403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-22.02.48 load[0] mem[55/60] mysql[1/8] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1252         176          51         935         898
Swap:          1999        1313         686
 02:48:01 up  1:51,  0 users,  load average: 0.18, 0.20, 0.23
## system overview
top - 02:48:01 up  1:51,  0 users,  load average: 0.18, 0.20, 0.23
Tasks: 197 total,   2 running, 193 sleeping,   0 stopped,   2 zombie
%Cpu(s): 46.9 us, 43.8 sy,  0.0 ni,  0.0 id,  6.2 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   159108 free,  1300484 used,   960708 buff/cache
KiB Swap:  2047996 total,   703228 free,  1344768 used.   901884 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 228988   2964 S  20.0  9.5   1:17.82 /usr/sbin+
     1 root      20   0   44396   3308   1472 S  13.3  0.1   0:09.22 /usr/lib/+
 80086 pactpay   20   0  480124  16776  11080 S  13.3  0.7   0:00.02 /opt/cpan+
  2021 root      20   0  181780  10596   1120 S   6.7  0.4   0:05.96 lfd - sle+
 80093 nigeria   20   0  404052  16140  10380 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.29 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:06.29 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.93 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.73 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.96 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.85 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   5632   5328 S   0.0  0.2   0:03.61 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    488    360 S   0.0  0.0   0:00.53 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.15 /usr/sbin+
   485 root      20   0   24712   1168    808 S   0.0  0.0   0:01.61 /usr/lib/+
   486 root      20   0  152780    124     84 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5552    828 S   0.0  0.2   0:00.14 queueproc+
   488 root      20   0   52852    260    164 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    900    468 S   0.0  0.0   0:00.99 /usr/lib/+
   498 dbus      20   0   58748   1352    612 S   0.0  0.1   0:03.72 /usr/bin/+
   506 rpc       20   0   69256    148     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1384    684 S   0.0  0.1   0:04.91 /usr/sbin+
   554 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.19 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3900    820 S   0.0  0.2   0:00.22 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.19 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    748    164 S   0.0  0.0   0:00.66 /usr/bin/+
   920 root      20   0  232784   4980   4380 S   0.0  0.2   0:01.75 /usr/sbin+
   926 root      20   0 1689392 324564    232 S   0.0 13.4   0:13.50 /usr/loca+
   927 named     20   0 1054792  34616   2116 S   0.0  1.4   0:03.45 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.14 /usr/bin/+
   931 root      20   0  389508    572    364 S   0.0  0.0   0:00.23 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.32 sw-engine+
   939 root      20   0  439788  11380  11048 S   0.0  0.5   0:00.27 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.01 /usr/loca+
   943 root      20   0  388892    596    392 S   0.0  0.0   0:00.22 php-fpm: +
   944 cpanelc+  20   0   10476   3276   2324 S   0.0  0.1   0:05.27 /usr/loca+
   946 systuser  20   0  114016  15832   2700 S   0.0  0.7   0:01.74 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    504    328 S   0.0  0.0   0:00.24 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.70 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.12 /usr/sbin+
   962 root      20   0  261024   6468   1632 S   0.0  0.3   0:00.93 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   2648    644 S   0.0  0.1   0:00.77 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.13 pure-ftpd+
   974 root      20   0 1277312  10444     40 S   0.0  0.4   0:28.01 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.47 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  36556   5944 S   0.0  1.5   0:03.86 /usr/loca+
  1079 dovenull  20   0   47136   3292   2308 S   0.0  0.1   0:00.19 dovecot/p+
  1080 dovenull  20   0   47392   3540   2440 S   0.0  0.1   0:00.14 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.06 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.13 dovecot/l+
  1083 dovenull  20   0   47300   3356   2332 S   0.0  0.1   0:00.29 dovecot/p+
  1084 dovenull  20   0   47424   2896   1864 S   0.0  0.1   0:00.08 dovecot/i+
  1090 root      20   0   24396   2172    500 S   0.0  0.1   0:00.06 dovecot/c+
  1091 dovecot   20   0   13568    608    404 S   0.0  0.0   0:00.01 dovecot/s+
  1141 root      20   0  247944 117432    920 S   0.0  4.9   0:03.64 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.41 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.05 SonarPush+
  1177 wp-tool+  20   0  387528  13296   1668 S   0.0  0.5   0:00.14 /usr/bin/+
  1178 wp-tool+  20   0  412368  32156   1368 S   0.0  1.3   0:02.29 /usr/bin/+
  1261 root      20   0  262228  24420   6560 S   0.0  1.0   0:00.45 cpdavd - +
  1262 root      20   0  209248  11564   2100 S   0.0  0.5   0:00.99 tailwatchd
  1263 root      20   0  167452   2164    788 S   0.0  0.1   0:00.19 dnsadmin +
  1662 root      38  18  130416   1440    704 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    716    336 S   0.0  0.0   0:00.18 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.59 /usr/sbin+
  1929 root      20   0   12824    324    228 S   0.0  0.0   0:00.66 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.58 /usr/loca+
  1931 root      20   0   12860    332    228 S   0.0  0.0   0:00.62 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.12 [kworker]
  6717 root      20   0  249208 118848   1160 S   0.0  4.9   0:00.53 spamd chi+
  6719 root      20   0  247944 116768    288 S   0.0  4.8   0:00.00 spamd chi+
 27127 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 41828 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 57550 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 60213 nobody    20   0  277640  20796   4896 S   0.0  0.9   0:02.17 /usr/sbin+
 61773 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 63157 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 64549 nobody    20   0  277624  20764   4996 S   0.0  0.9   0:01.73 /usr/sbin+
 66402 nobody    20   0  277596  20736   5004 S   0.0  0.9   0:01.57 /usr/sbin+
 68512 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69356 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 69778 nobody    20   0  277592  20372   4776 S   0.0  0.8   0:01.07 /usr/sbin+
 70871 nobody    20   0  277560  20196   4616 S   0.0  0.8   0:00.98 /usr/sbin+
 70872 nobody    20   0  277932  20344   4652 S   0.0  0.8   0:01.01 /usr/sbin+
 71736 nobody    20   0  277584  20120   4556 S   0.0  0.8   0:00.82 /usr/sbin+
 72509 nobody    20   0  277520  19776   4464 S   0.0  0.8   0:00.79 /usr/sbin+
 72695 nobody    20   0  277584  19956   4488 S   0.0  0.8   0:00.66 /usr/sbin+
 73780 nobody    20   0  277908  19952   4428 S   0.0  0.8   0:00.55 /usr/sbin+
 74054 nobody    20   0  277908  19716   4232 S   0.0  0.8   0:00.51 /usr/sbin+
 74239 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 75550 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 75613 nobody    20   0  277916  19448   3936 S   0.0  0.8   0:00.38 /usr/sbin+
 76263 nobody    20   0  277520  19384   4088 S   0.0  0.8   0:00.33 /usr/sbin+
 78827 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79520 nobody    20   0  277528  18572   3308 S   0.0  0.8   0:00.12 /usr/sbin+
 79726 nigeria   20   0  400460   5200   2384 S   0.0  0.2   0:00.01 php-fpm: +
 79783 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 79879 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 79995 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 80014 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 80017 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 80018 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80019 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80020 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80021 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80022 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80023 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80024 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80025 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80026 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80027 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80029 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80030 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80031 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80033 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80035 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 80036 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 80037 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 80058 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80063 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 80064 root      20   0  113284   1200   1020 S   0.0  0.0   0:00.00 /bin/sh /+
 80065 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80066 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80067 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80068 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80069 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80071 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 80073 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80074 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 80075 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80076 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80077 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 80084 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 80088 root      20   0  129956   2324   1828 S   0.0  0.1   0:00.00 /usr/bin/+
 80091 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 80107 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 sh -c fin+
 80108 root      20   0  120704   1564    956 R   0.0  0.1   0:00.00 find /tmp+
 80109 root      20   0  112812   1012    860 S   0.0  0.0   0:00.00 grep -Ef +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        D<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      27127  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/u200:1]
root      41828  0.0  0.0      0     0 ?        S    01:55   0:00  \_ [kworker/0:4]
root      57550  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:3]
root      61773  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/1:0]
root      63157  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:3]
root      68512  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:2]
root      69356  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/1:1]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      74239  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:1]
root      75550  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/1:2]
root      78827  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44396  3308 ?        Ss   00:56   0:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  40244  5632 ?        Ss   00:56   0:03 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   488 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1168 ?        Ss   00:56   0:01 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   124 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5552 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   260 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   900 ?        Ssl  00:56   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1352 ?        Ss   00:56   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   148 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1384 ?        Ssl  00:56   0:04 /usr/sbin/nscd
root        554  0.0  0.0  24208     0 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      80018  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80035  0.0  0.0 113284  1212 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      80036  0.0  0.0 108052   356 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      80037  0.0  0.0 113288  1512 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      80112  0.0  0.0 153840  2096 ?        R    02:48   0:00  |               \_ ps auxf
root      80019  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80073  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      80020  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80075  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      80021  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80076  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      80022  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80065  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      80023  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80068  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      80024  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80069  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      80025  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80071  0.0  0.0  20164   812 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      80026  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80058  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      80027  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80067  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      80029  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80066  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      80030  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80064  0.0  0.0 113284  1200 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      80088  0.0  0.0 129956  2324 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      80107  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      80108  0.0  0.0 121364  2092 ?        D    02:48   0:00  |               \_ find /tmp/ -type f
root      80109  0.0  0.0 112812  1012 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      80031  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80074  0.0  0.0  20164   964 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [80084] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80084  0.0  0.0  20164   260 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80086  0.0  0.7 480124 17304 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      80033  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      80077  0.0  0.0  20164   964 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [80091] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80091  0.0  0.0  20164   256 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80093  0.0  0.6 404052 16140 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3900 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   748 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.2 232784  4980 ?        Ssl  00:56   0:01 /usr/sbin/rsyslogd -n
root        926  0.2 13.4 1689392 324564 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.4 1054792 34616 ?       Ssl  00:56   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   572 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  79879  0.0  0.0 445028   320 ?        S    02:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11380 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   596 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10476  3276 ?        Ss   00:56   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15832 ?        Ssl  00:56   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   504 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3292 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3540 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3356 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2896 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24396  2172 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   608 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
root      79783  0.0  0.1  41052  2728 ?        S    02:47   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261024  6468 ?        Ss   00:56   0:00 cpsrvd (SSL) - waiting for connections                   
root      79995  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
root      80014  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2648 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   79726  0.0  0.2 400460  5200 ?        S    02:47   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.4  0.4 1277312 10444 ?       Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.3  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.5 5654304 36556 ?       SLsl 00:56   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 117432 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.9 249208 118848 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116768 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13296 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 32156 ?        Ss   00:56   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  1.0 262228 24420 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.4 209248 11564 ?        Ss   00:56   0:00 tailwatchd
root       1263  0.0  0.0 167452  2164 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1440 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   716 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  9.4 1457824 228988 ?      Sl   00:56   1:17 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12824   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12860   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60213  0.1  0.8 277640 20796 ?        S    02:21   0:02  \_ /usr/sbin/httpd -k start
nobody    64549  0.1  0.8 277624 20764 ?        S    02:28   0:01  \_ /usr/sbin/httpd -k start
nobody    66402  0.1  0.8 277596 20736 ?        S    02:30   0:01  \_ /usr/sbin/httpd -k start
cloudw    80017  0.0  0.6 353712 15972 ?        S    02:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    69778  0.1  0.8 277592 20372 ?        S    02:35   0:01  \_ /usr/sbin/httpd -k start
nobody    70871  0.1  0.8 277560 20196 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    70872  0.1  0.8 277932 20344 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    71736  0.1  0.8 277584 20120 ?        S    02:38   0:00  \_ /usr/sbin/httpd -k start
nobody    72509  0.1  0.8 277520 19776 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    72695  0.1  0.8 277584 19956 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    73780  0.1  0.8 277908 19952 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    74054  0.1  0.8 277908 19716 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    75613  0.1  0.8 277916 19448 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    76263  0.1  0.8 277520 19384 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    79520  0.2  0.7 277528 18572 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181780 10596 ?        Ss   00:56   0:05 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 6670  Threads: 3  Questions: 424203  Slow queries: 0  Opens: 2515  Flush tables: 1  Open tables: 2000  Queries per second avg: 63.598
*************************** 1. row ***************************
     Id: 8058
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 8061
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: freeing items
   Info: SELECT * FROM `28` WHERE `phone`='2347065948081' LIMIT 1
*************************** 3. row ***************************
     Id: 8063
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.78.97.230 TIME_WAIT
      1 104.210.140.135 TIME_WAIT
      1 104.210.140.142 TIME_WAIT
      1 114.119.129.22 TIME_WAIT
      1 142.44.225.91 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 02:48:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 51 minutes 6 seconds
   Server load: 0.18 0.20 0.23
   Total accesses: 29872 - Total Traffic: 738.6 MB - Total Duration: 14102241
   CPU Usage: u9.45 s3.82 cu369.35 cs297.46 - 10.2% CPU load
   4.48 requests/sec - 113.5 kB/second - 25.3 kB/request - 472.089 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

_.KKK.KKK_.W...K_....KKW........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol         VHost                                      Request
   0-0  73780 0/101/1407  _ 2.39 0    0   695623 0.0   2.47  33.61 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   1-0  -     0/0/1575    . 0.00 11   0   693103 0.0   0.00  40.75 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   2-0  74054 1/96/1490   K 2.06 3    257 714785 33.8  2.21  40.62 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=2030417010 HTTP/1.1
   3-0  79520 9/19/1448   K 0.78 4    270 825652 277.6 0.55  36.20 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=3507228447 HTTP/1.1
   4-0  76263 1/55/1485   K 1.40 1    264 708529 34.0  1.49  35.97 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3407025189 HTTP/1.1
   5-0  -     0/0/1355    . 0.00 230  0   590638 0.0   0.00  29.93 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  64549 5/312/1670  K 7.11 0    361 710368 158.7 8.19  37.77 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=2088104583 HTTP/1.1
   7-0  75613 2/64/1731   K 1.70 1    266 745563 65.2  1.79  38.69 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=834442692 HTTP/1.1
   8-0  71736 11/146/1533 K 3.40 2    263 646555 342.7 3.62  37.69 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3864395977 HTTP/1.1
   9-0  72509 0/131/1058  _ 3.60 0    6   528097 0.0   3.56  27.09 57.141.0.32   http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Kogi&lga=Ibaji&ward=Odeke
   10-0 -     0/0/1059    . 0.00 358  0   514305 0.0   0.00  25.69 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 66402 7/282/1376  W 6.75 0    0   653618 217.9 9.81  37.10 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=2585781602 HTTP/1.1
   12-0 -     0/0/936     . 0.00 295  0   374563 0.0   0.00  20.56 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 -     0/0/1319    . 0.00 365  0   763925 0.0   0.00  35.13 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/1243    . 0.00 144  0   613759 0.0   0.00  31.43 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 72695 2/118/710   K 2.77 3    263 350285 63.8  2.92  18.14 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=826861724 HTTP/1.1
   16-0 69778 0/206/993   _ 4.57 1    1   466493 0.0   5.31  23.99 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   17-0 -     0/0/625     . 0.00 530  0   310465 0.0   0.00  15.56 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/1432    . 0.00 31   0   532938 0.0   0.00  44.51 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/332     . 0.00 549  0   159610 0.0   0.00  7.69  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/453     . 0.00 622  0   187237 0.0   0.00  9.93  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 70871 2/169/739   K 4.23 3    315 387650 65.7  4.52  19.18 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=110925124 HTTP/1.1
   22-0 60213 4/391/998   K 9.22 3    262 494013 124.7 9.70  23.94 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=3570781889 HTTP/1.1
   23-0 70872 0/178/670   W 4.66 0    0   474152 0.0   4.60  16.11 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   24-0 -     0/0/243     . 0.00 743  0   115317 0.0   0.00  5.86  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/7       . 0.00 4431 0   3826   0.0   0.00  0.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/3       . 0.00 4458 0   753    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/3       . 0.00 4455 0   57     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/4       . 0.00 4443 0   743    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/8       . 0.00 4437 0   4677   0.0   0.00  0.21  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/3       . 0.00 4459 0   14     0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/503     . 0.00 2300 0   236742 0.0   0.00  12.77 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/2       . 0.00 4485 0   7      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5       . 0.00 4440 0   1824   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/2       . 0.00 4482 0   21     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/145     . 0.00 4042 0   57340  0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/234     . 0.00 3593 0   102124 0.0   0.00  5.53  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/2       . 0.00 4466 0   4587   0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/3       . 0.00 4461 0   34     0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00 4484 0   8      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/3       . 0.00 4447 0   4408   0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/5       . 0.00 4441 0   2050   0.0   0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/9       . 0.00 4448 0   4574   0.0   0.00  0.23  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/2       . 0.00 4481 0   12     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/31      . 0.00 4348 0   20604  0.0   0.00  0.82  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/458     . 0.00 3026 0   169465 0.0   0.00  9.10  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2       . 0.00 4489 0   4      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3       . 0.00 4456 0   766    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00 4483 0   48     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00 4454 0   10     0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00 4439 0   695    0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00 4432 0   3150   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00 4435 0   538    0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/13      . 0.00 4433 0   8196   0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 4446 0   519    0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/1       . 0.00 4470 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/110     . 0.00 4040 0   48080  0.0   0.00  2.48  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00 4324 0   13507  0.0   0.00  0.78  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/12      . 0.00 4442 0   7269   0.0   0.00  0.33  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/6       . 0.00 4426 0   1848   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00 4479 0   1      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/48      . 0.00 4317 0   10684  0.0   0.00  0.71  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00 4451 0   7      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1       . 0.00 4477 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/5       . 0.00 4438 0   1750   0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00 4475 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00 4476 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00 4453 0   6      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00 4427 0   859    0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/74      . 0.00 4195 0   36843  0.0   0.00  1.92  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/149     . 0.00 3831 0   74918  0.0   0.00  4.57  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00 4471 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 4474 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/6       . 0.00 4430 0   3305   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6       . 0.00 4425 0   2230   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 4473 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/1       . 0.00 4472 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/40      . 0.00 4334 0   15854  0.0   0.00  0.86  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/1       . 0.00 4478 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00 4469 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 964
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 1...13)
   index usage: 17%, cache usage: 22%
   total entries stored since starting: 21390
   total entries replaced since starting: 0
   total entries expired since starting: 20421
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 16 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit