403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.01.33.txt
 ## swap threshold exceeded
## server overview
2025-11-17.01.33 load[0] mem[60/59] mysql[1/8] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1376         195          68         791         752
Swap:          1999        1286         713
 01:33:01 up  2:14,  0 users,  load average: 0.48, 0.36, 0.33
## system overview
top - 01:33:01 up  2:14,  0 users,  load average: 0.48, 0.36, 0.33
Tasks: 196 total,   4 running, 191 sleeping,   0 stopped,   1 zombie
%Cpu(s): 46.9 us, 25.0 sy,  0.0 ni, 25.0 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   215364 free,  1393364 used,   811572 buff/cache
KiB Swap:  2047996 total,   731132 free,  1316864 used.   787272 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 254912   4812 S  75.0 10.5   1:33.69 /usr/sbin+
 19341 nigeria   20   0  404052  16144  10384 R  18.8  0.7   0:00.04 /opt/cpan+
   492 dbus      20   0   58700   1520    768 S  12.5  0.1   0:04.29 /usr/bin/+
 19353 root      20   0  160220   2060   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44400   3480   1612 S   0.0  0.1   0:11.46 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.46 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.72 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.45 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.58 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.14 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.36 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.10 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   3088   2784 S   0.0  0.1   0:04.55 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    568    440 S   0.0  0.0   0:00.70 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.00 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.15 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:01.91 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.17 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    520    424 S   0.0  0.0   0:00.01 /usr/sbin+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1520    896 S   0.0  0.1   0:07.84 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5944   1232 S   0.0  0.2   0:00.17 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.23 /usr/sbin+
   546 root      20   0   24208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4124   1100 S   0.0  0.2   0:00.14 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.18 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.00 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  240976   3028   2260 S   0.0  0.1   0:02.23 /usr/sbin+
   918 named     20   0  923720  36452   2272 S   0.0  1.5   0:04.85 /usr/sbin+
   919 root      20   0 1763124 327784    788 S   0.0 13.5   0:14.06 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    668    508 S   0.0  0.0   0:00.12 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:00.77 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.28 sw-engine+
   937 root      20   0  439788  11428  11220 S   0.0  0.5   0:00.34 php-fpm: +
   938 systuser  20   0  114016  13992   2740 S   0.0  0.6   0:02.04 /usr/loca+
   939 root      20   0  261296   7568   2068 S   0.0  0.3   0:01.80 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.24 /usr/bin/+
   944 root      20   0 1276356   7880    228 S   0.0  0.3   0:24.79 /usr/bin/+
   947 cpanelc+  20   0   10308   3556   2436 S   0.0  0.1   0:06.81 /usr/loca+
   952 root      20   0  396248    792    608 S   0.0  0.0   0:00.31 php-fpm: +
   957 root      20   0  388892    640    540 S   0.0  0.0   0:00.30 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  36832   5668 S   0.0  1.5   0:04.71 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.16 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:01.35 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.17 /usr/bin/+
   974 root      20   0  389508    768    564 S   0.0  0.0   0:00.27 php-fpm: +
  1080 dovenull  20   0   46912   2160   1528 S   0.0  0.1   0:00.13 dovecot/p+
  1081 dovenull  20   0   47340   2960   1944 S   0.0  0.1   0:00.07 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.01 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.08 dovecot/l+
  1084 dovenull  20   0   46984   2260   1528 S   0.0  0.1   0:00.18 dovecot/p+
  1085 dovenull  20   0   47308   2872   2036 S   0.0  0.1   0:00.05 dovecot/i+
  1091 root      20   0   24396   2296    624 S   0.0  0.1   0:00.07 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.02 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:03.80 /usr/loca+
  1160 dovecot   20   0   41160   1552   1092 S   0.0  0.1   0:00.16 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.05 SonarPush+
  1176 wp-tool+  20   0  387556   5096   1724 S   0.0  0.2   0:00.16 /usr/bin/+
  1177 wp-tool+  20   0  412368  32528   1752 S   0.0  1.3   0:02.73 /usr/bin/+
  1211 root      20   0  209168  11748   2224 S   0.0  0.5   0:01.02 tailwatchd
  1213 root      20   0  183900   6080   2852 S   0.0  0.3   0:00.49 cpdavd - +
  1216 root      20   0  228228  17168   4264 S   0.0  0.7   0:00.24 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    880    540 S   0.0  0.0   0:00.22 php-fpm: +
  1673 root      38  18  130416   1592    820 S   0.0  0.1   0:00.02 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.08 /usr/sbin+
  1932 root      20   0   12744    520    376 S   0.0  0.0   0:01.06 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:00.92 /usr/loca+
  1934 root      20   0   12748    500    348 S   0.0  0.0   0:01.00 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  3229 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
  3945 nobody    20   0  277744  20484   4988 S   0.0  0.8   0:01.73 /usr/sbin+
  6512 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6623 nobody    20   0  277744  20592   4940 S   0.0  0.9   0:01.42 /usr/sbin+
  8393 root      20   0  263740 127004   1672 S   0.0  5.2   0:00.94 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 11557 nobody    20   0  277680  19808   4628 S   0.0  0.8   0:00.89 /usr/sbin+
 11665 nobody    20   0  277680  19968   4772 S   0.0  0.8   0:00.84 /usr/sbin+
 12581 nobody    20   0  277680  20104   4596 S   0.0  0.8   0:00.69 /usr/sbin+
 13244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13321 nobody    20   0  277576  19640   4600 S   0.0  0.8   0:00.61 /usr/sbin+
 13725 nobody    20   0  277744  19348   4252 S   0.0  0.8   0:00.68 /usr/sbin+
 14071 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 14287 nobody    20   0  277744  19684   4452 S   0.0  0.8   0:00.55 /usr/sbin+
 16011 nobody    20   0  277876  19508   4344 S   0.0  0.8   0:00.41 /usr/sbin+
 16824 nobody    20   0  277656  19644   4272 S   0.0  0.8   0:00.28 /usr/sbin+
 16973 nobody    20   0  277604  19396   4244 S   0.0  0.8   0:00.30 /usr/sbin+
 16975 nobody    20   0  277800  19092   3844 S   0.0  0.8   0:00.29 /usr/sbin+
 17032 nobody    20   0  277744  19384   4216 S   0.0  0.8   0:00.24 /usr/sbin+
 17033 nobody    20   0  277608  19648   4312 S   0.0  0.8   0:00.19 /usr/sbin+
 17046 nobody    20   0  277604  19228   4192 S   0.0  0.8   0:00.23 /usr/sbin+
 17048 nobody    20   0  277936  19456   4192 S   0.0  0.8   0:00.19 /usr/sbin+
 17591 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 17989 nobody    20   0  277680  19092   3956 S   0.0  0.8   0:00.16 /usr/sbin+
 18014 nobody    20   0  277520  18596   3656 S   0.0  0.8   0:00.19 /usr/sbin+
 18015 nobody    20   0  277680  19256   3888 S   0.0  0.8   0:00.11 /usr/sbin+
 18531 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18769 root      20   0   41052   2784   2128 S   0.0  0.1   0:00.00 dovecot/a+
 18897 nobody    20   0  277928  18920   3764 S   0.0  0.8   0:00.04 /usr/sbin+
 19092 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 19267 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 19272 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 19276 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 19284 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19286 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19287 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19288 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19289 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19290 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19291 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19292 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19293 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19294 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 19296 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19298 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 19299 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 19300 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 19316 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 19317 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 19318 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19320 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19322 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19324 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 19325 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19326 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 19327 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 19328 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 19338 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 19345 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 19348 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 19358 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19363 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 19364 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 19365 cloudsms  20   0  131852   3320   2388 R   0.0  0.1   0:00.00 /usr/loca+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.10 [kworker]
 40218 root      20   0  181472  28852   1644 S   0.0  1.2   0:05.66 lfd - sle+
 72665 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 82071 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 91557 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 93318 root      20   0  183052   2116   1552 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1116    940 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
 95484 nobody    20   0  277768  20384   4956 S   0.0  0.8   0:03.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      72665  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/0:4]
root      82071  0.0  0.0      0     0 ?        S    00:47   0:00  \_ [kworker/1:2]
root      91557  0.0  0.0      0     0 ?        S    00:58   0:00  \_ [kworker/u200:0]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root       3229  0.0  0.0      0     0 ?        S    01:14   0:00  \_ [kworker/1:0]
root       6512  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:3]
root      13244  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/1:3]
root      14071  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:1]
root      17591  0.0  0.0      0     0 ?        S    01:31   0:00  \_ [kworker/1:1]
root      18531  0.0  0.0      0     0 ?        S    01:32   0:00  \_ [kworker/0:0]
