403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-18.02.48 load[0] mem[46/78] mysql[1/11] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1033         181          76        1148        1087
Swap:          1999        1697         302
 02:48:02 up  8:00,  0 users,  load average: 0.32, 0.50, 0.51
## system overview
top - 02:48:02 up  8:00,  0 users,  load average: 0.32, 0.50, 0.51
Tasks: 201 total,   2 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 32.4 sy,  0.0 ni,  2.9 id, 11.8 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   180748 free,  1060404 used,  1179148 buff/cache
KiB Swap:  2047996 total,   309348 free,  1738648 used.  1111324 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264240   3148 S  86.7 10.9   6:43.52 /usr/sbin+
 38416 pactpay   20   0  480124  17320  11584 S  13.3  0.7   0:00.02 /opt/cpan+
 38423 nigeria   20   0  404052  16140  10384 S  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44412   3372   1512 S   6.7  0.1   0:40.26 /usr/lib/+
     6 root      20   0       0      0      0 S   6.7  0.0   0:01.69 [ksoftirq+
   687 root       0 -20       0      0      0 D   6.7  0.0   0:02.58 [loop0]
  1098 named     20   0 1054792  42704   1820 S   6.7  1.8   0:16.07 /usr/sbin+
 28469 nobody    20   0  277876  19936   4660 S   6.7  0.8   0:01.09 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:29.25 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.20 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.79 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.31 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.70 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.01 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.69 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   7188   6936 S   0.0  0.3   0:13.92 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    544    416 S   0.0  0.0   0:01.96 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    908    504 S   0.0  0.0   0:03.93 /usr/lib/+
   514 root      20   0  224148   3524   1024 S   0.0  0.1   0:00.34 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.66 /usr/sbin+
   521 root      20   0  152780    204    164 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    352    244 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1392    668 S   0.0  0.1   0:15.38 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1212    864 S   0.0  0.1   0:06.77 /usr/lib/+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:00.93 /usr/sbin+
   558 root      20   0   25908    160    140 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1780    732 S   0.0  0.1   0:23.31 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4136   1052 S   0.0  0.2   0:00.63 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.63 pure-ftpd+
  1062 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13424   2576 S   0.0  0.6   0:06.81 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.64 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:27.02 /usr/bin/+
  1069 telegraf  20   0 5654304  38464   6120 S   0.0  1.6   0:15.49 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.49 /usr/bin/+
  1072 root      20   0   51508    572    408 S   0.0  0.0   0:00.35 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.13 /usr/bin/+
  1085 systuser  20   0   12756     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.62 /usr/sbin+
  1087 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1392   1280 S   0.0  0.1   0:01.22 sw-engine+
  1091 root      20   0  389508    576    476 S   0.0  0.0   0:00.81 php-fpm: +
  1109 root      20   0  388892    608    396 S   0.0  0.0   0:00.75 php-fpm: +
  1113 root      20   0  290128   7520   6476 S   0.0  0.3   0:07.02 /usr/sbin+
  1117 root      20   0 1763304  77548    876 S   0.0  3.2   0:14.03 /usr/loca+
  1123 root      20   0  439788   1044    952 S   0.0  0.0   0:00.85 php-fpm: +
  1131 root      20   0  400740   2008    724 S   0.0  0.1   0:04.19 php-fpm: +
  1134 root      20   0  261284   6840   1804 S   0.0  0.3   0:03.12 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3740   2376 S   0.0  0.2   0:22.98 /usr/loca+
  1149 root      20   0  396248    752    568 S   0.0  0.0   0:00.77 php-fpm: +
  1213 dovenull  20   0   46984   2408   1684 S   0.0  0.1   0:00.47 dovecot/p+
  1214 dovenull  20   0   47936   3132   1800 S   0.0  0.1   0:00.34 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.07 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.36 dovecot/l+
  1217 dovenull  20   0   47056   2632   1820 S   0.0  0.1   0:00.65 dovecot/p+
  1218 dovenull  20   0   47752   2936   1708 S   0.0  0.1   0:00.25 dovecot/i+
  1226 root      20   0   24528   2408    564 S   0.0  0.1   0:00.17 dovecot/c+
  1227 dovecot   20   0   13568    712    516 S   0.0  0.0   0:00.07 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.13 SonarPush+
  1297 dovecot   20   0   41188   1580   1068 S   0.0  0.1   0:00.62 dovecot/a+
  1300 wp-tool+  20   0  412396  30688   2100 S   0.0  1.3   0:09.24 /usr/bin/+
  1301 wp-tool+  20   0  387556   3768   1796 S   0.0  0.2   0:00.29 /usr/bin/+
  1308 root      20   0  248116   4768    892 S   0.0  0.2   0:06.24 /usr/loca+
  1409 root      20   0  210184  10952   2392 S   0.0  0.5   0:03.82 tailwatchd
  1412 root      20   0  262224  24688   6764 S   0.0  1.0   0:01.49 cpdavd - +
  1413 root      20   0  167452   4200   2824 S   0.0  0.2   0:00.51 dnsadmin +
  1836 root      20   0  299272    572    408 S   0.0  0.0   0:00.78 php-fpm: +
  1853 root      38  18  130416   1428    756 S   0.0  0.1   0:00.07 cpanellog+
  1973 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
  2063 root      20   0  266984   7676    724 S   0.0  0.3   0:03.96 /usr/sbin+
  2067 root      20   0   12820    388    280 S   0.0  0.0   0:03.11 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:02.70 /usr/loca+
  2069 root      20   0   12852    400    280 S   0.0  0.0   0:02.91 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  266560  99936   3308 S   0.0  4.1   0:04.55 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
 13053 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.52 [kworker]
 14140 root      20   0  181920  28920   1240 S   0.0  1.2   0:10.09 lfd - sle+
 15977 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 20098 nobody    20   0  277876  20572   4864 S   0.0  0.8   0:01.93 /usr/sbin+
 20700 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 23315 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24663 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 25624 nobody    20   0  277616  20204   4924 S   0.0  0.8   0:01.54 /usr/sbin+
 27559 nobody    20   0  277752  20004   4792 S   0.0  0.8   0:01.25 /usr/sbin+
 30297 nobody    20   0  277744  19788   4596 S   0.0  0.8   0:00.89 /usr/sbin+
 31743 nobody    20   0  277616  19416   4384 S   0.0  0.8   0:00.63 /usr/sbin+
 31819 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 32491 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32590 nobody    20   0  277472  19048   4284 S   0.0  0.8   0:00.67 /usr/sbin+
 32608 nobody    20   0  277504  19156   4332 S   0.0  0.8   0:00.59 /usr/sbin+
 33500 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33578 nobody    20   0  277744  18760   4036 S   0.0  0.8   0:00.45 /usr/sbin+
 33786 nobody    20   0  277472  18728   4248 S   0.0  0.8   0:00.37 /usr/sbin+
 33810 nobody    20   0  277744  19228   4148 S   0.0  0.8   0:00.34 /usr/sbin+
 34026 nobody    20   0  277884  18928   4168 S   0.0  0.8   0:00.34 /usr/sbin+
 36692 nobody    20   0  277876  19012   3996 S   0.0  0.8   0:00.22 /usr/sbin+
 36879 nobody    20   0  277876  18932   4036 S   0.0  0.8   0:00.19 /usr/sbin+
 37213 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37380 nobody    20   0  277740  18404   3520 S   0.0  0.8   0:00.19 /usr/sbin+
 37624 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38061 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 38184 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38193 mailnull  20   0   89496   5696   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 38216 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 38223 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 38240 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 38253 root      20   0   84396   6384   3576 S   0.0  0.3   0:00.02 /usr/sbin+
 38321 root      20   0   88340  10372   3592 S   0.0  0.4   0:00.02 /usr/sbin+
 38327 mailnull  20   0   88696   9256   2368 S   0.0  0.4   0:00.00 /usr/sbin+
 38334 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 38348 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 38349 root      20   0  182868   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38350 root      20   0  182868   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38351 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38352 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38353 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38355 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38356 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38357 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38358 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38359 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38360 root      20   0  182864   2404   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 38361 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38363 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38365 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 38366 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 38367 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 38386 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38388 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38389 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38390 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 38391 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 38392 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38393 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38394 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38395 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38397 root      20   0  113284   1196   1020 S   0.0  0.0   0:00.00 /bin/sh /+
 38398 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38399 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38401 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38408 root      20   0  129956   2320   1828 S   0.0  0.1   0:00.00 /usr/bin/+
 38409 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38415 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 38420 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 38429 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 sh -c fin+
 38431 root      20   0  123872   4732    956 R   0.0  0.2   0:00.00 find /tmp+
 38432 root      20   0  112812   1012    860 S   0.0  0.0   0:00.00 grep -Ef +
 38434 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68263 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kworker/+
 85211 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov17   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root      85211  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:1]
root       1973  0.0  0.0      0     0 ?        S    01:46   0:00  \_ [kworker/1:3]
root      15977  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:2]
root      20700  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/0:4]
root      23315  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/u200:0]
root      24663  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:0]
root      31819  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:1]
root      32491  0.0  0.0      0     0 ?        S    02:41   0:00  \_ [kworker/1:4]
root      33500  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:1]
root      37213  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/0:3]
root      37624  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/u200:2]
root      38434  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44412  3372 ?        Ss   Nov17   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.2  40244  7188 ?        Ss   Nov17   0:13 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   544 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3524 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   204 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   352 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1392 ?        Ss   Nov17   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1212 ?        Ss   Nov17   0:06 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      38348  0.0  0.0 182864  2408 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38365  0.0  0.0 113284  1212 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      38366  0.0  0.0 108052   360 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      38367  0.0  0.0 113288  1516 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      38436  0.0  0.0 153840  2088 ?        R    02:48   0:00  |               \_ ps auxf
root      38349  0.0  0.0 182868  2408 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38392  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      38350  0.0  0.0 182868  2408 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38388  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      38351  0.0  0.0 182864  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38401  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      38352  0.0  0.0 182864  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38386  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      38353  0.0  0.0 182864  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38399  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      38355  0.0  0.0 182864  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38394  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      38356  0.0  0.0 182864  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38389  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      38357  0.0  0.0 182864  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38398  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      38358  0.0  0.0 182864  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38393  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      38359  0.0  0.0 182864  2408 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38395  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      38360  0.0  0.0 182864  2404 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38397  0.0  0.0 113284  1196 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      38408  0.0  0.0 129956  2320 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      38429  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      38431  0.0  0.2 124664  5524 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      38432  0.0  0.0 112812  1012 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      38361  0.0  0.0 182864  2408 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38391  0.0  0.0  20164   964 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [38409] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38409  0.0  0.0  20164   260 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38416  0.0  0.7 480124 17320 ?        R    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      38363  0.0  0.0 182864  2408 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      38390  0.0  0.0  20164   968 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [38415] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38415  0.0  0.0  20164   264 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38423  0.0  0.6 404052 16140 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908   160 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1780 ?        Ssl  Nov17   0:23 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4136 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  38193  0.0  0.2  89496  5696 ?        S    02:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      38253  0.5  0.2  84396  6384 ?        S    02:47   0:00  \_ /usr/sbin/exim -q
root      38321  0.5  0.4  88340 10372 ?        S    02:47   0:00      \_ /usr/sbin/exim -q
mailnull  38327  0.0  0.3  88696  9256 ?        S    02:47   0:00          \_ /usr/sbin/exim -q
systuser   1060  0.0  0.0 112268    68 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    40 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13424 ?        Ssl  Nov17   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.0  0.3 1276356 8572 ?        Ssl  Nov17   0:27 /usr/bin/cspdaemon
telegraf   1069  0.0  1.5 5654304 38464 ?       SLsl Nov17   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   572 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  2408 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  3132 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2632 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  2936 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2408 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   712 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1580 ?        S    Nov17   0:00  \_ dovecot/auth
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      38184  0.0  0.1 111304  4264 ?        Ss   02:47   0:00  \_ sshd: [accepted]
root      38216  0.0  0.1 111304  4268 ?        Ss   02:47   0:00  \_ sshd: [accepted]
sshd      38240  0.0  0.1 115644  2632 ?        S    02:47   0:00  |   \_ sshd: [net]
root      38223  0.0  0.1 111304  4272 ?        Ss   02:47   0:00  \_ sshd: [accepted]
systuser   1087  0.0  0.0 111864    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1392 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  38061  0.0  0.0 445028   320 ?        S    02:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   576 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 42704 ?       Ssl  Nov17   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   608 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.3 290128  7520 ?        Ssl  Nov17   0:07 /usr/sbin/rsyslogd -n
root       1117  0.0  3.2 1763304 77548 ?       Ssl  Nov17   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788  1044 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2008 ?        Ss   Nov17   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
root       1134  0.0  0.2 261284  6840 ?        Ss   Nov17   0:03 cpsrvd (SSL) - waiting for connections                   
root      38334  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3740 ?        Ss   Nov17   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   752 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.2 412396 30688 ?        Ss   Nov17   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.1 387556  3768 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4768 ?        Ss   Nov17   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  4.1 266560 99936 ?        S    Nov17   0:04  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210184 10952 ?        Ss   Nov17   0:03 tailwatchd
root       1412  0.0  1.0 262224 24688 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  4200 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   572 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1428 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.4 10.9 1458600 264240 ?      Sl   Nov17   6:43 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7676 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12820   388 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12852   400 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    20098  0.1  0.8 277876 20572 ?        S    02:16   0:01  \_ /usr/sbin/httpd -k start
nobody    25624  0.1  0.8 277616 20204 ?        S    02:28   0:01  \_ /usr/sbin/httpd -k start
nobody    27559  0.1  0.8 277752 20004 ?        S    02:31   0:01  \_ /usr/sbin/httpd -k start
nobody    28469  0.1  0.8 277876 19936 ?        S    02:33   0:01  \_ /usr/sbin/httpd -k start
nobody    30297  0.1  0.8 277744 19788 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    31743  0.1  0.8 277616 19416 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    32590  0.1  0.7 277472 19048 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    32608  0.1  0.7 277504 19156 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    33578  0.1  0.7 277744 18760 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    33786  0.1  0.7 277472 18728 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    33810  0.1  0.7 277744 19228 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    34026  0.1  0.7 277884 18928 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    36692  0.1  0.7 277876 19012 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    36879  0.1  0.7 277876 18932 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    37380  0.1  0.7 277740 18404 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148     8 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152    40 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.1 181920 28920 ?        Ss   00:00   0:10 lfd - sleeping
## mysql stats
Uptime: 28796  Threads: 3  Questions: 2517779  Slow queries: 0  Opens: 8789  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.435
*************************** 1. row ***************************
     Id: 38033
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-18' LIMIT 1
*************************** 2. row ***************************
     Id: 38035
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 38038
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 114.119.157.24 TIME_WAIT
      1 148.113.128.184 TIME_WAIT
      1 15.235.27.193 TIME_WAIT
      1 15.235.27.198 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 185.180.141.60 TIME_WAIT
      1 ::1 TIME_WAIT
      1 35.169.102.85 TIME_WAIT
      1 51.161.37.132 TIME_WAIT
      1 74.7.227.17 TIME_WAIT
      1 74.7.230.9 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.180.141.59 TIME_WAIT
      2 216.73.216.4 TIME_WAIT
      4 185.180.141.57 TIME_WAIT
      6 185.180.141.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 02:48:02 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 59 minutes 50 seconds
   Server load: 0.32 0.50 0.51
   Total accesses: 142608 - Total Traffic: 3.4 GB - Total Duration: 71770959
   CPU Usage: u7.92 s6.73 cu1832.63 cs1442.33 - 11.4% CPU load
   4.95 requests/sec - 124.3 kB/second - 25.1 kB/request - 503.274 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KK_KKKW._KWKK_.K..._............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client     Protocol              VHost                                          Request
   0-0  27559 5/248/6459 K 4.84 4    294 3602264 158.8 5.18  151.38 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=3438754277 HTTP/1.1
   1-0  30297 1/165/6762 K 3.92 1    289 3262976 36.9  4.73  158.29 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=1429655140 HTTP/1.1
   2-0  32590 0/111/6474 _ 2.80 0    301 3110659 0.0   2.99  150.53 192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=1724529283 HTTP/1.1
   3-0  32608 2/103/5988 K 2.48 1    271 3049683 69.8  2.65  143.54 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=1594023906 HTTP/1.1
   4-0  25624 4/294/6400 K 6.07 0    262 3103939 124.0 6.66  149.48 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=2150565584 HTTP/1.1
   5-0  33786 2/66/6253  K 1.51 3    294 3047989 67.9  1.61  152.86 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=2237733840 HTTP/1.1
   6-0  37380 1/29/6263  W 1.05 0    0   3077447 35.1  0.81  155.04 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=2313590379 HTTP/1.1
   7-0  -     0/0/5756   . 0.00 124  0   2784484 0.0   0.00  148.15 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  33810 0/57/5657  _ 1.32 1    262 2647568 0.0   1.47  130.62 185.180.141.57 http/1.1
   9-0  33578 5/74/5572  K 1.88 4    256 2718838 154.3 1.98  136.64 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=76710700 HTTP/1.1
   10-0 34026 0/59/5432  W 1.48 0    0   2644984 0.0   1.49  133.78 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   11-0 36692 2/41/5694  K 0.84 0    257 2708642 64.9  1.13  153.24 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=167606287 HTTP/1.1
   12-0 28469 2/200/5014 K 4.64 0    278 2630015 64.5  4.56  122.83 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=238099901 HTTP/1.1
   13-0 36879 0/34/4911  _ 0.77 0    31  2321875 0.0   0.81  118.72 54.204.62.163  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/2019elections/blog/2019elections
   14-0 -     0/0/4726   . 0.00 113  0   2423213 0.0   0.00  113.52 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 20098 2/441/5137 K 8.25 0    14  2502130 10.6  8.21  121.38 185.180.141.58 http/1.1 mydealtrackerweb.staging.cloudw GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   16-0 -     0/0/4555   . 0.00 469  0   3019065 0.0   0.00  122.63 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/4534   . 0.00 445  0   2185872 0.0   0.00  117.18 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -     0/0/3714   . 0.00 471  4   1858039 0.0   0.00  83.16  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 31743 0/111/3798 _ 2.56 0    0   1815421 0.0   3.05  93.00  ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   20-0 -     0/0/3866   . 0.00 122  0   1897565 0.0   0.00  94.72  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/2662   . 0.00 276  0   1348296 0.0   0.00  63.50  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/2771   . 0.00 414  0   1305588 0.0   0.00  63.74  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/2715   . 0.00 1313 0   1291650 0.0   0.00  61.73  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/2642   . 0.00 1368 0   1431126 0.0   0.00  82.89  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/1822   . 0.00 2052 0   988060  0.0   0.00  44.58  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/1470   . 0.00 2815 0   829882  0.0   0.00  36.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/1640   . 0.00 2820 4   917792  0.0   0.00  38.58  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/1502   . 0.00 2823 0   804838  0.0   0.00  33.41  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/1590   . 0.00 1957 0   853313  0.0   0.00  38.67  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/1142   . 0.00 2822 0   645034  0.0   0.00  29.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/1240   . 0.00 2814 0   555517  0.0   0.00  33.06  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/747    . 0.00 2615 0   402640  0.0   0.00  20.61  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/1047   . 0.00 2819 0   641345  0.0   0.00  29.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/639    . 0.00 2574 0   329465  0.0   0.00  16.27  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/517    . 0.00 2804 0   284168  0.0   0.00  13.47  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/698    . 0.00 2406 0   340948  0.0   0.00  19.94  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/581    . 0.00 2821 0   316089  0.0   0.00  17.51  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/560    . 0.00 2051 0   281890  0.0   0.00  15.60  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/146    . 0.00 2818 0   69846   0.0   0.00  3.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/639    . 0.00 2528 0   332944  0.0   0.00  15.73  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/94     . 0.00 2912 0   46768   0.0   0.00  2.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/135    . 0.00 2911 0   70951   0.0   0.00  3.32   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/266    . 0.00 2897 0   100462  0.0   0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/210    . 0.00 2898 0   111671  0.0   0.00  5.35   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/202    . 0.00 2492 0   96196   0.0   0.00  5.80   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/290    . 0.00 2909 0   151806  0.0   0.00  7.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/70     . 0.00 2910 0   35217   0.0   0.00  1.50   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/408    . 0.00 2428 0   193592  0.0   0.00  9.83   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/48     . 0.00 2817 0   23887   0.0   0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/61     . 0.00 2906 0   37811   0.0   0.00  1.40   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/82     . 0.00 2907 0   40275   0.0   0.00  1.78   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/41     . 0.00 2899 0   14661   0.0   0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/80     . 0.00 2925 0   38738   0.0   0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/179    . 0.00 2891 0   93196   0.0   0.00  5.15   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/102    . 0.00 2810 0   53549   0.0   0.00  2.46   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/120    . 0.00 2928 0   56500   0.0   0.00  3.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/13     . 0.00 2892 0   3559    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/34     . 0.00 2847 0   13539   0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 2902 0   103     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/192    . 0.00 2881 0   100024  0.0   0.00  5.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/12     . 0.00 2929 0   5547    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/50     . 0.00 2811 0   22451   0.0   0.00  1.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/25     . 0.00 2808 0   11908   0.0   0.00  0.43   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/9      . 0.00 2878 0   4843    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00 2894 0   1793    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/9      . 0.00 2871 0   3592    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 2926 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/23     . 0.00 2843 0   11930   0.0   0.00  0.49   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/6      . 0.00 2890 0   2254    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 2908 0   27      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/7      . 0.00 2876 0   2309    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/9      . 0.00 2877 0   3554    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/44     . 0.00 2757 0   21261   0.0   0.00  0.90   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00 2924 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/21     . 0.00 2827 0   9134    0.0   0.00  0.44   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/8      . 0.00 2880 0   4157    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/1      . 0.00 2927 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 2904 0   529     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 2923 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 2905 0   29      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 899
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...34)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 103272
   total entries replaced since starting: 0
   total entries expired since starting: 102345
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 36 hit, 263 miss
   total removes since starting: 28 hit, 17 miss
Youez - 2016 - github.com/yon3zu
LinuXploit