403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.03.48.txt
 ## swap threshold exceeded
## server overview
2025-11-21.03.48 load[0] mem[68/41] mysql[1/6] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1595         144          19         623         596
Swap:          1999         880        1119
 03:48:01 up 13 min,  0 users,  load average: 0.29, 0.36, 0.36
## system overview
top - 03:48:02 up 13 min,  0 users,  load average: 0.29, 0.36, 0.36
Tasks: 195 total,   7 running, 187 sleeping,   0 stopped,   1 zombie
%Cpu(s): 55.9 us, 14.7 sy,  0.0 ni, 26.5 id,  2.9 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   151612 free,  1629844 used,   638844 buff/cache
KiB Swap:  2047996 total,  1146108 free,   901888 used.   614812 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457284 192456   4184 S  88.2  8.0   0:10.45 /usr/sbin+
 13296 nigeria   20   0  404052  16140  10384 S  17.6  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44276   3172   1460 S   0.0  0.1   0:01.81 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:00.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:04.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   137 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
   233 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.36 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.45 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   5168   4876 S   0.0  0.2   0:00.67 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    132     20 S   0.0  0.0   0:00.09 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     84     76 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5924    888 S   0.0  0.2   0:00.09 queueproc+
   474 dbus      20   0   58424   1172    620 S   0.0  0.0   0:00.43 /usr/bin/+
   478 nscd      20   0  861368   1260    624 S   0.0  0.1   0:00.65 /usr/sbin+
   483 rpc       20   0   69256    108      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   505 polkitd   20   0  610540   1008    564 S   0.0  0.0   0:00.13 /usr/lib/+
   507 root      20   0   24604   1084    800 S   0.0  0.0   0:00.20 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.02 /usr/sbin+
   514 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.02 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   88984   3344    396 S   0.0  0.1   0:00.03 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.16 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 744904    228 S   0.0 30.8   0:13.54 /usr/loca+
   942 named     20   0  990260  25876   1356 S   0.0  1.1   0:00.80 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    500    340 S   0.0  0.0   0:00.04 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.85 /usr/bin/+
   955 telegraf  20   0 5654048  38520   5664 S   0.0  1.6   0:00.62 /usr/loca+
   956 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.06 sw-engine+
   960 root      20   0  396248    236    160 S   0.0  0.0   0:00.09 php-fpm: +
   963 systuser  20   0  114016  12068   2584 S   0.0  0.5   0:00.28 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.01 pure-ftpd+
   965 cpanelc+  20   0    9696   2664   2308 R   0.0  0.1   0:00.63 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.14 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.52 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.01 /usr/bin/+
   979 root      20   0  261028   3880    888 S   0.0  0.2   0:00.24 cpsrvd (S+
   980 root      20   0  572372    708    240 S   0.0  0.0   0:00.16 /usr/bin/+
   984 root      20   0  389508    280    192 S   0.0  0.0   0:00.08 php-fpm: +
   998 root      20   0  388892    376    292 S   0.0  0.0   0:00.08 php-fpm: +
  1001 root      20   0  400740   3072    636 S   0.0  0.1   0:00.22 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  216400   5244   3856 S   0.0  0.2   0:00.31 /usr/sbin+
  1010 root      20   0  439788  11416  11116 S   0.0  0.5   0:00.13 php-fpm: +
  1097 dovenull  20   0   46912   2240   1544 S   0.0  0.1   0:00.02 dovecot/p+
  1098 dovenull  20   0   47056   2512   1704 S   0.0  0.1   0:00.01 dovecot/i+
  1099 dovecot   20   0   10320    308    192 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    548    380 S   0.0  0.0   0:00.01 dovecot/l+
  1101 dovenull  20   0   46912   2200   1592 S   0.0  0.1   0:00.03 dovecot/p+
  1102 dovenull  20   0   46924   2484   1788 S   0.0  0.1   0:00.01 dovecot/i+
  1106 root      20   0   24396   2036    500 S   0.0  0.1   0:00.02 dovecot/c+
  1107 dovecot   20   0   13568    412    196 S   0.0  0.0   0:00.00 dovecot/s+
  1135 root      20   0  247868 117476   1000 S   0.0  4.9   0:02.93 /usr/loca+
  1157 dovecot   20   0   41056    888    604 S   0.0  0.0   0:00.02 dovecot/a+
  1197 systuser  20   0  157700   3024    980 S   0.0  0.1   0:00.01 SonarPush+
  1199 wp-tool+  20   0  387528  11932   1272 S   0.0  0.5   0:00.08 /usr/bin/+
  1200 wp-tool+  20   0  412368  30232   1136 S   0.0  1.2   0:00.50 /usr/bin/+
  1281 root      20   0  183900     80     80 S   0.0  0.0   0:00.08 cpdavd - +
  1283 root      20   0  167452   1352    752 S   0.0  0.1   0:00.06 dnsadmin +
  1285 root      20   0  209208   9652   1128 S   0.0  0.4   0:00.27 tailwatchd
  1709 root      20   0  299272    804    424 S   0.0  0.0   0:00.02 php-fpm: +
  1717 root      38  18  130416    836    116 S   0.0  0.0   0:00.00 cpanellog+
  1930 root      20   0  267052   8096    712 S   0.0  0.3   0:00.20 /usr/sbin+
  1931 root      20   0   12884    388    136 S   0.0  0.0   0:00.08 /usr/loca+
  1932 root      20   0   12732    184    112 S   0.0  0.0   0:00.07 /usr/loca+
  1933 root      20   0   12928    392     88 S   0.0  0.0   0:00.07 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181060  27980   1180 S   0.0  1.2   0:00.96 lfd - sle+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  2361 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  2884 nobody    20   0  277936  19320   3932 S   0.0  0.8   0:00.90 /usr/sbin+
  3076 nobody    20   0  277928  19256   3892 S   0.0  0.8   0:01.09 /usr/sbin+
  6902 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7259 root      20   0  249128 118660   1144 S   0.0  4.9   0:00.06 spamd chi+
  7260 root      20   0  247868 116824    384 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  19096   3844 R   0.0  0.8   0:00.43 /usr/sbin+
 10061 nobody    20   0  277908  18816   3684 S   0.0  0.8   0:00.25 /usr/sbin+
 10074 nobody    20   0  277928  18892   3652 S   0.0  0.8   0:00.27 /usr/sbin+
 10084 nobody    20   0  277520  18696   3652 S   0.0  0.8   0:00.37 /usr/sbin+
 10113 nobody    20   0  277916  18860   3636 S   0.0  0.8   0:00.27 /usr/sbin+
 10126 nobody    20   0  277908  19088   3736 S   0.0  0.8   0:00.17 /usr/sbin+
 10154 nobody    20   0  277908  18900   3664 S   0.0  0.8   0:00.28 /usr/sbin+
 10165 nobody    20   0  277916  19080   3768 S   0.0  0.8   0:00.25 /usr/sbin+
 10168 nobody    20   0  277908  19408   4040 S   0.0  0.8   0:00.20 /usr/sbin+
 10171 nobody    20   0  277908  18900   3732 S   0.0  0.8   0:00.32 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11730 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 12033 nobody    20   0  277908  19052   3804 S   0.0  0.8   0:00.14 /usr/sbin+
 12046 nobody    20   0  277536  18740   3792 R   0.0  0.8   0:00.20 /usr/sbin+
 12047 nobody    20   0  277580  19080   3904 S   0.0  0.8   0:00.16 /usr/sbin+
 12562 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12564 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12622 nobody    20   0  277520  18644   3716 S   0.0  0.8   0:00.11 /usr/sbin+
 12750 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 13173 nigeria   20   0  400460   5632   2372 S   0.0  0.2   0:00.00 php-fpm: +
 13180 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 13183 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 13221 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 13222 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 13223 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 13234 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13235 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13236 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13237 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13238 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13239 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13240 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13241 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13242 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13243 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13244 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13246 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13248 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13250 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 13251 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 13252 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 13265 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13266 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13267 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13269 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13271 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13272 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 13273 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13275 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13276 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 13277 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 13278 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 13279 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13287 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 13295 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 13299 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 13309 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 13313 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 13314 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 13315 root      20   0   38648   6508   3044 R   0.0  0.3   0:00.00 /usr/loca+
 13316 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.5  0.0      0     0 ?        S    03:34   0:04  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        137  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:2]
root        233  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:2]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root       2361  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:4]
root       6902  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/0:2]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      10955  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/0:1]
root      12562  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:0]
root      12564  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:1]
root          1  0.2  0.1  44276  3172 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  39496  5168 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   132 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780    84 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5924 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58424  1172 ?        Ss   03:34   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 861368  1260 ?        Ssl  03:34   0:00 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   108 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540  1008 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24604  1084 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   104 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      13234  0.0  0.0 183044  2148 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13250  0.0  0.0 113284  1212 ?        Ss   03:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      13251  0.0  0.0 108052   360 ?        S    03:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      13252  0.0  0.0 113288  1520 ?        S    03:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      13317  0.0  0.0 153840  2096 ?        R    03:48   0:00  |               \_ ps auxf
root      13235  0.0  0.0 183044  2148 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13277  0.0  0.0  20164   988 ?        Ss   03:48   0:00  |   \_ jailshell (cloudsms) [13313] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  13313  0.0  0.0  20164   256 ?        S    03:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  13314  0.0  0.0 113284  1212 ?        S    03:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  13316  0.0  0.6 404052 14824 ?        R    03:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      13236  0.0  0.0 183044  2148 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13279  0.0  0.0  20164   808 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      13237  0.0  0.0 183044  2148 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13272  0.0  0.0  20164   988 ?        Ss   03:48   0:00  |   \_ jailshell (cloudsms) [13319] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  13319  0.0  0.0  20164   256 ?        S    03:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  13320  0.0  0.0  20164   256 ?        R    03:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      13238  0.0  0.0 183044  2144 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13273  0.0  0.0  20164   804 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      13239  0.0  0.0 183044  2144 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13266  0.0  0.0  20164   804 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      13240  0.0  0.0 183044  2144 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13275  0.0  0.0  20164   808 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      13241  0.0  0.0 183044  2144 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13267  0.0  0.0  20164   808 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      13242  0.0  0.0 183044  2140 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13271  0.0  0.0  20164   808 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      13243  0.0  0.0 183044  2140 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13265  0.0  0.0  20164   804 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      13244  0.0  0.0 183044  2140 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13269  0.0  0.0  20164   804 ?        Ss   03:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      13246  0.0  0.0 183044  2140 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13278  0.0  0.0  20164   960 ?        Ss   03:48   0:00  |   \_ jailshell (pactpay) [13295] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13295  0.0  0.0  20164   256 ?        S    03:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13299  1.0  0.7 480124 17668 ?        S    03:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      13248  0.0  0.0 183044  2140 ?        S    03:48   0:00  \_ /usr/sbin/CROND -n
root      13276  0.0  0.0  20164   968 ?        Ss   03:48   0:00      \_ jailshell (nigeria) [13287] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13287  0.0  0.0  20164   256 ?        S    03:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13296  5.0  0.6 404052 16140 ?        S    03:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  88984  3344 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  1.6 30.7 1763340 744904 ?      Ssl  03:34   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.0 990260 25876 ?        Ssl  03:34   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   500 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  2240 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47056  2512 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   308 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   548 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  46912  2200 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  46924  2484 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24396  2036 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   412 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056   888 ?        S    03:34   0:00  \_ dovecot/auth
root      11730  0.0  0.1  41052  2724 ?        S    03:45   0:00  \_ dovecot/auth -w
root        954  2.6  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 38520 ?       SLsl 03:34   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  2604 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        960  0.0  0.0 396248   236 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.4 114016 12068 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9696  2664 ?        Ss   03:34   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      12750  0.0  0.1 111304  4268 ?        Ss   03:47   0:00  \_ sshd: [accepted]
root      13180  0.0  0.1 111304  4272 ?        Ss   03:47   0:00  \_ sshd: [accepted]
root      13183  0.0  0.1 111304  4268 ?        Ss   03:47   0:00  \_ sshd: [accepted]
root      13221  0.5  0.2 162436  5832 ?        Ss   03:47   0:00  \_ sshd: root [priv]
sshd      13222  0.0  0.1 115644  2628 ?        S    03:47   0:00      \_ sshd: root [net]
root        967  3.6  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  3880 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      13223  0.0  0.0      0     0 ?        Z    03:47   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   708 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   280 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   376 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.1 400740  3072 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   13173  0.0  0.2 400460  5632 ?        S    03:47   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.2 216400  5244 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11416 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.3  4.8 247868 117476 ?       Ss   03:34   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  4.9 249128 118660 ?       S    03:40   0:00  \_ spamd child
root       7260  0.0  4.8 247868 116824 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  3024 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.4 387528 11932 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.2 412368 30232 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.0 183900    80 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1352 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.3 209208  9652 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   804 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416   836 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  7.9 1457284 192456 ?      Sl   03:34   0:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8096 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12884   388 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   184 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12928   392 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2884  0.1  0.7 277936 19320 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody     3076  0.1  0.7 277928 19256 ?        S    03:36   0:01  \_ /usr/sbin/httpd -k start
nobody     9147  0.1  0.7 277904 19096 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
root      13318  0.0  0.0   6516   416 ?        R    03:48   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php72
nobody    10061  0.1  0.7 277908 18816 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10074  0.1  0.7 277928 18892 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10084  0.1  0.7 277520 18696 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10113  0.1  0.7 277916 18860 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10126  0.0  0.7 277908 19088 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10154  0.1  0.7 277908 18900 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10165  0.1  0.7 277916 19080 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10168  0.0  0.8 277908 19408 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10171  0.1  0.7 277908 18900 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    12033  0.1  0.7 277908 19052 ?        S    03:46   0:00  \_ /usr/sbin/httpd -k start
nobody    12046  0.1  0.7 277536 18740 ?        S    03:46   0:00  \_ /usr/sbin/httpd -k start
nobody    12047  0.1  0.7 277580 19080 ?        S    03:46   0:00  \_ /usr/sbin/httpd -k start
nobody    12622  0.1  0.7 277520 18644 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.1  1.1 181060 27980 ?        Ss   03:34   0:00 lfd - sleeping
## mysql stats
Uptime: 826  Threads: 4  Questions: 50527  Slow queries: 0  Opens: 1057  Flush tables: 1  Open tables: 992  Queries per second avg: 61.170
*************************** 1. row ***************************
     Id: 886
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 887
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 891
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 4. row ***************************
     Id: 892
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
## network stats
      1 144.34.239.195 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.44.87.247 TIME_WAIT
      1 54.39.89.26 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 152.42.184.248 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 03:48:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 minutes 40 seconds
   Server load: 0.29 0.36 0.36
   Total accesses: 3782 - Total Traffic: 112.7 MB - Total Duration: 1928882
   CPU Usage: u4.03 s1.58 cu45.71 cs37.84 - 10.9% CPU load
   4.61 requests/sec - 140.7 kB/second - 30.5 kB/request - 510.016 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

__KK......KK.......W.K..W...K........K............K.......K.....
.....K.._.._....................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur  Conn  Child Slot    Client     Protocol         VHost                                      Request
   0-0  12033 0/26/128  _ 0.55 1   337 56477 0.0   0.64  2.74 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=51890816 HTTP/1.1
   1-0  12046 0/34/226  _ 0.87 0   15  77145 0.0   0.94  3.75 52.6.97.88    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/2019elections/2019electio
   2-0  12047 2/27/173  K 0.66 2   391 85075 67.6  0.72  4.23 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=186730345 HTTP/1.1
   3-0  12622 1/18/170  K 0.45 0   267 82477 35.9  0.52  7.17 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2581557776 HTTP/1.1
   4-0  -     0/0/127   . 0.00 184 0   67118 0.0   0.00  5.39 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  -     0/0/100   . 0.00 195 0   31197 0.0   0.00  3.55 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  -     0/0/140   . 0.00 173 0   75188 0.0   0.00  3.26 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  -     0/0/126   . 0.00 214 0   75154 0.0   0.00  3.48 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  -     0/0/137   . 0.00 111 0   93130 0.0   0.00  5.24 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-0  -     0/0/140   . 0.00 150 0   82752 0.0   0.00  4.91 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 2884  1/150/150 K 3.72 2   394 81604 35.8  5.20  5.20 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3138729816 HTTP/1.1
   11-0 3076  3/187/187 K 4.39 3   348 97218 95.6  5.01  5.01 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=360875014 HTTP/1.1
   12-0 -     0/0/116   . 0.00 204 0   71521 0.0   0.00  2.90 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 -     0/0/108   . 0.00 194 0   67104 0.0   0.00  3.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/65    . 0.00 189 0   43718 0.0   0.00  4.46 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/102   . 0.00 175 0   56829 0.0   0.00  2.72 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/177   . 0.00 191 0   58450 0.0   0.00  3.16 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/126   . 0.00 181 0   54639 0.0   0.00  3.11 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/132   . 0.00 199 0   70124 0.0   0.00  3.95 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 9147  3/77/112  W 1.65 0   0   54704 96.4  2.12  2.98 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=2265021130 HTTP/1.1
   20-0 -     0/0/15    . 0.00 172 0   5142  0.0   0.00  0.25 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 10061 1/50/68   K 1.06 3   252 34518 35.4  1.14  2.73 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3917663805 HTTP/1.1
   22-0 -     0/0/80    . 0.00 228 0   43577 0.0   0.00  2.82 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/84    . 0.00 192 0   58879 0.0   0.00  2.50 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 10074 0/51/52   W 1.33 0   0   23914 0.0   1.25  1.25 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   25-0 -     0/0/27    . 0.00 110 0   9251  0.0   0.00  0.49 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/3     . 0.00 225 0   67    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 183 0   3360  0.0   0.00  0.16 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 10084 2/61/61   K 1.63 1   269 36775 64.4  1.71  1.71 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=4094418244 HTTP/1.1
   29-0 -     0/0/2     . 0.00 227 0   9     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 226 0   13    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 206 0   2022  0.0   0.00  0.09 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 182 0   1566  0.0   0.00  0.08 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 197 0   1895  0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 208 0   57    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00 148 0   11094 0.0   0.00  0.65 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00 185 0   823   0.0   0.00  0.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 10113 4/47/47   K 1.12 1   258 25482 121.1 1.21  1.21 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=3227848912 HTTP/1.1
   38-0 -     0/0/14    . 0.00 143 0   6642  0.0   0.00  0.35 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 202 0   40    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 205 4   40    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 223 0   34    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00 176 0   4106  0.0   0.00  0.19 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00 177 0   2657  0.0   0.00  0.12 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00 178 0   3864  0.0   0.00  0.22 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00 156 0   3619  0.0   0.00  0.23 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00 224 0   113   0.0   0.00  0.11 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 187 0   38    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 203 0   18    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00 146 0   9315  0.0   0.00  0.49 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 10126 3/36/36   K 1.23 3   341 16107 94.5  0.75  0.75 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1015991825 HTTP/1.1
   51-0 -     0/0/2     . 0.00 222 0   23    0.0   0.00  0.03 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 221 0   19    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00 73  0   31192 0.0   0.00  3.71 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 217 0   52    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 200 0   73    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 218 0   54    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 216 0   40    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 10154 1/47/47   K 1.20 0   300 27034 36.1  1.33  1.33 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=808835006 HTTP/1.1
   59-0 -     0/0/9     . 0.00 147 0   3369  0.0   0.00  0.22 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00 220 0   51    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 209 0   36    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 180 0   1263  0.0   0.00  0.07 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 213 0   35    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00 174 0   8103  0.0   0.00  0.36 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 219 0   46    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 193 0   53    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 210 0   145   0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00 179 0   753   0.0   0.00  0.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 10165 1/44/44   K 1.08 2   385 24341 34.6  1.14  1.14 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=1843139237 HTTP/1.1
   70-0 -     0/0/2     . 0.00 212 0   52    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00 144 0   9108  0.0   0.00  0.43 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 10168 0/45/45   _ 0.74 0   0   36859 0.0   3.43  3.43 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   73-0 -     0/0/28    . 0.00 76  0   14353 0.0   0.00  0.77 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00 15  0   23982 0.0   0.00  1.17 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 10171 0/54/54   _ 1.42 0   347 30029 0.0   1.51  1.51 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=1826914943 HTTP/1.1
   76-0 -     0/0/2     . 0.00 215 0   44    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 207 0   58    0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 186 0   1963  0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 211 0   34    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00 14  0   25894 0.0   0.00  1.23 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00 188 0   672   0.0   0.00  0.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00 171 0   2458  0.0   0.00  0.14 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 900
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...25)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 2301
   total entries replaced since starting: 0
   total entries expired since starting: 1400
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 3 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit