403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.03.42.txt
 ## swap threshold exceeded
## server overview
2025-11-22.03.42 load[0] mem[60/69] mysql[1/25] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1281         120           7         961         889
Swap:          1999        1601         398
 03:42:01 up  2:45,  0 users,  load average: 0.20, 0.50, 0.50
## system overview
top - 03:42:02 up  2:45,  0 users,  load average: 0.20, 0.50, 0.50
Tasks: 198 total,   4 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.6 us, 12.5 sy,  0.0 ni, 18.8 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   130408 free,  1303380 used,   986512 buff/cache
KiB Swap:  2047996 total,   407952 free,  1640044 used.   919412 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464300 203800   3840 S 106.2  8.4   2:01.62 /usr/sbin+
 17641 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.05 /opt/cpan+
   920 root      20   0  240976   2656   2296 S   6.2  0.1   0:02.63 /usr/sbin+
  9341 nobody    20   0  277556  10316   4220 S   6.2  0.4   0:00.96 /usr/sbin+
 17633 pactpay   20   0  480124  17668  11880 R   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44396   3188   1464 S   0.0  0.1   0:13.30 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.57 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.44 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:09.57 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.42 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.56 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.52 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.88 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   5988   5828 S   0.0  0.2   0:05.34 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    264    152 S   0.0  0.0   0:00.82 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.22 /usr/sbin+
   485 root      20   0   24712   1068    788 S   0.0  0.0   0:02.37 /usr/lib/+
   486 root      20   0  152780     96     68 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   3124    936 S   0.0  0.1   0:00.18 queueproc+
   488 root      20   0   52852     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    780    412 S   0.0  0.0   0:01.44 /usr/lib/+
   498 dbus      20   0   58748   1240    604 S   0.0  0.1   0:05.46 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1064    580 S   0.0  0.0   0:07.43 /usr/sbin+
   554 root      20   0   24208     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    424    292 S   0.0  0.0   0:00.28 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824    432    300 S   0.0  0.0   0:00.29 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.20 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    756    288 S   0.0  0.0   0:00.95 /usr/bin/+
   926 root      20   0 1902000 448684   1076 S   0.0 18.5   0:36.89 /usr/loca+
   927 named     20   0 1054792  25508   1972 S   0.0  1.1   0:05.45 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.23 /usr/bin/+
   931 root      20   0  389508    208    148 S   0.0  0.0   0:00.35 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.47 sw-engine+
   939 root      20   0  439788    432    340 S   0.0  0.0   0:00.39 php-fpm: +
   941 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    312    232 S   0.0  0.0   0:00.33 php-fpm: +
   944 cpanelc+  20   0   10608   3540   2312 S   0.0  0.1   0:07.91 /usr/loca+
   946 systuser  20   0  114016   9052   2796 S   0.0  0.4   0:02.55 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    248    184 S   0.0  0.0   0:00.36 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.09 /usr/sbin+
   960 root      20   0   51508    464    304 S   0.0  0.0   0:00.17 /usr/sbin+
   962 root      20   0  261024   3784    888 S   0.0  0.2   0:01.47 cpsrvd (S+
   965 systuser  20   0   14068     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1476    604 S   0.0  0.1   0:01.15 php-fpm: +
   973 root      20   0  153404    256    176 S   0.0  0.0   0:00.20 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.03 /usr/bin/+
   975 root      20   0 1276356   6472      0 S   0.0  0.3   0:25.51 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  34284   5836 S   0.0  1.4   0:05.78 /usr/loca+
  1079 dovenull  20   0   47136    984    680 S   0.0  0.0   0:00.30 dovecot/p+
  1080 dovenull  20   0   47392   2260   1648 S   0.0  0.1   0:00.17 dovecot/i+
  1081 dovecot   20   0   10320    212    108 S   0.0  0.0   0:00.09 dovecot/a+
  1082 root      20   0   10452    520    368 S   0.0  0.0   0:00.20 dovecot/l+
  1083 dovenull  20   0   47300    956    656 S   0.0  0.0   0:00.41 dovecot/p+
  1084 dovenull  20   0   47424   2464   1704 S   0.0  0.1   0:00.16 dovecot/i+
  1090 root      20   0   24528   1884    484 S   0.0  0.1   0:00.08 dovecot/c+
  1091 dovecot   20   0   13568    532    396 S   0.0  0.0   0:00.02 dovecot/s+
  1141 root      20   0  247944   2900    748 S   0.0  0.1   0:04.04 /usr/loca+
  1153 dovecot   20   0   41156   1412    988 S   0.0  0.1   0:00.58 dovecot/a+
  1158 systuser  20   0  157704   2832    852 S   0.0  0.1   0:00.06 SonarPush+
  1177 wp-tool+  20   0  387528   2528   1232 S   0.0  0.1   0:00.16 /usr/bin/+
  1178 wp-tool+  20   0  412368  22368   1116 S   0.0  0.9   0:03.35 /usr/bin/+
  1261 root      20   0  262228  24620   6760 S   0.0  1.0   0:00.64 cpdavd - +
  1262 root      20   0  209248   5424   1076 S   0.0  0.2   0:01.31 tailwatchd
  1263 root      20   0  167452   1216    668 S   0.0  0.1   0:00.24 dnsadmin +
  1662 root      38  18  130416   1340    684 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    472    312 S   0.0  0.0   0:00.28 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:00.89 /usr/sbin+
  1929 root      20   0   12824    308    176 S   0.0  0.0   0:01.01 /usr/loca+
  1930 root      20   0   12732     68      0 S   0.0  0.0   0:00.90 /usr/loca+
  1931 root      20   0   12860    248    128 S   0.0  0.0   0:00.93 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182284   8652   1116 S   0.0  0.4   0:08.62 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     52     16 S   0.0  0.0   0:00.20 [kworker]
  4610 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5286 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5450 nobody    20   0  277628  10884   3916 S   0.0  0.4   0:01.25 /usr/sbin+
  5472 nobody    20   0  277588  14000   3936 S   0.0  0.6   0:01.63 /usr/sbin+
  6717 root      20   0  258828  42136   1208 S   0.0  1.7   0:01.28 spamd chi+
  6719 root      20   0  247944   1404    436 S   0.0  0.1   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
  9144 nobody    20   0  277580  10828   4252 S   0.0  0.4   0:00.97 /usr/sbin+
  9537 nobody    20   0  277584  10240   4204 S   0.0  0.4   0:01.10 /usr/sbin+
  9789 nobody    20   0  277908  10948   4380 S   0.0  0.5   0:00.91 /usr/sbin+
  9796 nobody    20   0  277920  11652   4220 S   0.0  0.5   0:00.96 /usr/sbin+
 10716 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 12060 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 12729 nobody    20   0  277780  18728   4364 S   0.0  0.8   0:00.63 /usr/sbin+
 13110 nobody    20   0  277520  18008   4288 S   0.0  0.7   0:00.67 /usr/sbin+
 13850 nobody    20   0  277908  18592   4284 S   0.0  0.8   0:00.61 /usr/sbin+
 14164 nobody    20   0  277520  18560   4420 S   0.0  0.8   0:00.45 /usr/sbin+
 14841 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16221 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16309 nobody    20   0  277908  17752   3956 S   0.0  0.7   0:00.15 /usr/sbin+
 16468 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 16512 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 17039 root      20   0  111304   4436   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 17040 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 17059 nobody    20   0  277908  17600   3812 S   0.0  0.7   0:00.07 /usr/sbin+
 17223 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 17224 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 17337 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 17340 nobody    20   0  277908  17456   3744 S   0.0  0.7   0:00.02 /usr/sbin+
 17467 nigeria   20   0  401184   8916   3952 S   0.0  0.4   0:00.20 php-fpm: +
 17562 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 17571 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17574 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17575 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17576 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17577 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17578 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17580 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17581 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17582 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17583 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17585 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17587 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 17588 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 17589 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 17611 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17612 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 17613 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 17615 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17616 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17618 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17620 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17621 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17622 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17623 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 17630 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 17634 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17656 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17657 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 17660 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17661 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 17662 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 80786 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 90413 worencom  20   0   38500   1668   1156 S   0.0  0.1   0:00.01 dovecot/i+
 94906 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 97243 nobody    20   0  277608  10672   4168 S   0.0  0.4   0:02.64 /usr/sbin+
101349 nobody    20   0  277960  10692   4032 S   0.0  0.4   0:02.09 /usr/sbin+
101572 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:56   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      80786  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:0]
root      94906  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root     101572  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/1:3]
root       4610  0.0  0.0      0     0 ?        S    03:25   0:00  \_ [kworker/1:1]
root       5286  0.0  0.0      0     0 ?        S    03:26   0:00  \_ [kworker/0:4]
root      10716  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/0:2]
root      12060  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root      14841  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/1:0]
root      16221  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/0:1]
root      17656  0.0  0.0      0     0 ?        S    03:42   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44396  3188 ?        Ss   00:56   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  39500  5988 ?        Ss   00:56   0:05 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   264 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1068 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    96 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  3124 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852    56 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   780 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1240 ?        Ss   00:56   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1064 ?        Ssl  00:56   0:07 /usr/sbin/nscd
root        554  0.0  0.0  24208    28 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   424 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      17571  0.0  0.0 183044  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17587  0.0  0.0 113284  1208 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      17588  0.0  0.0 108052   360 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      17589  0.0  0.0 113288  1516 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      17663  0.0  0.0 153840  2092 ?        R    03:42   0:00  |               \_ ps auxf
root      17574  0.0  0.0 183044  2152 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17612  0.0  0.0  20164   988 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [17660] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  17660  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  17661  0.0  0.0 113284  1212 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  17662  0.0  0.6 404184 15752 ?        R    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php
root      17575  0.0  0.0 183044  2152 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17618  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      17576  0.0  0.0 183044  2152 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17621  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      17577  0.0  0.0 183044  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17615  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      17578  0.0  0.0 183044  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17622  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      17580  0.0  0.0 183044  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17611  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      17581  0.0  0.0 183044  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17616  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      17582  0.0  0.0 183044  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17620  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      17583  0.0  0.0 183044  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17613  0.0  0.0  20164   968 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [17630] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17630  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17633  2.0  0.7 480124 17668 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      17585  0.0  0.0 183044  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      17623  0.0  0.0  20164   964 ?        Ss   03:42   0:00      \_ jailshell (nigeria) [17634] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17634  0.0  0.0  20164   260 ?        S    03:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17641  5.0  0.6 404052 16140 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.0  90824   432 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   756 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 240976  2656 ?        Ssl  00:56   0:02 /usr/sbin/rsyslogd -n
root        926  0.3 18.5 1902000 448684 ?      Ssl  00:56   0:36 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.0 1054792 25508 ?       Ssl  00:56   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   208 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  17337  0.0  0.0 445028   324 ?        S    03:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   432 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932     4 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   312 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3540 ?        Ss   00:56   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.3 114016  9052 ?        Ssl  00:56   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   248 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root      17039  0.0  0.1 111304  4436 ?        Ss   03:41   0:00  \_ sshd: [accepted]
sshd      17040  0.0  0.1 115644  2628 ?        S    03:41   0:00  |   \_ sshd: [net]
root      17223  0.0  0.1 111304  4264 ?        Ss   03:41   0:00  \_ sshd: [accepted]
sshd      17224  0.0  0.1 115644  2628 ?        S    03:41   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   464 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136   984 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392  2260 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   212 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   520 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300   956 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2464 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24528  1884 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   532 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1412 ?        S    00:56   0:00  \_ dovecot/auth
worencom  90413  0.0  0.0  38500  1668 ?        S    03:02   0:00  \_ dovecot/imap
root      16468  0.0  0.1  41052  2728 ?        S    03:40   0:00  \_ dovecot/auth -w
root      16512  0.0  0.1  60820  4512 ?        S    03:40   0:00  \_ dovecot/lmtp
root        962  0.0  0.1 261024  3784 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      17562  0.0  0.0      0     0 ?        Z    03:41   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1476 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   17467  1.6  0.3 401184  8916 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   256 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4164 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.2  0.2 1276356 6472 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 34284 ?       SLsl 00:56   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2900 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  1.7 258828 42136 ?        S    01:02   0:01  \_ spamd child
root       6719  0.0  0.0 247944  1404 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2832 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  2528 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 22368 ?        Ss   00:56   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  1.0 262228 24620 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.2 209248  5424 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  1216 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1340 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   472 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2  8.4 1464300 203800 ?      Sl   00:56   2:01 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12824   308 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732    68 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12860   248 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    97243  0.1  0.4 277608 10672 ?        S    03:11   0:02  \_ /usr/sbin/httpd -k start
nobody   101349  0.1  0.4 277960 10692 ?        S    03:17   0:02  \_ /usr/sbin/httpd -k start
nobody     5450  0.1  0.4 277628 10884 ?        S    03:26   0:01  \_ /usr/sbin/httpd -k start
nobody     5472  0.1  0.5 277588 14000 ?        S    03:26   0:01  \_ /usr/sbin/httpd -k start
nobody     9144  0.1  0.4 277580 10828 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
nobody     9341  0.1  0.4 277556 10316 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody     9537  0.1  0.4 277584 10240 ?        S    03:31   0:01  \_ /usr/sbin/httpd -k start
nobody     9789  0.1  0.4 277908 10948 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody     9796  0.1  0.4 277920 11652 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody    12729  0.1  0.7 277780 18728 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    13110  0.1  0.7 277520 18008 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    13850  0.1  0.7 277908 18592 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody    14164  0.1  0.7 277520 18560 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    16309  0.1  0.7 277908 17752 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody    17059  0.1  0.7 277908 17600 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    17340  0.0  0.7 277908 17456 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.3 182284  8652 ?        Ss   00:56   0:08 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    52 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 9911  Threads: 3  Questions: 659775  Slow queries: 0  Opens: 4275  Flush tables: 1  Open tables: 2000  Queries per second avg: 66.569
*************************** 1. row ***************************
     Id: 12280
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 12281
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 12287
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 114.119.149.3 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 54.39.136.203 TIME_WAIT
      1 74.7.227.39 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 35.203.210.107 TIME_WAIT
      4 20.29.23.94 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 03:42:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 45 minutes 7 seconds
   Server load: 0.20 0.50 0.50
   Total accesses: 44980 - Total Traffic: 1.1 GB - Total Duration: 21880671
   CPU Usage: u10.7 s5.3 cu571.23 cs460.62 - 10.6% CPU load
   4.54 requests/sec - 113.9 kB/second - 25.1 kB/request - 486.453 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_W___KKKW_K_W_..._...........K..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  13110  0/118/2235  _ 2.87  3    349 1122046 0.0   2.93  53.73 20.29.23.94    http/1.1
   1-0  13850  0/103/2238  W 2.97  0    0   1050387 0.0   2.74  58.66 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  16309  0/28/2230   _ 0.56  2    1   1097041 0.0   0.58  58.28 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   3-0  9144   0/160/2157  _ 4.37  4    2   1230363 0.0   3.91  54.91 3.226.34.98    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/2019elections/2019
   4-0  12729  0/118/2276  _ 2.69  2    1   1128408 0.0   2.56  55.83 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   5-0  9341   11/164/2043 K 4.29  0    432 943253  342.7 3.79  47.06 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=103373103 HTTP/1.1
   6-0  5450   7/218/2402  K 5.91  1    345 1105477 213.3 5.21  56.57 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1794749304 HTTP/1.1
   7-0  14164  6/85/2360   K 2.11  2    342 1084587 185.9 1.95  54.32 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1557978519 HTTP/1.1
   8-0  97243  11/472/2342 W 12.85 0    0   1051417 337.1 10.67 56.72 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1918210957 HTTP/1.1
   9-0  9537   0/193/1829  _ 4.95  2    7   906653  0.0   4.62  44.96 34.205.163.103 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?lga=Ihitte/uboma%20(isinweke)&st
   10-0 17059  4/15/1524   K 0.27  3    271 744479  126.5 0.28  36.95 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=394900664 HTTP/1.1
   11-0 17340  0/7/1949    _ 0.04  0    281 940118  0.0   0.10  50.39 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=3800101929 HTTP/1.1
   12-0 9789   0/163/1392  W 4.14  0    0   600412  0.0   3.57  31.71 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1625085450 HTTP/1.1
   13-0 101349 0/460/2031  _ 10.69 0    0   1067048 0.0   8.94  50.18 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   14-0 -      0/0/1524    . 0.00  5    0   775778  0.0   0.00  38.05 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -      0/0/1264    . 0.00  383  0   648848  0.0   0.00  33.45 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -      0/0/1324    . 0.00  497  0   632877  0.0   0.00  32.12 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 9796   0/174/975   _ 4.31  1    341 496660  0.0   3.36  23.46 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1831083436 HTTP/1.1
   18-0 -      0/0/1798    . 0.00  112  0   711852  0.0   0.00  53.60 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -      0/0/583     . 0.00  923  0   302417  0.0   0.00  13.95 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -      0/0/605     . 0.00  914  0   276250  0.0   0.00  13.68 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -      0/0/1051    . 0.00  936  0   564464  0.0   0.00  27.34 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -      0/0/1622    . 0.00  15   0   805861  0.0   0.00  39.12 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -      0/0/849     . 0.00  913  0   577788  0.0   0.00  20.58 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -      0/0/333     . 0.00  930  0   186833  0.0   0.00  8.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -      0/0/50      . 0.00  921  0   31736   0.0   0.00  1.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -      0/0/238     . 0.00  934  0   130930  0.0   0.00  5.99  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -      0/0/172     . 0.00  381  0   67579   0.0   0.00  2.99  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -      0/0/57      . 0.00  918  0   59379   0.0   0.00  1.25  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 5472   4/272/311   K 7.41  1    343 192383  123.5 6.82  7.84  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=3532315725 HTTP/1.1
   30-0 -      0/0/321     . 0.00  4    0   148504  0.0   0.00  6.83  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -      0/0/609     . 0.00  926  0   309233  0.0   0.00  15.78 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/11      . 0.00  916  0   3774    0.0   0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -      0/0/7       . 0.00  928  0   1828    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -      0/0/117     . 0.00  503  0   46396   0.0   0.00  2.24  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -      0/0/146     . 0.00  940  0   57340   0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/240     . 0.00  912  0   105059  0.0   0.00  5.69  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -      0/0/3       . 0.00  939  0   4588    0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -      0/0/102     . 0.00  505  0   37924   0.0   0.00  1.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -      0/0/196     . 0.00  456  3   51541   0.0   0.00  2.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -      0/0/203     . 0.00  213  0   91622   0.0   0.00  4.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -      0/0/8       . 0.00  919  0   2066    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/12      . 0.00  915  0   5210    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -      0/0/3       . 0.00  938  0   13      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -      0/0/158     . 0.00  459  0   66237   0.0   0.00  3.12  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/522     . 0.00  823  0   184884  0.0   0.00  9.85  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -      0/0/2       . 0.00  7730 0   4       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -      0/0/3       . 0.00  7697 0   766     0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -      0/0/2       . 0.00  7724 0   48      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -      0/0/2       . 0.00  7695 0   10      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -      0/0/3       . 0.00  7680 0   695     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -      0/0/7       . 0.00  7673 0   3150    0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -      0/0/4       . 0.00  7676 0   538     0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -      0/0/13      . 0.00  7674 0   8196    0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -      0/0/2       . 0.00  7687 0   519     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -      0/0/1       . 0.00  7711 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -      0/0/110     . 0.00  7281 0   48080   0.0   0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -      0/0/44      . 0.00  7565 0   13507   0.0   0.00  0.78  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -      0/0/12      . 0.00  7683 0   7269    0.0   0.00  0.33  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -      0/0/6       . 0.00  7667 0   1848    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -      0/0/1       . 0.00  7720 0   1       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -      0/0/48      . 0.00  7558 0   10684   0.0   0.00  0.71  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -      0/0/2       . 0.00  7692 0   7       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -      0/0/1       . 0.00  7718 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -      0/0/5       . 0.00  7679 0   1750    0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -      0/0/1       . 0.00  7716 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -      0/0/1       . 0.00  7717 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -      0/0/2       . 0.00  7694 0   6       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -      0/0/5       . 0.00  7668 0   859     0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -      0/0/74      . 0.00  7436 0   36843   0.0   0.00  1.92  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -      0/0/149     . 0.00  7072 0   74918   0.0   0.00  4.57  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -      0/0/1       . 0.00  7712 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -      0/0/1       . 0.00  7715 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -      0/0/6       . 0.00  7671 0   3305    0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -      0/0/6       . 0.00  7666 0   2230    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -      0/0/1       . 0.00  7714 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -      0/0/1       . 0.00  7713 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -      0/0/40      . 0.00  7575 0   15854   0.0   0.00  0.86  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -      0/0/1       . 0.00  7719 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -      0/0/1       . 0.00  7710 0   0       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1117
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...48)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 33044
   total entries replaced since starting: 0
   total entries expired since starting: 31922
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 57 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit