403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.04.42.txt
 ## swap threshold exceeded
## server overview
2025-11-16.04.42 load[0] mem[63/69] mysql[1/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1409         244          24         708         744
Swap:          1999        1519         480
 04:42:01 up 14:17,  0 users,  load average: 0.09, 0.19, 0.26
## system overview
top - 04:42:02 up 14:17,  0 users,  load average: 0.09, 0.19, 0.26
Tasks: 199 total,   4 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.8 us, 30.8 sy,  0.0 ni, 15.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   242972 free,  1450304 used,   727024 buff/cache
KiB Swap:  2047996 total,   492176 free,  1555820 used.   755552 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1462292 278852   4320 S  73.7 11.5  12:04.44 /usr/sbin+
 26406 nigeria   20   0  404052  16132  10380 S  15.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44412   3444   1520 S  10.5  0.1   1:10.03 /usr/lib/+
 26403 root      20   0  160220   2068   1584 R   5.3  0.1   0:00.01 top -bcn1
 26409 pactpay   20   0  480124  17320  11580 S   5.3  0.7   0:00.02 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.13 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.45 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:51.36 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.82 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:38.53 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.07 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.91 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:05.22 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:03.39 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:04.17 [kworker/+
   358 root      20   0   39500   4180   3916 S   0.0  0.2   0:25.82 /usr/lib/+
   385 root      20   0   45444     72     68 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    468    348 S   0.0  0.0   0:03.85 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    348    260 S   0.0  0.0   0:01.16 /usr/sbin+
   516 root      20   0  152780    100     56 S   0.0  0.0   0:00.03 /usr/sbin+
   521 root      20   0   24708   1200    796 S   0.0  0.0   0:11.96 /usr/lib/+
   523 nscd      20   0 1264844   1780    784 S   0.0  0.1   0:41.70 /usr/sbin+
   524 root      20   0   52852    208    140 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240    996    644 S   0.0  0.0   0:07.03 /usr/lib/+
   529 root      20   0  224280   5444   1416 S   0.0  0.2   0:00.60 queueproc+
   531 dbus      20   0   58740   1348    600 S   0.0  0.1   0:27.28 /usr/bin/+
   539 rpc       20   0   69256     32     28 S   0.0  0.0   0:00.05 /sbin/rpc+
   541 root      20   0    4388     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    860    428 S   0.0  0.0   0:01.46 /usr/sbin+
   577 root      20   0   24208     40     24 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704     12     12 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   88988   3856    828 S   0.0  0.2   0:01.02 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:05.99 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    376    276 S   0.0  0.0   0:05.33 /usr/sbin+
   919 root      20   0 1350088   6524     12 S   0.0  0.3   0:20.21 /usr/bin/+
   920 systuser  20   0  111864     60      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  35120   5680 S   0.0  1.5   0:28.11 /usr/loca+
   922 memcach+  20   0  342400      0      0 S   0.0  0.0   0:01.13 /usr/bin/+
   924 root      20   0  153404    268    188 S   0.0  0.0   0:01.06 pure-ftpd+
   926 root      20   0  572372    788    332 S   0.0  0.0   0:04.45 /usr/bin/+
   927 systuser  20   0  114016  10520   2348 S   0.0  0.4   0:12.24 /usr/loca+
   928 systuser  20   0   12756     20      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508    464    304 S   0.0  0.0   0:00.60 /usr/sbin+
   932 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   935 root      20   0 1277312   5968     32 S   0.0  0.2   0:24.36 /usr/bin/+
   946 root      20   0  396248    364    284 S   0.0  0.0   0:01.31 php-fpm: +
   954 named     20   0 1185864  29172   1892 S   0.0  1.2   0:26.52 /usr/sbin+
   957 root      20   0  331088   4516   4000 S   0.0  0.2   0:13.26 /usr/sbin+
   973 root      20   0  400740   1844    628 S   0.0  0.1   0:07.76 php-fpm: +
   975 root      20   0  439788    388    296 S   0.0  0.0   0:01.55 php-fpm: +
   978 cpanelc+  20   0   10456   3428   2300 S   0.0  0.1   0:40.84 /usr/loca+
   980 root      20   0  388892    468    376 S   0.0  0.0   0:01.56 php-fpm: +
   991 root      20   0  389508    360    268 S   0.0  0.0   0:01.43 php-fpm: +
   992 root      20   0 1901868 463296    696 S   0.0 19.1   0:37.54 /usr/loca+
   993 root      20   0  262408  12528   2760 S   0.0  0.5   0:10.40 cpsrvd (S+
  1056 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
  1065 dovenull  20   0   47524   1604    972 S   0.0  0.1   0:00.97 dovecot/p+
  1066 dovenull  20   0   47948   2584   1632 S   0.0  0.1   0:00.59 dovecot/i+
  1067 dovecot   20   0   10320    384    272 S   0.0  0.0   0:00.15 dovecot/a+
  1068 root      20   0   10452    436    288 S   0.0  0.0   0:00.58 dovecot/l+
  1069 dovenull  20   0   47600   1440    848 S   0.0  0.1   0:00.75 dovecot/p+
  1070 dovenull  20   0   48128   2368   1316 S   0.0  0.1   0:00.50 dovecot/i+
  1077 root      20   0   24528   1744    340 S   0.0  0.1   0:00.30 dovecot/c+
  1078 dovecot   20   0   13568    584    392 S   0.0  0.0   0:00.12 dovecot/s+
  1150 root      20   0  248140   2888    748 S   0.0  0.1   0:08.97 /usr/loca+
  1151 systuser  20   0  157704   2956    928 S   0.0  0.1   0:00.23 SonarPush+
  1152 dovecot   20   0   41180   1472   1000 S   0.0  0.1   0:01.22 dovecot/a+
  1229 root      20   0  262228  23000   5136 S   0.0  1.0   0:02.85 cpdavd - +
  1231 root      20   0  210516  10432   2024 S   0.0  0.4   0:06.70 tailwatchd
  1232 root      20   0  167452   1216    668 S   0.0  0.1   0:00.82 dnsadmin +
  1681 root      38  18  130416   1752    988 S   0.0  0.1   0:00.12 cpanellog+
  1909 root      20   0  266984   5496    528 S   0.0  0.2   0:05.05 /usr/sbin+
  4369 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  6990 root      20   0  299272   5932    816 S   0.0  0.2   0:00.03 php-fpm: +
  7015 root      20   0  445028  12948   6096 S   0.0  0.5   0:00.03 sw-engine+
  7147 wp-tool+  20   0  414680  47568   4768 S   0.0  2.0   0:01.46 /usr/bin/+
  7151 wp-tool+  20   0  387528  21672   4728 S   0.0  0.9   0:00.08 /usr/bin/+
  8198 root      20   0  268280  47504   1164 S   0.0  2.0   0:08.20 spamd chi+
  8199 root      20   0  249268   1332    388 S   0.0  0.1   0:00.07 spamd chi+
  8346 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11820 nobody    20   0  277900  20288   4984 S   0.0  0.8   0:01.42 /usr/sbin+
 11944 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 15662 nobody    20   0  277648  19464   4628 S   0.0  0.8   0:01.56 /usr/sbin+
 16034 nobody    20   0  277908  20012   4624 S   0.0  0.8   0:01.07 /usr/sbin+
 17109 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 18127 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 18694 nobody    20   0  277608  19380   4608 S   0.0  0.8   0:01.32 /usr/sbin+
 18703 nobody    20   0  277908  19384   4424 S   0.0  0.8   0:00.95 /usr/sbin+
 19645 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20419 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 21440 nobody    20   0  277712  19408   4432 S   0.0  0.8   0:00.35 /usr/sbin+
 21681 nobody    20   0  277776  19184   4384 S   0.0  0.8   0:00.32 /usr/sbin+
 22527 worencom  20   0   38480   3796   2772 S   0.0  0.2   0:00.00 dovecot/i+
 23313 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24001 nobody    20   0  277596  18644   4192 S   0.0  0.8   0:00.20 /usr/sbin+
 24586 nobody    20   0  277788  18208   3828 S   0.0  0.8   0:00.03 /usr/sbin+
 25343 nobody    20   0  277792  17624   3396 S   0.0  0.7   0:00.04 /usr/sbin+
 25734 nobody    20   0  277636  18036   3812 S   0.0  0.7   0:00.03 /usr/sbin+
 25747 nobody    20   0  277492  17808   3764 S   0.0  0.7   0:00.19 /usr/sbin+
 25760 nobody    20   0  277776  17792   3544 S   0.0  0.7   0:00.08 /usr/sbin+
 25761 nobody    20   0  277492  17764   3744 S   0.0  0.7   0:00.09 /usr/sbin+
 25763 nobody    20   0  277572  17948   3848 S   0.0  0.7   0:00.05 /usr/sbin+
 26194 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 26195 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 26203 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 26204 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 26311 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 26312 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 26313 cloudw    20   0  400460   3132   1532 S   0.0  0.1   0:00.00 php-fpm: +
 26315 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 26333 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26334 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26335 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26336 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26337 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26339 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26340 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26341 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26342 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26343 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26344 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26345 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26347 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26349 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 26351 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 26352 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 26375 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 26377 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 26378 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26379 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26380 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26381 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26382 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26383 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 26384 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 26385 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26387 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26388 root      20   0   20164    956    760 S   0.0  0.0   0:00.00 jailshell+
 26389 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 26400 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 26401 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 26412 nigeria   20   0  400460   4416   2304 S   0.0  0.2   0:00.00 php-fpm: +
 26421 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26422 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
 26423 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 26424 cloudsms  20   0  400804  12968   8728 R   0.0  0.5   0:00.00 /opt/cpan+
 31033 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152     36      0 R   0.0  0.0   0:00.97 [kworker]
 48777 root      20   0  182696   9136   1112 S   0.0  0.4   0:18.73 lfd - sle+
 81206 root      30  10  132964    716     16 S   0.0  0.0   0:00.00 ConfigSer+
 81217 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 208+
 81530 root      20   0   12752    424    288 S   0.0  0.0   0:00.43 /usr/loca+
 81531 root      20   0   12732    416    308 S   0.0  0.0   0:00.37 /usr/loca+
 81532 root      20   0   12760    432    292 S   0.0  0.0   0:00.42 /usr/loca+
 81548 root      20   0   53256   5152     64 S   0.0  0.2   0:00.04 /usr/loca+
 87796 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    Nov15   0:51  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:38  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:05  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:03  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:04  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:05  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      87796  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/u200:0]
root       1056  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/1:5]
root       4369  0.0  0.0      0     0 ?        S    04:13   0:00  \_ [kworker/0:2]
root       8346  0.0  0.0      0     0 ?        S    04:18   0:00  \_ [kworker/0:3]
root      11944  0.0  0.0      0     0 ?        S    04:23   0:00  \_ [kworker/1:1]
root      17109  0.0  0.0      0     0 ?        S    04:29   0:00  \_ [kworker/1:0]
root      18127  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/u200:2]
root      19645  0.0  0.0      0     0 ?        D    04:32   0:00  \_ [kworker/0:4]
root      20419  0.0  0.0      0     0 ?        S    04:33   0:00  \_ [kworker/1:3]
root      23313  0.0  0.0      0     0 ?        S    04:37   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44412  3444 ?        Ss   Nov15   1:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39500  4180 ?        Ss   Nov15   0:25 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444    72 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   468 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   348 ?        Ss   Nov15   0:01 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   100 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1200 ?        Ss   Nov15   0:11 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1780 ?        Ssl  Nov15   0:41 /usr/sbin/nscd
root        524  0.0  0.0  52852   208 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240   996 ?        Ssl  Nov15   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224280  5444 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1348 ?        Ss   Nov15   0:27 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256    32 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    32 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   860 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      26333  0.0  0.1 183080  2424 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26349  0.0  0.0 113284  1208 ?        Ss   04:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      26351  0.0  0.0 108052   360 ?        S    04:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      26352  0.0  0.0 113288  1520 ?        S    04:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      26425  0.0  0.0 153840  2096 ?        R    04:42   0:00  |               \_ ps auxf
root      26334  0.0  0.1 183080  2428 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26377  0.0  0.0  20164   984 ?        Ss   04:42   0:00  |   \_ jailshell (cloudsms) [26426] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  26426  0.0  0.0  20164   256 ?        S    04:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  26427  0.0  0.0 113284  1212 ?        S    04:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  26428  0.0  0.5 400804 12708 ?        R    04:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      26335  0.0  0.1 183080  2428 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26379  0.0  0.0  20164   808 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      26336  0.0  0.1 183080  2424 ?        R    04:42   0:00  \_ /usr/sbin/CROND -n
root      26337  0.0  0.1 183080  2428 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26382  0.0  0.0  20164   808 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      26339  0.0  0.1 183080  2424 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26380  0.0  0.0  20164   808 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      26340  0.0  0.1 183080  2424 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26387  0.0  0.0  20164   808 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      26341  0.0  0.1 183080  2424 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26381  0.0  0.0  20164   808 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      26342  0.0  0.0 183080  2420 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26385  0.0  0.0  20164   804 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      26343  0.0  0.0 183080  2420 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26378  0.0  0.0  20164   808 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      26344  0.0  0.0 183080  2420 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26384  0.0  0.0  20164   812 ?        Ss   04:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      26345  0.0  0.0 183080  2420 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26388  0.0  0.0  20164   956 ?        Ss   04:42   0:00  |   \_ jailshell (pactpay) [26400] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26400  0.0  0.0  20164   256 ?        S    04:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26409  0.0  0.7 480124 17692 ?        S    04:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      26347  0.0  0.0 183080  2420 ?        S    04:42   0:00  \_ /usr/sbin/CROND -n
root      26389  0.0  0.0  20164   960 ?        Ss   04:42   0:00      \_ jailshell (nigeria) [26401] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26401  0.0  0.0  20164   256 ?        S    04:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26406  0.0  0.6 404052 16132 ?        S    04:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    40 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296    44 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704    12 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  88988  3856 ?        Ss   Nov15   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   376 ?        Ss   Nov15   0:05 /usr/sbin/sshd -D
root      26194  0.0  0.2 157100  5076 ?        Ss   04:41   0:00  \_ sshd: unknown [priv]
sshd      26195  0.0  0.1 115644  2628 ?        S    04:41   0:00  |   \_ sshd: unknown [net]
root      26203  0.0  0.1 111304  4264 ?        Ss   04:41   0:00  \_ sshd: [accepted]
sshd      26204  0.0  0.1 115644  2628 ?        S    04:41   0:00  |   \_ sshd: [net]
root      26311  0.3  0.2 162436  5828 ?        Ss   04:41   0:00  \_ sshd: root [priv]
sshd      26312  0.0  0.1 115644  2628 ?        S    04:41   0:00      \_ sshd: root [net]
root        919  0.0  0.2 1350088 6524 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    60 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35120 ?       SLsl Nov15   0:28 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400     0 ?        Ssl  Nov15   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   268 ?        Ss   Nov15   0:01 pure-ftpd (SERVER)
root        926  0.0  0.0 572372   788 ?        Ssl  Nov15   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.4 114016 10520 ?        Ssl  Nov15   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    20 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    40 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   464 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.0  47524  1604 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  2584 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   384 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   436 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.0  47600  1440 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.0  48128  2368 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.0  24528  1744 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   584 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1472 ?        S    Nov15   0:01  \_ dovecot/auth
worencom  22527  0.0  0.1  38480  3796 ?        S    04:35   0:00  \_ dovecot/imap
systuser    932  0.0  0.0 113932    68 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        935  0.0  0.2 1277312 5968 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   364 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.2 1185864 29172 ?       Ssl  Nov15   0:26 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.1 331088  4516 ?        Ssl  Nov15   0:13 /usr/sbin/rsyslogd -n
root        973  0.0  0.0 400740  1844 ?        Ss   Nov15   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    26313  0.0  0.1 400460  3132 ?        S    04:41   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria   26412  0.0  0.1 400460  4416 ?        S    04:42   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788   388 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3428 ?        Rs   Nov15   0:40 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   468 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   360 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0 19.1 1901868 463296 ?      Ssl  Nov15   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.5 262408 12528 ?        Ss   Nov15   0:10 cpsrvd (SSL) - waiting for connections                   
root      26315  0.0  0.0      0     0 ?        Z    04:41   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.1 248140  2888 ?        Ss   Nov15   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  1.9 268280 47504 ?        S    Nov15   0:08  \_ spamd child
root       8199  0.0  0.0 249268  1332 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2956 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
root       1229  0.0  0.9 262228 23000 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1231  0.0  0.4 210516 10432 ?        Ss   Nov15   0:06 tailwatchd
root       1232  0.0  0.0 167452  1216 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1681  0.0  0.0 130416  1752 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.5 1462292 278852 ?      Sl   Nov15  12:04 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.2 266984  5496 ?        Ss   Nov15   0:05 /usr/sbin/httpd -k start
root      81530  0.0  0.0  12752   424 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      81531  0.0  0.0  12732   416 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      81532  0.0  0.0  12760   432 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      81548  0.0  0.2  53256  5152 ?        S    03:39   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    11820  0.1  0.8 277900 20288 ?        S    04:22   0:01  \_ /usr/sbin/httpd -k start
nobody    15662  0.1  0.8 277648 19464 ?        S    04:27   0:01  \_ /usr/sbin/httpd -k start
nobody    16034  0.1  0.8 277908 20012 ?        S    04:27   0:01  \_ /usr/sbin/httpd -k start
nobody    18694  0.1  0.8 277608 19380 ?        S    04:30   0:01  \_ /usr/sbin/httpd -k start
nobody    18703  0.1  0.8 277908 19384 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    21440  0.0  0.8 277712 19408 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
nobody    21681  0.0  0.7 277776 19184 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
nobody    24001  0.0  0.7 277596 18644 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    24586  0.0  0.7 277788 18208 ?        S    04:39   0:00  \_ /usr/sbin/httpd -k start
nobody    25343  0.0  0.7 277792 17624 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25734  0.0  0.7 277636 18036 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25747  0.2  0.7 277492 17808 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25760  0.1  0.7 277776 17792 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25761  0.1  0.7 277492 17764 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
cloudw    26383  1.0  0.6 353712 16240 ?        S    04:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    25763  0.0  0.7 277572 17948 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148     8 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152    36 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  0.3 182696  9136 ?        Ss   00:00   0:18 lfd - sleeping
root      81206  0.0  0.0 132964   716 ?        SN   03:39   0:00 ConfigServer Version Check
root      81217  0.0  0.0 108056     0 ?        SN   03:39   0:00  \_ sleep 20878
root       6990  0.0  0.2 299272  5932 ?        Ss   04:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       7015  0.0  0.5 445028 12948 ?        Ss   04:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   7147  0.0  1.9 414680 47568 ?        Ss   04:16   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   7151  0.0  0.8 387528 21672 ?        Ss   04:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
## mysql stats
Uptime: 51456  Threads: 3  Questions: 4529390  Slow queries: 0  Opens: 15988  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.024
*************************** 1. row ***************************
     Id: 63563
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 63564
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 63571
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.157.146.34 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 114.119.144.127 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 45.41.136.0 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.240.236.13 TIME_WAIT
      1 84.37.149.81 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.236.139.190 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 04:42:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 14 hours 17 minutes 31 seconds
   Server load: 0.09 0.19 0.26
   Total accesses: 267490 - Total Traffic: 5.4 GB - Total Duration: 129999168
   CPU Usage: u5.57 s7.17 cu3252.87 cs2772.89 - 11.7% CPU load
   5.2 requests/sec - 110.5 kB/second - 21.3 kB/request - 485.996 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

R.KKK.__R._RWWKKK._.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU   SS   Req   Dur   Conn Child  Slot      Client      Protocol          VHost                                       Request
   0-1  25343 0/7/13703    R 0.15 65    398 6213580 0.0  0.17  268.21 47.128.113.92   http/1.1
   1-1  -     0/0/14076    . 0.00 50    0   6508984 0.0  0.00  270.48 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   2-1  24586 3/12/13409   K 0.07 1     0   6187420 24.5 0.12  266.92 47.128.121.78   http/1.1 cloudware.ng:443         GET /wp-content/uploads/2019/07/payroll-300x200.jpg HTTP/1.1
   3-1  21440 1/111/13386  K 1.78 2     23  6058249 0.7  1.34  264.27 66.249.70.5     http/1.1 test.cloudware.ng:80     GET /2369204948?goodscode=2366100594 HTTP/1.1
   4-1  25734 2/7/14150    K 0.11 3     263 6940300 66.4 0.33  267.02 192.178.4.101   http/1.1 team.cloudware.ng:443    GET /?l=2428655229 HTTP/1.1
   5-1  -     0/0/12661    . 0.00 15    0   6026953 0.0  0.00  265.11 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   6-1  18694 0/415/13361  _ 8.61 1     7   6136732 0.0  2.95  263.24 45.177.240.207  http/1.1
   7-1  25747 0/78/12306   _ 1.65 0     43  5640077 0.0  0.13  242.02 34.225.24.180   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/blog/blog/2019elections/blog/blo
   8-1  11820 0/279/11411  R 6.34 70    347 5610561 0.0  6.65  253.19 47.128.97.46    http/1.1
   9-1  -     0/0/11802    . 0.00 52    0   5557097 0.0  0.00  265.81 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   10-1 24001 0/58/12074   _ 0.66 0     0   5527964 0.0  0.86  255.56 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   11-1 15662 0/376/11259  R 8.95 6     295 5533357 0.0  5.04  249.23 47.128.121.78   http/1.1
   12-1 21681 0/80/10894   W 1.37 0     0   5647355 0.0  1.53  221.78 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   13-1 16034 29/242/10596 W 5.50 0     0   5312062 29.7 3.76  223.29 66.249.70.7     http/1.1 test.cloudware.ng:443    GET /205236642?goodscode=0204968418 HTTP/1.1
   14-1 25760 11/21/9622   K 0.46 1     21  4607412 14.3 0.29  202.06 66.249.70.8     http/1.1 test.cloudware.ng:443    GET /1438011171?goodscode=1436127254 HTTP/1.1
   15-1 18703 1/229/9746   K 5.47 2     6   4919212 5.4  3.79  204.44 104.210.140.134 http/1.1 wmoulms.cloudware.ng:443 GET /robots.txt HTTP/1.1
   16-1 25761 2/16/8503    K 0.35 0     358 4234207 71.9 0.41  192.58 192.178.4.100   http/1.1 team.cloudware.ng:443    GET /?l=1049975122 HTTP/1.1
   17-1 -     0/0/8617     . 0.00 31    0   4074623 0.0  0.00  172.70 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-1 25763 0/9/6989     _ 0.16 1     271 3774882 0.0  0.59  163.86 192.178.4.98    http/1.1 team.cloudware.ng:443    GET /?l=1127740757 HTTP/1.1
   19-1 -     0/0/7772     . 0.00 549   0   3721898 0.0  0.00  158.28 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   20-1 -     0/0/5256     . 0.00 685   0   2664800 0.0  0.00  112.91 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-1 -     0/0/5410     . 0.00 51    0   2712393 0.0  0.00  115.99 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-1 -     0/0/4994     . 0.00 930   0   2691980 0.0  0.00  115.84 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-1 -     0/0/4986     . 0.00 686   0   2685593 0.0  0.00  113.52 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-1 -     0/0/2665     . 0.00 996   0   1622387 0.0  0.00  64.13  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-1 -     0/0/1365     . 0.00 929   0   731699  0.0  0.00  30.66  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/1182     . 0.00 8106  0   641835  0.0  0.00  26.97  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/767      . 0.00 8017  0   421900  0.0  0.00  15.98  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/967      . 0.00 8087  0   448661  0.0  0.00  17.56  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/522      . 0.00 8100  0   306534  0.0  0.00  11.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/1233     . 0.00 8109  0   719887  0.0  0.00  28.67  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/632      . 0.00 8099  0   244800  0.0  0.00  9.07   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/399      . 0.00 8085  0   188326  0.0  0.00  6.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/212      . 0.00 8108  0   119093  0.0  0.00  3.76   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/839      . 0.00 7837  0   454966  0.0  0.00  14.68  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/256      . 0.00 8096  0   159053  0.0  0.00  3.08   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/249      . 0.00 8072  0   209399  0.0  0.00  5.47   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/269      . 0.00 8092  0   116246  0.0  0.00  3.21   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/87       . 0.00 8105  0   41995   0.0  0.00  0.97   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/679      . 0.00 8090  0   324717  0.0  0.00  13.47  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/146      . 0.00 8095  0   134902  0.0  0.00  2.38   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/303      . 0.00 7643  0   130078  0.0  0.00  4.55   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/169      . 0.00 8083  0   102387  0.0  0.00  10.66  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/140      . 0.00 8114  0   75922   0.0  0.00  3.52   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/638      . 0.00 6551  0   199834  0.0  0.00  13.45  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/534      . 0.00 8088  0   268130  0.0  0.00  12.15  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/31       . 0.00 8089  0   37248   0.0  0.00  0.34   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/157      . 0.00 8103  0   39861   0.0  0.00  1.58   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/253      . 0.00 7908  0   72401   0.0  0.00  3.19   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -     0/0/115      . 0.00 7994  0   85640   0.0  0.00  3.68   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -     0/0/448      . 0.00 8115  0   253173  0.0  0.00  9.86   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -     0/0/48       . 0.00 8071  0   22050   0.0  0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -     0/0/30       . 0.00 8113  0   8952    0.0  0.00  0.37   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -     0/0/125      . 0.00 10885 0   81098   0.0  0.00  2.15   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -     0/0/286      . 0.00 10879 0   153536  0.0  0.00  5.93   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -     0/0/422      . 0.00 10861 0   320901  0.0  0.00  13.81  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -     0/0/79       . 0.00 10909 0   50774   0.0  0.00  0.83   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -     0/0/30       . 0.00 10910 0   8201    0.0  0.00  0.34   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -     0/0/345      . 0.00 10745 0   224672  0.0  0.00  7.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -     0/0/211      . 0.00 10749 0   85306   0.0  0.00  3.87   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -     0/0/257      . 0.00 10492 0   154505  0.0  0.00  5.37   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -     0/0/210      . 0.00 10764 0   75311   0.0  0.00  2.34   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -     0/0/225      . 0.00 10904 0   116672  0.0  0.00  4.21   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -     0/0/53       . 0.00 10751 0   41973   0.0  0.00  0.90   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -     0/0/234      . 0.00 10872 0   61300   0.0  0.00  1.81   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -     0/0/104      . 0.00 10752 0   43929   0.0  0.00  1.17   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -     0/0/54       . 0.00 10870 0   37444   0.0  0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -     0/0/137      . 0.00 10470 0   63130   0.0  0.00  2.34   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -     0/0/21       . 0.00 10901 0   40095   0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -     0/0/201      . 0.00 10880 0   93119   0.0  0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -     0/0/66       . 0.00 10889 0   66683   0.0  0.00  1.28   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -     0/0/931      . 0.00 10863 0   498006  0.0  0.00  20.96  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -     0/0/182      . 0.00 10740 0   69161   0.0  0.00  2.55   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -     0/0/263      . 0.00 10867 0   128005  0.0  0.00  4.46   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -     0/0/95       . 0.00 10737 0   55142   0.0  0.00  2.51   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -     0/0/15       . 0.00 10897 0   12842   0.0  0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -     0/0/151      . 0.00 10900 0   87735   0.0  0.00  3.29   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -     0/0/15       . 0.00 10899 0   2685    0.0  0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -     0/0/17       . 0.00 10923 0   16053   0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   79-0 -     0/0/43       . 0.00 10911 0   30142   0.0  0.00  0.74   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   80-0 -     0/0/21       . 0.00 10907 0   6790    0.0  0.00  0.30   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   81-0 -     0/0/361      . 0.00 10906 0   198769  0.0  0.00  8.30   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   82-0 -     0/0/6        . 0.00 10882 0   876     0.0  0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   83-0 -     0/0/3        . 0.00 40439 0   644     0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   84-0 -     0/0/2        . 0.00 40457 0   3       0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   85-0 -     0/0/7        . 0.00 40424 0   3861    0.0  0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 729
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...49)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 10592
   total entries replaced since starting: 0
   total entries expired since starting: 9860
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 3 hit, 1 miss
Youez - 2016 - github.com/yon3zu
LinuXploit