403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.03.12.txt
 ## swap threshold exceeded
## server overview
2025-11-18.03.12 load[0] mem[50/79] mysql[1/11] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1059         188          80        1115        1037
Swap:          1999        1707         292
 03:12:01 up  8:24,  0 users,  load average: 0.32, 0.66, 0.67
## system overview
top - 03:12:01 up  8:24,  0 users,  load average: 0.32, 0.66, 0.67
Tasks: 197 total,   2 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.1 us, 38.7 sy,  0.0 ni,  3.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   171504 free,  1106892 used,  1141904 buff/cache
KiB Swap:  2047996 total,   299772 free,  1748224 used.  1041124 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264256   3268 S  46.7 10.9   7:04.93 /usr/sbin+
 55016 nigeria   20   0  404052  16140  10384 S  13.3  0.7   0:00.02 /opt/cpan+
   511 polkitd   20   0  612240    908    504 S   6.7  0.0   0:04.15 /usr/lib/+
 55004 cloudw    20   0  353712  15976  10492 S   6.7  0.7   0:00.01 /opt/cpan+
 55006 pactpay   20   0  479860  16260  10652 S   6.7  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44412   3356   1500 S   0.0  0.1   0:42.17 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.77 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:30.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.26 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.08 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.12 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.80 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.13 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.77 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   3556   3304 S   0.0  0.1   0:14.52 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    544    416 S   0.0  0.0   0:02.04 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   514 root      20   0  224148   3328   1024 S   0.0  0.1   0:00.36 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.69 /usr/sbin+
   521 root      20   0  152780    204    164 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    312    204 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1392    668 S   0.0  0.1   0:16.19 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1212    864 S   0.0  0.1   0:07.12 /usr/lib/+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:00.99 /usr/sbin+
   558 root      20   0   25908    144    124 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1784    736 S   0.0  0.1   0:24.54 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4076    988 S   0.0  0.2   0:00.68 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:03.23 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.02 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.66 pure-ftpd+
  1062 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13204   2396 S   0.0  0.5   0:07.16 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.67 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:27.04 /usr/bin/+
  1069 telegraf  20   0 5654304  39264   6092 S   0.0  1.6   0:16.26 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.61 /usr/bin/+
  1072 root      20   0   51508    572    408 S   0.0  0.0   0:00.37 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.14 /usr/bin/+
  1085 systuser  20   0   12756     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.73 /usr/sbin+
  1087 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1388   1276 S   0.0  0.1   0:01.28 sw-engine+
  1091 root      20   0  389508    572    476 S   0.0  0.0   0:00.86 php-fpm: +
  1098 named     20   0 1054792  43492   1860 S   0.0  1.8   0:17.05 /usr/sbin+
  1109 root      20   0  388892    608    396 S   0.0  0.0   0:00.79 php-fpm: +
  1113 root      20   0  298320   4400   3376 S   0.0  0.2   0:07.33 /usr/sbin+
  1117 root      20   0 1763304  77796    912 S   0.0  3.2   0:14.06 /usr/loca+
  1123 root      20   0  439788    872    780 S   0.0  0.0   0:00.89 php-fpm: +
  1131 root      20   0  400740   2008    724 S   0.0  0.1   0:04.39 php-fpm: +
  1134 root      20   0  261284   6800   1800 S   0.0  0.3   0:03.26 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3728   2364 S   0.0  0.2   0:24.14 /usr/loca+
  1149 root      20   0  396248    688    504 S   0.0  0.0   0:00.81 php-fpm: +
  1213 dovenull  20   0   46984   2304   1584 S   0.0  0.1   0:00.49 dovecot/p+
  1214 dovenull  20   0   47936   3020   1724 S   0.0  0.1   0:00.35 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.09 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.38 dovecot/l+
  1217 dovenull  20   0   47056   2524   1712 S   0.0  0.1   0:00.68 dovecot/p+
  1218 dovenull  20   0   47752   2716   1632 S   0.0  0.1   0:00.25 dovecot/i+
  1226 root      20   0   24528   2392    564 S   0.0  0.1   0:00.19 dovecot/c+
  1227 dovecot   20   0   13568    712    516 S   0.0  0.0   0:00.07 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.13 SonarPush+
  1297 dovecot   20   0   41188   1584   1072 S   0.0  0.1   0:00.68 dovecot/a+
  1300 wp-tool+  20   0  412396  26564   2156 S   0.0  1.1   0:09.69 /usr/bin/+
  1301 wp-tool+  20   0  387556   3756   1792 S   0.0  0.2   0:00.30 /usr/bin/+
  1308 root      20   0  248116   4768    892 S   0.0  0.2   0:06.42 /usr/loca+
  1409 root      20   0  210332  10704   2104 S   0.0  0.4   0:04.09 tailwatchd
  1412 root      20   0  262224  21832   3908 S   0.0  0.9   0:01.50 cpdavd - +
  1413 root      20   0  167452   3480   2104 S   0.0  0.1   0:00.53 dnsadmin +
  1836 root      20   0  299272    572    408 S   0.0  0.0   0:00.83 php-fpm: +
  1853 root      38  18  130416   1428    756 S   0.0  0.1   0:00.07 cpanellog+
  2063 root      20   0  266984   7676    724 S   0.0  0.3   0:04.07 /usr/sbin+
  2067 root      20   0   12788    388    280 S   0.0  0.0   0:03.28 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:02.84 /usr/loca+
  2069 root      20   0   12808    400    280 S   0.0  0.0   0:03.05 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  266560  97744   3108 S   0.0  4.0   0:04.85 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
 13053 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.56 [kworker]
 14140 root      20   0  182160  29100   1240 S   0.0  1.2   0:11.48 lfd - sle+
 24663 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 31819 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 37624 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 40701 nobody    20   0  277564  20000   4936 S   0.0  0.8   0:01.54 /usr/sbin+
 41684 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 41687 nobody    20   0  277616  19760   4788 S   0.0  0.8   0:01.50 /usr/sbin+
 41818 nobody    20   0  277764  20148   4868 S   0.0  0.8   0:01.62 /usr/sbin+
 42229 nobody    20   0  277680  20392   4972 S   0.0  0.8   0:01.28 /usr/sbin+
 44510 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44568 nobody    20   0  277752  20092   4824 S   0.0  0.8   0:00.98 /usr/sbin+
 44930 nobody    20   0  277680  19480   4600 S   0.0  0.8   0:01.11 /usr/sbin+
 45478 nobody    20   0  277608  19692   4700 S   0.0  0.8   0:01.20 /usr/sbin+
 46733 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 46767 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46941 nobody    20   0  277744  19716   4664 S   0.0  0.8   0:00.82 /usr/sbin+
 47185 nobody    20   0  277604  19896   4812 S   0.0  0.8   0:00.93 /usr/sbin+
 47549 root      20   0  123364    756    532 S   0.0  0.0   0:00.00 /usr/sbin+
 48061 nobody    20   0  277744  19660   4664 S   0.0  0.8   0:00.91 /usr/sbin+
 48924 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 50495 nobody    20   0  277876  19928   4532 S   0.0  0.8   0:00.65 /usr/sbin+
 51053 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 51270 nobody    20   0  277868  19140   4324 S   0.0  0.8   0:00.59 /usr/sbin+
 51279 nobody    20   0  277612  19228   4272 S   0.0  0.8   0:00.46 /usr/sbin+
 51281 nobody    20   0  277744  18872   4004 S   0.0  0.8   0:00.60 /usr/sbin+
 51282 nobody    20   0  277876  19452   4328 S   0.0  0.8   0:00.49 /usr/sbin+
 52371 nobody    20   0  277744  18736   3972 S   0.0  0.8   0:00.14 /usr/sbin+
 52571 nobody    20   0  277744  19140   4124 S   0.0  0.8   0:00.30 /usr/sbin+
 52776 nobody    20   0  277868  18752   4040 S   0.0  0.8   0:00.07 /usr/sbin+
 52814 nobody    20   0  277464  18316   3824 S   0.0  0.8   0:00.09 /usr/sbin+
 53173 mailnull  20   0   89500   5092   1876 S   0.0  0.2   0:00.00 /usr/sbin+
 53665 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53753 nobody    20   0  277744  18492   3740 S   0.0  0.8   0:00.20 /usr/sbin+
 53816 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 53974 nobody    20   0  277876  18876   4004 S   0.0  0.8   0:00.18 /usr/sbin+
 54447 nobody    20   0  277472  18152   3716 S   0.0  0.7   0:00.10 /usr/sbin+
 54898 wp-tool+  20   0  445028    312    184 S   0.0  0.0   0:00.00 sw-engine+
 54901 nigeria   20   0  400460   4476   2364 S   0.0  0.2   0:00.00 php-fpm: +
 54932 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 54935 root      20   0  182868   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 54937 root      20   0  182868   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54938 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54939 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54940 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54941 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54942 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54943 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54944 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54946 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54947 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54949 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54955 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 54956 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 54957 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 54981 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 54982 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54983 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54985 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 54987 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54988 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54989 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54990 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54991 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54992 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54994 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54995 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 55003 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 55013 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 55019 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 55022 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 55024 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:03  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      24663  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:0]
root      31819  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:1]
root      37624  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/u200:2]
root      41684  0.0  0.0      0     0 ?        S    02:53   0:00  \_ [kworker/1:5]
root      44510  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/u200:0]
root      46733  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/0:1]
root      46767  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/1:0]
root      48924  0.0  0.0      0     0 ?        S    03:03   0:00  \_ [kworker/0:3]
root      51053  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/1:2]
root      53665  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:3]
root      55024  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44412  3356 ?        Ss   Nov17   0:42 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.1  40244  3556 ?        Ss   Nov17   0:14 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   544 ?        S<sl Nov17   0:02 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3328 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   204 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   312 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1392 ?        Ss   Nov17   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1212 ?        Ss   Nov17   0:07 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      54935  0.0  0.0 182868  2408 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54955  0.0  0.0 113284  1212 ?        Ss   03:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      54956  0.0  0.0 108052   360 ?        S    03:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      54957  0.0  0.0 113288  1516 ?        S    03:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      55026  0.0  0.0 153840  2096 ?        R    03:12   0:00  |               \_ ps auxf
root      54937  0.0  0.0 182868  2408 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54994  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      54938  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54987  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      54939  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54983  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      54940  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54992  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      54941  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54988  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      54942  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54991  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      54943  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54982  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      54944  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54990  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      54946  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54989  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      54947  0.0  0.0 182864  2412 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54981  0.0  0.0  20164   964 ?        Ss   03:12   0:00  |   \_ jailshell (pactpay) [55003] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   55003  0.0  0.0  20164   260 ?        S    03:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   55006  0.0  0.6 479860 16260 ?        S    03:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      54949  0.0  0.0 182864  2408 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      54985  0.0  0.0  20164   960 ?        Ss   03:12   0:00      \_ jailshell (nigeria) [55013] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   55013  0.0  0.0  20164   256 ?        S    03:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   55016  0.0  0.6 404052 16140 ?        S    03:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908   144 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1784 ?        Ssl  Nov17   0:24 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4076 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  53173  0.0  0.2  89500  5092 ?        S    03:09   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    68 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    40 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13204 ?        Ssl  Nov17   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.0  0.3 1276356 8572 ?        Ssl  Nov17   0:27 /usr/bin/cspdaemon
telegraf   1069  0.0  1.6 5654304 39264 ?       SLsl Nov17   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   572 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  2304 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  3020 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2524 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  2716 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2392 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   712 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1584 ?        S    Nov17   0:00  \_ dovecot/auth
root      53816  0.0  0.1  60820  4508 ?        S    03:10   0:00  \_ dovecot/lmtp
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      55019  0.0  0.1 111304  4268 ?        Ss   03:12   0:00  \_ sshd: [accepted]
sshd      55022  0.0  0.1 115644  2628 ?        S    03:12   0:00      \_ sshd: [net]
systuser   1087  0.0  0.0 111864    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1388 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  54898  0.0  0.0 445028   312 ?        S    03:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   572 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 43492 ?       Ssl  Nov17   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   608 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.1 298320  4400 ?        Ssl  Nov17   0:07 /usr/sbin/rsyslogd -n
root       1117  0.0  3.2 1763304 77796 ?       Ssl  Nov17   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788   872 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2008 ?        Ss   Nov17   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   54901  0.0  0.1 400460  4476 ?        S    03:11   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.2 261284  6800 ?        Ss   Nov17   0:03 cpsrvd (SSL) - waiting for connections                   
root      54932  0.0  0.0      0     0 ?        Z    03:11   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3728 ?        Ss   Nov17   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   688 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.0 412396 26564 ?        Ss   Nov17   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.1 387556  3756 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4768 ?        Ss   Nov17   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  4.0 266560 97744 ?        S    Nov17   0:04  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210332 10704 ?        Ss   Nov17   0:04 tailwatchd
root       1412  0.0  0.9 262224 21832 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  3480 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   572 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1428 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.4 10.9 1458600 264256 ?      Sl   Nov17   7:04 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7676 ?        Ss   Nov17   0:04 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12788   388 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12808   400 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    40701  0.1  0.8 277564 20000 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    41687  0.1  0.8 277616 19760 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    41818  0.1  0.8 277764 20148 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    42229  0.1  0.8 277680 20392 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    44568  0.1  0.8 277752 20092 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    44930  0.1  0.8 277680 19480 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    45478  0.1  0.8 277608 19692 ?        S    02:58   0:01  \_ /usr/sbin/httpd -k start
nobody    46941  0.1  0.8 277744 19716 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    47185  0.1  0.8 277604 19896 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    48061  0.1  0.8 277744 19660 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    50495  0.1  0.8 277876 19928 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    51270  0.1  0.7 277868 19140 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    55004  0.0  0.6 353712 15976 ?        S    03:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    51279  0.1  0.7 277612 19228 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51281  0.1  0.7 277744 18872 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51282  0.1  0.8 277876 19452 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    52371  0.0  0.7 277744 18736 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52571  0.1  0.7 277744 19140 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52776  0.0  0.7 277868 18752 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52814  0.0  0.7 277464 18316 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    53753  0.1  0.7 277744 18492 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    53974  0.1  0.7 277876 18876 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    54447  0.1  0.7 277472 18152 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148     8 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152    40 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.0  1.2 182160 29100 ?        Ss   00:00   0:11 lfd - sleeping
root      47549  0.0  0.0 123364   756 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 30235  Threads: 3  Questions: 2649750  Slow queries: 0  Opens: 9344  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.638
*************************** 1. row ***************************
     Id: 40251
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 40254
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 40256
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 112.86.225.64 TIME_WAIT
      1 142.44.225.121 TIME_WAIT
      1 142.44.233.40 TIME_WAIT
      1 143.244.134.56 TIME_WAIT
      1 15.235.98.55 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.115 TIME_WAIT
      1 45.130.203.182 TIME_WAIT
      1 45.130.203.187 TIME_WAIT
      1 45.130.203.189 TIME_WAIT
      1 45.130.203.203 TIME_WAIT
      1 45.130.203.206 TIME_WAIT
      1 45.130.203.210 TIME_WAIT
      1 45.130.203.211 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 52.167.144.181 TIME_WAIT
      1 52.167.144.18 TIME_WAIT
      1 54.39.0.237 TIME_WAIT
      1 74.7.230.32 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      3 45.130.203.201 TIME_WAIT
      4 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 03:12:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 23 minutes 49 seconds
   Server load: 0.32 0.66 0.67
   Total accesses: 149319 - Total Traffic: 3.6 GB - Total Duration: 74716416
   CPU Usage: u11.59 s8.24 cu1922.53 cs1513.19 - 11.4% CPU load
   4.94 requests/sec - 123.8 kB/second - 25.1 kB/request - 500.381 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_KWKR__K__..._RKRKWK.K_KW.._....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                       Request
   0-0  52371 0/23/6850  _ 0.54 0    5   3745113 0.0   0.60  159.02 185.191.171.13 http/1.1 nigeriadecide.org:443     GET /polling_unit_category.php?lga=Mopa%20moro&state=Kogi&ward=
   1-0  52571 3/54/7070  K 1.46 3    269 3399036 96.3  1.22  165.61 192.178.4.98   http/1.1 team.cloudware.ng:443     GET /?l=522549948 HTTP/1.1
   2-0  44568 0/175/6756 W 4.04 0    0   3241309 0.0   4.18  157.56 ::1            http/1.1 chs1.nescrow.com.ng:80    GET //whm-server-status HTTP/1.0
   3-0  44930 4/189/6286 K 4.78 2    305 3194326 125.0 5.12  151.57 192.178.4.96   http/1.1 team.cloudware.ng:443     GET /?l=2040429105 HTTP/1.1
   4-0  40701 0/328/6770 R 7.72 79   274 3236124 0.0   7.18  157.67 107.189.27.59  http/1.1 training.cloudware.ng:443
   5-0  48061 0/164/6565 _ 3.77 1    1   3196100 0.0   6.38  162.87 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80    GET / HTTP/1.1
   6-0  53753 0/33/6612  _ 0.89 0    0   3229169 0.0   0.91  162.91 ::1            http/1.1 chs1.nescrow.com.ng:80    GET //whm-server-status HTTP/1.0
   7-0  54447 10/17/6052 K 0.43 2    262 2951794 309.9 0.48  156.44 192.178.4.97   http/1.1 team.cloudware.ng:443     GET /?l=2423836204 HTTP/1.1
   8-0  46941 0/148/5975 _ 3.37 1    1   2791472 0.0   3.62  138.61 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80    GET / HTTP/1.1
   9-0  45478 0/220/5921 _ 5.92 2    295 2872215 0.0   5.22  144.99 192.178.4.104  http/1.1 team.cloudware.ng:443     GET /?l=3906441723 HTTP/1.1
   10-0 -     0/0/5710   . 0.00 84   0   2767507 0.0   0.00  140.65 ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   11-0 -     0/0/5953   . 0.00 48   0   2827054 0.0   0.00  158.89 ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   12-0 -     0/0/5219   . 0.00 59   0   2725986 0.0   0.00  127.93 ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   13-0 47185 0/180/5187 _ 4.18 0    6   2449419 0.0   3.86  125.07 18.207.79.144  http/1.1 nigeriadecide.org:443     GET /polling_unit_category.php/2019elections/images/2019electio
   14-0 41687 0/276/5036 R 6.07 115  23  2574916 0.0   6.31  120.72 45.61.133.122  http/1.1 training.cloudware.ng:443
   15-0 50495 2/111/5430 K 2.66 1    260 2619820 64.1  2.80  128.34 192.178.4.102  http/1.1 team.cloudware.ng:443     GET /?l=2853514438 HTTP/1.1
   16-0 41818 0/332/4927 R 8.82 120  0   3165164 0.0   6.18  129.91 104.194.145.47 http/1.1 training.cloudware.ng:443
   17-0 52776 1/16/4854  K 0.25 1    284 2292033 33.5  0.34  123.56 192.178.4.96   http/1.1 team.cloudware.ng:443     GET /?l=2796358087 HTTP/1.1
   18-0 51270 0/95/3877  W 2.45 0    0   1932568 0.0   2.69  87.64  192.178.4.105  http/1.1 team.cloudware.ng:443     GET /?l=454096356 HTTP/1.1
   19-0 51279 8/76/3968  K 1.90 0    268 1891284 251.4 2.54  97.98  192.178.4.101  http/1.1 team.cloudware.ng:443     GET /?l=3164673853 HTTP/1.1
   20-0 -     0/0/3891   . 0.00 90   0   1906685 0.0   0.00  95.46  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   21-0 51281 1/96/2763  K 2.66 3    268 1397304 33.5  2.73  66.30  192.178.4.100  http/1.1 team.cloudware.ng:443     GET /?l=1745185796 HTTP/1.1
   22-0 51282 0/90/2887  _ 2.82 1    8   1352689 0.0   2.09  66.42  14.191.62.175  http/1.1 nigeriadecide.org:443     GET /polling_unit_category.php?lga=Funtua&state=Katsina&ward=Du
   23-0 52814 1/13/2755  K 0.32 1    265 1307861 34.0  0.37  62.65  192.178.4.104  http/1.1 team.cloudware.ng:443     GET /?l=3468372230 HTTP/1.1
   24-0 42229 1/224/2866 W 5.85 0    0   1533974 33.3  5.47  88.36  192.178.4.96   http/1.1 team.cloudware.ng:443     GET /?l=1712293701 HTTP/1.1
   25-0 -     0/0/2070   . 0.00 51   0   1104901 0.0   0.00  50.06  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   26-0 -     0/0/1480   . 0.00 50   0   833292  0.0   0.00  36.27  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   27-0 53974 0/28/1668  _ 0.72 0    312 931403  0.0   0.80  39.38  192.178.4.103  http/1.1 team.cloudware.ng:443     GET /?l=2473354523 HTTP/1.1
   28-0 -     0/0/1502   . 0.00 4262 0   804838  0.0   0.00  33.41  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   29-0 -     0/0/1590   . 0.00 3396 0   853313  0.0   0.00  38.67  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   30-0 -     0/0/1142   . 0.00 4261 0   645034  0.0   0.00  29.02  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   31-0 -     0/0/1240   . 0.00 4253 0   555517  0.0   0.00  33.06  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   32-0 -     0/0/747    . 0.00 4054 0   402640  0.0   0.00  20.61  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   33-0 -     0/0/1047   . 0.00 4258 0   641345  0.0   0.00  29.13  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   34-0 -     0/0/639    . 0.00 4013 0   329465  0.0   0.00  16.27  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   35-0 -     0/0/517    . 0.00 4243 0   284168  0.0   0.00  13.47  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   36-0 -     0/0/698    . 0.00 3846 0   340948  0.0   0.00  19.94  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   37-0 -     0/0/581    . 0.00 4260 0   316089  0.0   0.00  17.51  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   38-0 -     0/0/560    . 0.00 3490 0   281890  0.0   0.00  15.60  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   39-0 -     0/0/146    . 0.00 4257 0   69846   0.0   0.00  3.12   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   40-0 -     0/0/639    . 0.00 3967 0   332944  0.0   0.00  15.73  ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   41-0 -     0/0/94     . 0.00 4351 0   46768   0.0   0.00  2.03   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   42-0 -     0/0/135    . 0.00 4350 0   70951   0.0   0.00  3.32   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   43-0 -     0/0/266    . 0.00 4336 0   100462  0.0   0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   44-0 -     0/0/210    . 0.00 4337 0   111671  0.0   0.00  5.35   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   45-0 -     0/0/202    . 0.00 3931 0   96196   0.0   0.00  5.80   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   46-0 -     0/0/290    . 0.00 4348 0   151806  0.0   0.00  7.06   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   47-0 -     0/0/70     . 0.00 4349 0   35217   0.0   0.00  1.50   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   48-0 -     0/0/408    . 0.00 3868 0   193592  0.0   0.00  9.83   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   49-0 -     0/0/48     . 0.00 4256 0   23887   0.0   0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   50-0 -     0/0/61     . 0.00 4345 0   37811   0.0   0.00  1.40   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   51-0 -     0/0/82     . 0.00 4346 0   40275   0.0   0.00  1.78   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   52-0 -     0/0/41     . 0.00 4338 0   14661   0.0   0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   53-0 -     0/0/80     . 0.00 4364 0   38738   0.0   0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   54-0 -     0/0/179    . 0.00 4330 0   93196   0.0   0.00  5.15   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   55-0 -     0/0/102    . 0.00 4249 0   53549   0.0   0.00  2.46   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   56-0 -     0/0/120    . 0.00 4367 0   56500   0.0   0.00  3.12   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   57-0 -     0/0/13     . 0.00 4331 0   3559    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   58-0 -     0/0/34     . 0.00 4286 0   13539   0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 4341 0   103     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   60-0 -     0/0/192    . 0.00 4320 0   100024  0.0   0.00  5.06   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   61-0 -     0/0/12     . 0.00 4368 0   5547    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   62-0 -     0/0/50     . 0.00 4250 0   22451   0.0   0.00  1.13   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   63-0 -     0/0/25     . 0.00 4247 0   11908   0.0   0.00  0.43   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   64-0 -     0/0/9      . 0.00 4317 0   4843    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00 4333 0   1793    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   66-0 -     0/0/9      . 0.00 4310 0   3592    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 4365 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   68-0 -     0/0/23     . 0.00 4282 0   11930   0.0   0.00  0.49   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   69-0 -     0/0/6      . 0.00 4329 0   2254    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 4347 0   27      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   71-0 -     0/0/7      . 0.00 4315 0   2309    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   72-0 -     0/0/9      . 0.00 4316 0   3554    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   73-0 -     0/0/44     . 0.00 4196 0   21261   0.0   0.00  0.90   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00 4363 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   75-0 -     0/0/21     . 0.00 4266 0   9134    0.0   0.00  0.44   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   76-0 -     0/0/8      . 0.00 4319 0   4157    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   77-0 -     0/0/1      . 0.00 4366 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 4343 0   529     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 4362 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 4344 0   29      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80    OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1004
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...32)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 108215
   total entries replaced since starting: 0
   total entries expired since starting: 107183
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 38 hit, 290 miss
   total removes since starting: 28 hit, 17 miss
Youez - 2016 - github.com/yon3zu
LinuXploit