403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.03.54.txt
 ## swap threshold exceeded
## server overview
2025-11-18.03.54 load[0] mem[56/80] mysql[1/25] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1129         156          78        1077         970
Swap:          1999        1725         274
 03:54:01 up  9:06,  0 users,  load average: 0.94, 0.73, 0.63
## system overview
top - 03:54:02 up  9:06,  0 users,  load average: 0.94, 0.73, 0.63
Tasks: 200 total,   2 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.3 us, 16.1 sy,  0.0 ni, 16.1 id,  3.2 wa,  0.0 hi,  3.2 si,  0.0 st
KiB Mem :  2420300 total,   156108 free,  1159044 used,  1105148 buff/cache
KiB Swap:  2047996 total,   281596 free,  1766400 used.   991044 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1462296 304836   2492 S  93.8 12.6   7:42.11 /usr/sbin+
 83415 nigeria   20   0  404052  16144  10384 S  25.0  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44412   3316   1460 S   6.2  0.1   0:45.30 /usr/lib/+
 83408 pactpay   20   0  480124  17684  11892 S   6.2  0.7   0:00.02 /opt/cpan+
 83425 cloudw    20   0  353712  15972  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.93 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.37 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:33.39 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.35 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.52 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.84 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.93 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   2936   2684 S   0.0  0.1   0:15.80 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    564    432 S   0.0  0.0   0:02.25 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    812    408 S   0.0  0.0   0:04.48 /usr/lib/+
   514 root      20   0  224148   3308   1016 S   0.0  0.1   0:00.37 queueproc+
   516 rpc       20   0   69256    188    128 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.74 /usr/sbin+
   521 root      20   0  152780    196    156 S   0.0  0.0   0:00.02 /usr/sbin+
   522 root      20   0   52852    272    164 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1464    716 S   0.0  0.1   0:17.51 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1212    864 S   0.0  0.1   0:07.69 /usr/lib/+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:01.06 /usr/sbin+
   558 root      20   0   25908    128    108 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1692    672 S   0.0  0.1   0:26.45 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   3628    540 S   0.0  0.1   0:00.71 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:03.84 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.02 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.71 pure-ftpd+
  1062 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13000   2436 S   0.0  0.5   0:07.75 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.73 /usr/bin/+
  1068 root      20   0 1276356   8568    132 S   0.0  0.4   0:27.06 /usr/bin/+
  1069 telegraf  20   0 5654304  29500    488 S   0.0  1.2   0:17.60 /usr/loca+
  1071 root      20   0  572372   1044    468 S   0.0  0.0   0:02.82 /usr/bin/+
  1072 root      20   0   51508    568    404 S   0.0  0.0   0:00.40 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.15 /usr/bin/+
  1085 systuser  20   0   12756     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:03.00 /usr/sbin+
  1087 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1344   1232 S   0.0  0.1   0:01.38 sw-engine+
  1091 root      20   0  389508    512    416 S   0.0  0.0   0:00.92 php-fpm: +
  1098 named     20   0 1054792  43656   1508 S   0.0  1.8   0:18.71 /usr/sbin+
  1109 root      20   0  388892    520    308 S   0.0  0.0   0:00.84 php-fpm: +
  1113 root      20   0  306512   3832   2892 S   0.0  0.2   0:07.99 /usr/sbin+
  1117 root      20   0 1763304  97060   1044 S   0.0  4.0   0:17.31 /usr/loca+
  1123 root      20   0  439788    812    720 S   0.0  0.0   0:00.94 php-fpm: +
  1131 root      20   0  400740   2004    720 S   0.0  0.1   0:04.72 php-fpm: +
  1134 root      20   0  261284   6320   1280 S   0.0  0.3   0:03.55 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3716   2360 S   0.0  0.2   0:26.19 /usr/loca+
  1149 root      20   0  396248    624    440 S   0.0  0.0   0:00.87 php-fpm: +
  1213 dovenull  20   0   47276   1796    848 S   0.0  0.1   0:00.58 dovecot/p+
  1214 dovenull  20   0   47936   2900   1728 S   0.0  0.1   0:00.36 dovecot/i+
  1215 dovecot   20   0   10320    432    312 S   0.0  0.0   0:00.09 dovecot/a+
  1216 root      20   0   10452    468    272 S   0.0  0.0   0:00.41 dovecot/l+
  1217 dovenull  20   0   47440   2140    984 S   0.0  0.1   0:00.75 dovecot/p+
  1218 dovenull  20   0   47752   1480    484 S   0.0  0.1   0:00.26 dovecot/i+
  1226 root      20   0   24528   2612    380 S   0.0  0.1   0:00.21 dovecot/c+
  1227 dovecot   20   0   13568    668    456 S   0.0  0.0   0:00.07 dovecot/s+
  1292 systuser  20   0  157704   2184    132 S   0.0  0.1   0:00.14 SonarPush+
  1297 dovecot   20   0   41188   1404    952 S   0.0  0.1   0:00.74 dovecot/a+
  1300 wp-tool+  20   0  412396  10780   1536 S   0.0  0.4   0:10.47 /usr/bin/+
  1301 wp-tool+  20   0  387556   3488   1528 S   0.0  0.1   0:00.32 /usr/bin/+
  1308 root      20   0  248116   4648    852 S   0.0  0.2   0:06.71 /usr/loca+
  1409 root      20   0  210332   9900   1248 S   0.0  0.4   0:04.40 tailwatchd
  1412 root      20   0  183900   4988   1752 S   0.0  0.2   0:01.59 cpdavd - +
  1413 root      20   0  167452   3128   1752 S   0.0  0.1   0:00.57 dnsadmin +
  1836 root      20   0  299272    500    336 S   0.0  0.0   0:00.90 php-fpm: +
  1853 root      38  18  130416   1392    720 S   0.0  0.1   0:00.08 cpanellog+
  2063 root      20   0  266984   7676    724 S   0.0  0.3   0:04.41 /usr/sbin+
  2067 root      20   0   12840    388    280 S   0.0  0.0   0:03.52 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:03.05 /usr/loca+
  2069 root      20   0   12876    400    280 S   0.0  0.0   0:03.28 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  266560  95240   1568 S   0.0  3.9   0:05.06 spamd chi+
  7507 root      20   0  248116   3384    452 S   0.0  0.1   0:00.02 spamd chi+
 13053 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.61 [kworker]
 14140 root      20   0  182328  29176   1144 S   0.0  1.2   0:14.04 lfd - sle+
 37624 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 53665 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 59016 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 70598 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 70600 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 73200 nobody    20   0  277680  19528   4516 S   0.0  0.8   0:01.06 /usr/sbin+
 74635 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 75241 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76249 root      30  10  132964   3940    400 S   0.0  0.2   0:00.00 ConfigSer+
 76260 root      30  10  108056    300    228 S   0.0  0.0   0:00.00 sleep 208+
 76993 nobody    20   0  277744  19172   4348 S   0.0  0.8   0:00.66 /usr/sbin+
 77093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77647 nobody    20   0  277680  19144   4364 S   0.0  0.8   0:00.42 /usr/sbin+
 77772 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 78240 nobody    20   0  277744  18728   4052 S   0.0  0.8   0:00.51 /usr/sbin+
 79804 nobody    20   0  277616  18820   4128 S   0.0  0.8   0:00.26 /usr/sbin+
 79816 nobody    20   0  277680  18916   4256 S   0.0  0.8   0:00.26 /usr/sbin+
 80033 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80320 nobody    20   0  277744  18604   3924 S   0.0  0.8   0:00.33 /usr/sbin+
 80941 nobody    20   0  277532  18212   3712 S   0.0  0.8   0:00.15 /usr/sbin+
 81045 nobody    20   0  277520  18440   3948 S   0.0  0.8   0:00.21 /usr/sbin+
 81072 nobody    20   0  277520  18600   4088 S   0.0  0.8   0:00.19 /usr/sbin+
 81074 nobody    20   0  277888  18776   4068 S   0.0  0.8   0:00.18 /usr/sbin+
 81189 nobody    20   0  277520  18328   3812 S   0.0  0.8   0:00.14 /usr/sbin+
 81766 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 82250 nobody    20   0  277744  18168   3504 S   0.0  0.8   0:00.11 /usr/sbin+
 82260 nobody    20   0  277520  18396   3892 S   0.0  0.8   0:00.14 /usr/sbin+
 82261 nobody    20   0  277520  17928   3464 S   0.0  0.7   0:00.10 /usr/sbin+
 82283 nobody    20   0  277740  18572   3900 S   0.0  0.8   0:00.09 /usr/sbin+
 82289 nobody    20   0  277496  18352   3892 S   0.0  0.8   0:00.14 /usr/sbin+
 82290 nobody    20   0  277844  18468   3848 S   0.0  0.8   0:00.15 /usr/sbin+
 82992 nobody    20   0  277760  18232   3536 S   0.0  0.8   0:00.03 /usr/sbin+
 83020 nobody    20   0  277536  17752   3276 S   0.0  0.7   0:00.03 /usr/sbin+
 83021 nobody    20   0  277520  17776   3312 S   0.0  0.7   0:00.06 /usr/sbin+
 83068 nobody    20   0  277744  17952   3296 S   0.0  0.7   0:00.03 /usr/sbin+
 83146 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 83321 nobody    20   0  277368  17456   3192 S   0.0  0.7   0:00.00 /usr/sbin+
 83331 nobody    20   0  277368  17440   3176 S   0.0  0.7   0:00.00 /usr/sbin+
 83332 nobody    20   0  277368  17460   3196 S   0.0  0.7   0:00.00 /usr/sbin+
 83333 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 83340 nigeria   20   0  400460   4472   2360 S   0.0  0.2   0:00.00 php-fpm: +
 83341 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 83342 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 83344 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83346 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83347 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83348 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83349 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83350 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83351 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83352 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83353 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83355 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 83357 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 83358 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 83359 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 83373 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 83379 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83380 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83381 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 83382 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83386 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83387 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 83389 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83390 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83391 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83392 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83406 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 83412 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 83419 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 83422 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83424 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83428 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:33  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:03  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      37624  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/u200:2]
root      53665  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:3]
root      59016  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:3]
root      70598  0.0  0.0      0     0 ?        S    03:37   0:00  \_ [kworker/1:0]
root      70600  0.0  0.0      0     0 ?        S    03:37   0:00  \_ [kworker/1:4]
root      74635  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:2]
root      75241  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/u200:0]
root      77093  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/0:0]
root      77772  0.0  0.0      0     0 ?        S    03:49   0:00  \_ [kworker/0:4]
root      80033  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/1:1]
root      81766  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/u200:1]
root      83422  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/0:1]
root      83424  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44412  3316 ?        Ss   Nov17   0:45 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.1  40244  2936 ?        Ss   Nov17   0:15 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   564 ?        S<sl Nov17   0:02 /sbin/auditd
polkitd     511  0.0  0.0 612240   812 ?        Ssl  Nov17   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3308 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   188 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   196 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   272 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1464 ?        Ss   Nov17   0:17 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1212 ?        Ss   Nov17   0:07 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:01 /usr/sbin/crond -n
root      83341  0.0  0.0 182864  2408 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83357  0.0  0.0 113284  1212 ?        Ss   03:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      83358  0.0  0.0 108052   360 ?        S    03:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      83359  0.0  0.0 113288  1520 ?        S    03:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      83430  0.0  0.0 153840  2092 ?        R    03:54   0:00  |               \_ ps auxf
root      83342  0.0  0.0 182864  2408 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83373  0.0  0.0  20164   980 ?        Ss   03:54   0:00  |   \_ jailshell (cloudsms) [83428] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  83428  0.0  0.0  20164   256 ?        S    03:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  83429  0.0  0.0 113284  1212 ?        S    03:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  83432  0.0  0.0 113284   184 ?        R    03:54   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      83344  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83391  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      83346  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83390  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      83347  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83386  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      83348  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83392  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      83349  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83379  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      83350  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83389  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      83351  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83382  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      83352  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83380  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      83353  0.0  0.0 182864  2412 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83387  0.0  0.0  20164   968 ?        Ss   03:54   0:00  |   \_ jailshell (pactpay) [83406] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83406  0.0  0.0  20164   260 ?        S    03:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83408  2.0  0.7 480124 17684 ?        S    03:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      83355  0.0  0.0 182864  2408 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      83381  0.0  0.0  20164   968 ?        Ss   03:54   0:00      \_ jailshell (nigeria) [83412] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83412  0.0  0.0  20164   260 ?        S    03:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83415  4.0  0.6 404052 16144 ?        S    03:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908   128 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1692 ?        Ssl  Nov17   0:26 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  3628 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    68 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    40 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13000 ?        Ssl  Nov17   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.0  0.3 1276356 8568 ?        Ssl  Nov17   0:27 /usr/bin/cspdaemon
telegraf   1069  0.0  1.2 5654304 29500 ?       SLsl Nov17   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1044 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   568 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  47276  1796 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  2900 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   432 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   468 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.0  47440  2140 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.0  47752  1480 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.1  24528  2612 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   668 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1404 ?        S    Nov17   0:00  \_ dovecot/auth
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:03 /usr/sbin/sshd -D
systuser   1087  0.0  0.0 111864    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1344 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  83146  0.0  0.0 445028   320 ?        S    03:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   512 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.8 1054792 43656 ?       Ssl  Nov17   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   520 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.1 306512  3832 ?        Ssl  Nov17   0:07 /usr/sbin/rsyslogd -n
root       1117  0.0  4.0 1763304 97060 ?       Ssl  Nov17   0:17 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788   812 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2004 ?        Ss   Nov17   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   83340  0.0  0.1 400460  4472 ?        S    03:54   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.2 261284  6320 ?        Ss   Nov17   0:03 cpsrvd (SSL) - waiting for connections                   
root      83333  0.0  0.0      0     0 ?        Z    03:53   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3716 ?        Ss   Nov17   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   624 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.0 157704  2184 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  0.4 412396 10780 ?        Ss   Nov17   0:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.1 387556  3488 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4648 ?        Ss   Nov17   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  3.9 266560 95240 ?        S    Nov17   0:05  \_ spamd child
root       7507  0.0  0.1 248116  3384 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210332  9900 ?        Ss   Nov17   0:04 tailwatchd
root       1412  0.0  0.2 183900  4988 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1413  0.0  0.1 167452  3128 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   500 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1392 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.4 12.5 1462296 304836 ?      Sl   Nov17   7:42 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7676 ?        Ss   Nov17   0:04 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12840   388 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12876   400 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    73200  0.1  0.8 277680 19528 ?        S    03:41   0:01  \_ /usr/sbin/httpd -k start
nobody    76993  0.1  0.7 277744 19172 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody    77647  0.1  0.7 277680 19144 ?        S    03:48   0:00  \_ /usr/sbin/httpd -k start
nobody    78240  0.1  0.7 277744 18728 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    79804  0.1  0.7 277616 18820 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    83425  0.0  0.6 353712 15972 ?        S    03:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    79816  0.1  0.7 277680 18916 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody    80320  0.2  0.7 277744 18604 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    80941  0.1  0.7 277532 18212 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    81045  0.1  0.7 277520 18440 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    81072  0.1  0.7 277520 18600 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
root      83431  0.0  0.0   6516   416 ?        R    03:54   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php72
nobody    81074  0.1  0.7 277888 18776 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    81189  0.1  0.7 277520 18328 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82250  0.1  0.7 277744 18168 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82260  0.1  0.7 277520 18396 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82261  0.1  0.7 277520 17928 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82283  0.1  0.7 277740 18572 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82289  0.1  0.7 277496 18352 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82290  0.2  0.7 277844 18468 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82992  0.1  0.7 277760 18232 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    83020  0.1  0.7 277536 17752 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    83021  0.2  0.7 277520 17776 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    83068  0.1  0.7 277744 17952 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    83321  0.0  0.7 277368 17456 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    83331  0.0  0.7 277368 17440 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    83332  0.0  0.7 277368 17460 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148     8 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152    40 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.2 182328 29176 ?        Ss   00:00   0:14 lfd - sleeping
root      76249  0.0  0.1 132964  3940 ?        SN   03:47   0:00 ConfigServer Version Check
root      76260  0.0  0.0 108056   300 ?        SN   03:47   0:00  \_ sleep 20823
## mysql stats
Uptime: 32756  Threads: 3  Questions: 2854963  Slow queries: 0  Opens: 11040  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.158
*************************** 1. row ***************************
     Id: 43241
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 43245
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 43247
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 142.44.220.13 TIME_WAIT
      1 15.235.27.18 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.241.206.44 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.40 TIME_WAIT
      1 51.222.95.82 TIME_WAIT
      1 52.167.144.182 TIME_WAIT
      1 54.39.136.98 TIME_WAIT
      1 66.249.64.164 TIME_WAIT
      1 66.249.64.166 TIME_WAIT
      1 66.249.64.224 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 62.164.177.71 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 03:54:02 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 5 minutes 49 seconds
   Server load: 0.94 0.73 0.63
   Total accesses: 159532 - Total Traffic: 3.9 GB - Total Duration: 79488809
   CPU Usage: u3.99 s5.67 cu2068.97 cs1624.26 - 11.3% CPU load
   4.87 requests/sec - 123.3 kB/second - 25.3 kB/request - 498.262 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KK_KKW_KK_KKKKK_..._W_KW....K........KK.............K...........
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot     Client     Protocol         VHost                                      Request
   0-0  82992 1/4/7342   K 0.07 2    295 3977384 36.1 0.11  171.82 66.249.64.108 http/1.1 team.cloudware.ng:443  GET /sets/112400007248 HTTP/1.1
   1-0  77647 1/69/7594  K 1.71 3    250 3629627 33.9 2.39  180.98 66.249.64.7   http/1.1 team.cloudware.ng:443  GET /sets/111919010882 HTTP/1.1
   2-0  83020 0/4/7238   _ 0.09 0    297 3452820 0.0  0.14  171.35 66.249.64.38  http/1.1 team.cloudware.ng:443  GET /sets/111454245718 HTTP/1.1
   3-0  82250 1/17/6799  K 0.44 2    258 3428163 35.2 0.52  169.14 66.249.64.173 http/1.1 team.cloudware.ng:443  GET /?l=929856846 HTTP/1.1
   4-0  83021 1/8/7274   K 0.21 1    293 3471705 36.2 0.25  170.25 66.249.70.5   http/1.1 team.cloudware.ng:443  GET /sets/111348398844 HTTP/1.1
   5-0  79804 0/42/6980  W 1.05 0    0   3385099 0.0  1.50  173.44 66.249.64.102 http/1.1 team.cloudware.ng:443  GET /sets/11749340731 HTTP/1.1
   6-0  80320 0/52/7024  _ 1.43 0    273 3421643 0.0  1.53  174.06 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /sets/111372553539 HTTP/1.1
   7-0  79816 1/47/6499  K 0.98 1    280 3337993 35.5 1.35  168.70 66.249.70.196 http/1.1 team.cloudware.ng:443  GET /sets/113504944255 HTTP/1.1
   8-0  76993 1/107/6451 K 2.87 3    300 3011777 36.0 3.49  152.08 66.249.64.43  http/1.1 team.cloudware.ng:443  GET /sets/112657500748 HTTP/1.1
   9-0  83068 0/5/6344   _ 0.09 0    260 3059460 0.0  0.13  155.62 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /sets/11750552830 HTTP/1.1
   10-0 83321 1/1/6071   K 0.00 2    250 2927419 34.4 0.03  149.58 66.249.70.71  http/1.1 team.cloudware.ng:443  GET /sets/11593505527 HTTP/1.1
   11-0 81189 1/24/6323  K 0.55 2    303 3000507 34.3 0.65  168.06 66.249.70.163 http/1.1 team.cloudware.ng:443  GET /?l=1693873425 HTTP/1.1
   12-0 83331 1/1/5622   K 0.00 0    260 2883574 34.3 0.03  136.97 66.249.64.226 http/1.1 team.cloudware.ng:443  GET /sets/h%3D1280 HTTP/1.1
   13-0 83332 1/1/5626   K 0.00 0    305 2642127 34.2 0.03  136.07 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /sets/11499625978 HTTP/1.1
   14-0 82260 3/24/5511  K 0.59 4    266 2811130 97.1 0.65  131.23 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /sets/111223425259 HTTP/1.1
   15-0 80941 0/23/5790  _ 0.63 0    0   2782396 0.0  1.10  137.57 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   16-0 -     0/0/5066   . 0.00 14   0   3223112 0.0  0.00  133.82 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/5163   . 0.00 44   0   2421565 0.0  0.00  131.68 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/4048   . 0.00 66   0   2003351 0.0  0.00  100.02 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 81045 0/33/4144  _ 0.88 0    10  1982753 0.0  0.95  102.54 98.82.39.241  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?lga=Song&state=Adamawa&ward=Gudu
   20-0 78240 0/78/3971  W 2.17 0    0   1946269 0.0  2.65  98.12  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   21-0 82261 0/15/3141  _ 0.42 0    254 1562463 0.0  0.48  75.57  66.249.64.132 http/1.1 team.cloudware.ng:443  GET /sets/11514979981 HTTP/1.1
   22-0 82283 1/13/3078  K 0.32 3    295 1443114 35.8 0.37  71.58  192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=3000771154 HTTP/1.1
   23-0 81072 0/30/2906  W 0.74 0    0   1374105 0.0  0.82  74.65  66.249.70.6   http/1.1 team.cloudware.ng:443  GET /?l=3112944301 HTTP/1.1
   24-0 -     0/0/2893   . 0.00 35   0   1544325 0.0  0.00  88.90  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/2128   . 0.00 65   3   1132908 0.0  0.00  51.82  44.194.134.53 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/blog/2019elections/pollin
   26-0 -     0/0/1521   . 0.00 64   0   851247  0.0  0.00  37.53  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/1969   . 0.00 42   0   1073757 0.0  0.00  47.99  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 81074 1/31/1554  K 0.73 3    255 827722  33.7 0.83  34.74  66.249.64.45  http/1.1 team.cloudware.ng:443  GET /sets/113254764796 HTTP/1.1
   29-0 -     0/0/1625   . 0.00 55   0   867472  0.0  0.00  39.58  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1173   . 0.00 41   0   658162  0.0  0.00  29.81  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/1290   . 0.00 39   0   579529  0.0  0.00  34.87  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/790    . 0.00 45   0   420013  0.0  0.00  21.77  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/1106   . 0.00 13   0   670257  0.0  0.00  30.81  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/668    . 0.00 33   0   342362  0.0  0.00  16.97  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/540    . 0.00 67   0   293272  0.0  0.00  14.21  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/713    . 0.00 43   0   345713  0.0  0.00  20.40  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 82289 1/24/636   K 0.60 2    290 341467  35.1 0.69  18.99  66.249.70.69  http/1.1 team.cloudware.ng:443  GET /?l=1544831049 HTTP/1.1
   38-0 82290 1/26/647   K 0.63 1    291 320872  36.3 0.71  18.05  66.249.64.130 http/1.1 team.cloudware.ng:443  GET /?l=949713856 HTTP/1.1
   39-0 -     0/0/153    . 0.00 236  0   71939   0.0  0.00  3.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/663    . 0.00 215  0   343926  0.0  0.00  16.35  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/98     . 0.00 244  0   47288   0.0  0.00  2.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/274    . 0.00 171  0   126202  0.0  0.00  6.40   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/326    . 0.00 36   0   125886  0.0  0.00  5.82   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/216    . 0.00 234  0   113502  0.0  0.00  5.46   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/221    . 0.00 187  0   105450  0.0  0.00  6.50   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/346    . 0.00 357  0   171807  0.0  0.00  9.10   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/73     . 0.00 713  0   35789   0.0  0.00  1.55   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/409    . 0.00 751  0   193593  0.0  0.00  9.83   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/49     . 0.00 753  0   23887   0.0  0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/63     . 0.00 754  0   37830   0.0  0.00  1.41   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/89     . 0.00 694  0   42553   0.0  0.00  1.92   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 73200 1/186/227  K 4.54 3    256 108033  33.6 4.91  5.89   66.249.64.128 http/1.1 team.cloudware.ng:443  GET /?l=3614793929 HTTP/1.1
   53-0 -     0/0/87     . 0.00 698  0   41457   0.0  0.00  2.21   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/183    . 0.00 697  0   94919   0.0  0.00  5.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/103    . 0.00 752  0   53550   0.0  0.00  2.46   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/122    . 0.00 721  0   57113   0.0  0.00  3.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/14     . 0.00 750  0   3560    0.0  0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/35     . 0.00 748  0   13540   0.0  0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9      . 0.00 745  0   104     0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/195    . 0.00 720  0   101292  0.0  0.00  5.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/16     . 0.00 710  0   6625    0.0  0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/51     . 0.00 746  0   22452   0.0  0.00  1.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/28     . 0.00 712  0   13007   0.0  0.00  0.49   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14     . 0.00 719  0   5027    0.0  0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/8      . 0.00 708  0   1813    0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/10     . 0.00 743  0   3593    0.0  0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/6      . 0.00 703  0   2578    0.0  0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/25     . 0.00 722  0   12674   0.0  0.00  0.70   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/7      . 0.00 744  0   2254    0.0  0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/3      . 0.00 747  0   28      0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/11     . 0.00 699  0   3523    0.0  0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/13     . 0.00 709  0   4702    0.0  0.00  0.19   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/45     . 0.00 749  0   21262   0.0  0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00 700  0   1152    0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/23     . 0.00 723  0   9154    0.0  0.00  0.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/47     . 0.00 550  0   16513   0.0  0.00  1.51   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/1      . 0.00 6887 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 6864 0   529     0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 6883 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 6865 0   29      0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1977
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...37)
   index usage: 34%, cache usage: 46%
   total entries stored since starting: 117229
   total entries replaced since starting: 0
   total entries expired since starting: 115221
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 38 hit, 305 miss
   total removes since starting: 32 hit, 17 miss
Youez - 2016 - github.com/yon3zu
LinuXploit