403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.04.39.txt
 ## swap threshold exceeded
## server overview
2025-11-17.04.39 load[0] mem[63/64] mysql[1/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1414         294          33         654         733
Swap:          1999        1422         577
 04:39:01 up  5:20,  0 users,  load average: 0.52, 0.85, 0.84
## system overview
top - 04:39:01 up  5:20,  0 users,  load average: 0.52, 0.85, 0.84
Tasks: 198 total,   4 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 64.7 us, 29.4 sy,  0.0 ni,  0.0 id,  2.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   291844 free,  1454876 used,   673580 buff/cache
KiB Swap:  2047996 total,   590992 free,  1457004 used.   745412 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 274716   4288 S  50.0 11.4   4:28.34 /usr/sbin+
 81131 root      20   0  166176  15204   2744 R  37.5  0.6   0:00.07 /usr/loca+
     1 root      20   0   44400   3256   1452 S  12.5  0.1   0:25.72 /usr/lib/+
 81150 nigeria   20   0  404052  16140  10384 R  12.5  0.7   0:00.02 /opt/cpan+
 81149 pactpay   20   0  480124  17316  11584 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.33 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.10 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:21.14 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.08 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.87 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:48.30 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.42 [kworker/+
   263 root       0 -20       0      0      0 R   0.0  0.0   0:03.53 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.20 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   5384   5148 S   0.0  0.2   0:10.87 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    452    320 S   0.0  0.0   0:01.70 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    972    616 S   0.0  0.0   0:02.70 /usr/lib/+
   476 root      20   0   24716   1140    792 S   0.0  0.0   0:04.53 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.42 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    280    180 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1328    600 S   0.0  0.1   0:10.37 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1388    704 S   0.0  0.1   0:18.75 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   3164    880 S   0.0  0.1   0:00.28 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.56 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3568    656 S   0.0  0.1   0:00.34 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.70 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.45 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  273744   5128   4532 S   0.0  0.2   0:05.47 /usr/sbin+
   918 named     20   0 1185864  31496   1736 S   0.0  1.3   0:12.98 /usr/sbin+
   919 root      20   0 1828136 528808     40 S   0.0 21.8   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    456    292 S   0.0  0.0   0:00.23 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.74 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.76 sw-engine+
   937 root      20   0  439788    396    304 S   0.0  0.0   0:00.78 php-fpm: +
   938 systuser  20   0  114016  13580   2392 S   0.0  0.6   0:04.74 /usr/loca+
   939 root      20   0  261296   6512   1736 S   0.0  0.3   0:04.35 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.29 /usr/bin/+
   944 root      20   0 1276356   6404      4 S   0.0  0.3   0:24.90 /usr/bin/+
   947 cpanelc+  20   0   10416   3292   2280 S   0.0  0.1   0:16.32 /usr/loca+
   952 root      20   0  396248    300    216 S   0.0  0.0   0:00.69 php-fpm: +
   957 root      20   0  388892    540    440 S   0.0  0.0   0:00.71 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  34452   5576 S   0.0  1.4   0:11.00 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.39 pure-ftpd+
   967 root      20   0  400740    772    600 S   0.0  0.0   0:03.28 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.43 /usr/bin/+
   974 root      20   0  389508    260    176 S   0.0  0.0   0:00.66 php-fpm: +
  1080 dovenull  20   0   46912   2028   1492 S   0.0  0.1   0:00.29 dovecot/p+
  1081 dovenull  20   0   47608   2396   1580 S   0.0  0.1   0:00.13 dovecot/i+
  1082 dovecot   20   0   10320    268    176 S   0.0  0.0   0:00.04 dovecot/a+
  1083 root      20   0   10452    604    436 S   0.0  0.0   0:00.20 dovecot/l+
  1084 dovenull  20   0   46984    724    464 S   0.0  0.0   0:00.35 dovecot/p+
  1085 dovenull  20   0   47564   2644   1724 S   0.0  0.1   0:00.13 dovecot/i+
  1091 root      20   0   24528   1972    328 S   0.0  0.1   0:00.13 dovecot/c+
  1095 dovecot   20   0   13568    552    376 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   3560    700 S   0.0  0.1   0:05.14 /usr/loca+
  1160 dovecot   20   0   41160   1448   1012 S   0.0  0.1   0:00.40 dovecot/a+
  1168 systuser  20   0  157704   2968   1008 S   0.0  0.1   0:00.11 SonarPush+
  1176 wp-tool+  20   0  387556   3316   1396 S   0.0  0.1   0:00.25 /usr/bin/+
  1177 wp-tool+  20   0  412368   9828   1372 S   0.0  0.4   0:06.37 /usr/bin/+
  1211 root      20   0  209308   9728   2064 S   0.0  0.4   0:02.30 tailwatchd
  1213 root      20   0  183900   6056   2828 S   0.0  0.3   0:01.00 cpdavd - +
  1216 root      20   0  167452   1212    652 S   0.0  0.1   0:00.43 dnsadmin +
  1627 root      20   0  299272    496    332 S   0.0  0.0   0:00.53 php-fpm: +
  1673 root      38  18  130416   1356    692 S   0.0  0.1   0:00.05 cpanellog+
  1928 root      20   0  266984   4956    468 S   0.0  0.2   0:02.43 /usr/sbin+
  1932 root      20   0   12780    324    212 S   0.0  0.0   0:02.53 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.21 /usr/loca+
