:07.14 php-fpm: +
   975 root      20   0  439788   1668   1576 S   0.0  0.1   0:01.36 php-fpm: +
   978 cpanelc+  20   0   10456   3576   2416 S   0.0  0.1   0:37.16 /usr/loca+
   980 root      20   0  388892    796    696 S   0.0  0.0   0:01.39 php-fpm: +
   991 root      20   0  389508    700    608 S   0.0  0.0   0:01.27 php-fpm: +
   992 root      20   0 1763124  76320    960 S   0.0  3.2   0:14.39 /usr/loca+
   993 root      20   0  261288   7008   1940 S   0.0  0.3   0:09.38 cpsrvd (S+
  1065 dovenull  20   0   47524   2996   1800 S   0.0  0.1   0:00.88 dovecot/p+
  1066 dovenull  20   0   47948   3120   1740 S   0.0  0.1   0:00.48 dovecot/i+
  1067 dovecot   20   0   10320    548    432 S   0.0  0.0   0:00.14 dovecot/a+
  1068 root      20   0   10452    632    436 S   0.0  0.0   0:00.52 dovecot/l+
  1069 dovenull  20   0   47600   3168   1828 S   0.0  0.1   0:00.68 dovecot/p+
  1070 dovenull  20   0   47848   3280   1980 S   0.0  0.1   0:00.44 dovecot/i+
  1077 root      20   0   24528   2520    632 S   0.0  0.1   0:00.28 dovecot/c+
  1078 dovecot   20   0   13568    776    560 S   0.0  0.0   0:00.10 dovecot/s+
  1150 root      20   0  248140  23500   1104 S   0.0  1.0   0:08.39 /usr/loca+
  1151 systuser  20   0  157704   2980    952 S   0.0  0.1   0:00.21 SonarPush+
  1152 dovecot   20   0   41180   1636   1132 S   0.0  0.1   0:01.09 dovecot/a+
  1153 wp-tool+  20   0  387556   5260   1964 S   0.0  0.2   0:00.42 /usr/bin/+
  1154 wp-tool+  20   0  410480  28332   2028 S   0.0  1.2   0:39.52 /usr/bin/+
  1229 root      20   0  262228  24616   6760 S   0.0  1.0   0:02.56 cpdavd - +
  1231 root      20   0  210204  11084   2236 S   0.0  0.5   0:06.05 tailwatchd
  1232 root      20   0  167452   3208   1832 S   0.0  0.1   0:00.75 dnsadmin +
  1638 root      20   0  299272    664    500 S   0.0  0.0   0:01.25 php-fpm: +
  1681 root      38  18  130416   1488    808 S   0.0  0.1   0:00.11 cpanellog+
  1909 root      20   0  266984   8220    804 S   0.0  0.3   0:04.55 /usr/sbin+
  1911 root      20   0   12836    476    364 S   0.0  0.0   0:05.27 /usr/loca+
  1912 root      20   0   12732    432    356 S   0.0  0.0   0:04.61 /usr/loca+
  1913 root      20   0   12868    484    360 S   0.0  0.0   0:05.05 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  268280  98948   2716 S   0.0  4.1   0:07.55 spamd chi+
  8199 root      20   0  249268  22284    696 S   0.0  0.9   0:00.06 spamd chi+
 31033 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.86 [kworker]
 41687 nobody    20   0  277652  21200   5200 S   0.0  0.9   0:03.68 /usr/sbin+
 46331 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 47250 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 48777 root      20   0  182208  29704   1696 S   0.0  1.2   0:13.49 lfd - sle+
 53959 nobody    20   0  277692  20752   5004 S   0.0  0.9   0:02.01 /usr/sbin+
 54043 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56217 nobody    20   0  277680  20860   5072 S   0.0  0.9   0:01.43 /usr/sbin+
 56521 root      20   0  123364    760    532 S   0.0  0.0   0:00.00 /usr/sbin+
 58559 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 62052 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62712 nobody    20   0  277796  20504   4804 S   0.0  0.8   0:00.87 /usr/sbin+
 63723 nobody    20   0  277680  19888   4440 S   0.0  0.8   0:00.73 /usr/sbin+
 64252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64375 nobody    20   0  277868  20148   4440 S   0.0  0.8   0:00.92 /usr/sbin+
 64919 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65005 nobody    20   0  277896  20004   4552 S   0.0  0.8   0:00.63 /usr/sbin+
 66208 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 67420 nobody    20   0  277864  19256   4072 S   0.0  0.8   0:00.40 /usr/sbin+
 67626 nobody    20   0  277748  19508   4176 S   0.0  0.8   0:00.39 /usr/sbin+
 67642 nobody    20   0  277884  19352   4076 S   0.0  0.8   0:00.33 /usr/sbin+
 67643 nobody    20   0  277748  19252   4016 S   0.0  0.8   0:00.33 /usr/sbin+
 67653 nobody    20   0  277748  19524   4240 S   0.0  0.8   0:00.36 /usr/sbin+
 67654 nobody    20   0  277752  19232   4016 S   0.0  0.8   0:00.36 /usr/sbin+
 68134 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68155 nobody    20   0  277624  19280   4100 S   0.0  0.8   0:00.24 /usr/sbin+
 68225 nobody    20   0  277744  19512   4160 S   0.0  0.8   0:00.25 /usr/sbin+
 69500 mailnull  20   0   89500   5440   2220 S   0.0  0.2   0:00.00 /usr/sbin+
 70142 nobody    20   0  277876  18824   3696 S   0.0  0.8   0:00.04 /usr/sbin+
 70152 nobody    20   0  277488  18780   3760 S   0.0  0.8   0:00.04 /usr/sbin+
 70153 nobody    20   0  277744  18572   3376 S   0.0  0.8   0:00.05 /usr/sbin+
 70205 nobody    20   0  277744  18604   3428 S   0.0  0.8   0:00.04 /usr/sbin+
 70416 mailnull  20   0   89312   5756   2496 S   0.0  0.2   0:00.00 /usr/sbin+
 70438 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 70439 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 70440 nigeria   20   0  400460   5308   2348 S   0.0  0.2   0:00.00 php-fpm: +
 70479 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 70480 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 70488 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 70489 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70492 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70493 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70494 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70495 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70496 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70497 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70498 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70499 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70500 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70502 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70505 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 70507 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 70509 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 70521 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 70534 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70538 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70539 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70540 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70541 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70543 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70544 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70545 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 70546 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70547 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70548 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 70555 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 70559 pactpay   20   0  480124  17316  11580 S   0.0  0.7   0:00.01 /opt/cpan+
 70561 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 70563 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 70575 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 81352 root      20   0  183052   1616   1048 S   0.0  0.1   0:00.00 /usr/sbin+
 81404 root      20   0  113284    692    516 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056    292    216 S   0.0  0.0   0:00.00 sleep 3h +
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov15   0:46  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:03  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root      46331  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:2]
root      47250  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/1:3]
root      54043  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:1]
root      58559  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/0:3]
root      62052  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/0:0]
root      64252  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/0:4]
root      64919  0.0  0.0      0     0 ?        S    03:16   0:00  \_ [kworker/1:1]
root      66208  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/u200:1]
root      68134  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44412  3484 ?        Ss   Nov15   1:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5436 ?        Ss   Nov15   0:23 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   396 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   608 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:01 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1332 ?        Ss   Nov15   0:10 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1956 ?        Ssl  Nov15   0:37 /usr/sbin/nscd
root        524  0.0  0.0  52852   464 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1184 ?        Ssl  Nov15   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.1 224148  3944 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1536 ?        Ss   Nov15   0:24 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   132 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052  1616 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284   692 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056   292 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root      70488  0.0  0.0 183048  2152 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70505  0.0  0.0 113284  1212 ?        Ss   03:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      70507  0.0  0.0 108052   356 ?        S    03:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      70509  0.0  0.0 113288  1520 ?        S    03:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      70577  0.0  0.0 153840  2092 ?        R    03:24   0:00  |               \_ ps auxf
root      70489  0.0  0.0 183048  2156 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70547  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      70492  0.0  0.0 183048  2156 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70538  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      70493  0.0  0.0 183048  2156 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70541  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      70494  0.0  0.0 183048  2152 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70544  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      70495  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70546  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      70496  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70543  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      70497  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70534  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      70498  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70539  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      70499  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70540  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      70500  0.0  0.0 183048  2152 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70545  0.0  0.0  20164   968 ?        Ss   03:24   0:00  |   \_ jailshell (pactpay) [70555] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70555  0.0  0.0  20164   264 ?        S    03:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70559  0.0  0.7 480124 17316 ?        S    03:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      70502  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      70548  0.0  0.0  20164   960 ?        Ss   03:24   0:00      \_ jailshell (nigeria) [70561] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70561  0.0  0.0  20164   256 ?        S    03:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70564  0.0  0.6 404052 16140 ?        S    03:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    76 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4004 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  69500  0.0  0.2  89500  5440 ?        S    03:22   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  70416  0.0  0.2  89312  5756 ?        S    03:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root      70438  0.0  0.1 111304  4440 ?        Ss   03:23   0:00  \_ sshd: [accepted]
sshd      70439  0.0  0.1 115644  2624 ?        S    03:23   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 7564 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    68 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35536 ?       SLsl Nov15   0:25 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1072 ?        Ssl  Nov15   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15724 ?        Ssl  Nov15   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    52 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   820 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  2996 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3120 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   548 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3168 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47848  3280 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2520 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   776 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1636 ?        S    Nov15   0:01  \_ dovecot/auth
root      70479  0.0  0.1  41052  2728 ?        S    03:24   0:00  \_ dovecot/auth -w
systuser    932  0.0  0.0 113932    68 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 6304 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   660 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.7 1185864 43204 ?       Ssl  Nov15   0:23 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.2 331088  6680 ?        Ssl  Nov15   0:11 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3000 ?        Ss   Nov15   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   70440  0.0  0.2 400460  5308 ?        S    03:23   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1668 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3576 ?        Ss   Nov15   0:37 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   796 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   700 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.1 1763124 76320 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7008 ?        Ss   Nov15   0:09 cpsrvd (SSL) - waiting for connections                   
root      70480  0.0  0.0      0     0 ?        Z    03:24   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root       1150  0.0  0.9 248140 23500 ?        Ss   Nov15   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  4.0 268280 98948 ?        S    Nov15   0:07  \_ spamd child
root       8199  0.0  0.9 249268 22284 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2980 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5260 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.1 410480 28332 ?        Ss   Nov15   0:39 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  1.0 262228 24616 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1231  0.0  0.4 210204 11084 ?        Ss   Nov15   0:06 tailwatchd
root       1232  0.0  0.1 167452  3208 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   664 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1488 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 10.9 1458332 264136 ?      Sl   Nov15  11:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8220 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12836   476 ?        S    Nov15   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   432 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12868   484 ?        S    Nov15   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    41687  0.1  0.8 277652 21200 ?        S    02:40   0:03  \_ /usr/sbin/httpd -k start
nobody    53959  0.1  0.8 277692 20752 ?        S    02:57   0:02  \_ /usr/sbin/httpd -k start
nobody    56217  0.1  0.8 277680 20860 ?        S    03:00   0:01  \_ /usr/sbin/httpd -k start
nobody    62712  0.1  0.8 277796 20504 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    63723  0.1  0.8 277680 19888 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
nobody    64375  0.1  0.8 277868 20148 ?        S    03:15   0:00  \_ /usr/sbin/httpd -k start
nobody    65005  0.1  0.8 277896 20004 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
cloudw    70575  0.0  0.6 353712 15980 ?        S    03:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    67420  0.1  0.7 277864 19256 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67626  0.1  0.8 277748 19508 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67642  0.1  0.7 277884 19352 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67643  0.1  0.7 277748 19252 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67653  0.1  0.8 277748 19524 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67654  0.1  0.7 277752 19232 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    68155  0.1  0.7 277624 19280 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    68225  0.1  0.8 277744 19512 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
cloudw    70521  0.0  0.6 353712 15972 ?        S    03:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70142  0.1  0.7 277876 18824 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    70152  0.1  0.7 277488 18780 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    70153  0.1  0.7 277744 18572 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    70205  0.1  0.7 277744 18604 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148     8 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152    36 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 182208 29704 ?        Ss   00:00   0:13 lfd - sleeping
root      56521  0.0  0.0 123364   760 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 46775  Threads: 3  Questions: 4157782  Slow queries: 0  Opens: 13098  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.888
*************************** 1. row ***************************
     Id: 58634
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 58638
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 58640
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.245 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 03:24:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 59 minutes 31 seconds
   Server load: 0.36 0.38 0.30
   Total accesses: 242587 - Total Traffic: 5.0 GB - Total Duration: 121696805
   CPU Usage: u9.4 s8.25 cu2930.55 cs2489.24 - 11.6% CPU load
   5.19 requests/sec - 111.6 kB/second - 21.5 kB/request - 501.663 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KKKKK.KW_KK.W_._K.WK.KKK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol          VHost                       Request
   0-0  68155 4/47/12315  K 1.02  1     279 5786086 127.7 1.79  245.10 192.178.4.97  http/1.1 team.cloudware.ng:443    GET /?l=657214447 HTTP/1.1
   1-0  70142 1/6/12419   K 0.13  2     360 6133866 34.8  0.15  248.88 192.178.4.104 http/1.1 team.cloudware.ng:443    GET /?l=2157706275 HTTP/1.1
   2-0  53959 2/447/11849 K 10.45 2     400 5732580 65.8  7.20  243.36 192.178.4.103 http/1.1 team.cloudware.ng:443    GET /?l=482903296 HTTP/1.1
   3-0  41687 5/680/12104 K 16.79 4     357 5661309 164.7 13.75 242.37 192.178.4.96  http/1.1 team.cloudware.ng:443    GET /?l=903968723 HTTP/1.1
   4-0  70152 4/7/12820   K 0.12  3     319 6537310 129.7 0.18  246.05 192.178.4.105 http/1.1 team.cloudware.ng:443    GET /?l=1292364940 HTTP/1.1
   5-0  -     0/0/11380   . 0.00  6     0   5587429 0.0   0.00  240.70 ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   6-0  56217 3/344/11828 K 7.11  0     347 5674771 95.9  5.46  241.53 192.178.4.100 http/1.1 team.cloudware.ng:443    GET /?l=1624698077 HTTP/1.1
   7-0  68225 1/44/10864  W 1.05  0     0   5245165 35.4  1.13  220.34 192.178.4.102 http/1.1 team.cloudware.ng:443    GET /?l=3679099184 HTTP/1.1
   8-0  63723 0/147/10375 _ 3.04  0     0   5210004 0.0   3.59  220.44 ::1           http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   9-0  62712 2/199/10761 K 4.76  1     345 5113268 68.0  3.33  243.17 192.178.4.104 http/1.1 team.cloudware.ng:443    GET /?l=1867085308 HTTP/1.1
   10-0 64375 3/262/10749 K 5.87  0     354 5090137 97.3  2.64  231.09 192.178.4.101 http/1.1 team.cloudware.ng:443    GET /?l=3932905511 HTTP/1.1
   11-0 -     0/0/10021   . 0.00  22    0   5187697 0.0   0.00  226.50 ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   12-0 65005 1/164/9455  W 3.41  0     0   5250184 36.0  1.86  201.86 192.178.4.98  http/1.1 team.cloudware.ng:443    GET /?l=1553408083 HTTP/1.1
   13-0 67420 0/146/9829  _ 1.17  1     279 5002135 0.0   1.64  208.89 192.178.4.103 http/1.1 team.cloudware.ng:443    GET /?l=1350573591 HTTP/1.1
   14-0 -     0/0/8549    . 0.00  5     0   4214275 0.0   0.00  182.26 ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   15-0 67626 0/65/8868   _ 1.68  0     297 4606190 0.0   1.74  190.51 192.178.4.102 http/1.1 team.cloudware.ng:443    GET /?l=2152850122 HTTP/1.1
   16-0 70153 1/7/8002    K 0.19  2     27  3980274 7.7   0.19  172.11 74.7.227.119  http/1.1 m.cloudsms.com.ng:443    GET / HTTP/1.1
   17-0 -     0/0/7738    . 0.00  21    0   3669609 0.0   0.00  157.03 ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-0 67642 0/57/6697   W 1.52  0     0   3619922 0.0   1.97  156.20 ::1           http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   19-0 67643 1/52/6955   K 1.39  3     0   3392803 5.6   1.53  139.57 74.7.228.3    http/1.1 m.cloudsms.com.ng:443    GET /robots.txt HTTP/1.1
   20-0 -     0/0/4830    . 0.00  19    0   2517337 0.0   0.00  104.70 ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 70205 1/7/4644    K 0.15  1     353 2427455 34.0  0.34  100.91 66.249.70.38  http/1.1 support.cloudware.ng:443 GET /?c=1465778799 HTTP/1.1
   22-0 67653 1/141/4551  K 0.98  2     404 2546606 35.4  1.38  107.92 192.178.4.99  http/1.1 team.cloudware.ng:443    GET /?l=3874964995 HTTP/1.1
   23-0 67654 2/66/4557   K 1.62  2     398 2533862 66.9  1.78  105.42 192.178.4.105 http/1.1 team.cloudware.ng:443    GET /?l=3304543797 HTTP/1.1
   24-0 -     0/0/2611    . 0.00  1531  0   1598512 0.0   0.00  62.90  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/1339    . 0.00  1656  0   720622  0.0   0.00  30.12  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/1182    . 0.00  3425  0   641835  0.0   0.00  26.97  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/767     . 0.00  3337  0   421900  0.0   0.00  15.98  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/967     . 0.00  3406  0   448661  0.0   0.00  17.56  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/522     . 0.00  3419  0   306534  0.0   0.00  11.62  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/1233    . 0.00  3428  0   719887  0.0   0.00  28.67  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/632     . 0.00  3418  0   244800  0.0   0.00  9.07   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/399     . 0.00  3404  0   188326  0.0   0.00  6.04   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/212     . 0.00  3427  0   119093  0.0   0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/839     . 0.00  3157  0   454966  0.0   0.00  14.68  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/256     . 0.00  3415  0   159053  0.0   0.00  3.08   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/249     . 0.00  3391  0   209399  0.0   0.00  5.47   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/269     . 0.00  3411  0   116246  0.0   0.00  3.21   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/87      . 0.00  3424  0   41995   0.0   0.00  0.97   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/679     . 0.00  3409  0   324717  0.0   0.00  13.47  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/146     . 0.00  3414  0   134902  0.0   0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/303     . 0.00  2963  0   130078  0.0   0.00  4.55   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/169     . 0.00  3402  0   102387  0.0   0.00  10.66  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/140     . 0.00  3433  0   75922   0.0   0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/638     . 0.00  1870  0   199834  0.0   0.00  13.45  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/534     . 0.00  3407  0   268130  0.0   0.00  12.15  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/31      . 0.00  3408  0   37248   0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/157     . 0.00  3422  0   39861   0.0   0.00  1.58   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/253     . 0.00  3228  0   72401   0.0   0.00  3.19   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -     0/0/115     . 0.00  3314  0   85640   0.0   0.00  3.68   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -     0/0/448     . 0.00  3434  0   253173  0.0   0.00  9.86   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -     0/0/48      . 0.00  3390  0   22050   0.0   0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -     0/0/30      . 0.00  3432  0   8952    0.0   0.00  0.37   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -     0/0/125     . 0.00  6204  0   81098   0.0   0.00  2.15   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -     0/0/286     . 0.00  6198  0   153536  0.0   0.00  5.93   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -     0/0/422     . 0.00  6180  0   320901  0.0   0.00  13.81  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -     0/0/79      . 0.00  6228  0   50774   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -     0/0/30      . 0.00  6229  0   8201    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -     0/0/345     . 0.00  6064  0   224672  0.0   0.00  7.04   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -     0/0/211     . 0.00  6068  0   85306   0.0   0.00  3.87   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -     0/0/257     . 0.00  5812  0   154505  0.0   0.00  5.37   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -     0/0/210     . 0.00  6083  0   75311   0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -     0/0/225     . 0.00  6223  0   116672  0.0   0.00  4.21   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -     0/0/53      . 0.00  6070  0   41973   0.0   0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -     0/0/234     . 0.00  6191  0   61300   0.0   0.00  1.81   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -     0/0/104     . 0.00  6071  0   43929   0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -     0/0/54      . 0.00  6189  0   37444   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -     0/0/137     . 0.00  5790  0   63130   0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -     0/0/21      . 0.00  6220  0   40095   0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -     0/0/201     . 0.00  6199  0   93119   0.0   0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -     0/0/66      . 0.00  6208  0   66683   0.0   0.00  1.28   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -     0/0/931     . 0.00  6182  0   498006  0.0   0.00  20.96  ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -     0/0/182     . 0.00  6059  0   69161   0.0   0.00  2.55   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -     0/0/263     . 0.00  6186  0   128005  0.0   0.00  4.46   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -     0/0/95      . 0.00  6056  0   55142   0.0   0.00  2.51   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -     0/0/15      . 0.00  6216  0   12842   0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -     0/0/151     . 0.00  6219  0   87735   0.0   0.00  3.29   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -     0/0/15      . 0.00  6218  0   2685    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -     0/0/17      . 0.00  6242  0   16053   0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   79-0 -     0/0/43      . 0.00  6230  0   30142   0.0   0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   80-0 -     0/0/21      . 0.00  6226  0   6790    0.0   0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   81-0 -     0/0/361     . 0.00  6225  0   198769  0.0   0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   82-0 -     0/0/6       . 0.00  6201  0   876     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   83-0 -     0/0/3       . 0.00  35759 0   644     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   84-0 -     0/0/2       . 0.00  35777 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   85-0 -     0/0/7       . 0.00  35744 0   3861    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1013
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...67)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 134987
   total entries replaced since starting: 0
   total entries expired since starting: 133919
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 588 miss
   total removes since starting: 55 hit, 60 miss
Youez - 2016 - github.com/yon3zu
LinuXploit