root      19358  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44400  3480 ?        Ss   Nov16   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  40244  3088 ?        Ss   Nov16   0:04 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   568 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:01 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   520 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1520 ?        Ssl  Nov16   0:07 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5944 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2116 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1116 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      19284  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19298  0.0  0.0 113284  1212 ?        Ss   01:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      19299  0.0  0.0 108052   360 ?        S    01:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      19300  0.0  0.0 113288  1516 ?        S    01:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      19367  0.0  0.0 153840  2092 ?        R    01:33   0:00  |               \_ ps auxf
root      19286  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19327  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      19287  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19317  0.0  0.0  20164   988 ?        Ss   01:33   0:00  |   \_ jailshell (cloudsms) [19363] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  19363  0.0  0.0  20164   260 ?        S    01:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  19364  0.0  0.0 113284  1212 ?        S    01:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  19365  0.0  0.6 404052 15876 ?        R    01:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      19288  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19320  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      19289  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19318  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      19290  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19328  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      19291  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19322  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      19292  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19325  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      19293  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19326  0.0  0.0  20164   992 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      19366  0.0  0.2  38648  6508 ?        R    01:33   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      19294  0.0  0.0 183048  2152 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19324  0.0  0.0  20164   968 ?        Ss   01:33   0:00  |   \_ jailshell (pactpay) [19345] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   19345  0.0  0.0  20164   260 ?        S    01:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   19348  0.0  0.7 480124 17688 ?        S    01:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      19296  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      19316  0.0  0.0  20164   968 ?        Ss   01:33   0:00      \_ jailshell (nigeria) [19338] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   19338  0.0  0.0  20164   260 ?        S    01:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   19341  0.0  0.6 404052 16144 ?        S    01:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208    44 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4124 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      19267  0.0  0.1 111304  4272 ?        Ss   01:32   0:00  \_ sshd: [accepted]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 240976  3028 ?        Ssl  Nov16   0:02 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 923720 36452 ?        Ssl  Nov16   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 13.5 1763124 327784 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   668 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  2160 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  2960 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984  2260 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  2872 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24396  2296 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1552 ?        S    Nov16   0:00  \_ dovecot/auth
root      18769  0.0  0.1  41052  2784 ?        S    01:32   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  19092  0.0  0.0 445028   316 ?        S    01:32   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11428 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13992 ?        Ssl  Nov16   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7568 ?        Ss   Nov16   0:01 cpsrvd (SSL) - waiting for connections                   
root      19272  0.0  0.0      0     0 ?        Z    01:32   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.2  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.3  0.3 1276356 7880 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3556 ?        Ss   Nov16   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   792 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   640 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.5 5654048 36832 ?       SLsl Nov16   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   19276  0.0  0.1 400460  4420 ?        S    01:32   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   768 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.2 263740 127004 ?       S    Nov16   0:00  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5096 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32528 ?        Ss   Nov16   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209168 11748 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.2 183900  6080 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.7 228228 17168 ?        Ss   Nov16   0:00 dnsadmin - server mode
root       1627  0.0  0.0 299272   880 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1592 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12744   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12748   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    95484  0.1  0.8 277768 20384 ?        S    01:02   0:03  \_ /usr/sbin/httpd -k start
nobody     3945  0.1  0.8 277744 20484 ?        S    01:14   0:01  \_ /usr/sbin/httpd -k start
nobody     6623  0.1  0.8 277744 20592 ?        S    01:18   0:01  \_ /usr/sbin/httpd -k start
nobody    11557  0.1  0.8 277680 19808 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    11665  0.1  0.8 277680 19968 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    12581  0.1  0.8 277680 20104 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    13321  0.1  0.8 277576 19640 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    13725  0.1  0.7 277744 19348 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    14287  0.1  0.8 277744 19684 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody    16011  0.1  0.8 277876 19508 ?        S    01:29   0:00  \_ /usr/sbin/httpd -k start
nobody    16824  0.1  0.8 277656 19644 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    16973  0.1  0.8 277604 19396 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    16975  0.1  0.7 277800 19092 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    17032  0.1  0.8 277744 19384 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    17033  0.1  0.8 277608 19648 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    17046  0.1  0.7 277604 19228 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    17048  0.1  0.8 277936 19456 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    17989  0.1  0.7 277680 19092 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    18014  0.2  0.7 277520 18596 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
root      19368  0.0  0.0   6516   416 ?        R    01:33   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php72
nobody    18015  0.1  0.7 277680 19256 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    18897  0.1  0.7 277928 18920 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.1 10.5 1461652 254912 ?      Sl   Nov16   1:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.1 181472 28852 ?        Ss   00:00   0:05 lfd - sleeping
## mysql stats
Uptime: 8007  Threads: 3  Questions: 581634  Slow queries: 0  Opens: 3498  Flush tables: 1  Open tables: 2000  Queries per second avg: 72.640
*************************** 1. row ***************************
     Id: 8721
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 8724
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-17' LIMIT 1
*************************** 3. row ***************************
     Id: 8728
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.220.247 TIME_WAIT
      1 142.44.228.113 TIME_WAIT
      1 142.44.228.182 TIME_WAIT
      1 15.235.96.72 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 185.11.166.192 TIME_WAIT
      1 185.88.176.214 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.56.185.49 TIME_WAIT
      1 47.128.49.137 TIME_WAIT
      1 51.161.65.217 TIME_WAIT
      1 78.157.49.100 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 129.226.174.80 TIME_WAIT
      2 43.165.190.5 TIME_WAIT
      2 66.240.236.13 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 01:33:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 14 minutes 12 seconds
   Server load: 0.48 0.36 0.33
   Total accesses: 47727 - Total Traffic: 1.2 GB - Total Duration: 24591165
   CPU Usage: u9.33 s4.77 cu652.15 cs532.16 - 14.9% CPU load
   5.93 requests/sec - 160.5 kB/second - 27.1 kB/request - 515.246 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KKK.K.._W__W__K.KKW.R._...._K.K.R...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol         VHost                                      Request
   0-0  16824 2/54/2225   K 1.11  0    22  1179022 6.5   1.44  57.85 66.249.70.7     http/1.1 test.cloudware.ng:443  GET /195705262?goodscode=0195449530 HTTP/1.1
   1-0  6623  4/244/1929  K 5.92  0    298 1017466 125.7 9.13  56.53 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=678395443 HTTP/1.1
   2-0  13725 3/160/2004  K 4.04  2    266 1014310 97.7  2.53  52.59 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=3900281172 HTTP/1.1
   3-0  -     0/0/2076    . 0.00  16   0   1046354 0.0   0.00  51.52 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   4-0  14287 20/100/1956 K 2.48  0    83  970222  138.3 2.35  53.67 147.135.215.187 http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   5-0  -     0/0/1855    . 0.00  30   0   926767  0.0   0.00  50.30 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  -     0/0/2007    . 0.00  33   0   992373  0.0   0.00  53.71 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  13321 0/110/1840  _ 2.45  2    1   933892  0.0   3.03  47.32 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   8-0  17989 12/30/1844  W 0.61  0    0   931903  374.0 1.05  47.93 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=3938241700 HTTP/1.1
   9-0  16973 0/56/1819   _ 1.59  1    389 945932  0.0   1.58  47.63 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=3718856006 HTTP/1.1
   10-0 18897 0/9/1919    _ 0.17  1    9   986843  0.0   0.22  51.94 34.234.206.30   http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/2019elections/assets/css/20
   11-0 18014 10/31/1831  W 0.84  0    0   996616  310.9 0.92  49.58 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=2961237173 HTTP/1.1
   12-0 11557 0/152/1682  _ 3.76  0    0   885442  0.0   5.35  45.15 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 11665 0/136/1878  _ 3.59  2    1   1025464 0.0   3.91  50.80 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   14-0 18015 1/23/1638   K 0.39  2    259 865548  33.9  0.73  43.96 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=704243149 HTTP/1.1
   15-0 -     0/0/1707    . 0.00  152  0   894700  0.0   0.00  45.75 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 16975 2/50/1557   K 1.23  2    293 841971  67.0  1.41  41.91 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3654922874 HTTP/1.1
   17-0 12581 3/123/1606  K 2.92  1    292 838805  96.0  2.98  44.78 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=3090809719 HTTP/1.1
   18-0 95484 0/545/1449  W 13.87 0    0   745595  0.0   13.48 37.00 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   19-0 -     0/0/1132    . 0.00  133  0   597498  0.0   0.00  33.90 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 3945  0/310/1371  R 7.70  7    6   684947  0.0   8.41  34.13 3.138.239.76    http/1.1
   21-0 -     0/0/1522    . 0.00  149  0   803233  0.0   0.00  41.76 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 16011 0/76/976    _ 1.74  3    411 521425  0.0   1.69  24.94 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=3329399586 HTTP/1.1
   23-0 -     0/0/1017    . 0.00  73   0   498963  0.0   0.00  25.67 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1277    . 0.00  97   0   686832  0.0   0.00  34.10 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/672     . 0.00  89   0   315783  0.0   0.00  17.21 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/349     . 0.00  103  0   168362  0.0   0.00  8.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 17032 0/60/577    _ 1.22  3    22  275424  0.0   0.76  13.82 66.249.70.7     http/1.1 test.cloudware.ng:443  GET /2977496016?goodscode=2973594426 HTTP/1.1
   28-0 17033 1/41/483    K 0.79  3    341 242806  34.1  0.78  11.84 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=402138256 HTTP/1.1
   29-0 -     0/0/72      . 0.00  29   0   36782   0.0   0.00  1.54  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 17046 1/41/315    K 0.89  2    346 145324  34.9  1.11  7.68  192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=1509557194 HTTP/1.1
   31-0 -     0/0/464     . 0.00  148  0   223719  0.0   0.00  10.40 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 17048 0/38/109    R 0.64  4    389 49540   0.0   1.00  2.29  3.138.239.76    http/1.1 cloudware.ng:443
   33-0 -     0/0/106     . 0.00  4158 0   46426   0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/292     . 0.00  4151 0   156256  0.0   0.00  7.78  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/28      . 0.00  4145 0   6362    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/170     . 0.00  4091 0   85805   0.0   0.00  4.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/11      . 0.00  4155 0   7767    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/144     . 0.00  4138 0   77733   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424     . 0.00  2746 0   220703  0.0   0.00  11.36 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88      . 0.00  4025 0   19096   0.0   0.00  1.31  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00  4157 0   3054    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43      . 0.00  4013 0   22487   0.0   0.00  0.98  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00  4156 0   52913   0.0   0.00  2.30  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00  1798 0   366544  0.0   0.00  17.77 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00  4161 0   19040   0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00  4134 0   5124    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00  4095 0   7973    0.0   0.00  0.58  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00  3846 0   40607   0.0   0.00  1.94  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00  4149 0   18588   0.0   0.00  0.72  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00  4144 0   3381    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00  4118 0   3457    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00  6853 0   1702    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00  6829 0   2649    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00  6852 0   1806    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00  6774 0   13156   0.0   0.00  0.55  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00  6019 0   98784   0.0   0.00  5.53  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00  6714 0   19861   0.0   0.00  0.82  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1650
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...23)
   index usage: 29%, cache usage: 39%
   total entries stored since starting: 36407
   total entries replaced since starting: 0
   total entries expired since starting: 34755
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 95 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit