403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.03.54.txt
 ## swap threshold exceeded
## server overview
2025-11-21.03.54 load[0] mem[72/42] mysql[1/6] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1603         111          20         647         553
Swap:          1999         925        1074
 03:54:02 up 19 min,  0 users,  load average: 0.12, 0.31, 0.35
## system overview
top - 03:54:02 up 19 min,  0 users,  load average: 0.12, 0.31, 0.35
Tasks: 198 total,  10 running, 187 sleeping,   0 stopped,   1 zombie
%Cpu(s): 41.2 us, 14.7 sy,  0.0 ni, 35.3 id,  5.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   110236 free,  1639768 used,   670296 buff/cache
KiB Swap:  2047996 total,  1100284 free,   947712 used.   569760 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457284 196744   3988 S  62.5  8.1   0:14.62 /usr/sbin+
 18088 nigeria   20   0  404052  16144  10384 R  18.8  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44276   3212   1492 S   6.2  0.1   0:02.27 /usr/lib/+
   474 dbus      20   0   58424   1176    620 S   6.2  0.0   0:00.62 /usr/bin/+
   505 polkitd   20   0  610540    908    460 S   6.2  0.0   0:00.18 /usr/lib/+
   942 named     20   0  990260  27388   1476 S   6.2  1.1   0:01.05 /usr/sbin+
 16884 nobody    20   0  277900  19116   3772 S   6.2  0.8   0:00.14 /usr/sbin+
 18085 pactpay   20   0  480124  17312  11576 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:01.16 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:05.92 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kauditd]
   137 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.42 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.51 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   6392   6100 S   0.0  0.3   0:00.94 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    128     16 S   0.0  0.0   0:00.14 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     76     68 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5952    916 S   0.0  0.2   0:00.09 queueproc+
   478 nscd      20   0  861368   1304    668 S   0.0  0.1   0:00.95 /usr/sbin+
   483 rpc       20   0   69256    204     96 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   507 root      20   0   24604   1088    800 S   0.0  0.0   0:00.28 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.02 /usr/sbin+
   514 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.03 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   88984   3344    396 S   0.0  0.1   0:00.04 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.66 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 711084    388 S   0.0 29.4   0:14.58 /usr/loca+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    500    340 S   0.0  0.0   0:00.04 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.85 /usr/bin/+
   955 telegraf  20   0 5654048  34004   1572 S   0.0  1.4   0:00.81 /usr/loca+
   956 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.06 sw-engine+
   960 root      20   0  396248    540    364 S   0.0  0.0   0:00.10 php-fpm: +
   963 systuser  20   0  114016  12052   2536 S   0.0  0.5   0:00.38 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.02 pure-ftpd+
   965 cpanelc+  20   0    9820   2752   2316 S   0.0  0.1   0:00.92 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.22 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.52 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.02 /usr/bin/+
   979 root      20   0  261028   4624    992 S   0.0  0.2   0:00.30 cpsrvd (S+
   980 root      20   0  572372    708    240 S   0.0  0.0   0:00.19 /usr/bin/+
   984 root      20   0  389508    264    176 S   0.0  0.0   0:00.09 php-fpm: +
   998 root      20   0  388892    576    480 S   0.0  0.0   0:00.11 php-fpm: +
  1001 root      20   0  400740   3072    636 S   0.0  0.1   0:00.26 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  216400   6324   4924 S   0.0  0.3   0:00.43 /usr/sbin+
  1010 root      20   0  439788  11352  11052 S   0.0  0.5   0:00.14 php-fpm: +
  1097 dovenull  20   0   46912   1780   1060 S   0.0  0.1   0:00.02 dovecot/p+
  1098 dovenull  20   0   47056   2452   1612 S   0.0  0.1   0:00.01 dovecot/i+
  1099 dovecot   20   0   10320    396    280 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    624    452 S   0.0  0.0   0:00.01 dovecot/l+
  1101 dovenull  20   0   47064   2264   1592 S   0.0  0.1   0:00.04 dovecot/p+
  1102 dovenull  20   0   46924   1560    860 S   0.0  0.1   0:00.01 dovecot/i+
  1106 root      20   0   24396   2036    500 S   0.0  0.1   0:00.03 dovecot/c+
  1107 dovecot   20   0   13568    636    420 S   0.0  0.0   0:00.00 dovecot/s+
  1135 root      20   0  247868 117372    896 S   0.0  4.8   0:02.97 /usr/loca+
  1157 dovecot   20   0   41056   1428   1024 S   0.0  0.1   0:00.03 dovecot/a+
  1197 systuser  20   0  157700   2964    920 S   0.0  0.1   0:00.01 SonarPush+
  1199 wp-tool+  20   0  387528  11948   1288 S   0.0  0.5   0:00.09 /usr/bin/+
  1200 wp-tool+  20   0  412368  30216   1120 S   0.0  1.2   0:00.61 /usr/bin/+
  1281 root      20   0  183900     80     80 S   0.0  0.0   0:00.08 cpdavd - +
  1283 root      20   0  167452   1348    748 S   0.0  0.1   0:00.06 dnsadmin +
  1285 root      20   0  209208  10180   1576 S   0.0  0.4   0:00.32 tailwatchd
  1709 root      20   0  299272    732    352 S   0.0  0.0   0:00.03 php-fpm: +
  1717 root      38  18  130416   1432    708 S   0.0  0.1   0:00.00 cpanellog+
  1930 root      20   0  267052   8100    716 S   0.0  0.3   0:00.23 /usr/sbin+
  1931 root      20   0   12784    384    268 S   0.0  0.0   0:00.12 /usr/loca+
  1932 root      20   0   12732    272    196 S   0.0  0.0   0:00.10 /usr/loca+
  1933 root      20   0   12796    352    228 S   0.0  0.0   0:00.11 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181060  28068   1180 S   0.0  1.2   0:01.31 lfd - sle+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  2884 nobody    20   0  277936  20116   4512 S   0.0  0.8   0:01.43 /usr/sbin+
  3076 nobody    20   0  277928  20296   4404 S   0.0  0.8   0:01.66 /usr/sbin+
  7259 root      20   0  249128 118752   1108 S   0.0  4.9   0:00.08 spamd chi+
  7260 root      20   0  247868 116808    368 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  19560   4200 S   0.0  0.8   0:00.79 /usr/sbin+
 10074 nobody    20   0  277928  19716   4368 S   0.0  0.8   0:00.84 /usr/sbin+
 10084 nobody    20   0  277584  19468   4196 S   0.0  0.8   0:00.93 /usr/sbin+
 10126 nobody    20   0  277908  19960   4176 S   0.0  0.8   0:00.81 /usr/sbin+
 10165 nobody    20   0  277916  19820   4308 S   0.0  0.8   0:00.76 /usr/sbin+
 10171 nobody    20   0  277908  19876   4244 S   0.0  0.8   0:00.98 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12046 nobody    20   0  277600  19760   4428 S   0.0  0.8   0:00.79 /usr/sbin+
 12562 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 12564 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 14183 nobody    20   0  277520  18916   3892 S   0.0  0.8   0:00.24 /usr/sbin+
 14211 nobody    20   0  277520  19576   4296 S   0.0  0.8   0:00.35 /usr/sbin+
 14224 nobody    20   0  277540  19380   4232 S   0.0  0.8   0:00.43 /usr/sbin+
 14225 nobody    20   0  277548  19620   4364 S   0.0  0.8   0:00.36 /usr/sbin+
 15083 nobody    20   0  277860  19308   4076 S   0.0  0.8   0:00.39 /usr/sbin+
 15852 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16618 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16708 nobody    20   0  277568  19156   4028 S   0.0  0.8   0:00.16 /usr/sbin+
 16869 nobody    20   0  277520  19196   4048 S   0.0  0.8   0:00.09 /usr/sbin+
 17120 nobody    20   0  277788  19172   3872 S   0.0  0.8   0:00.15 /usr/sbin+
 17350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17501 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17506 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17527 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17558 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17623 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 17624 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 17633 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17667 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 17948 nigeria   20   0  400460   5632   2400 S   0.0  0.2   0:00.00 php-fpm: +
 17957 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 18010 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 18016 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 18019 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 18020 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18021 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18022 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18023 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18024 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18025 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18026 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18027 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18029 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 18030 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18031 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18033 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 18035 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 18036 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 18037 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 18053 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 18055 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 18056 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 18057 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 18058 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 18059 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 18060 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 18062 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 18063 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 18064 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 18065 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 18066 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 18079 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 18086 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 18091 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 18097 nobody    20   0  277900  15344      0 R   0.0  0.6   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.4  0.0      0     0 ?        S    03:34   0:05  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        137  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:2]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.1  0.0      0     0 ?        S<   03:34   0:01  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      10955  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/0:1]
root      12562  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:0]
root      12564  0.0  0.0      0     0 ?        R    03:47   0:00  \_ [kworker/1:1]
root      15852  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/0:2]
root      16618  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:4]
root      17350  0.0  0.0      0     0 ?        S    03:53   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44276  3212 ?        Ss   03:34   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  39496  6392 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   128 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780    76 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5952 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58424  1176 ?        Ss   03:34   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 861368  1304 ?        Ssl  03:34   0:00 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   204 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   908 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24604  1088 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   104 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      18019  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18035  0.0  0.0 113284  1212 ?        Ss   03:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      18036  0.0  0.0 108052   356 ?        S    03:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      18037  0.0  0.0 113288  1516 ?        S    03:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      18099  0.0  0.0 153840  2096 ?        R    03:54   0:00  |               \_ ps auxf
root      18020  0.0  0.0 183044  2152 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18065  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      18021  0.0  0.0 183044  2152 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18058  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      18022  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18057  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      18023  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18066  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      18024  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18055  0.0  0.0  20164   984 ?        Ss   03:54   0:00  |   \_ jailshell (cloudsms) [18100] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  18100  0.0  0.0  20164   256 ?        S    03:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  18101  0.0  0.0 113284  1208 ?        S    03:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  18102  0.0  0.5 403464 14316 ?        R    03:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      18025  0.0  0.0 183044  2148 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18062  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      18026  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18063  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      18027  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18060  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      18029  0.0  0.0 183044  2144 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18064  0.0  0.0  20164   808 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      18030  0.0  0.0 183044  2140 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18059  0.0  0.0  20164   804 ?        Ss   03:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      18031  0.0  0.0 183044  2140 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18056  0.0  0.0  20164   968 ?        Ss   03:54   0:00  |   \_ jailshell (pactpay) [18079] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18079  0.0  0.0  20164   264 ?        S    03:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18085  0.0  0.7 480124 17312 ?        R    03:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      18033  0.0  0.0 183044  2140 ?        S    03:54   0:00  \_ /usr/sbin/CROND -n
root      18053  0.0  0.0  20164   968 ?        Ss   03:54   0:00      \_ jailshell (nigeria) [18086] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   18086  0.0  0.0  20164   260 ?        S    03:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   18088  0.0  0.6 404052 16144 ?        S    03:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  88984  3344 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  1.2 29.3 1763340 711084 ?      Ssl  03:34   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.1 990260 27388 ?        Ssl  03:34   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   500 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1780 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47056  2452 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   396 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   624 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064  2264 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.0  46924  1560 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24396  2036 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   636 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056  1428 ?        S    03:34   0:00  \_ dovecot/auth
root        954  1.8  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.4 5654048 34004 ?       SLsl 03:34   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  2604 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        960  0.0  0.0 396248   540 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.4 114016 12052 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9820  2752 ?        Ss   03:34   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      17501  0.0  0.1 111304  4268 ?        Ss   03:53   0:00  \_ sshd: [accepted]
root      17506  0.0  0.1 111304  4276 ?        Ss   03:53   0:00  \_ sshd: [accepted]
root      17527  0.0  0.1 111304  4272 ?        Ss   03:53   0:00  \_ sshd: [accepted]
root      17558  0.0  0.1 111304  4276 ?        Ss   03:53   0:00  \_ sshd: [accepted]
root      17623  0.0  0.1 111304  4448 ?        Ss   03:53   0:00  \_ sshd: [accepted]
sshd      17624  0.0  0.1 115644  2632 ?        S    03:53   0:00  |   \_ sshd: [net]
root      17633  0.0  0.1 111304  4272 ?        Ss   03:53   0:00  \_ sshd: [accepted]
sshd      17667  0.0  0.1 115644  2628 ?        S    03:53   0:00  |   \_ sshd: [net]
root      17957  0.0  0.1 111304  4268 ?        Ss   03:53   0:00  \_ sshd: [accepted]
root      18016  0.0  0.1 111304  4276 ?        Ss   03:54   0:00  \_ sshd: [accepted]
root        967  2.5  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  4624 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      18010  0.0  0.0      0     0 ?        Z    03:53   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   708 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   264 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   576 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.1 400740  3072 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   17948  0.0  0.2 400460  5632 ?        S    03:53   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.2 216400  6324 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11352 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.2  4.8 247868 117372 ?       Ss   03:34   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  4.9 249128 118752 ?       S    03:40   0:00  \_ spamd child
root       7260  0.0  4.8 247868 116808 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2964 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.4 387528 11948 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.2 412368 30216 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.0 183900    80 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1348 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.4 209208 10180 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   732 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1432 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.1 1457284 196744 ?      Sl   03:34   0:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8100 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12784   384 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   272 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12796   352 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2884  0.1  0.8 277936 20116 ?        S    03:35   0:01  \_ /usr/sbin/httpd -k start
nobody     3076  0.1  0.8 277928 20296 ?        S    03:36   0:01  \_ /usr/sbin/httpd -k start
nobody     9147  0.1  0.8 277904 19560 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    10074  0.1  0.8 277928 19716 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10084  0.1  0.8 277584 19468 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10126  0.1  0.8 277908 19960 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10165  0.1  0.8 277916 19820 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10171  0.1  0.8 277908 19876 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    12046  0.1  0.8 277600 19760 ?        S    03:46   0:00  \_ /usr/sbin/httpd -k start
nobody    14183  0.0  0.7 277520 18916 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    14211  0.1  0.8 277520 19576 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    14224  0.1  0.8 277540 19380 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    14225  0.1  0.8 277548 19620 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    15083  0.1  0.7 277860 19308 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody    16708  0.1  0.7 277568 19156 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    16869  0.0  0.7 277520 19196 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    16884  0.1  0.7 277900 19116 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
cloudw    18097  0.0  0.2 196616  7104 ?        R    03:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    17120  0.1  0.7 277788 19172 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.1  1.1 181060 28068 ?        Ss   03:34   0:01 lfd - sleeping
## mysql stats
Uptime: 1186  Threads: 3  Questions: 71842  Slow queries: 0  Opens: 1243  Flush tables: 1  Open tables: 1167  Queries per second avg: 60.575
*************************** 1. row ***************************
     Id: 1258
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-21' LIMIT 1
*************************** 2. row ***************************
     Id: 1259
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 1261
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 1262
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     13 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 03:54:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 19 minutes 40 seconds
   Server load: 0.12 0.31 0.35
   Total accesses: 5426 - Total Traffic: 156.0 MB - Total Duration: 2794524
   CPU Usage: u8.41 s3.11 cu63.72 cs54.25 - 11% CPU load
   4.6 requests/sec - 135.4 kB/second - 29.4 kB/request - 515.025 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKK.__KKKKW_W......_....K...K.....................K.............
.....K.....K....................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn  Child Slot    Client     Protocol         VHost                                      Request
   0-0  16708 1/27/174  K 0.69 2   263 73751  34.8  0.73  3.78 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1340854303 HTTP/1.1
   1-0  12046 1/129/321 K 3.34 0   287 129870 34.4  3.55  6.36 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1326416219 HTTP/1.1
   2-0  15083 6/65/262  K 1.68 1   299 135877 190.3 1.87  6.68 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=3836333969 HTTP/1.1
   3-0  -     0/0/255   . 0.00 7   0   118590 0.0   0.00  9.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   4-0  17120 0/27/209  _ 0.68 0   7   107064 0.0   0.70  8.61 52.45.77.169  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/2019elections/images/poll
   5-0  14183 0/40/140  _ 1.05 0   0   53763  0.0   1.09  4.64 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   6-0  14211 3/60/200  K 1.44 1   297 104447 95.8  1.54  4.80 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=156804076 HTTP/1.1
   7-0  14224 1/71/197  K 1.84 3   349 115348 34.0  2.12  5.60 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1657073825 HTTP/1.1
   8-0  14225 1/65/202  K 1.74 1   261 124973 34.4  1.65  6.88 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=1140992677 HTTP/1.1
   9-0  16869 1/16/156  K 0.31 3   267 91973  35.1  0.41  5.32 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=2303028638 HTTP/1.1
   10-0 2884  0/245/245 W 5.98 0   0   128967 0.0   7.56  7.56 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   11-0 3076  0/284/284 _ 6.80 0   408 151223 0.0   7.49  7.49 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=3123141908 HTTP/1.1
   12-0 16884 0/26/142  W 0.56 0   0   83966  0.0   0.62  3.52 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=1321244397 HTTP/1.1
   13-0 -     0/0/114   . 0.00 26  4   70125  0.0   0.00  3.15 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/65    . 0.00 549 0   43718  0.0   0.00  4.46 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/102   . 0.00 535 0   56829  0.0   0.00  2.72 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/177   . 0.00 551 0   58450  0.0   0.00  3.16 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/126   . 0.00 541 0   54639  0.0   0.00  3.11 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/132   . 0.00 559 0   70124  0.0   0.00  3.95 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 9147  0/146/181 _ 3.06 0   340 84255  0.0   3.67  4.54 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1033548620 HTTP/1.1
   20-0 -     0/0/15    . 0.00 532 0   5142   0.0   0.00  0.25 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/94    . 0.00 270 0   47143  0.0   0.00  3.34 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/80    . 0.00 588 0   43577  0.0   0.00  2.82 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/84    . 0.00 552 0   58879  0.0   0.00  2.50 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 10074 5/148/149 K 3.88 3   254 78751  158.3 3.93  3.93 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1403597966 HTTP/1.1
   25-0 -     0/0/27    . 0.00 470 0   9251   0.0   0.00  0.49 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/3     . 0.00 585 0   67     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 543 0   3360   0.0   0.00  0.16 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 10084 4/157/157 K 3.94 2   344 84805  128.7 4.19  4.19 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3309354717 HTTP/1.1
   29-0 -     0/0/2     . 0.00 587 0   9      0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 586 0   13     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 566 0   2022   0.0   0.00  0.09 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 542 0   1566   0.0   0.00  0.08 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 557 0   1895   0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 568 0   57     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00 508 0   11094  0.0   0.00  0.65 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00 545 0   823    0.0   0.00  0.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00 201 0   38300  0.0   0.00  1.90 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00 503 0   6642   0.0   0.00  0.35 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 562 0   40     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 565 4   40     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 583 0   34     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00 536 0   4106   0.0   0.00  0.19 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00 537 0   2657   0.0   0.00  0.12 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00 538 0   3864   0.0   0.00  0.22 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00 516 0   3619   0.0   0.00  0.23 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00 584 0   113    0.0   0.00  0.11 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 547 0   38     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 563 0   18     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00 506 0   9315   0.0   0.00  0.49 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 10126 7/148/148 K 4.02 3   395 74491  214.4 3.65  3.65 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=387889806 HTTP/1.1
   51-0 -     0/0/2     . 0.00 582 0   23     0.0   0.00  0.03 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 581 0   19     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00 433 0   31192  0.0   0.00  3.71 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 577 0   52     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 560 0   73     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 578 0   54     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 576 0   40     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00 203 0   43953  0.0   0.00  2.25 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00 507 0   3369   0.0   0.00  0.22 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00 580 0   51     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 569 0   36     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 540 0   1263   0.0   0.00  0.07 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 573 0   35     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00 534 0   8103   0.0   0.00  0.36 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 579 0   46     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 553 0   53     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 570 0   145    0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00 539 0   753    0.0   0.00  0.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 10165 1/137/137 K 3.21 4   347 94005  35.5  3.38  3.38 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=214428952 HTTP/1.1
   70-0 -     0/0/2     . 0.00 572 0   52     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00 504 0   9108   0.0   0.00  0.43 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00 27  0   86335  0.0   0.00  5.84 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00 436 0   14353  0.0   0.00  0.77 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00 375 0   23982  0.0   0.00  1.17 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 10171 3/167/167 K 4.66 0   258 96587  95.6  4.70  4.70 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=2588650440 HTTP/1.1
   76-0 -     0/0/2     . 0.00 575 0   44     0.0   0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 567 0   58     0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 546 0   1963   0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 571 0   34     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00 374 0   25894  0.0   0.00  1.23 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00 548 0   672    0.0   0.00  0.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00 531 0   2458   0.0   0.00  0.14 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1104
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...28)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 3581
   total entries replaced since starting: 0
   total entries expired since starting: 2474
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 10 miss
   total removes since starting: 3 hit, 1 miss
Youez - 2016 - github.com/yon3zu
LinuXploit