  1934 root      20   0   12808    332    216 S   0.0  0.0   0:02.40 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  266004  45228   1164 S   0.0  1.9   0:04.15 spamd chi+
  8394 root      20   0  248032   2112    376 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.36 [kworker]
 40218 root      20   0  183028   9868   1100 S   0.0  0.4   0:17.02 lfd - sle+
 51481 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 52400 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 63744 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [kworker/+
 70635 nobody    20   0  277884  19168   4608 S   0.0  0.8   0:01.09 /usr/sbin+
 71800 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72944 nobody    20   0  277688  19172   4552 S   0.0  0.8   0:00.82 /usr/sbin+
 73707 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 74012 nobody    20   0  277616  19100   4636 S   0.0  0.8   0:00.69 /usr/sbin+
 75594 nobody    20   0  277744  18840   4368 S   0.0  0.8   0:00.86 /usr/sbin+
 76295 nobody    20   0  277484  18932   4560 S   0.0  0.8   0:00.55 /usr/sbin+
 76657 nobody    20   0  277876  18632   4212 S   0.0  0.8   0:00.28 /usr/sbin+
 77741 nobody    20   0  277884  18392   4188 S   0.0  0.8   0:00.36 /usr/sbin+
 78834 nobody    20   0  277744  17764   3720 S   0.0  0.7   0:00.32 /usr/sbin+
 78835 nobody    20   0  277560  18216   4064 S   0.0  0.8   0:00.17 /usr/sbin+
 79068 nobody    20   0  277744  18476   4152 S   0.0  0.8   0:00.22 /usr/sbin+
 79078 nobody    20   0  277476  17368   3720 S   0.0  0.7   0:00.21 /usr/sbin+
 79395 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 80096 nobody    20   0  277884  17748   3788 S   0.0  0.7   0:00.16 /usr/sbin+
 80276 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80278 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80348 nobody    20   0  277876  17676   3840 S   0.0  0.7   0:00.13 /usr/sbin+
 80590 nobody    20   0  277744  17476   3688 S   0.0  0.7   0:00.09 /usr/sbin+
 80604 nobody    20   0  277460  17440   3740 S   0.0  0.7   0:00.04 /usr/sbin+
 80605 nobody    20   0  277744  17136   3328 S   0.0  0.7   0:00.07 /usr/sbin+
 80623 nobody    20   0  277744  17332   3516 S   0.0  0.7   0:00.07 /usr/sbin+
 80624 nobody    20   0  277744  17632   3564 S   0.0  0.7   0:00.06 /usr/sbin+
 80625 nobody    20   0  277744  17552   3508 S   0.0  0.7   0:00.05 /usr/sbin+
 80967 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 81014 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 81016 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 81056 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 81062 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 81063 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 81074 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81076 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81077 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81078 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81079 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81080 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81081 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81083 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81084 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81085 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81087 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81089 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 81090 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 81091 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 81092 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 81117 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81118 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 81119 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81121 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81122 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81123 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81124 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81125 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81126 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81129 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81139 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 81143 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81147 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81155 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:21  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:48  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root      37613  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/1:1]
root      51481  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/0:2]
root      52400  0.0  0.0      0     0 ?        S    04:09   0:00  \_ [kworker/1:2]
root      63744  0.0  0.0      0     0 ?        S    04:21   0:00  \_ [kworker/0:1]
root      71800  0.0  0.0      0     0 ?        S    04:29   0:00  \_ [kworker/0:3]
root      72858  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/u200:0]
root      73707  0.0  0.0      0     0 ?        S    04:31   0:00  \_ [kworker/1:4]
root      80276  0.0  0.0      0     0 ?        S    04:38   0:00  \_ [kworker/0:0]
root      80278  0.0  0.0      0     0 ?        S    04:38   0:00  \_ [kworker/1:3]
root      81155  0.0  0.0      0     0 ?        S    04:39   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44400  3256 ?        Ss   Nov16   0:25 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39500  5384 ?        Ss   Nov16   0:10 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   452 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780    80 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   972 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1140 ?        Ss   Nov16   0:04 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   280 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1328 ?        Ss   Nov16   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1388 ?        Ssl  Nov16   0:18 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  3164 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      81074  0.0  0.0 183048  2148 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81089  0.0  0.0 113284  1212 ?        Ss   04:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      81091  0.0  0.0 108052   360 ?        S    04:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      81092  0.0  0.0 113288  1516 ?        S    04:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      81156  0.0  0.0 153840  2092 ?        R    04:39   0:00  |               \_ ps auxf
root      81076  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81124  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      81077  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81125  0.0  0.0  20164   804 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      81078  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81126  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      81079  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81123  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      81080  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81121  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      81081  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81117  0.0  0.0  20164   804 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      81083  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81119  0.0  0.0  20164   808 ?        Ss   04:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      81084  0.0  0.0 183048  2148 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81118  0.0  0.0 113284  1212 ?        Ss   04:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      81131  0.0  0.6 169868 16848 ?        S    04:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      81085  0.0  0.0 183048  2148 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81129  0.0  0.0  20164   964 ?        Ss   04:39   0:00  |   \_ jailshell (pactpay) [81143] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81143  0.0  0.0  20164   260 ?        S    04:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81149  0.0  0.7 480124 17316 ?        S    04:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      81087  0.0  0.0 183048  2144 ?        S    04:39   0:00  \_ /usr/sbin/CROND -n
root      81122  0.0  0.0  20164   964 ?        Ss   04:39   0:00      \_ jailshell (nigeria) [81147] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81147  0.0  0.0  20164   260 ?        S    04:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81150  0.0  0.6 404052 16140 ?        R    04:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3568 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   Nov16   0:02 /usr/sbin/sshd -D
root      81014  0.0  0.2 157100  5072 ?        Ss   04:38   0:00  \_ sshd: unknown [priv]
sshd      81016  0.0  0.1 115644  2628 ?        S    04:38   0:00  |   \_ sshd: unknown [net]
root      81062  0.0  0.1 111304  4264 ?        Ss   04:38   0:00  \_ sshd: [accepted]
sshd      81063  0.0  0.1 115644  2628 ?        S    04:38   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 273744  5128 ?        Ssl  Nov16   0:05 /usr/sbin/rsyslogd -n
named       918  0.0  1.3 1185864 31496 ?       Ssl  Nov16   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 21.8 1828136 528808 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   456 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  2028 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47608  2396 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   268 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   604 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   724 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47564  2644 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  1972 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   552 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1448 ?        S    Nov16   0:00  \_ dovecot/auth
root      79395  0.0  0.1  60820  4508 ?        S    04:37   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  80967  0.0  0.0 445028   312 ?        S    04:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   396 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13580 ?        Ssl  Nov16   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6512 ?        Ss   Nov16   0:04 cpsrvd (SSL) - waiting for connections                   
root      81056  0.0  0.0      0     0 ?        Z    04:38   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.1 1277312 3688 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6404 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3292 ?        Ss   Nov16   0:16 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   300 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   540 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 34452 ?       SLsl Nov16   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   772 ?        Ss   Nov16   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   81090  0.0  0.1 400460  4420 ?        S    04:39   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   260 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  3560 ?        Ss   Nov16   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  1.8 266004 45228 ?        S    Nov16   0:04  \_ spamd child
root       8394  0.0  0.0 248032  2112 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2968 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3316 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.4 412368  9828 ?        Ss   Nov16   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209308  9728 ?        Ss   Nov16   0:02 tailwatchd
root       1213  0.0  0.2 183900  6056 ?        Ss   Nov16   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.0 167452  1212 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   496 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1356 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4956 ?        Ss   Nov16   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12780   324 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12808   332 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    70635  0.1  0.7 277884 19168 ?        S    04:27   0:01  \_ /usr/sbin/httpd -k start
nobody    72944  0.1  0.7 277688 19172 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    74012  0.1  0.7 277616 19100 ?        S    04:31   0:00  \_ /usr/sbin/httpd -k start
nobody    75594  0.2  0.7 277744 18840 ?        S    04:32   0:00  \_ /usr/sbin/httpd -k start
nobody    76295  0.1  0.7 277484 18932 ?        S    04:33   0:00  \_ /usr/sbin/httpd -k start
nobody    76657  0.0  0.7 277876 18632 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
nobody    77741  0.1  0.7 277884 18392 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    78834  0.2  0.7 277744 17764 ?        S    04:36   0:00  \_ /usr/sbin/httpd -k start
nobody    78835  0.1  0.7 277560 18216 ?        S    04:36   0:00  \_ /usr/sbin/httpd -k start
nobody    79068  0.1  0.7 277744 18476 ?        S    04:36   0:00  \_ /usr/sbin/httpd -k start
nobody    79078  0.1  0.7 277476 17368 ?        S    04:36   0:00  \_ /usr/sbin/httpd -k start
nobody    80096  0.2  0.7 277884 17748 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    80348  0.2  0.7 277876 17676 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    80590  0.2  0.7 277744 17476 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    80604  0.1  0.7 277460 17440 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    80605  0.1  0.7 277744 17136 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    80623  0.1  0.7 277744 17332 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    80624  0.1  0.7 277744 17632 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
nobody    80625  0.1  0.7 277744 17552 ?        S    04:38   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 11.3 1468028 274716 ?      Sl   Nov16   4:28 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.4 183028  9868 ?        Ss   00:00   0:17 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 19167  Threads: 3  Questions: 1552194  Slow queries: 0  Opens: 9049  Flush tables: 1  Open tables: 2000  Queries per second avg: 80.982
*************************** 1. row ***************************
     Id: 21957
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 21959
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 21961
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 101.53.245.15 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 138.226.102.197 TIME_WAIT
      1 142.44.228.185 TIME_WAIT
      1 149.57.176.130 TIME_WAIT
      1 149.57.176.74 TIME_WAIT
      1 149.57.191.100 TIME_WAIT
      1 149.57.191.1 TIME_WAIT
      1 149.57.191.72 TIME_WAIT
      1 15.235.27.20 TIME_WAIT
      1 15.235.27.214 TIME_WAIT
      1 15.235.98.200 TIME_WAIT
      1 152.44.103.161 TIME_WAIT
      1 152.44.106.110 TIME_WAIT
      1 172.96.89.182 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 174.138.18.135 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 ::1 TIME_WAIT
      1 202.93.11.221 TIME_WAIT
      1 52.215.86.173 TIME_WAIT
      1 92.205.20.105 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 161.97.170.156 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 04:39:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 20 minutes 12 seconds
   Server load: 0.52 0.85 0.84
   Total accesses: 114409 - Total Traffic: 2.9 GB - Total Duration: 58615854
   CPU Usage: u4.55 s4.12 cu1568.91 cs1289.8 - 14.9% CPU load
   5.96 requests/sec - 156.1 kB/second - 26.2 kB/request - 512.336 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

..._KKK.KK.K_K_.___..WK_.KKK....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  -     0/0/5064   . 0.00 23    0   2658387 0.0   0.00  127.66 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   1-0  -     0/0/4488   . 0.00 32    0   2389467 0.0   0.00  131.41 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   2-0  -     0/0/4911   . 0.00 28    0   2352778 0.0   0.00  119.05 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  76295 0/104/4787 _ 2.92 0     22  2359295 0.0   2.21  118.54 66.249.70.5   http/1.1 test.cloudware.ng:80   GET /1828543228?goodscode=1826147474 HTTP/1.1
   4-0  77741 1/69/4736  K 1.64 4     344 2284483 34.3  1.51  122.90 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3857644189 HTTP/1.1
   5-0  80096 11/26/4388 K 0.69 0     344 2187686 337.7 0.71  114.04 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=3690710285 HTTP/1.1
   6-0  75594 6/140/4702 K 3.81 1     297 2366804 191.4 3.90  122.17 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=3465114357 HTTP/1.1
   7-0  -     0/0/4482   . 0.00 30    0   2287466 0.0   0.00  113.78 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  80590 3/14/4457  K 0.36 0     257 2140715 98.4  0.41  108.93 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=689041768 HTTP/1.1
   9-0  79068 6/39/4464  K 1.67 0     397 2276602 189.9 1.05  115.15 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=100904486 HTTP/1.1
   10-0 -     0/0/4504   . 0.00 22    0   2280495 0.0   0.00  117.26 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 76657 2/50/4152  K 1.67 1     254 2126872 64.3  1.18  103.47 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=2828528410 HTTP/1.1
   12-0 74012 0/125/4166 _ 3.04 0     0   2145800 0.0   3.30  108.32 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 80348 1/23/4299  K 0.55 2     392 2212922 36.0  0.60  108.76 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=337546339 HTTP/1.1
   14-0 72944 0/154/4005 _ 3.65 0     11  2056439 0.0   5.13  104.81 52.5.242.243  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/blog/2019elections
   15-0 -     0/0/3916   . 0.00 31    0   2012911 0.0   0.00  101.13 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 79078 0/43/4306  _ 1.10 2     344 2147071 0.0   0.67  107.51 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3362223381 HTTP/1.1
   17-0 78834 0/54/3981  _ 2.18 1     1   2069831 0.0   1.46  106.03 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   18-0 78835 0/31/3570  _ 1.22 1     1   1854412 0.0   0.92  94.57  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   19-0 -     0/0/3267   . 0.00 24    0   1676670 0.0   0.00  86.09  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/3512   . 0.00 29    0   1754226 0.0   0.00  85.07  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 80604 0/10/2986  W 0.12 0     0   1623410 0.0   0.21  81.96  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   22-0 80605 6/11/2514  K 0.30 0     348 1492859 185.0 0.31  60.52  192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3553120642 HTTP/1.1
   23-0 70635 0/175/2732 _ 4.93 2     23  1346275 0.0   4.95  71.99  66.249.70.5   http/1.1 test.cloudware.ng:80   GET /?1827572782?goodscode=1825178298 HTTP/1.1
   24-0 -     0/0/2732   . 0.00 34    0   1376882 0.0   0.00  70.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 80623 6/15/1855  K 0.35 1     20  1167939 9.8   0.27  47.53  66.249.70.7   http/1.1 test.cloudware.ng:443  GET /199270369?goodscode=0199009966 HTTP/1.1
   26-0 80624 3/11/1812  K 0.49 1     298 871943  97.9  0.22  42.25  192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3281252961 HTTP/1.1
   27-0 80625 1/10/1225  K 0.68 1     302 907662  36.4  0.21  32.01  192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=552003899 HTTP/1.1
   28-0 -     0/0/1480   . 0.00 33    0   741491  0.0   0.00  37.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/667    . 0.00 1216  0   330377  0.0   0.00  16.20  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1288   . 0.00 1031  0   633597  0.0   0.00  30.22  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/774    . 0.00 1124  0   357622  0.0   0.00  17.29  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/317    . 0.00 1530  0   125012  0.0   0.00  6.04   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/273    . 0.00 1250  0   134022  0.0   0.00  7.31   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/355    . 0.00 3134  0   184428  0.0   0.00  9.27   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/586    . 0.00 3352  0   324653  0.0   0.00  16.02  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/239    . 0.00 3172  0   125237  0.0   0.00  6.18   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/370    . 0.00 3365  0   194052  0.0   0.00  9.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/160    . 0.00 3300  0   86409   0.0   0.00  4.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/427    . 0.00 3355  0   221231  0.0   0.00  11.39  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/128    . 0.00 3230  0   35694   0.0   0.00  2.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/34     . 0.00 3231  0   15628   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00 15173 0   22487   0.0   0.00  0.98   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00 15316 0   52913   0.0   0.00  2.30   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00 12957 0   366544  0.0   0.00  17.77  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00 15321 0   19040   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00 15294 0   5124    0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00 15255 0   7973    0.0   0.00  0.58   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00 15006 0   40607   0.0   0.00  1.94   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00 15309 0   18588   0.0   0.00  0.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 15304 0   3381    0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00 15278 0   3457    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 18013 0   1702    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00 17989 0   2649    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 18012 0   1806    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 17934 0   13156   0.0   0.00  0.55   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 17179 0   98784   0.0   0.00  5.53   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 17874 0   19861   0.0   0.00  0.82   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1224
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...19)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 86338
   total entries replaced since starting: 0
   total entries expired since starting: 85097
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 322 miss
   total removes since starting: 17 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit