403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.03.15.txt
 ## swap threshold exceeded
## server overview
2025-11-18.03.15 load[0] mem[49/79] mysql[3/11] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1038         198          80        1126        1059
Swap:          1999        1707         292
 03:15:01 up  8:27,  0 users,  load average: 0.38, 0.65, 0.67
## system overview
top - 03:15:01 up  8:27,  0 users,  load average: 0.38, 0.65, 0.67
Tasks: 201 total,   7 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.6 us, 16.1 sy,  0.0 ni,  3.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   198076 free,  1068196 used,  1154028 buff/cache
KiB Swap:  2047996 total,   299772 free,  1748224 used.  1079588 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 264388   3356 S 126.7 10.9   7:07.38 /usr/sbin+
 56886 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44412   3356   1500 S   0.0  0.1   0:42.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:31.00 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.26 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:05.10 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.13 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.80 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.13 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.78 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   3884   3632 S   0.0  0.2   0:14.59 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    544    416 S   0.0  0.0   0:02.05 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    908    504 S   0.0  0.0   0:04.16 /usr/lib/+
   514 root      20   0  224148   3328   1024 S   0.0  0.1   0:00.36 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.69 /usr/sbin+
   521 root      20   0  152780    204    164 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    312    204 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1392    668 S   0.0  0.1   0:16.29 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1212    864 S   0.0  0.1   0:07.17 /usr/lib/+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:00.99 /usr/sbin+
   558 root      20   0   25908    144    124 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1784    736 S   0.0  0.1   0:24.69 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4076    988 S   0.0  0.2   0:00.68 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:03.23 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.02 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.66 pure-ftpd+
  1062 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13204   2396 S   0.0  0.5   0:07.20 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.68 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:27.04 /usr/bin/+
  1069 telegraf  20   0 5654304  37476   6128 S   0.0  1.5   0:16.36 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.63 /usr/bin/+
  1072 root      20   0   51508    572    408 S   0.0  0.0   0:00.37 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.14 /usr/bin/+
  1085 systuser  20   0   12756     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.74 /usr/sbin+
  1087 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1388   1276 S   0.0  0.1   0:01.28 sw-engine+
  1091 root      20   0  389508    572    476 S   0.0  0.0   0:00.86 php-fpm: +
  1098 named     20   0 1054792  43492   1860 S   0.0  1.8   0:17.15 /usr/sbin+
  1109 root      20   0  388892    608    396 S   0.0  0.0   0:00.79 php-fpm: +
  1113 root      20   0  298320   4688   3664 S   0.0  0.2   0:07.37 /usr/sbin+
  1117 root      20   0 1763304  77788    912 S   0.0  3.2   0:14.06 /usr/loca+
  1123 root      20   0  439788    872    780 S   0.0  0.0   0:00.89 php-fpm: +
  1131 root      20   0  400740   2008    724 S   0.0  0.1   0:04.40 php-fpm: +
  1134 root      20   0  261284   6800   1800 S   0.0  0.3   0:03.27 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3728   2364 S   0.0  0.2   0:24.29 /usr/loca+
  1149 root      20   0  396248    688    504 S   0.0  0.0   0:00.82 php-fpm: +
  1213 dovenull  20   0   46984   2304   1584 S   0.0  0.1   0:00.49 dovecot/p+
  1214 dovenull  20   0   47936   3020   1724 S   0.0  0.1   0:00.35 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.09 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.38 dovecot/l+
  1217 dovenull  20   0   47056   2524   1712 S   0.0  0.1   0:00.68 dovecot/p+
  1218 dovenull  20   0   47752   2716   1632 S   0.0  0.1   0:00.25 dovecot/i+
  1226 root      20   0   24528   2392    564 S   0.0  0.1   0:00.19 dovecot/c+
  1227 dovecot   20   0   13568    712    516 S   0.0  0.0   0:00.07 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.13 SonarPush+
  1297 dovecot   20   0   41188   1584   1072 S   0.0  0.1   0:00.68 dovecot/a+
  1300 wp-tool+  20   0  412396  26564   2156 S   0.0  1.1   0:09.74 /usr/bin/+
  1301 wp-tool+  20   0  387556   3756   1792 S   0.0  0.2   0:00.30 /usr/bin/+
  1308 root      20   0  248116   4768    892 S   0.0  0.2   0:06.44 /usr/loca+
  1409 root      20   0  210332  10704   2104 S   0.0  0.4   0:04.10 tailwatchd
  1412 root      20   0  262224  21832   3908 S   0.0  0.9   0:01.50 cpdavd - +
  1413 root      20   0  167452   3480   2104 S   0.0  0.1   0:00.53 dnsadmin +
  1836 root      20   0  299272    572    408 S   0.0  0.0   0:00.83 php-fpm: +
  1853 root      38  18  130416   1428    756 S   0.0  0.1   0:00.07 cpanellog+
  2063 root      20   0  266984   7676    724 S   0.0  0.3   0:04.08 /usr/sbin+
  2067 root      20   0   12812    388    280 S   0.0  0.0   0:03.30 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:02.85 /usr/loca+
  2069 root      20   0   12840    400    280 S   0.0  0.0   0:03.08 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  266560  97744   3108 S   0.0  4.0   0:04.85 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
 13053 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.56 [kworker]
 14140 root      20   0  182160  29100   1240 S   0.0  1.2   0:11.65 lfd - sle+
 24663 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 31819 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 37624 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 40701 nobody    20   0  277572  20096   4984 S   0.0  0.8   0:01.73 /usr/sbin+
 41684 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 44510 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44568 nobody    20   0  277752  20176   4908 S   0.0  0.8   0:01.28 /usr/sbin+
 44930 nobody    20   0  277680  19816   4752 S   0.0  0.8   0:01.40 /usr/sbin+
 45478 nobody    20   0  277608  19756   4764 S   0.0  0.8   0:01.52 /usr/sbin+
 46733 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46767 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46941 nobody    20   0  277680  19776   4788 S   0.0  0.8   0:01.06 /usr/sbin+
 47185 nobody    20   0  277596  19984   4908 S   0.0  0.8   0:01.23 /usr/sbin+
 47549 root      20   0  123364    756    532 S   0.0  0.0   0:00.00 /usr/sbin+
 48924 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 50495 nobody    20   0  277876  20392   4860 S   0.0  0.8   0:00.94 /usr/sbin+
 51053 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 51270 nobody    20   0  277868  19604   4488 S   0.0  0.8   0:00.83 /usr/sbin+
 51279 nobody    20   0  277612  19380   4384 S   0.0  0.8   0:00.77 /usr/sbin+
 51281 nobody    20   0  277744  19304   4432 S   0.0  0.8   0:00.80 /usr/sbin+
 51282 nobody    20   0  277876  19632   4500 S   0.0  0.8   0:00.74 /usr/sbin+
 52571 nobody    20   0  277744  19412   4320 S   0.0  0.8   0:00.57 /usr/sbin+
 52776 nobody    20   0  277868  19220   4344 S   0.0  0.8   0:00.36 /usr/sbin+
 52814 nobody    20   0  277476  19168   4312 S   0.0  0.8   0:00.33 /usr/sbin+
 53665 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 53974 nobody    20   0  277876  19184   4244 S   0.0  0.8   0:00.41 /usr/sbin+
 55024 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56540 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 56627 nigeria   20   0  400460   4476   2364 S   0.0  0.2   0:00.01 php-fpm: +
 56727 nobody    20   0  277440  17852   3544 S   0.0  0.7   0:00.00 /usr/sbin+
 56789 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 56804 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 56805 root      20   0  182868   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56806 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 56807 root      20   0  182864   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56808 root      20   0  182864   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56809 root      20   0  182864   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56810 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 56811 root      20   0  182864   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56812 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 56813 root      20   0  182864   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56814 root      20   0  182864   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 56815 root      20   0  182864   2404   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 56816 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 56818 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 56829 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 56831 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 56832 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56833 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 56834 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56835 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 56836 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56837 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56839 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 56841 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56843 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56844 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56846 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 56847 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 56848 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56852 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 56855 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 56856 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 56860 root      20   0  188208  11092   5148 S   0.0  0.5   0:00.01 /usr/loca+
 56875 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 56878 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 56879 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 56882 cloudsms  20   0  404052  15352  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 56902 root      20   0  160224   2336   1636 S   0.0  0.1   0:00.00 top -n 2 +
 56941 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 56955 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 56957 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 56958 cloudw    20   0  284568  12036   8140 R   0.0  0.5   0:00.00 /opt/cpan+
 56959 cloudsms  20   0  400248  11888   8292 R   0.0  0.5   0:00.00 /opt/cpan+
 56960 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 56961 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:03  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      24663  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:0]
root      31819  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:1]
root      37624  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/u200:2]
root      41684  0.0  0.0      0     0 ?        S    02:53   0:00  \_ [kworker/1:5]
root      44510  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/u200:0]
root      46733  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/0:1]
root      46767  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/1:0]
root      48924  0.0  0.0      0     0 ?        S    03:03   0:00  \_ [kworker/0:3]
root      51053  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/1:2]
root      53665  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:3]
root      55024  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44412  3356 ?        Ss   Nov17   0:42 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.1  40244  3884 ?        Ss   Nov17   0:14 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   544 ?        S<sl Nov17   0:02 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3328 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   204 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   312 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1392 ?        Ss   Nov17   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1212 ?        Ss   Nov17   0:07 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      56804  0.0  0.0 182864  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56847  0.0  0.0 113284  1208 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      56855  0.0  0.0 108052   360 ?        S    03:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      56856  0.0  0.0 113288  1512 ?        S    03:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      56963  0.0  0.0 153840  2092 ?        R    03:15   0:00  |               \_ ps auxf
root      56805  0.0  0.0 182868  2412 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56843  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      56806  0.0  0.0 182864  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56834  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      56807  0.0  0.0 182864  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56839  0.0  0.0  20164   988 ?        Ss   03:15   0:00  |   \_ jailshell (cloudsms) [56960] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  56960  0.0  0.0  20164   260 ?        S    03:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  56961  0.0  0.0 113284  1212 ?        S    03:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  56964  0.0  0.1 157880  3404 ?        R    03:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      56808  0.0  0.0 182864  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56837  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      56809  0.0  0.0 182864  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56841  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      56810  0.0  0.0 182864  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56832  0.0  0.0  20164   968 ?        Ss   03:15   0:00  |   \_ jailshell (cloudsms) [56875] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  56875  0.0  0.0  20164   260 ?        S    03:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  56879  0.0  0.0 113284  1212 ?        S    03:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  56882  0.0  0.6 404052 15352 ?        S    03:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      56811  0.0  0.0 182864  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56836  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      56812  0.0  0.0 182864  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56831  0.0  0.0  20164   988 ?        Ss   03:15   0:00  |   \_ jailshell (cloudsms) [56955] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  56955  0.0  0.0  20164   256 ?        S    03:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  56957  0.0  0.0 113284  1212 ?        S    03:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  56959  0.0  0.6 404052 15876 ?        S    03:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      56813  0.0  0.0 182864  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56844  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      56814  0.0  0.0 182864  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56848  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      56815  0.0  0.0 182864  2404 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56835  0.0  0.0 113284  1212 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      56860  0.0  0.4 188208 11092 ?        S    03:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      56902  0.0  0.0 160224  2336 ?        S    03:15   0:00  |           \_ top -n 2 -b -c
root      56816  0.0  0.0 182864  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56829  0.0  0.0  20164   968 ?        Ss   03:15   0:00  |   \_ jailshell (pactpay) [56833] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   56833  0.0  0.0  20164   264 ?        S    03:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   56852  0.0  0.7 480124 17688 ?        S    03:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      56818  0.0  0.0 182864  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      56846  0.0  0.0  20164   968 ?        Ss   03:15   0:00      \_ jailshell (nigeria) [56878] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   56878  0.0  0.0  20164   264 ?        S    03:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   56886  0.0  0.6 404052 16140 ?        S    03:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908   144 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1784 ?        Ssl  Nov17   0:24 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4076 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    68 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    40 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13204 ?        Ssl  Nov17   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.0  0.3 1276356 8572 ?        Ssl  Nov17   0:27 /usr/bin/cspdaemon
telegraf   1069  0.0  1.5 5654304 37476 ?       SLsl Nov17   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   572 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  2304 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  3020 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2524 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  2716 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2392 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   712 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1584 ?        S    Nov17   0:00  \_ dovecot/auth
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
systuser   1087  0.0  0.0 111864    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1388 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  56540  0.0  0.0 445028   320 ?        S    03:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   572 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 43492 ?       Ssl  Nov17   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   608 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.1 298320  4688 ?        Ssl  Nov17   0:07 /usr/sbin/rsyslogd -n
root       1117  0.0  3.2 1763304 77788 ?       Ssl  Nov17   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788   872 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2008 ?        Ss   Nov17   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   56627  0.0  0.1 400460  4476 ?        S    03:14   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.2 261284  6800 ?        Ss   Nov17   0:03 cpsrvd (SSL) - waiting for connections                   
root      56789  0.0  0.0      0     0 ?        Z    03:14   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3728 ?        Ss   Nov17   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   688 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.0 412396 26564 ?        Ss   Nov17   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.1 387556  3756 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4768 ?        Ss   Nov17   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  4.0 266560 97744 ?        S    Nov17   0:04  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210332 10704 ?        Ss   Nov17   0:04 tailwatchd
root       1412  0.0  0.9 262224 21832 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  3480 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   572 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1428 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.4 10.9 1458600 264388 ?      Sl   Nov17   7:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7676 ?        Ss   Nov17   0:04 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12812   388 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12840   400 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    40701  0.1  0.8 277572 20096 ?        S    02:51   0:01  \_ /usr/sbin/httpd -k start
nobody    44568  0.1  0.8 277752 20176 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    44930  0.1  0.8 277680 19816 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    45478  0.1  0.8 277608 19756 ?        S    02:58   0:01  \_ /usr/sbin/httpd -k start
nobody    46941  0.1  0.8 277680 19776 ?        S    03:00   0:01  \_ /usr/sbin/httpd -k start
nobody    47185  0.1  0.8 277596 19984 ?        S    03:00   0:01  \_ /usr/sbin/httpd -k start
nobody    50495  0.1  0.8 277876 20392 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    51270  0.1  0.8 277868 19604 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51279  0.1  0.8 277612 19380 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51281  0.1  0.7 277744 19304 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    51282  0.1  0.8 277876 19632 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    56958  0.0  0.6 353712 15976 ?        S    03:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    52571  0.1  0.8 277744 19412 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52776  0.0  0.7 277868 19220 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    52814  0.0  0.7 277476 19168 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    53974  0.1  0.7 277876 19184 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    56727  0.0  0.7 277440 17852 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148     8 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152    40 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.0  1.2 182160 29100 ?        Ss   00:00   0:11 lfd - sleeping
root      47549  0.0  0.0 123364   756 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 30415  Threads: 3  Questions: 2662758  Slow queries: 0  Opens: 9367  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.547
*************************** 1. row ***************************
     Id: 40415
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 40417
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 40424
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.130 TIME_WAIT
      1 104.210.140.135 TIME_WAIT
      1 142.44.233.17 TIME_WAIT
      1 15.235.98.184 TIME_WAIT
      1 154.26.139.30 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.0.18 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 03:15:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 26 minutes 49 seconds
   Server load: 0.38 0.65 0.67
   Total accesses: 150038 - Total Traffic: 3.6 GB - Total Duration: 75048395
   CPU Usage: u10.31 s7.74 cu1934.17 cs1522.25 - 11.4% CPU load
   4.93 requests/sec - 123.8 kB/second - 25.1 kB/request - 500.196 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

___KK...KK..._._.K__.KWW..._....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  56727 0/2/6854   _ 0.00 2    5   3745152 0.0   0.02  159.05 23.20.178.124 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/blog/2019elections/blog/b
   1-0  52571 0/102/7118 _ 2.68 0    7   3419198 0.0   2.42  166.81 18.205.91.101 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/blog/blog/blog/ima
   2-0  44568 0/224/6805 _ 5.41 1    1   3263994 0.0   5.51  158.88 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   3-0  44930 1/239/6336 K 6.01 0    299 3217712 36.2  6.37  152.83 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1230290042 HTTP/1.1
   4-0  40701 4/361/6803 K 8.44 2    255 3251001 121.7 7.98  158.48 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=3186397935 HTTP/1.1
   5-0  -     0/0/6580   . 0.00 104  0   3202336 0.0   0.00  163.25 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  -     0/0/6637   . 0.00 65   0   3239794 0.0   0.00  163.55 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  -     0/0/6054   . 0.00 170  0   2951843 0.0   0.00  156.44 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  46941 5/187/6014 K 4.34 0    255 2808773 153.2 4.68  139.66 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=618908401 HTTP/1.1
   9-0  45478 1/268/5969 K 7.30 1    257 2897080 33.7  6.64  146.41 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1618606714 HTTP/1.1
   10-0 -     0/0/5710   . 0.00 264  0   2767507 0.0   0.00  140.65 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 -     0/0/5953   . 0.00 228  0   2827054 0.0   0.00  158.89 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 -     0/0/5219   . 0.00 239  0   2725986 0.0   0.00  127.93 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 47185 0/226/5233 _ 5.52 1    267 2473731 0.0   5.23  126.43 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=22385172 HTTP/1.1
   14-0 -     0/0/5057   . 0.00 105  0   2584140 0.0   0.00  121.19 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 50495 0/159/5478 _ 3.99 0    0   2642297 0.0   4.12  129.67 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   16-0 -     0/0/4928   . 0.00 173  0   3165165 0.0   0.00  129.91 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 52776 2/60/4898  K 1.50 2    254 2314025 65.0  1.79  125.00 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=947351495 HTTP/1.1
   18-0 51270 0/134/3916 _ 3.51 0    279 1951377 0.0   3.96  88.92  192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=840117397 HTTP/1.1
   19-0 51279 0/124/4016 _ 3.31 0    0   1916590 0.0   4.02  99.46  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   20-0 -     0/0/3891   . 0.00 270  0   1906685 0.0   0.00  95.46  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 51281 2/131/2798 K 3.48 2    259 1410737 66.0  3.57  67.14  192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3477909470 HTTP/1.1
   22-0 51282 2/127/2924 W 3.80 0    0   1370987 68.0  3.16  67.49  192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=4277997025 HTTP/1.1
   23-0 52814 0/54/2796  W 1.32 0    0   1326169 0.0   1.40  63.67  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   24-0 -     0/0/2871   . 0.00 148  0   1535087 0.0   0.00  88.45  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/2070   . 0.00 231  0   1104901 0.0   0.00  50.06  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1480   . 0.00 230  0   833292  0.0   0.00  36.27  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 53974 0/69/1709  _ 1.74 1    1   949883  0.0   1.77  40.35  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   28-0 -     0/0/1502   . 0.00 4442 0   804838  0.0   0.00  33.41  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/1590   . 0.00 3576 0   853313  0.0   0.00  38.67  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1142   . 0.00 4441 0   645034  0.0   0.00  29.02  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/1240   . 0.00 4433 0   555517  0.0   0.00  33.06  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/747    . 0.00 4234 0   402640  0.0   0.00  20.61  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/1047   . 0.00 4438 0   641345  0.0   0.00  29.13  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/639    . 0.00 4193 0   329465  0.0   0.00  16.27  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/517    . 0.00 4423 0   284168  0.0   0.00  13.47  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/698    . 0.00 4026 0   340948  0.0   0.00  19.94  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/581    . 0.00 4440 0   316089  0.0   0.00  17.51  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/560    . 0.00 3670 0   281890  0.0   0.00  15.60  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/146    . 0.00 4437 0   69846   0.0   0.00  3.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/639    . 0.00 4147 0   332944  0.0   0.00  15.73  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/94     . 0.00 4531 0   46768   0.0   0.00  2.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/135    . 0.00 4530 0   70951   0.0   0.00  3.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/266    . 0.00 4516 0   100462  0.0   0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/210    . 0.00 4517 0   111671  0.0   0.00  5.35   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/202    . 0.00 4111 0   96196   0.0   0.00  5.80   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/290    . 0.00 4528 0   151806  0.0   0.00  7.06   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/70     . 0.00 4529 0   35217   0.0   0.00  1.50   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/408    . 0.00 4048 0   193592  0.0   0.00  9.83   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/48     . 0.00 4436 0   23887   0.0   0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/61     . 0.00 4525 0   37811   0.0   0.00  1.40   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/82     . 0.00 4526 0   40275   0.0   0.00  1.78   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/41     . 0.00 4518 0   14661   0.0   0.00  0.98   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/80     . 0.00 4544 0   38738   0.0   0.00  2.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/179    . 0.00 4510 0   93196   0.0   0.00  5.15   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/102    . 0.00 4429 0   53549   0.0   0.00  2.46   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/120    . 0.00 4547 0   56500   0.0   0.00  3.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/13     . 0.00 4511 0   3559    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/34     . 0.00 4466 0   13539   0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 4521 0   103     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/192    . 0.00 4500 0   100024  0.0   0.00  5.06   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/12     . 0.00 4548 0   5547    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/50     . 0.00 4430 0   22451   0.0   0.00  1.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/25     . 0.00 4427 0   11908   0.0   0.00  0.43   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/9      . 0.00 4497 0   4843    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00 4513 0   1793    0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/9      . 0.00 4490 0   3592    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 4545 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/23     . 0.00 4462 0   11930   0.0   0.00  0.49   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/6      . 0.00 4509 0   2254    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 4527 0   27      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/7      . 0.00 4495 0   2309    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/9      . 0.00 4496 0   3554    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/44     . 0.00 4376 0   21261   0.0   0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00 4543 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/21     . 0.00 4446 0   9134    0.0   0.00  0.44   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/8      . 0.00 4499 0   4157    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/1      . 0.00 4546 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 4523 0   529     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 4542 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 4524 0   29      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 987
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 1...17)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 108809
   total entries replaced since starting: 0
   total entries expired since starting: 107794
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 38 hit, 290 miss
   total removes since starting: 28 hit, 17 miss
Youez - 2016 - github.com/yon3zu
LinuXploit