403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.04.36.txt
 ## swap threshold exceeded
## server overview
2025-11-21.04.36 load[1] mem[66/59] mysql[1/25] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1460         198           8         705         710
Swap:          1999        1471         528
 04:36:02 up  1:01,  0 users,  load average: 1.07, 0.94, 0.77
## system overview
top - 04:36:02 up  1:01,  0 users,  load average: 1.07, 0.94, 0.77
Tasks: 206 total,   3 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 48.5 us, 21.2 sy,  0.0 ni, 24.2 id,  6.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   199604 free,  1495392 used,   725304 buff/cache
KiB Swap:  2047996 total,   541420 free,  1506576 used.   726620 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1463000 202124   4172 S  52.9  8.4   0:47.50 /usr/sbin+
 52885 nigeria   20   0  404052  16144  10384 S  17.6  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44276   3220   1464 S  11.8  0.1   0:05.55 /usr/lib/+
  1003 root      20   0  224592   2932   2616 S   5.9  0.1   0:01.23 /usr/sbin+
 52882 pactpay   20   0  480124  17308  11572 S   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:03.65 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.62 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:01.63 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.82 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   6596   6376 S   0.0  0.3   0:02.65 /usr/lib/+
   385 root      20   0   45356     32     28 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    208     96 S   0.0  0.0   0:00.46 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     72     48 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   2992    760 S   0.0  0.1   0:00.14 queueproc+
   474 dbus      20   0   58748   1412    692 S   0.0  0.1   0:01.96 /usr/bin/+
   478 nscd      20   0  926904   1332    764 S   0.0  0.1   0:03.05 /usr/sbin+
   483 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
   505 polkitd   20   0  610540    884    596 S   0.0  0.0   0:00.53 /usr/lib/+
   507 root      20   0   24696   1104    796 S   0.0  0.0   0:00.88 /usr/lib/+
   509 root      20   0   21540    344    260 S   0.0  0.0   0:00.08 /usr/sbin+
   514 root      20   0   52852    280    208 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    428    296 S   0.0  0.0   0:00.11 /usr/sbin+
   580 root      20   0  108296     24     20 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89112    740    380 S   0.0  0.0   0:00.09 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.50 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1902216 513316    552 S   0.0 21.2   0:38.39 /usr/loca+
   942 named     20   0  990260  19540   1936 S   0.0  0.8   0:02.71 /usr/sbin+
   949 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0   11540     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   953 root      20   0   51508    464    300 S   0.0  0.0   0:00.08 /usr/sbin+
   954 root      20   0 1277056   2128     16 S   0.0  0.1   0:21.87 /usr/bin/+
   955 telegraf  20   0 5654048  34384   3928 S   0.0  1.4   0:02.37 /usr/loca+
   956 root      20   0  445028    592    484 S   0.0  0.0   0:00.15 sw-engine+
   960 root      20   0  396248    376    296 S   0.0  0.0   0:00.20 php-fpm: +
   963 systuser  20   0  114016   8672   2576 S   0.0  0.4   0:01.04 /usr/loca+
   964 root      20   0  153404    240    160 S   0.0  0.0   0:00.07 pure-ftpd+
   965 cpanelc+  20   0   10076   3052   2312 R   0.0  0.1   0:02.96 /usr/loca+
   966 root      20   0  111304    368    264 S   0.0  0.0   0:00.67 /usr/sbin+
   967 root      20   0 1276356   6236      0 S   0.0  0.3   0:30.56 /usr/bin/+
   970 systuser  20   0   11348      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   978 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.08 /usr/bin/+
   979 root      20   0  261028   6408   2144 S   0.0  0.3   0:00.65 cpsrvd (S+
   980 root      20   0  572372    892    312 S   0.0  0.0   0:00.42 /usr/bin/+
   984 root      20   0  389508    488    284 S   0.0  0.0   0:00.19 php-fpm: +
   998 root      20   0  388892    444    352 S   0.0  0.0   0:00.25 php-fpm: +
  1001 root      20   0  400740   2396    600 S   0.0  0.1   0:00.62 php-fpm: +
  1002 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.00 /usr/loca+
  1010 root      20   0  439788    336    244 S   0.0  0.0   0:00.24 php-fpm: +
  1097 dovenull  20   0   46912    940    676 S   0.0  0.0   0:00.06 dovecot/p+
  1098 dovenull  20   0   47324   2780   1848 S   0.0  0.1   0:00.07 dovecot/i+
  1099 dovecot   20   0   10320    304    200 S   0.0  0.0   0:00.01 dovecot/a+
  1100 root      20   0   10452    556    404 S   0.0  0.0   0:00.05 dovecot/l+
  1101 dovenull  20   0   47064    884    604 S   0.0  0.0   0:00.10 dovecot/p+
  1102 dovenull  20   0   47192   2372   1720 S   0.0  0.1   0:00.07 dovecot/i+
  1106 root      20   0   24564   2032    492 S   0.0  0.1   0:00.04 dovecot/c+
  1107 dovecot   20   0   13568    524    380 S   0.0  0.0   0:00.01 dovecot/s+
  1135 root      20   0  247868   2744    732 S   0.0  0.1   0:03.28 /usr/loca+
  1157 dovecot   20   0   41152   1476   1020 S   0.0  0.1   0:00.12 dovecot/a+
  1197 systuser  20   0  157700   2884    960 S   0.0  0.1   0:00.04 SonarPush+
  1199 wp-tool+  20   0  387528   2472   1172 S   0.0  0.1   0:00.12 /usr/bin/+
  1200 wp-tool+  20   0  412368  12352   1188 S   0.0  0.5   0:01.44 /usr/bin/+
  1281 root      20   0  183900   6448   3216 S   0.0  0.3   0:00.28 cpdavd - +
  1283 root      20   0  167452   1204    656 S   0.0  0.0   0:00.10 dnsadmin +
  1285 root      20   0  209216   7712   1864 S   0.0  0.3   0:00.63 tailwatchd
  1709 root      20   0  299272    392    232 S   0.0  0.0   0:00.10 php-fpm: +
  1717 root      38  18  130416   1344    680 S   0.0  0.1   0:00.01 cpanellog+
  1930 root      20   0  267052   5536    532 S   0.0  0.2   0:00.47 /usr/sbin+
  1931 root      20   0   12836    244    112 S   0.0  0.0   0:00.40 /usr/loca+
  1932 root      20   0   12732     68      0 S   0.0  0.0   0:00.34 /usr/loca+
  1933 root      20   0   12872    416    204 S   0.0  0.0   0:00.39 /usr/loca+
  1934 root      20   0   53340     24     24 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181464   6864   1104 S   0.0  0.3   0:03.46 lfd - sle+
  7259 root      20   0  262628  90432   2224 S   0.0  3.7   0:01.63 spamd chi+
  7260 root      20   0  247868   1384    428 S   0.0  0.1   0:00.00 spamd chi+
 23203 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.05 [kworker]
 28483 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 33642 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34338 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 38385 nobody    20   0  277908  11604   4348 S   0.0  0.5   0:01.68 /usr/sbin+
 39283 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40244 nobody    20   0  277716  13084   4432 S   0.0  0.5   0:01.44 /usr/sbin+
 40901 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 42287 nobody    20   0  277724  12884   4472 S   0.0  0.5   0:01.36 /usr/sbin+
 42300 nobody    20   0  277752  12488   4508 S   0.0  0.5   0:01.30 /usr/sbin+
 43611 nobody    20   0  277608  12304   4524 S   0.0  0.5   0:00.89 /usr/sbin+
 46538 nobody    20   0  277520  18580   4476 S   0.0  0.8   0:00.95 /usr/sbin+
 46744 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 47419 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47768 worencom  20   0   38472   3044   2208 S   0.0  0.1   0:00.00 dovecot/i+
 47913 nobody    20   0  277584  18868   4436 S   0.0  0.8   0:00.64 /usr/sbin+
 48308 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48549 nobody    20   0  277904  18772   4368 S   0.0  0.8   0:00.54 /usr/sbin+
 48761 nobody    20   0  277912  19052   4368 S   0.0  0.8   0:00.48 /usr/sbin+
 49784 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51170 nobody    20   0  277576  17856   4020 S   0.0  0.7   0:00.19 /usr/sbin+
 51246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51802 nobody    20   0  277908  17704   3872 S   0.0  0.7   0:00.11 /usr/sbin+
 51803 nobody    20   0  277920  18120   4012 S   0.0  0.7   0:00.10 /usr/sbin+
 52224 nobody    20   0  277908  17656   3848 S   0.0  0.7   0:00.07 /usr/sbin+
 52235 nobody    20   0  277852  17620   3760 S   0.0  0.7   0:00.12 /usr/sbin+
 52251 nobody    20   0  277520  17072   3360 S   0.0  0.7   0:00.13 /usr/sbin+
 52252 nobody    20   0  277520  16960   3332 S   0.0  0.7   0:00.09 /usr/sbin+
 52253 nobody    20   0  277520  17424   3800 S   0.0  0.7   0:00.06 /usr/sbin+
 52519 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 52520 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 52581 nobody    20   0  277520  17404   3724 S   0.0  0.7   0:00.01 /usr/sbin+
 52588 nobody    20   0  277908  17432   3692 S   0.0  0.7   0:00.04 /usr/sbin+
 52589 nobody    20   0  277520  17304   3692 S   0.0  0.7   0:00.02 /usr/sbin+
 52651 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 52656 nigeria   20   0  400460   5000   2208 S   0.0  0.2   0:00.00 php-fpm: +
 52714 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 52756 mailnull  20   0   89280   2104   1144 S   0.0  0.1   0:00.00 /usr/sbin+
 52761 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 52762 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 52764 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 52768 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 52778 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 52796 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 52798 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 52809 cloudw    20   0  353712  16232  10604 S   0.0  0.7   0:00.01 /opt/cpan+
 52811 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52812 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52813 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52814 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52815 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52816 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52817 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52818 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52819 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52820 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52821 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52823 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 52825 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52827 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 52828 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 52829 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 52848 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52849 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52851 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52852 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52854 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52855 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 52856 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52857 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52858 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52859 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52860 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 52862 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52863 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 52870 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 52876 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 52883 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 52884 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:03  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.5  0.0      0     0 ?        S    03:34   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root      28483  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:4]
root      33642  0.0  0.0      0     0 ?        S    04:12   0:00  \_ [kworker/0:1]
root      34338  0.0  0.0      0     0 ?        S    04:13   0:00  \_ [kworker/1:2]
root      39283  0.0  0.0      0     0 ?        S    04:19   0:00  \_ [kworker/0:5]
root      40901  0.0  0.0      0     0 ?        S    04:21   0:00  \_ [kworker/1:1]
root      46744  0.0  0.0      0     0 ?        S    04:28   0:00  \_ [kworker/1:3]
root      47419  0.0  0.0      0     0 ?        S    04:29   0:00  \_ [kworker/0:0]
root      48308  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/u200:0]
root      49784  0.0  0.0      0     0 ?        S    04:32   0:00  \_ [kworker/0:2]
root      51246  0.0  0.0      0     0 ?        S    04:34   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44276  3220 ?        Ss   03:34   0:05 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  39500  6596 ?        Ss   03:34   0:02 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356    32 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   208 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780    72 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.1 224144  2992 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1412 ?        Ss   03:34   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1332 ?        Ssl  03:34   0:03 /usr/sbin/nscd
rpc         483  0.0  0.0  69256     4 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   884 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1104 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   344 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   280 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    16 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   428 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      52811  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52827  0.0  0.0 113284  1208 ?        Ss   04:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      52828  0.0  0.0 108052   356 ?        S    04:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      52829  0.0  0.0 113288  1516 ?        S    04:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      52892  0.0  0.0 153840  2096 ?        R    04:36   0:00  |               \_ ps auxf
root      52812  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52854  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      52813  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52851  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      52814  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52858  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      52815  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52849  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      52816  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52862  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      52817  0.0  0.0 183044  2152 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52859  0.0  0.0  20164   808 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      52818  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52848  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      52819  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52856  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      52820  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52857  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      52821  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52852  0.0  0.0  20164   804 ?        Ss   04:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      52823  0.0  0.0 183044  2148 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52855  0.0  0.0  20164   968 ?        Ss   04:36   0:00  |   \_ jailshell (pactpay) [52876] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52876  0.0  0.0  20164   264 ?        S    04:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52882  0.0  0.7 480124 17308 ?        S    04:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      52825  0.0  0.0 183044  2144 ?        S    04:36   0:00  \_ /usr/sbin/CROND -n
root      52860  0.0  0.0  20164   964 ?        Ss   04:36   0:00      \_ jailshell (nigeria) [52884] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52884  0.0  0.0  20164   256 ?        S    04:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52885  0.0  0.6 404052 16144 ?        R    04:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    24 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704     0 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.0  89112   740 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  52756  0.0  0.0  89280  2104 ?        S    04:35   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  1.0 21.2 1902216 513316 ?      Ssl  03:34   0:38 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  0.8 990260 19540 ?        Ssl  03:34   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608    60 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    44 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   464 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912   940 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2780 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   304 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   556 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064   884 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.0  47192  2372 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24564  2032 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   524 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41152  1476 ?        S    03:34   0:00  \_ dovecot/auth
worencom  47768  0.0  0.1  38472  3044 ?        S    04:29   0:00  \_ dovecot/imap
root        954  0.5  0.0 1277056 2128 ?        Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.4 5654048 34384 ?       SLsl 03:34   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.0 445028   592 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  52714  0.0  0.0 445028   312 ?        S    04:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   376 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.3 114016  8672 ?        Ssl  03:34   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   240 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1  10076  3052 ?        Ss   03:34   0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   368 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      52519  0.0  0.2 157100  5076 ?        Ss   04:35   0:00  \_ sshd: unknown [priv]
sshd      52520  0.0  0.1 115644  2632 ?        S    04:35   0:00  |   \_ sshd: unknown [net]
root      52651  0.0  0.1 111304  4268 ?        Ss   04:35   0:00  \_ sshd: [accepted]
root      52761  0.3  0.2 162436  5836 ?        Ss   04:35   0:00  \_ sshd: root [priv]
sshd      52762  0.0  0.1 115644  2632 ?        S    04:35   0:00  |   \_ sshd: root [net]
root      52764  0.3  0.2 162436  5832 ?        Ss   04:35   0:00  \_ sshd: root [priv]
sshd      52768  0.0  0.1 115644  2628 ?        S    04:35   0:00  |   \_ sshd: root [net]
root      52796  0.0  0.2 157100  5080 ?        Ss   04:36   0:00  \_ sshd: unknown [priv]
sshd      52798  0.0  0.1 115644  2632 ?        S    04:36   0:00  |   \_ sshd: unknown [net]
root      52863  0.0  0.1 111304  4272 ?        Ss   04:36   0:00  \_ sshd: [accepted]
sshd      52870  0.0  0.1 115644  2628 ?        S    04:36   0:00      \_ sshd: [net]
root        967  0.8  0.2 1276356 6236 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348     0 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400    32 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.2 261028  6408 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      52778  0.0  0.0      0     0 ?        Z    04:35   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   892 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   488 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   444 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.0 400740  2396 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   52656  0.0  0.2 400460  5000 ?        S    04:35   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524    68 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 224592  2932 ?        Ssl  03:34   0:01 /usr/sbin/rsyslogd -n
root       1010  0.0  0.0 439788   336 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.1 247868  2744 ?        Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  3.7 262628 90432 ?        S    03:40   0:01  \_ spamd child
root       7260  0.0  0.0 247868  1384 ?        S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2884 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.1 387528  2472 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  0.5 412368 12352 ?        Ss   03:34   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.2 183900  6448 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1204 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.3 209216  7712 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   392 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1344 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.3 1463000 202124 ?      Sl   03:34   0:47 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.2 267052  5536 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12836   244 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732    68 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12872   416 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340    24 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    38385  0.1  0.4 277908 11604 ?        S    04:17   0:01  \_ /usr/sbin/httpd -k start
nobody    40244  0.1  0.5 277716 13084 ?        S    04:20   0:01  \_ /usr/sbin/httpd -k start
nobody    42287  0.1  0.5 277724 12884 ?        S    04:22   0:01  \_ /usr/sbin/httpd -k start
nobody    42300  0.1  0.5 277752 12488 ?        S    04:22   0:01  \_ /usr/sbin/httpd -k start
nobody    43611  0.1  0.5 277608 12304 ?        S    04:24   0:00  \_ /usr/sbin/httpd -k start
nobody    46538  0.1  0.7 277520 18580 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    47913  0.1  0.7 277584 18868 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    48549  0.1  0.7 277904 18772 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    48761  0.1  0.7 277912 19052 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    51170  0.1  0.7 277576 17856 ?        S    04:33   0:00  \_ /usr/sbin/httpd -k start
nobody    51802  0.1  0.7 277908 17704 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
nobody    51803  0.1  0.7 277920 18120 ?        S    04:34   0:00  \_ /usr/sbin/httpd -k start
nobody    52224  0.1  0.7 277908 17656 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    52235  0.2  0.7 277852 17620 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    52251  0.2  0.7 277520 17072 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    52252  0.1  0.7 277520 16960 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    52253  0.1  0.7 277520 17424 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    52581  0.0  0.7 277520 17404 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    52588  0.1  0.7 277908 17432 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    52809  1.0  0.6 353712 16232 ?        S    04:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    52589  0.0  0.7 277520 17304 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.0  0.2 181464  6864 ?        Ss   03:34   0:03 lfd - sleeping
oysipao+  23203  0.0  0.0   3148     8 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152    36 ?        S    04:00   0:00  \_ [kworker]
## mysql stats
Uptime: 3706  Threads: 3  Questions: 236936  Slow queries: 0  Opens: 3390  Flush tables: 1  Open tables: 1981  Queries per second avg: 63.933
*************************** 1. row ***************************
     Id: 4192
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 4194
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: query end
   Info: SELECT * FROM `26` WHERE `phone`='2348038569404' LIMIT 1
*************************** 3. row ***************************
     Id: 4196
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.210.138 TIME_WAIT
      1 74.7.244.61 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 105.113.75.63 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.102 TIME_WAIT
      7 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:36:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 1 minute 40 seconds
   Server load: 1.07 0.94 0.77
   Total accesses: 18006 - Total Traffic: 490.5 MB - Total Duration: 9298290
   CPU Usage: u7.44 s3.26 cu232.75 cs193.67 - 11.8% CPU load
   4.87 requests/sec - 135.7 kB/second - 27.9 kB/request - 516.4 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

.KKKKKKKKKKKKKKKKK.....KW_......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol         VHost                                      Request
   0-0  -     0/0/777   . 0.00 17   0   373478 0.0   0.00  19.23 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   1-0  42287 1/242/931 K 6.76 1    345 460536 35.9  6.47  22.47 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=1057768895 HTTP/1.1
   2-0  42300 1/222/870 K 5.43 1    353 462422 35.2  5.75  23.15 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=638317408 HTTP/1.1
   3-0  47913 1/134/886 K 2.65 0    407 431462 34.7  2.91  23.96 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=2058704048 HTTP/1.1
   4-0  40244 1/285/817 K 6.21 0    8   426587 55.2  6.88  24.01 66.249.64.224 http/1.1 cloudware.ng:443       GET /wp-content/uploads/stm_uploads/skin-custom.css?ver=1324991
   5-0  52581 1/6/655   K 0.04 0    1   300958 11.9  0.06  17.99 66.249.64.225 http/1.1 cloudware.ng:443       GET /wp-content/themes/consulting/assets/css/font-awesome.min.c
   6-0  38385 1/321/813 K 6.94 4    261 388448 33.3  9.19  21.32 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3094941930 HTTP/1.1
   7-0  52588 2/8/792   K 0.15 0    398 435485 65.2  0.21  20.86 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=2436500624 HTTP/1.1
   8-0  51170 1/33/809  K 0.78 0    346 433327 35.5  1.23  23.13 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2503553717 HTTP/1.1
   9-0  48549 4/106/755 K 2.21 1    351 406219 128.1 4.23  22.45 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=893526178 HTTP/1.1
   10-0 43611 1/167/727 K 3.77 1    32  377964 5.8   4.04  19.65 66.249.70.7   http/1.1 test.cloudware.ng:443  GET /?1594403975?goodscode=1592315086 HTTP/1.1
   11-0 52589 1/5/849   K 0.06 0    0   437140 5.3   0.09  22.14 66.249.64.224 http/1.1 cloudware.ng:443       GET /wp-content/plugins/recent-tweets-widget/tp_twitter_plugin.
   12-0 52224 2/12/596  K 0.24 2    277 305882 66.7  0.29  14.45 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=344644347 HTTP/1.1
   13-0 48761 4/95/593  K 1.93 0    359 300234 129.2 2.67  16.66 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=3054091271 HTTP/1.1
   14-0 52235 1/13/510  K 0.25 3    300 372694 37.1  0.65  16.68 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=394936102 HTTP/1.1
   15-0 46538 1/161/684 K 4.11 1    262 349234 35.6  4.17  16.91 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=211436
   16-0 51802 1/19/653  K 0.43 2    531 303401 226.8 0.72  16.92 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /vendor/doctrine/orm/lib/Doctrine/ORM/Query/Exec/ HTTP/1.1
   17-0 51803 1/21/640  K 0.50 1    342 296187 34.1  0.71  16.11 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=2628441028 HTTP/1.1
   18-0 -     0/0/394   . 0.00 15   0   193707 0.0   0.00  11.13 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/851   . 0.00 42   0   422577 0.0   0.00  21.79 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/390   . 0.00 27   0   207266 0.0   0.00  10.22 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/247   . 0.00 16   0   125276 0.0   0.00  9.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/341   . 0.00 18   0   185984 0.0   0.00  11.30 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 52251 9/21/249  K 0.58 0    343 142576 277.9 0.61  6.78  192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=3478304904 HTTP/1.1
   24-0 52252 0/14/405  W 0.36 0    0   216397 0.0   0.42  11.16 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   25-0 52253 0/12/54   _ 0.22 0    0   23301  0.0   0.27  1.15  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   26-0 -     0/0/30    . 0.00 1699 0   13761  0.0   0.00  0.90  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 3063 0   3360   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/184   . 0.00 2357 0   93070  0.0   0.00  4.64  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00 3107 0   9      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 3106 0   13     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 3086 0   2022   0.0   0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 3062 0   1566   0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 3077 0   1895   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 3088 0   57     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00 3028 0   11094  0.0   0.00  0.65  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00 3065 0   823    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00 2721 0   38300  0.0   0.00  1.90  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00 3023 0   6642   0.0   0.00  0.35  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 3082 0   40     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 3085 4   40     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 3103 0   34     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00 3056 0   4106   0.0   0.00  0.19  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00 3057 0   2657   0.0   0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00 3058 0   3864   0.0   0.00  0.22  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00 3036 0   3619   0.0   0.00  0.23  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00 3104 0   113    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 3067 0   38     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 3083 0   18     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00 3026 0   9315   0.0   0.00  0.49  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/335   . 0.00 1793 0   176390 0.0   0.00  9.65  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/2     . 0.00 3102 0   23     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 3101 0   19     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00 2953 0   31192  0.0   0.00  3.71  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 3097 0   52     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 3080 0   73     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 3098 0   54     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 3096 0   40     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00 2723 0   43953  0.0   0.00  2.25  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00 3027 0   3369   0.0   0.00  0.22  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00 3100 0   51     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 3089 0   36     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 3060 0   1263   0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 3093 0   35     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00 3054 0   8103   0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 3099 0   46     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 3073 0   53     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 3090 0   145    0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00 3059 0   753    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/224   . 0.00 2180 0   141502 0.0   0.00  5.80  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2     . 0.00 3092 0   52     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00 3024 0   9108   0.0   0.00  0.43  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00 2547 0   86335  0.0   0.00  5.84  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00 2956 0   14353  0.0   0.00  0.77  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00 2895 0   23982  0.0   0.00  1.17  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/264   . 0.00 2034 0   150949 0.0   0.00  7.38  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/2     . 0.00 3095 0   44     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 3087 0   58     0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 3066 0   1963   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 3091 0   34     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00 2894 0   25894  0.0   0.00  1.23  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00 3068 0   672    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00 3051 0   2458   0.0   0.00  0.14  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1226
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...46)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 13007
   total entries replaced since starting: 0
   total entries expired since starting: 11772
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 26 miss
   total removes since starting: 9 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit