403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.04.18.txt
 ## swap threshold exceeded
## server overview
2025-11-21.04.18 load[0] mem[70/46] mysql[1/7] httpd[21]
              total        used        free      shared  buff/cache   available
Mem:           2363        1620         118          54         623         531
Swap:          1999        1045         954
 04:18:01 up 43 min,  0 users,  load average: 0.06, 0.31, 0.39
## system overview
top - 04:18:02 up 43 min,  0 users,  load average: 0.06, 0.31, 0.39
Tasks: 209 total,   2 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 21.9 sy,  0.0 ni, 25.0 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   118948 free,  1649148 used,   652204 buff/cache
KiB Swap:  2047996 total,   977720 free,  1070276 used.   554472 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457548 210064   3708 S  62.5  8.7   0:32.73 /usr/sbin+
 38495 nigeria   20   0  404052  16136  10380 S  18.8  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44276   3316   1492 S  12.5  0.1   0:04.16 /usr/lib/+
 38491 pactpay   20   0  480124  17672  11880 S  12.5  0.7   0:00.02 /opt/cpan+
   507 root      20   0   24696   1160    816 S   6.2  0.0   0:00.63 /usr/lib/+
 37787 nobody    20   0  277584  18976   3940 S   6.2  0.8   0:00.10 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:02.57 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:07.69 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.61 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.71 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   4464   4156 S   0.0  0.2   0:01.99 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    128     16 S   0.0  0.0   0:00.33 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    124     80 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5860    828 S   0.0  0.2   0:00.11 queueproc+
   474 dbus      20   0   58748   1336    628 S   0.0  0.1   0:01.39 /usr/bin/+
   478 nscd      20   0  926904   1352    712 S   0.0  0.1   0:02.18 /usr/sbin+
   483 rpc       20   0   69256    188     80 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
   505 polkitd   20   0  610540    896    448 S   0.0  0.0   0:00.38 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.06 /usr/sbin+
   514 root      20   0   52852    240    180 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.07 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89112   3796    840 S   0.0  0.2   0:00.07 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.70 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 599244    824 S   0.0 24.8   0:14.67 /usr/loca+
   942 named     20   0  990260  30016   1396 S   0.0  1.2   0:01.94 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    504    340 S   0.0  0.0   0:00.07 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.86 /usr/bin/+
   955 telegraf  20   0 5654048  37256   4448 S   0.0  1.5   0:01.65 /usr/loca+
   956 root      20   0  445028   3232   3124 S   0.0  0.1   0:00.09 sw-engine+
   960 root      20   0  396248    524    348 S   0.0  0.0   0:00.13 php-fpm: +
   963 systuser  20   0  114016  12480   2440 S   0.0  0.5   0:00.74 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.06 pure-ftpd+
   965 cpanelc+  20   0    9948   2868   2312 S   0.0  0.1   0:02.09 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.51 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.54 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.06 /usr/bin/+
   979 root      20   0  261028   4796   1060 S   0.0  0.2   0:00.50 cpsrvd (S+
   980 root      20   0  572372    704    236 S   0.0  0.0   0:00.31 /usr/bin/+
   984 root      20   0  389508    776    568 S   0.0  0.0   0:00.13 php-fpm: +
   998 root      20   0  388892    576    480 S   0.0  0.0   0:00.16 php-fpm: +
  1001 root      20   0  400740   3080    644 S   0.0  0.1   0:00.45 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  224592   4748   3280 S   0.0  0.2   0:00.90 /usr/sbin+
  1010 root      20   0  439788  11416  11116 S   0.0  0.5   0:00.18 php-fpm: +
  1097 dovenull  20   0   46912   2496   1776 S   0.0  0.1   0:00.04 dovecot/p+
  1098 dovenull  20   0   47324   2980   1948 S   0.0  0.1   0:00.04 dovecot/i+
  1099 dovecot   20   0   10320    396    280 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    624    452 S   0.0  0.0   0:00.03 dovecot/l+
  1101 dovenull  20   0   47064   2548   1848 S   0.0  0.1   0:00.07 dovecot/p+
  1102 dovenull  20   0   47056   2880   2004 S   0.0  0.1   0:00.04 dovecot/i+
  1106 root      20   0   24564   2340    508 S   0.0  0.1   0:00.04 dovecot/c+
  1107 dovecot   20   0   13568    616    400 S   0.0  0.0   0:00.01 dovecot/s+
  1135 root      20   0  247868 117536   1060 S   0.0  4.9   0:03.14 /usr/loca+
  1157 dovecot   20   0   41056   1420    992 S   0.0  0.1   0:00.07 dovecot/a+
  1197 systuser  20   0  157700   2836    792 S   0.0  0.1   0:00.02 SonarPush+
  1199 wp-tool+  20   0  387528  12960   1332 S   0.0  0.5   0:00.11 /usr/bin/+
  1200 wp-tool+  20   0  412368  32272   1488 S   0.0  1.3   0:01.05 /usr/bin/+
  1281 root      20   0  262228  21944   4080 S   0.0  0.9   0:00.17 cpdavd - +
  1283 root      20   0  167452   1348    748 S   0.0  0.1   0:00.09 dnsadmin +
  1285 root      20   0  209216  11704   2204 S   0.0  0.5   0:00.47 tailwatchd
  1709 root      20   0  299272    764    384 S   0.0  0.0   0:00.06 php-fpm: +
  1717 root      38  18  130416   1444    716 S   0.0  0.1   0:00.00 cpanellog+
  1930 root      20   0  267052   8100    716 S   0.0  0.3   0:00.37 /usr/sbin+
  1931 root      20   0   12832    384    268 S   0.0  0.0   0:00.28 /usr/loca+
  1932 root      20   0   12732    296    220 S   0.0  0.0   0:00.24 /usr/loca+
  1933 root      20   0   12864    352    228 S   0.0  0.0   0:00.26 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181364   9912   1180 S   0.0  0.4   0:02.52 lfd - sle+
  7259 root      20   0  262628 129480   3112 S   0.0  5.3   0:01.07 spamd chi+
  7260 root      20   0  247868 116808    368 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  20976   4704 S   0.0  0.9   0:02.94 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21298 nobody    20   0  277712  20360   4776 S   0.0  0.8   0:01.63 /usr/sbin+
 21299 nobody    20   0  278004  21228   4940 S   0.0  0.9   0:01.66 /usr/sbin+
 22186 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 23203 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.02 [kworker]
 24071 root      20   0  123364    604    376 S   0.0  0.0   0:00.00 /usr/sbin+
 25912 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26660 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28052 nobody    20   0  277600  20176   4700 S   0.0  0.8   0:00.95 /usr/sbin+
 28483 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 29119 worencom  20   0   38492   2868   1876 S   0.0  0.1   0:00.00 dovecot/i+
 29294 nobody    20   0  277620  20520   4636 S   0.0  0.8   0:01.09 /usr/sbin+
 29800 nobody    20   0  277584  20172   4644 S   0.0  0.8   0:00.86 /usr/sbin+
 33642 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34178 nobody    20   0  277584  19728   4372 S   0.0  0.8   0:00.49 /usr/sbin+
 34179 nobody    20   0  277924  19984   4440 S   0.0  0.8   0:00.43 /usr/sbin+
 34338 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 35097 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35196 nobody    20   0  277584  19400   4228 S   0.0  0.8   0:00.44 /usr/sbin+
 35197 nobody    20   0  277520  18900   3944 S   0.0  0.8   0:00.32 /usr/sbin+
 35669 nobody    20   0  277908  19696   4212 S   0.0  0.8   0:00.31 /usr/sbin+
 36163 nobody    20   0  277908  19360   4096 S   0.0  0.8   0:00.27 /usr/sbin+
 36903 nobody    20   0  277904  19284   4068 S   0.0  0.8   0:00.19 /usr/sbin+
 36938 nobody    20   0  277520  19164   4036 S   0.0  0.8   0:00.16 /usr/sbin+
 36939 nobody    20   0  277912  19228   3976 S   0.0  0.8   0:00.17 /usr/sbin+
 36947 nobody    20   0  277788  18740   3548 S   0.0  0.8   0:00.19 /usr/sbin+
 36948 nobody    20   0  277520  18784   3752 S   0.0  0.8   0:00.20 /usr/sbin+
 37039 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 37731 nobody    20   0  277520  18548   3592 S   0.0  0.8   0:00.07 /usr/sbin+
 37735 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 37800 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 37987 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 38155 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 38267 wp-tool+  20   0  445028    320    196 S   0.0  0.0   0:00.00 sw-engine+
 38351 nigeria   20   0  400460   5632   2408 S   0.0  0.2   0:00.00 php-fpm: +
 38378 root      20   0  157312   4860   3580 S   0.0  0.2   0:00.00 sshd: roo+
 38385 nobody    20   0  277764  18520   3416 S   0.0  0.8   0:00.00 /usr/sbin+
 38386 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 38396 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 38397 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 38400 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 38405 nobody    20   0  277504  17948   3172 S   0.0  0.7   0:00.00 /usr/sbin+
 38406 nobody    20   0  277104  16636   2264 S   0.0  0.7   0:00.00 /usr/sbin+
 38407 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38410 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 38411 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 38412 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38413 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 38418 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38420 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38421 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38422 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38423 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38424 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38425 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38426 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38427 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38428 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38429 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 38430 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38432 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38434 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 38435 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 38436 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 38461 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38462 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38463 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38464 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 38466 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 38468 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38469 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38470 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38471 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38472 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38473 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38474 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38488 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38492 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 38494 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38500 nobody    20   0  277520  18172    220 R   0.0  0.8   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    03:34   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      22186  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:0]
root      25912  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:0]
root      26660  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/0:4]
root      28483  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:4]
root      33642  0.0  0.0      0     0 ?        S    04:12   0:00  \_ [kworker/0:1]
root      34338  0.0  0.0      0     0 ?        S    04:13   0:00  \_ [kworker/1:2]
root      35097  0.0  0.0      0     0 ?        S    04:14   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44276  3316 ?        Ss   03:34   0:04 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  4464 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   128 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780   124 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5860 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1336 ?        Ss   03:34   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1352 ?        Ssl  03:34   0:02 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   188 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   896 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1160 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   240 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      38418  0.0  0.0 183044  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38434  0.0  0.0 113284  1212 ?        Ss   04:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      38435  0.0  0.0 108052   356 ?        S    04:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      38436  0.0  0.0 113288  1520 ?        S    04:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      38502  0.0  0.0 153840  2096 ?        R    04:18   0:00  |               \_ ps auxf
root      38420  0.0  0.0 183044  2156 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38462  0.0  0.0  20164   804 ?        Rs   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      38421  0.0  0.0 183044  2156 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38472  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      38422  0.0  0.0 183044  2156 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38461  0.0  0.0  20164   992 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      38504  0.0  0.0  20164   264 ?        R    04:18   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      38423  0.0  0.0 183044  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38474  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      38424  0.0  0.0 183044  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38468  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      38425  0.0  0.0 183044  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38469  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      38426  0.0  0.0 183044  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38463  0.0  0.0  20164   808 ?        Rs   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      38427  0.0  0.0 183044  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38471  0.0  0.0  20164   808 ?        Rs   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      38428  0.0  0.0 183044  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38470  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      38429  0.0  0.0 183044  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38473  0.0  0.0  20164   808 ?        Rs   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      38430  0.0  0.0 183044  2144 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38464  0.0  0.0  20164   968 ?        Ss   04:18   0:00  |   \_ jailshell (pactpay) [38488] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38488  0.0  0.0  20164   260 ?        S    04:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38491  2.0  0.7 480124 17672 ?        S    04:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      38432  0.0  0.0 183044  2144 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      38466  0.0  0.0  20164   968 ?        Ss   04:18   0:00      \_ jailshell (nigeria) [38494] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38494  0.0  0.0  20164   260 ?        S    04:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38495  3.0  0.6 404052 16136 ?        S    04:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  89112  3796 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.5 24.7 1763340 599244 ?      Ssl  03:34   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.2 990260 30016 ?        Ssl  03:34   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   504 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.1  46912  2496 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2980 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   396 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   624 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47064  2548 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2880 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24564  2340 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   616 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056  1420 ?        S    03:34   0:00  \_ dovecot/auth
worencom  29119  0.0  0.1  38492  2868 ?        S    04:06   0:00  \_ dovecot/imap
root      37039  0.0  0.1  60820  4508 ?        S    04:16   0:00  \_ dovecot/lmtp
root        954  0.8  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 37256 ?       SLsl 03:34   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  3232 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  38267  0.0  0.0 445028   320 ?        S    04:17   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   524 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.5 114016 12480 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9948  2868 ?        Ss   03:34   0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      37735  0.0  0.1 111304  4272 ?        Ss   04:17   0:00  \_ sshd: [accepted]
root      37800  0.0  0.1 111304  4272 ?        Ss   04:17   0:00  \_ sshd: [accepted]
root      37987  0.0  0.1 111304  4272 ?        Ss   04:17   0:00  \_ sshd: [accepted]
root      38155  0.0  0.1 111304  4268 ?        Ss   04:17   0:00  \_ sshd: [accepted]
root      38378  0.0  0.2 157312  4860 ?        Ss   04:17   0:00  \_ sshd: root [priv]
sshd      38386  0.0  0.1 115644  2628 ?        S    04:17   0:00  |   \_ sshd: root [net]
root      38396  0.5  0.2 162436  5828 ?        Ss   04:17   0:00  \_ sshd: root [priv]
sshd      38397  0.0  0.1 115644  2628 ?        S    04:17   0:00  |   \_ sshd: root [net]
root      38407  0.0  0.1 111304  4272 ?        Ss   04:17   0:00  \_ sshd: [accepted]
root      38410  0.0  0.1 111304  4440 ?        Ss   04:18   0:00  \_ sshd: [accepted]
sshd      38411  0.0  0.1 115644  2628 ?        S    04:18   0:00  |   \_ sshd: [net]
root      38412  0.0  0.1 111304  4264 ?        Ss   04:18   0:00  \_ sshd: [accepted]
sshd      38413  0.0  0.1 115644  2628 ?        S    04:18   0:00  |   \_ sshd: [net]
root      38501  0.0  0.1 111304  4268 ?        Ss   04:18   0:00  \_ sshd: [accepted]
sshd      38503  0.0  0.1 115644  2628 ?        S    04:18   0:00      \_ sshd: [net]
root        967  1.1  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  4796 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      38400  0.0  0.0      0     0 ?        Z    04:17   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   704 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   776 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   576 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.1 400740  3080 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   38351  0.0  0.2 400460  5632 ?        S    04:17   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 224592  4748 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11416 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.1  4.8 247868 117536 ?       Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  5.3 262628 129480 ?       S    03:40   0:01  \_ spamd child
root       7260  0.0  4.8 247868 116808 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2836 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.5 387528 12960 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.3 412368 32272 ?        Ss   03:34   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.9 262228 21944 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1283  0.0  0.0 167452  1348 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.4 209216 11704 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   764 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1444 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.6 1457548 210064 ?      Sl   03:34   0:32 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8100 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12832   384 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   296 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12864   352 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9147  0.1  0.8 277904 20976 ?        S    03:42   0:02  \_ /usr/sbin/httpd -k start
nobody    21298  0.1  0.8 277712 20360 ?        S    03:57   0:01  \_ /usr/sbin/httpd -k start
nobody    21299  0.1  0.8 278004 21228 ?        S    03:57   0:01  \_ /usr/sbin/httpd -k start
nobody    28052  0.1  0.8 277600 20176 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29294  0.1  0.8 277620 20520 ?        S    04:06   0:01  \_ /usr/sbin/httpd -k start
nobody    29800  0.1  0.8 277584 20172 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    34178  0.1  0.8 277584 19728 ?        S    04:12   0:00  \_ /usr/sbin/httpd -k start
nobody    34179  0.1  0.8 277924 19984 ?        S    04:12   0:00  \_ /usr/sbin/httpd -k start
nobody    35196  0.1  0.8 277584 19400 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    35197  0.1  0.7 277520 18900 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    35669  0.1  0.8 277908 19696 ?        S    04:14   0:00  \_ /usr/sbin/httpd -k start
nobody    36163  0.1  0.7 277908 19360 ?        S    04:15   0:00  \_ /usr/sbin/httpd -k start
nobody    36903  0.1  0.7 277904 19284 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    36938  0.1  0.7 277520 19164 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
cloudw    38500  0.0  0.5 285108 12944 ?        R    04:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    36939  0.1  0.7 277912 19228 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    36947  0.1  0.7 277788 18740 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    36948  0.1  0.7 277520 18784 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    37731  0.1  0.7 277520 18548 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    37787  0.1  0.7 277584 18976 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    38385  0.0  0.7 277764 18520 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    38405  0.0  0.7 277504 17948 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
nobody    38406  0.0  0.6 277104 16636 ?        S    04:17   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.0  0.4 181364  9912 ?        Ss   03:34   0:02 lfd - sleeping
oysipao+  23203  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152   424 ?        S    04:00   0:00  \_ [kworker]
root      24071  0.0  0.0 123364   604 ?        Ss   04:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 2626  Threads: 3  Questions: 166795  Slow queries: 0  Opens: 1950  Flush tables: 1  Open tables: 1765  Queries per second avg: 63.516
*************************** 1. row ***************************
     Id: 2813
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 2817
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2819
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 148.113.130.12 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 74.7.241.171 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 40.124.173.94 TIME_WAIT
     11 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:18:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 43 minutes 40 seconds
   Server load: 0.06 0.31 0.39
   Total accesses: 12506 - Total Traffic: 352.2 MB - Total Duration: 6553628
   CPU Usage: u9.22 s3.61 cu160.76 cs132.14 - 11.7% CPU load
   4.77 requests/sec - 137.7 kB/second - 28.8 kB/request - 524.039 ms/request
   21 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

CKKWKKKK_WK.KK.KRKKK.KKKK.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU    SS  Req  Dur   Conn  Child  Slot     Client      Protocol             VHost                                         Request
   0-0  29294 2/180/480 C 4.65  5    81  227540 19.9  5.03  12.12 102.88.115.109  http/1.1 robocalls.cloudsms.com.ng:443 GET /users/plans HTTP/1.1
   1-0  36903 1/34/647  K 0.82  3    342 313822 33.9  0.91  15.01 192.178.4.100   http/1.1 team.cloudware.ng:443         GET /?l=4235909859 HTTP/1.1
   2-0  37731 2/18/586  K 0.22  1    342 301762 64.1  0.32  15.59 192.178.4.97    http/1.1 team.cloudware.ng:443         GET /?l=3729523568 HTTP/1.1
   3-0  36938 1/27/591  W 0.56  0    0   282787 35.3  0.67  17.50 192.178.4.102   http/1.1 team.cloudware.ng:443         GET /?l=136041874 HTTP/1.1
   4-0  36939 6/29/510  K 0.74  1    342 278134 186.5 0.81  16.55 192.178.4.101   http/1.1 team.cloudware.ng:443         GET /?l=2135551077 HTTP/1.1
   5-0  37787 3/16/406  K 0.39  0    348 184265 95.1  0.47  12.35 192.178.4.104   http/1.1 team.cloudware.ng:443         GET /?l=3706267207 HTTP/1.1
   6-0  38385 1/3/495   K 0.00  1    409 240812 36.0  0.04  12.18 192.178.4.97    http/1.1 team.cloudware.ng:443         GET /?l=3001390394 HTTP/1.1
   7-0  38405 1/1/495   K 0.00  0    349 269310 35.8  0.03  13.38 192.178.4.105   http/1.1 team.cloudware.ng:443         GET /?l=3648934481 HTTP/1.1
   8-0  38406 0/1/486   _ 0.00  0    0   259935 0.0   0.02  14.14 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   9-0  35196 0/72/489  W 1.87  0    0   266506 0.0   2.07  14.18 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   10-0 34178 8/90/535  K 2.00  4    254 277559 247.6 2.32  15.13 192.178.4.98    http/1.1 team.cloudware.ng:443         GET /?l=1319172514 HTTP/1.1
   11-0 -     0/0/569   . 0.00  109  0   289952 0.0   0.00  15.50 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   12-0 34179 1/83/422  K 1.78  1    346 230722 35.2  2.08  10.79 66.249.79.135   http/1.1 team.cloudware.ng:443         GET /?l=2140432815 HTTP/1.1
   13-0 35197 1/50/351  K 1.33  2    336 196834 34.5  1.46  11.03 192.178.4.103   http/1.1 team.cloudware.ng:443         GET /?l=405831661 HTTP/1.1
   14-0 -     0/0/342   . 0.00  105  0   276842 0.0   0.00  12.24 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   15-0 29800 2/153/375 K 4.17  2    399 193377 66.0  3.81  9.21  192.178.4.98    http/1.1 team.cloudware.ng:443         GET /?l=1133704803 HTTP/1.1
   16-0 21298 0/279/456 R 6.90  9    398 203599 0.0   8.74  11.90 102.88.115.109  http/1.1
   17-0 21299 3/286/412 K 7.02  2    265 202555 97.5  7.82  10.93 192.178.4.101   http/1.1 team.cloudware.ng:443         GET /?l=2352113564 HTTP/1.1
   18-0 28052 1/168/330 K 3.92  1    349 164428 34.8  5.00  9.63  192.178.4.96    http/1.1 team.cloudware.ng:443         GET /?l=3526619812 HTTP/1.1
   19-0 9147  2/513/548 K 12.56 4    346 289054 64.0  13.87 14.73 192.178.4.105   http/1.1 team.cloudware.ng:443         GET /?l=1137638913 HTTP/1.1
   20-0 -     0/0/203   . 0.00  108  0   106792 0.0   0.00  5.51  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   21-0 35669 1/56/221  K 1.26  3    343 116143 34.0  1.42  8.29  192.178.4.103   http/1.1 team.cloudware.ng:443         GET /?l=2072014663 HTTP/1.1
   22-0 36163 5/43/287  K 1.12  4    272 158789 158.0 1.35  9.59  192.178.4.105   http/1.1 team.cloudware.ng:443         GET /?l=3051205595 HTTP/1.1
   23-0 36947 5/32/191  K 0.84  0    350 111013 158.9 0.91  5.23  192.178.4.99    http/1.1 team.cloudware.ng:443         GET /?l=4218943911 HTTP/1.1
   24-0 36948 7/38/319  K 0.83  0    8   173633 36.8  0.91  8.96  147.135.212.151 http/1.1 nigeriadecide.org:443         GET /polling_unit_category.php?state=Kaduna&lga=Kachia&ward=Ank
   25-0 -     0/0/42    . 0.00  102  0   17915  0.0   0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 -     0/0/30    . 0.00  619  0   13761  0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00  1983 0   3360   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/184   . 0.00  1277 0   93070  0.0   0.00  4.64  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00  2027 0   9      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00  2026 0   13     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00  2006 0   2022   0.0   0.00  0.09  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00  1982 0   1566   0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00  1997 0   1895   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00  2008 0   57     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00  1948 0   11094  0.0   0.00  0.65  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00  1985 0   823    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00  1641 0   38300  0.0   0.00  1.90  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00  1943 0   6642   0.0   0.00  0.35  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00  2002 0   40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00  2005 4   40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00  2023 0   34     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00  1976 0   4106   0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00  1977 0   2657   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00  1978 0   3864   0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00  1956 0   3619   0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00  2024 0   113    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00  1987 0   38     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00  2003 0   18     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00  1946 0   9315   0.0   0.00  0.49  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/335   . 0.00  713  0   176390 0.0   0.00  9.65  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/2     . 0.00  2022 0   23     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00  2021 0   19     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00  1873 0   31192  0.0   0.00  3.71  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00  2017 0   52     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00  2000 0   73     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00  2018 0   54     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00  2016 0   40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00  1643 0   43953  0.0   0.00  2.25  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00  1947 0   3369   0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00  2020 0   51     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00  2009 0   36     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00  1980 0   1263   0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00  2013 0   35     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00  1974 0   8103   0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00  2019 0   46     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00  1993 0   53     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00  2010 0   145    0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00  1979 0   753    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   69-0 -     0/0/224   . 0.00  1100 0   141502 0.0   0.00  5.80  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   70-0 -     0/0/2     . 0.00  2012 0   52     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00  1944 0   9108   0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00  1467 0   86335  0.0   0.00  5.84  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00  1876 0   14353  0.0   0.00  0.77  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00  1815 0   23982  0.0   0.00  1.17  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   75-0 -     0/0/264   . 0.00  954  0   150949 0.0   0.00  7.38  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   76-0 -     0/0/2     . 0.00  2015 0   44     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00  2007 0   58     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00  1986 0   1963   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00  2011 0   34     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00  1814 0   25894  0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00  1988 0   672    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00  1971 0   2458   0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1243
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...31)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 9116
   total entries replaced since starting: 0
   total entries expired since starting: 7867
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 7 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit