403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.03.45.txt
 ## swap threshold exceeded
## server overview
2025-11-21.03.45 load[0] mem[76/41] mysql[5/6] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1731         139          18         492         461
Swap:          1999         878        1121
 03:45:01 up 10 min,  0 users,  load average: 0.27, 0.38, 0.36
## system overview
top - 03:45:02 up 10 min,  0 users,  load average: 0.27, 0.38, 0.36
Tasks: 215 total,   4 running, 209 sleeping,   0 stopped,   2 zombie
%Cpu(s): 75.0 us, 12.5 sy,  0.0 ni,  9.4 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   141252 free,  1772932 used,   506116 buff/cache
KiB Swap:  2047996 total,  1148668 free,   899328 used.   473284 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457284 186356   3064 S 146.7  7.7   0:08.37 /usr/sbin+
 10846 nigeria   20   0  404052  16140  10384 S  26.7  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44276   3120   1408 S   0.0  0.1   0:01.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:04.85 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   137 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
   233 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.33 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.42 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   4536   4244 S   0.0  0.2   0:00.54 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    132     20 S   0.0  0.0   0:00.07 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     84     76 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5924    888 S   0.0  0.2   0:00.09 queueproc+
   474 dbus      20   0   58424   1168    616 S   0.0  0.0   0:00.36 /usr/bin/+
   478 nscd      20   0  861368   1116    536 S   0.0  0.0   0:00.51 /usr/sbin+
   483 rpc       20   0   69256    108      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   505 polkitd   20   0  610540   1008    564 S   0.0  0.0   0:00.10 /usr/lib/+
   507 root      20   0   24604   1080    800 S   0.0  0.0   0:00.15 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.01 /usr/sbin+
   514 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    436    304 S   0.0  0.0   0:00.02 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   88984   3240    292 S   0.0  0.1   0:00.03 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.16 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 748244      0 S   0.0 30.9   0:13.54 /usr/loca+
   942 named     20   0  859188  24992   1112 S   0.0  1.0   0:00.68 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    268    108 S   0.0  0.0   0:00.04 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.85 /usr/bin/+
   955 telegraf  20   0 5654048  36724   3876 S   0.0  1.5   0:00.53 /usr/loca+
   956 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.06 sw-engine+
   960 root      20   0  396248    236    160 S   0.0  0.0   0:00.09 php-fpm: +
   963 systuser  20   0  114016  11884   2408 S   0.0  0.5   0:00.23 /usr/loca+
   964 root      20   0  153404    192    112 S   0.0  0.0   0:00.01 pure-ftpd+
   965 cpanelc+  20   0    9696   2428   2072 R   0.0  0.1   0:00.49 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.11 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.52 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.01 /usr/bin/+
   979 root      20   0  261028   3120    776 S   0.0  0.1   0:00.22 cpsrvd (S+
   980 root      20   0  572372    708    240 S   0.0  0.0   0:00.15 /usr/bin/+
   984 root      20   0  389508    280    192 S   0.0  0.0   0:00.08 php-fpm: +
   998 root      20   0  388892    376    292 S   0.0  0.0   0:00.08 php-fpm: +
  1001 root      20   0  400740   3004    568 S   0.0  0.1   0:00.19 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  216400   4704   3320 S   0.0  0.2   0:00.25 /usr/sbin+
  1010 root      20   0  439788  11176  10876 S   0.0  0.5   0:00.11 php-fpm: +
  1097 dovenull  20   0   46912   1976   1300 S   0.0  0.1   0:00.02 dovecot/p+
  1098 dovenull  20   0   47056   2512   1704 S   0.0  0.1   0:00.01 dovecot/i+
  1099 dovecot   20   0   10320    308    192 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    548    380 S   0.0  0.0   0:00.00 dovecot/l+
  1101 dovenull  20   0   46912   1936   1328 S   0.0  0.1   0:00.02 dovecot/p+
  1102 dovenull  20   0   46924   2484   1788 S   0.0  0.1   0:00.01 dovecot/i+
  1106 root      20   0   24396   1652    116 S   0.0  0.1   0:00.01 dovecot/c+
  1107 dovecot   20   0   13568    216      0 S   0.0  0.0   0:00.00 dovecot/s+
  1135 root      20   0  247868 116964    488 S   0.0  4.8   0:02.91 /usr/loca+
  1157 dovecot   20   0   41056    632    356 S   0.0  0.0   0:00.02 dovecot/a+
  1197 systuser  20   0  157700   2084     40 S   0.0  0.1   0:00.01 SonarPush+
  1199 wp-tool+  20   0  387528  10660      0 S   0.0  0.4   0:00.08 /usr/bin/+
  1200 wp-tool+  20   0  412368  30232   1136 S   0.0  1.2   0:00.44 /usr/bin/+
  1281 root      20   0  183900     80     80 S   0.0  0.0   0:00.08 cpdavd - +
  1283 root      20   0  167452   1012    412 S   0.0  0.0   0:00.06 dnsadmin +
  1285 root      20   0  209208   9408    884 S   0.0  0.4   0:00.24 tailwatchd
  1709 root      20   0  299272    636    256 S   0.0  0.0   0:00.01 php-fpm: +
  1717 root      38  18  130416    836    116 S   0.0  0.0   0:00.00 cpanellog+
  1930 root      20   0  267052   7924    540 S   0.0  0.3   0:00.19 /usr/sbin+
  1931 root      20   0   12880    388    136 S   0.0  0.0   0:00.06 /usr/loca+
  1932 root      20   0   12732    184    112 S   0.0  0.0   0:00.05 /usr/loca+
  1933 root      20   0   12920    392     88 S   0.0  0.0   0:00.06 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  180932  27872   1092 S   0.0  1.2   0:00.77 lfd - sle+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  2361 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  2517 nobody    20   0  277864  18628   3328 S   0.0  0.8   0:00.78 /usr/sbin+
  2884 nobody    20   0  277936  19048   3756 S   0.0  0.8   0:00.73 /usr/sbin+
  3076 nobody    20   0  277928  19088   3724 S   0.0  0.8   0:00.78 /usr/sbin+
  6902 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7259 root      20   0  248996 117732    216 S   0.0  4.9   0:00.03 spamd chi+
  7260 root      20   0  247868 116584    144 S   0.0  4.8   0:00.00 spamd chi+
  8718 nobody    20   0  277536  17732   2740 S   0.0  0.7   0:00.18 /usr/sbin+
  9092 nobody    20   0  277536  17940   2992 S   0.0  0.7   0:00.18 /usr/sbin+
  9093 nobody    20   0  277520  17932   2956 S   0.0  0.7   0:00.15 /usr/sbin+
  9147 nobody    20   0  277904  18144   2924 S   0.0  0.7   0:00.20 /usr/sbin+
 10006 root      20   0   41052    852    212 S   0.0  0.0   0:00.00 dovecot/a+
 10050 nobody    20   0  277584  18556   3520 S   0.0  0.8   0:00.03 /usr/sbin+
 10061 nobody    20   0  277756  18280   3292 S   0.0  0.8   0:00.02 /usr/sbin+
 10074 nobody    20   0  277928  18536   3320 S   0.0  0.8   0:00.03 /usr/sbin+
 10075 nobody    20   0  277908  18012   2884 S   0.0  0.7   0:00.02 /usr/sbin+
 10084 nobody    20   0  277520  17772   2860 S   0.0  0.7   0:00.05 /usr/sbin+
 10111 nobody    20   0  277536  17780   2836 S   0.0  0.7   0:00.07 /usr/sbin+
 10113 nobody    20   0  277916  18244   3068 S   0.0  0.8   0:00.02 /usr/sbin+
 10114 nobody    20   0  277520  17748   2840 S   0.0  0.7   0:00.06 /usr/sbin+
 10118 nobody    20   0  277908  17996   2892 S   0.0  0.7   0:00.04 /usr/sbin+
 10119 nobody    20   0  277908  18092   2880 S   0.0  0.7   0:00.03 /usr/sbin+
 10120 nobody    20   0  277908  17980   2876 S   0.0  0.7   0:00.04 /usr/sbin+
 10121 nobody    20   0  277908  18168   3056 S   0.0  0.8   0:00.02 /usr/sbin+
 10125 nobody    20   0  277908  17980   2876 S   0.0  0.7   0:00.03 /usr/sbin+
 10126 nobody    20   0  277908  18160   2964 S   0.0  0.8   0:00.04 /usr/sbin+
 10149 nobody    20   0  277284  17464   2816 S   0.0  0.7   0:00.01 /usr/sbin+
 10154 nobody    20   0  277764  18140   3108 S   0.0  0.7   0:00.01 /usr/sbin+
 10155 nobody    20   0  277908  17976   2864 S   0.0  0.7   0:00.03 /usr/sbin+
 10160 nobody    20   0  277908  17980   2880 S   0.0  0.7   0:00.08 /usr/sbin+
 10164 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.02 [httpd] <+
 10165 nobody    20   0  277916  18000   2880 S   0.0  0.7   0:00.03 /usr/sbin+
 10167 nobody    20   0  277916  18212   3080 S   0.0  0.8   0:00.03 /usr/sbin+
 10168 nobody    20   0  277284  17380   2748 S   0.0  0.7   0:00.00 /usr/sbin+
 10169 nobody    20   0  277764  18336   3320 S   0.0  0.8   0:00.01 /usr/sbin+
 10170 nobody    20   0  277908  17980   2876 S   0.0  0.7   0:00.05 /usr/sbin+
 10171 nobody    20   0  277908  17988   2880 S   0.0  0.7   0:00.05 /usr/sbin+
 10176 nobody    20   0  277908  18444   3348 S   0.0  0.8   0:00.01 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10180 nobody    20   0  277908  17996   2892 S   0.0  0.7   0:00.03 /usr/sbin+
 10249 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 10577 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 10664 mailnull  20   0   89268   4164   1132 S   0.0  0.2   0:00.00 /usr/sbin+
 10673 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 10689 mailnull  20   0   89268   4192   1144 S   0.0  0.2   0:00.00 /usr/sbin+
 10704 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 10705 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 10721 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 10736 nigeria   20   0  400460   5628   2404 S   0.0  0.2   0:00.00 php-fpm: +
 10738 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 10755 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10758 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10759 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10760 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10761 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10762 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10763 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10764 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10765 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10766 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10767 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 10769 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10774 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10777 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10778 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10779 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 /usr/loca+
 10780 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 10781 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 10783 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 10784 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 10786 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10791 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10792 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 10793 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10794 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 10796 root      20   0  188224  11116   5148 S   0.0  0.5   0:00.02 /usr/loca+
 10800 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 10830 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 10838 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 10839 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 10848 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 10849 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 10882 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
 10898 cloudw    20   0  353712  15972  10484 R   0.0  0.7   0:00.01 /opt/cpan+
 10929 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 10930 root      20   0   37752   1436    876 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:1]
root         36  0.7  0.0      0     0 ?        S    03:34   0:04  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        137  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:2]
root        233  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:2]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root       2361  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:4]
root       6902  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/0:2]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root          1  0.2  0.1  44276  3120 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39496  4536 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   132 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780    84 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5924 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58424  1168 ?        Ss   03:34   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 861368  1116 ?        Ssl  03:34   0:00 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   108 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540  1008 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24604  1080 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   104 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   436 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      10755  0.0  0.0 183044  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10781  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      10794  0.0  0.0 108052   360 ?        S    03:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      10800  0.0  0.0 113288  1520 ?        S    03:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      10931  0.0  0.0 153840  2092 ?        R    03:45   0:00  |               \_ ps auxf
root      10758  0.0  0.0 183044  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10778  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      10759  0.0  0.0 183044  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10777  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      10760  0.0  0.0 183044  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10774  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      10761  0.0  0.0 183044  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10779  0.0  0.0  20164   984 ?        Ss   03:45   0:00  |   \_ jailshell (cloudsms) [10932] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      10932  0.0  0.0  20164   252 ?        R    03:45   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      10762  0.0  0.0 183044  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10793  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      10763  0.0  0.0 183044  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10791  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      10764  0.0  0.0 183044  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10786  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      10765  0.0  0.0 183044  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10780  0.0  0.0  20164   812 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      10766  0.0  0.0 183044  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10784  0.0  0.0 113284  1208 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      10796  2.0  0.4 188224 11116 ?        S    03:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      10882  0.0  0.0 160224  2368 ?        S    03:45   0:00  |           \_ top -n 2 -b -c
root      10767  0.0  0.0 183044  2136 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10792  0.0  0.0  20164   964 ?        Ss   03:45   0:00  |   \_ jailshell (pactpay) [10839] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10839  0.0  0.0  20164   260 ?        S    03:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10848  1.0  0.7 480124 17668 ?        S    03:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      10769  0.0  0.0 183044  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      10783  0.0  0.0  20164   972 ?        Ss   03:45   0:00      \_ jailshell (nigeria) [10838] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10838  0.0  0.0  20164   264 ?        S    03:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10846  6.0  0.6 404052 16140 ?        S    03:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  88984  3240 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  10664  0.0  0.1  89268  4164 ?        S    03:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  10689  0.0  0.1  89268  4192 ?        S    03:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  2.0 30.9 1763340 748244 ?      Ssl  03:34   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.1  1.0 859188 24992 ?        Ssl  03:34   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   268 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1976 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47056  2512 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   308 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   548 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  46912  1936 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  46924  2484 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24396  1652 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   216 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056   632 ?        S    03:34   0:00  \_ dovecot/auth
root      10006  0.0  0.0  41052   852 ?        S    03:44   0:00  \_ dovecot/auth -w
root        954  3.3  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 36724 ?       SLsl 03:34   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  2604 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        960  0.0  0.0 396248   236 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.4 114016 11884 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   192 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9696  2428 ?        Ss   03:34   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      10249  0.0  0.1 111304  4268 ?        Ss   03:44   0:00  \_ sshd: [accepted]
root      10577  0.0  0.1 111304  4276 ?        Ss   03:44   0:00  \_ sshd: [accepted]
root      10673  0.0  0.1 111304  4264 ?        Ss   03:44   0:00  \_ sshd: [accepted]
root      10704  0.3  0.2 162436  5832 ?        Ss   03:44   0:00  \_ sshd: root [priv]
sshd      10705  0.0  0.1 115644  2628 ?        S    03:44   0:00  |   \_ sshd: root [net]
root      10721  0.0  0.1 111304  4272 ?        Ss   03:44   0:00  \_ sshd: [accepted]
root      10830  0.0  0.2 157100  5076 ?        Ss   03:45   0:00  \_ sshd: unknown [priv]
sshd      10849  0.0  0.1 115644  2632 ?        S    03:45   0:00      \_ sshd: unknown [net]
root        967  4.6  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  3120 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      10738  0.0  0.0      0     0 ?        Z    03:44   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   708 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   280 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   376 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.1 400740  3004 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   10736  0.0  0.2 400460  5628 ?        S    03:44   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 216400  4704 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11176 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.4  4.8 247868 116964 ?       Ss   03:34   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  4.8 248996 117732 ?       S    03:40   0:00  \_ spamd child
root       7260  0.0  4.8 247868 116584 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.0 157700  2084 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.4 387528 10660 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.2 412368 30232 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.0 183900    80 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1012 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.3 209208  9408 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   636 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416   836 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.3  7.6 1457284 186356 ?      Sl   03:34   0:08 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  7924 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12880   388 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   184 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12920   392 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2517  0.1  0.7 277864 18628 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody     2884  0.1  0.7 277936 19048 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody     3076  0.1  0.7 277928 19088 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody     8718  0.1  0.7 277536 17732 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody     9092  0.1  0.7 277536 17940 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody     9093  0.1  0.7 277520 17932 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody     9147  0.1  0.7 277904 18144 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    10050  0.0  0.7 277584 18556 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10061  0.0  0.7 277756 18280 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10074  0.0  0.7 277928 18536 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10075  0.0  0.7 277908 18012 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10084  0.0  0.7 277520 17772 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    10898  1.0  0.6 353712 15972 ?        S    03:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    10111  0.1  0.7 277536 17780 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10113  0.0  0.7 277916 18244 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10114  0.1  0.7 277520 17748 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10118  0.0  0.7 277908 17996 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10119  0.0  0.7 277908 18092 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10120  0.0  0.7 277908 17980 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10121  0.0  0.7 277908 18168 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10125  0.0  0.7 277908 17980 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10126  0.0  0.7 277908 18160 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10149  0.0  0.7 277284 17464 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10154  0.0  0.7 277764 18140 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10155  0.0  0.7 277908 17976 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10160  0.1  0.7 277908 17980 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10164  0.0  0.0      0     0 ?        Z    03:44   0:00  \_ [httpd] <defunct>
nobody    10165  0.0  0.7 277916 18000 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10167  0.0  0.7 277916 18212 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10168  0.0  0.7 277284 17380 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10169  0.0  0.7 277764 18336 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10170  0.0  0.7 277908 17980 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10171  0.0  0.7 277908 17988 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10176  0.0  0.7 277908 18444 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10180  0.0  0.7 277908 17996 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.1  1.1 180932 27872 ?        Ss   03:34   0:00 lfd - sleeping
## mysql stats
Uptime: 646  Threads: 3  Questions: 40196  Slow queries: 0  Opens: 901  Flush tables: 1  Open tables: 845  Queries per second avg: 62.222
*************************** 1. row ***************************
     Id: 707
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `11` WHERE `phone`='2348063207246' LIMIT 1
*************************** 2. row ***************************
     Id: 712
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 716
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.216 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.6.111 TIME_WAIT
      1 66.102.8.103 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 64.226.97.2 TIME_WAIT
      3 66.249.93.35 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 03:45:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 minutes 40 seconds
   Server load: 0.27 0.38 0.36
   Total accesses: 2960 - Total Traffic: 91.9 MB - Total Duration: 1498637
   CPU Usage: u2.84 s1.19 cu34.96 cs28.75 - 10.6% CPU load
   4.63 requests/sec - 147.0 kB/second - 31.8 kB/request - 506.296 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 21 idle workers

......_.R___..._...KWK..__..K......K.__...____..._K.._....__....
_...C_.KR_KK....K._.............................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req   Dur  Conn  Child Slot     Client     Protocol           VHost                                        Request
   0-0  -     0/0/102   . 0.00 10 0     40755 0.0   0.00  2.10 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  -     0/0/192   . 0.00 16 0     59417 0.0   0.00  2.81 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  -     0/0/146   . 0.00 18 0     70396 0.0   0.00  3.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  -     0/0/152   . 0.00 21 0     72627 0.0   0.00  6.65 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  -     0/0/127   . 0.00 4  0     67118 0.0   0.00  5.39 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  -     0/0/100   . 0.00 15 0     31197 0.0   0.00  3.55 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  2517  0/139/139 _ 3.36 0  263   75187 0.0   3.26  3.26 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=3466101822 HTTP/1.1
   7-0  -     0/0/126   . 0.00 34 0     75154 0.0   0.00  3.48 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  8718  0/38/127  R 0.65 45 446   86421 0.0   2.71  5.02 114.10.138.203 http/1.1
   9-0  9092  0/32/133  _ 0.77 6  393   79495 0.0   0.83  4.76 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1074191551 HTTP/1.1
   10-0 2884  0/117/117 _ 3.02 5  6     66533 0.0   4.45  4.45 44.215.61.66   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/images/2019electio
   11-0 3076  0/138/138 _ 2.99 0  301   68444 0.0   3.61  3.61 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=1442910059 HTTP/1.1
   12-0 -     0/0/116   . 0.00 24 0     71521 0.0   0.00  2.90 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/108   . 0.00 14 0     67104 0.0   0.00  3.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -     0/0/65    . 0.00 9  0     43718 0.0   0.00  4.46 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 9093  0/31/101  _ 0.55 1  2     56828 0.0   0.72  2.72 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   16-0 -     0/0/177   . 0.00 11 0     58450 0.0   0.00  3.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/126   . 0.00 1  0     54639 0.0   0.00  3.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/132   . 0.00 19 0     70124 0.0   0.00  3.95 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 9147  6/36/71   K 0.71 0  304   32567 185.7 1.08  1.95 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=870693533 HTTP/1.1
   20-0 10050 0/6/13    W 0.07 0  0     5140  0.0   0.11  0.22 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-0 10061 1/7/25    K 0.02 0  360   11709 34.8  0.07  1.66 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=1445177951 HTTP/1.1
   22-0 -     0/0/80    . 0.00 48 0     43577 0.0   0.00  2.82 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/84    . 0.00 12 0     58879 0.0   0.00  2.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 10074 0/8/9     _ 0.13 1  7     4847  0.0   0.26  0.26 3.211.181.86   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/2019elections/2019electio
   25-0 10075 0/6/8     _ 0.11 1  2     1330  0.0   0.07  0.07 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   26-0 -     0/0/3     . 0.00 45 0     67    0.0   0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 3  0     3360  0.0   0.00  0.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 10084 3/9/9     K 0.21 0  383   5131  97.0  0.25  0.25 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=4252693218 HTTP/1.1
   29-0 -     0/0/2     . 0.00 47 0     9     0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 46 0     13    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 26 0     2022  0.0   0.00  0.09 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 2  0     1566  0.0   0.00  0.08 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 17 0     1895  0.0   0.00  0.10 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 28 0     57    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 10111 3/13/13   K 0.27 0  302   6049  95.0  0.41  0.41 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=2542139586 HTTP/1.1
   36-0 -     0/0/4     . 0.00 5  0     823   0.0   0.00  0.04 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 10113 0/4/4     _ 0.03 1  419   1650  0.0   0.08  0.08 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=3256676749 HTTP/1.1
   38-0 10114 0/9/9     _ 0.24 2  347   5891  0.0   0.28  0.28 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=2235165679 HTTP/1.1
   39-0 -     0/0/2     . 0.00 22 0     40    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 25 4     40    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 43 0     34    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 10118 0/7/7     _ 0.15 7  347   4106  0.0   0.19  0.19 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=2554154083 HTTP/1.1
   43-0 10119 0/5/5     _ 0.09 8  346   2656  0.0   0.12  0.12 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=794836210 HTTP/1.1
   44-0 10120 0/8/8     _ 0.17 9  265   3863  0.0   0.22  0.22 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=2896955513 HTTP/1.1
   45-0 10121 0/5/5     _ 0.08 0  0     1945  0.0   0.13  0.13 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   46-0 -     0/0/2     . 0.00 44 0     113   0.0   0.00  0.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 7  0     38    0.0   0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 23 0     18    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 10125 0/7/7     _ 0.14 8  285   3446  0.0   0.19  0.19 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=1213473387 HTTP/1.1
   50-0 10126 4/6/6     K 0.12 1  258   2940  126.2 0.16  0.16 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=1261556587 HTTP/1.1
   51-0 -     0/0/2     . 0.00 42 0     23    0.0   0.00  0.03 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 41 0     19    0.0   0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 10149 0/4/4     _ 0.01 0  0     18134 0.0   3.07  3.07 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   54-0 -     0/0/2     . 0.00 37 0     52    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 20 0     73    0.0   0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 38 0     54    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 36 0     40    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 10154 0/4/4     _ 0.01 0  344   731   0.0   0.05  0.05 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=1443443101 HTTP/1.1
   59-0 10155 0/5/5     _ 0.07 4  396   2256  0.0   0.15  0.15 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=2126621670 HTTP/1.1
   60-0 -     0/0/2     . 0.00 40 0     51    0.0   0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 29 0     36    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 0  0     1263  0.0   0.00  0.07 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 33 0     35    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 10160 0/13/13   _ 0.33 1  269   8102  0.0   0.36  0.36 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=460352554 HTTP/1.1
   65-0 -     0/0/2     . 0.00 39 0     46    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 13 0     53    0.0   0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 30 0     145   0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 10164 1/4/4     C 0.03 0  0     753   0.2   0.04  0.04 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 10165 0/6/6     _ 0.12 3  260   3584  0.0   0.16  0.16 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=3716877732 HTTP/1.1
   70-0 -     0/0/2     . 0.00 32 0     52    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 10167 4/6/6     K 0.09 2  340   2786  126.9 0.13  0.13 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=562048884 HTTP/1.1
   72-0 10168 0/2/2     R 0.00 21 10533 21109 0.0   2.60  2.60 185.244.36.159 http/1.1 health.oyostate.gov.ng:443
   73-0 10169 0/4/4     _ 0.01 9  274   826   0.0   0.12  0.12 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=210045634 HTTP/1.1
   74-0 10170 1/10/10   K 0.23 2  296   5680  36.1  0.28  0.28 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=506188588 HTTP/1.1
   75-0 10171 3/10/10   K 0.23 2  267   5399  95.4  0.28  0.28 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=3536621328 HTTP/1.1
   76-0 -     0/0/2     . 0.00 35 0     44    0.0   0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 27 0     58    0.0   0.00  0.10 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 6  0     1963  0.0   0.00  0.10 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 31 0     34    0.0   0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 10176 1/4/4     K 0.03 1  273   1131  34.0  0.08  0.08 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=1882965089 HTTP/1.1
   81-0 -     0/0/3     . 0.00 8  0     672   0.0   0.00  0.04 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 10180 0/6/6     _ 0.09 8  257   2444  0.0   0.13  0.13 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=2432453421 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 914
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...62)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 1783
   total entries replaced since starting: 0
   total entries expired since starting: 868
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 3 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit