403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.12.42.txt
 ## swap threshold exceeded
## server overview
2025-11-07.12.42 load[0] mem[58/70] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1270         114          21         977         885
Swap:          1999        1469         530
 12:42:01 up  2:55,  0 users,  load average: 0.01, 0.14, 0.45
## system overview
top - 12:42:02 up  2:55,  0 users,  load average: 0.01, 0.14, 0.45
Tasks: 202 total,   1 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 39.4 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   100284 free,  1318724 used,  1001292 buff/cache
KiB Swap:  2047996 total,   542972 free,  1505024 used.   889884 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469460 260548   4160 S  29.4 10.8   4:00.82 /usr/sbin+
 78415 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.02 /opt/cpan+
   360 root      20   0   39500   7160   6916 S   5.9  0.3   0:05.13 /usr/lib/+
   489 root      20   0   24720   1224    788 S   5.9  0.1   0:02.42 /usr/lib/+
   503 dbus      20   0   57032   1328    616 S   5.9  0.1   0:05.55 /usr/bin/+
 62624 nobody    20   0  277852  20272   4860 S   5.9  0.8   0:01.14 /usr/sbin+
 78410 pactpay   20   0  476724  16584  10916 S   5.9  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44424   3504   1548 S   0.0  0.1   0:15.67 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:11.84 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.43 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.85 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.43 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:00.73 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    452    332 S   0.0  0.0   0:00.78 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   493 root      20   0  224268   4116    796 S   0.0  0.2   0:00.27 queueproc+
   494 root      20   0  152780     68     28 S   0.0  0.0   0:00.00 /usr/sbin+
   499 nscd      20   0 1334484   1940    732 S   0.0  0.1   0:03.34 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    300    204 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    992    608 S   0.0  0.0   0:01.43 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.25 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    424    292 S   0.0  0.0   0:00.29 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3656    744 S   0.0  0.2   0:00.19 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.11 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016   9944   2328 S   0.0  0.4   0:02.59 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:00.99 /usr/bin/+
   963 telegraf  20   0 5654048  35760   5952 S   0.0  1.5   0:06.08 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.16 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  27828   1968 S   0.0  1.1   0:07.46 /usr/sbin+
   982 root      20   0 1828076 270464    896 S   0.0 11.2   0:33.90 /usr/loca+
   984 root      20   0  386112    296    204 S   0.0  0.0   0:00.37 php-fpm: +
   992 root      20   0  397344   2408    604 S   0.0  0.1   0:02.55 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.23 /usr/bin/+
  1007 root      20   0  392856    312    228 S   0.0  0.0   0:00.36 php-fpm: +
  1012 root      20   0  385496    352    252 S   0.0  0.0   0:00.38 php-fpm: +
  1013 root      20   0  240976   6580   5996 S   0.0  0.3   0:02.69 /usr/sbin+
  1014 root      20   0  261160   6248   1532 S   0.0  0.3   0:02.95 cpsrvd (S+
  1017 root      20   0  436392    364    276 S   0.0  0.0   0:00.47 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.22 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:01.08 /usr/sbin+
  1026 cpanelc+  20   0   10460   3412   2320 S   0.0  0.1   0:08.08 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.16 dovecot/p+
  1097 dovenull  20   0   47576   2480   1380 S   0.0  0.1   0:00.08 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.03 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.13 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.24 dovecot/p+
  1101 dovenull  20   0   47596   2984   1792 S   0.0  0.1   0:00.14 dovecot/i+
  1108 root      20   0   24564   2368    496 S   0.0  0.1   0:00.09 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.03 dovecot/s+
  1182 dovecot   20   0   41136   1444   1008 S   0.0  0.1   0:00.26 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.07 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:08.73 /usr/bin/+
  1234 wp-tool+  20   0  387528   3280   1424 S   0.0  0.1   0:00.17 /usr/bin/+
  1264 root      20   0  183900   6000   2768 S   0.0  0.2   0:00.67 cpdavd - +
  1265 root      20   0  209472  10324   1792 S   0.0  0.4   0:01.44 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.19 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.28 php-fpm: +
  1728 root      38  18  130416   1364    692 S   0.0  0.1   0:00.02 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:00.66 /usr/sbin+
  1970 root      20   0   12820    328    212 S   0.0  0.0   0:00.90 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:00.76 /usr/loca+
  1972 root      20   0   12852    340    216 S   0.0  0.0   0:00.83 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  181820   9032   1104 S   0.0  0.4   0:09.12 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.19 [kworker]
 24354 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 24364 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 116+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:03.49 /usr/loca+
 32709 root      20   0  266976 133928   3248 S   0.0  5.5   0:03.57 spamd chi+
 32710 root      20   0  249228 118356    624 S   0.0  4.9   0:00.04 spamd chi+
 55186 worencom  20   0   38468   2592   1584 S   0.0  0.1   0:00.02 dovecot/i+
 57446 nobody    20   0  277668  20304   4784 S   0.0  0.8   0:02.00 /usr/sbin+
 58813 root      20   0 1349832  12576    580 S   0.0  0.5   0:00.07 /usr/bin/+
 58846 root      20   0 1277312  13984    576 S   0.0  0.6   0:00.07 /usr/bin/+
 60494 nobody    20   0  277520  19644   4812 S   0.0  0.8   0:01.84 /usr/sbin+
 60753 nobody    20   0  277564  19568   4804 S   0.0  0.8   0:01.30 /usr/sbin+
 60760 nobody    20   0  277528  19748   4892 S   0.0  0.8   0:01.70 /usr/sbin+
 61568 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 63737 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 63858 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64569 nobody    20   0  277588  20008   4668 S   0.0  0.8   0:01.36 /usr/sbin+
 64570 nobody    20   0  277852  19872   4740 S   0.0  0.8   0:01.17 /usr/sbin+
 64585 nobody    20   0  277516  19700   4724 S   0.0  0.8   0:01.30 /usr/sbin+
 68574 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 69618 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69884 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 72680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72788 nobody    20   0  277844  18644   4208 S   0.0  0.8   0:00.52 /usr/sbin+
 73052 nobody    20   0  277520  18800   4460 S   0.0  0.8   0:00.52 /usr/sbin+
 73247 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 75659 nobody    20   0  277516  18352   4168 S   0.0  0.8   0:00.26 /usr/sbin+
 77172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77950 nobody    20   0  277488  17456   3444 S   0.0  0.7   0:00.01 /usr/sbin+
 78017 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78020 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78189 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 78194 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 78206 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 78247 nobody    20   0  277856  17328   3476 S   0.0  0.7   0:00.02 /usr/sbin+
 78253 nobody    20   0  277712  17120   3464 S   0.0  0.7   0:00.02 /usr/sbin+
 78254 nobody    20   0  277460  17088   3500 S   0.0  0.7   0:00.02 /usr/sbin+
 78258 nobody    20   0  277608  17288   3644 S   0.0  0.7   0:00.02 /usr/sbin+
 78259 nobody    20   0  277316  17072   3660 S   0.0  0.7   0:00.01 /usr/sbin+
 78260 nobody    20   0  277300  17028   3632 S   0.0  0.7   0:00.01 /usr/sbin+
 78261 nobody    20   0  277692  17116   3372 S   0.0  0.7   0:00.02 /usr/sbin+
 78303 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 78308 nigeria   20   0  397064   5272   2268 S   0.0  0.2   0:00.00 php-fpm: +
 78313 mailnull  20   0   89356   4244   1140 S   0.0  0.2   0:00.00 /usr/sbin+
 78320 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 78321 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 78323 nobody    20   0  277312  16308   3180 S   0.0  0.7   0:00.00 /usr/sbin+
 78330 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 78331 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 78342 cloudw    20   0  350316  16620  10324 S   0.0  0.7   0:00.01 /opt/cpan+
 78344 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78345 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78346 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78347 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78348 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78349 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78350 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78351 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78353 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78354 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78355 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78356 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78358 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78360 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 78361 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 78362 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 78384 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 78386 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78387 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 78388 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78389 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 78391 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 78392 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78394 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78395 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 78396 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 78397 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 78398 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78399 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78408 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 78413 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:46   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      61568  0.0  0.0      0     0 ?        S    12:06   0:00  \_ [kworker/0:2]
root      63737  0.0  0.0      0     0 ?        S    12:11   0:00  \_ [kworker/1:4]
root      63858  0.0  0.0      0     0 ?        S    12:11   0:00  \_ [kworker/u200:0]
root      68574  0.0  0.0      0     0 ?        S    12:21   0:00  \_ [kworker/1:1]
root      69618  0.0  0.0      0     0 ?        S    12:23   0:00  \_ [kworker/0:0]
root      69884  0.0  0.0      0     0 ?        S    12:23   0:00  \_ [kworker/u200:2]
root      72680  0.0  0.0      0     0 ?        S    12:29   0:00  \_ [kworker/0:3]
root      73247  0.0  0.0      0     0 ?        S    12:30   0:00  \_ [kworker/1:3]
root      77172  0.0  0.0      0     0 ?        S    12:39   0:00  \_ [kworker/0:1]
root      78017  0.0  0.0      0     0 ?        S    12:41   0:00  \_ [kworker/1:0]
root      78020  0.0  0.0      0     0 ?        S    12:41   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44424  3504 ?        Ss   09:46   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  39500  7160 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   452 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4116 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    68 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1940 ?        Ssl  09:46   0:03 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   300 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   992 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   424 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      78344  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78360  0.0  0.0 113284  1212 ?        Ss   12:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      78361  0.0  0.0 108052   360 ?        S    12:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      78362  0.0  0.0 113288  1520 ?        S    12:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      78425  0.0  0.0 153840  2092 ?        R    12:42   0:00  |               \_ ps auxf
root      78345  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78399  0.0  0.0  20164   804 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      78346  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78389  0.0  0.0  20164   808 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      78347  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78396  0.0  0.0  20164   808 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      78348  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78394  0.0  0.0  20164   804 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      78349  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78398  0.0  0.0  20164   804 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      78350  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78391  0.0  0.0  20164   808 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      78351  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78392  0.0  0.0  20164   804 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      78353  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78388  0.0  0.0  20164   804 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      78354  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78387  0.0  0.0  20164   808 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      78355  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78386  0.0  0.0  20164   804 ?        Ss   12:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      78356  0.0  0.0 183048  2144 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78397  0.0  0.0  20164   968 ?        Ss   12:42   0:00  |   \_ jailshell (pactpay) [78408] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   78408  0.0  0.0  20164   264 ?        S    12:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   78410  0.0  0.6 476724 16584 ?        S    12:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      78358  0.0  0.0 183048  2140 ?        S    12:42   0:00  \_ /usr/sbin/CROND -n
root      78395  0.0  0.0  20164   964 ?        Ss   12:42   0:00      \_ jailshell (nigeria) [78413] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   78413  0.0  0.0  20164   260 ?        S    12:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   78415  0.0  0.6 400652 15936 ?        R    12:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3656 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  78313  0.0  0.1  89356  4244 ?        S    12:41   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016  9944 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35760 ?       SLsl 09:46   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47576  2480 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47596  2984 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.0  24564  2368 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1444 ?        S    09:46   0:00  \_ dovecot/auth
worencom  55186  0.0  0.1  38468  2592 ?        S    11:53   0:00  \_ dovecot/imap
root      78194  0.0  0.1  41052  2728 ?        S    12:41   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.1 785392 27828 ?        Ssl  09:46   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.3 11.1 1828076 270464 ?      Ssl  09:46   0:33 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   296 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2408 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   78308  0.0  0.2 397064  5272 ?        S    12:41   0:00  \_ php-fpm: pool nigeriadecide_org
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   312 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   352 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 240976  6580 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
root       1014  0.0  0.2 261160  6248 ?        Ss   09:46   0:02 cpsrvd (SSL) - waiting for connections                   
root      78303  0.0  0.0      0     0 ?        Z    12:41   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   364 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      78189  0.0  0.1 111304  4268 ?        Ss   12:41   0:00  \_ sshd: [accepted]
root      78206  0.0  0.1 111304  4268 ?        Ss   12:41   0:00  \_ sshd: [accepted]
root      78320  0.0  0.2 157100  5072 ?        Ss   12:41   0:00  \_ sshd: unknown [priv]
sshd      78321  0.0  0.1 115644  2628 ?        S    12:41   0:00  |   \_ sshd: unknown [net]
root      78330  0.0  0.2 157100  5072 ?        Ss   12:42   0:00  \_ sshd: unknown [priv]
sshd      78331  0.0  0.1 115644  2624 ?        S    12:42   0:00      \_ sshd: unknown [net]
cpanelc+   1026  0.0  0.1  10460  3412 ?        Ss   09:46   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3280 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6000 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209472 10324 ?        Ss   09:46   0:01 tailwatchd
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1364 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  2.2 10.7 1469460 260548 ?      Sl   09:46   4:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12820   328 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12852   340 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    57446  0.0  0.8 277668 20304 ?        S    11:58   0:02  \_ /usr/sbin/httpd -k start
nobody    60494  0.0  0.8 277520 19644 ?        S    12:03   0:01  \_ /usr/sbin/httpd -k start
nobody    60753  0.0  0.8 277564 19568 ?        S    12:04   0:01  \_ /usr/sbin/httpd -k start
nobody    60760  0.0  0.8 277528 19748 ?        S    12:04   0:01  \_ /usr/sbin/httpd -k start
nobody    62624  0.0  0.8 277852 20272 ?        S    12:08   0:01  \_ /usr/sbin/httpd -k start
nobody    64569  0.0  0.8 277588 20008 ?        S    12:12   0:01  \_ /usr/sbin/httpd -k start
nobody    64570  0.0  0.8 277852 19872 ?        S    12:12   0:01  \_ /usr/sbin/httpd -k start
nobody    64585  0.0  0.8 277516 19700 ?        S    12:12   0:01  \_ /usr/sbin/httpd -k start
nobody    72788  0.0  0.7 277844 18644 ?        S    12:29   0:00  \_ /usr/sbin/httpd -k start
nobody    73052  0.0  0.7 277712 18808 ?        S    12:29   0:00  \_ /usr/sbin/httpd -k start
cloudw    78342  0.0  0.6 350316 16884 ?        R    12:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    75659  0.0  0.7 277516 18352 ?        S    12:36   0:00  \_ /usr/sbin/httpd -k start
nobody    77950  0.0  0.7 277488 17456 ?        S    12:40   0:00  \_ /usr/sbin/httpd -k start
nobody    78247  0.1  0.7 277856 17328 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78253  0.1  0.7 277712 17120 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78254  0.1  0.7 277460 17088 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78258  0.1  0.7 277608 17288 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78259  0.0  0.7 277316 17072 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78260  0.0  0.7 277300 17028 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78261  0.1  0.7 277692 17116 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78323  0.0  0.6 277312 16308 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.3 181820  9032 ?        Ss   09:46   0:09 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      24354  0.0  0.0 132964     4 ?        SN   10:42   0:00 ConfigServer Version Check
root      24364  0.0  0.0 108056     0 ?        SN   10:42   0:00  \_ sleep 11664
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.5 266976 133928 ?       S    11:00   0:03  \_ spamd child
root      32710  0.0  4.8 249228 118356 ?       S    11:00   0:00  \_ spamd child
root      58813  0.0  0.5 1349832 12576 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      58846  0.0  0.5 1277312 13984 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 32247  Threads: 3  Questions: 1700379  Slow queries: 0  Opens: 5656  Flush tables: 1  Open tables: 2000  Queries per second avg: 52.729
*************************** 1. row ***************************
     Id: 25382
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 25385
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending to client
   Info: SELECT * FROM `36` WHERE `phone`='2348164778551' LIMIT 1
*************************** 3. row ***************************
     Id: 25388
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 142.44.220.233 TIME_WAIT
      1 148.113.130.102 TIME_WAIT
      1 17.22.237.133 TIME_WAIT
      1 17.22.237.142 TIME_WAIT
      1 17.22.237.178 TIME_WAIT
      1 17.22.237.17 TIME_WAIT
      1 17.22.237.181 TIME_WAIT
      1 17.22.237.187 TIME_WAIT
      1 17.22.237.20 TIME_WAIT
      1 17.22.237.244 TIME_WAIT
      1 17.22.237.33 TIME_WAIT
      1 17.22.237.44 TIME_WAIT
      1 17.22.237.54 TIME_WAIT
      1 17.22.237.62 TIME_WAIT
      1 17.22.237.92 TIME_WAIT
      1 17.22.245.13 TIME_WAIT
      1 17.22.245.148 TIME_WAIT
      1 17.22.245.181 TIME_WAIT
      1 17.22.245.191 TIME_WAIT
      1 17.22.245.246 TIME_WAIT
      1 17.22.245.42 TIME_WAIT
      1 17.22.245.56 TIME_WAIT
      1 17.22.245.80 TIME_WAIT
      1 17.22.253.102 TIME_WAIT
      1 17.22.253.110 TIME_WAIT
      1 17.22.253.174 TIME_WAIT
      1 17.22.253.178 TIME_WAIT
      1 17.22.253.30 TIME_WAIT
      1 17.22.253.98 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.225.22.28 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.173.180.11 TIME_WAIT
      1 51.161.65.209 TIME_WAIT
      1 91.121.34.215 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 121.229.156.103 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 167.71.231.9 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 12:42:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 57 minutes 19 seconds
   Server load: 0.01 0.14 0.45
   Total accesses: 39175 - Total Traffic: 522.0 MB - Total Duration: 63514869
   CPU Usage: u9.98 s3.91 cu250.8 cs165.21 - 1.33% CPU load
   1.22 requests/sec - 16.6 kB/second - 13.6 kB/request - 1621.31 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KK_KKK_K_K_KK_KK___...W.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  60753 2/313/2802 K 5.34 1    0   1338351  64.3  5.60  32.69 17.22.253.161 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/elementor/assets/js/section-frontend-ha
   1-0  73052 1/117/2749 K 1.80 0    290 1408589  35.5  2.09  36.82 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=1608954064 HTTP/1.1
   2-0  64569 0/350/2701 _ 5.53 0    1   1195696  0.0   5.85  31.56 17.22.245.181 http/1.1 health.oyostate.gov.ng:443 GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1
   3-0  60494 1/406/2512 K 8.19 4    2   1207365  15.6  10.90 40.54 17.22.253.62  http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/thegov-core/includes/elementor/assets/j
   4-0  72788 1/111/2648 K 2.20 2    1   1200519  10.9  2.01  32.96 17.22.245.251 http/1.1 health.oyostate.gov.ng:443 GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1
   5-0  77950 1/8/2848   K 0.03 3    401 1192525  36.3  0.28  40.39 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=156479907 HTTP/1.1
   6-0  60760 0/343/2157 _ 8.22 0    4   1044836  0.0   7.95  36.46 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  64570 1/259/2097 K 5.54 1    1   44401130 8.5   5.46  28.89 17.22.253.101 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/elementor/assets/js/shared-frontend-han
   8-0  62624 0/334/2187 _ 4.04 0    279 930736   0.0   4.49  24.77 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=467849025 HTTP/1.1
   9-0  78247 1/5/2010   K 0.04 3    1   858730   8.1   0.10  23.69 17.22.253.96  http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/thegov-core/includes/elementor/assets/j
   10-0 75659 0/57/1766  _ 0.99 1    1   793483   0.0   1.30  19.70 17.22.245.191 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/themes/thegov/js/jarallax.min.js?ver=1.0.0 HTTP
   11-0 78253 1/4/1627   K 0.02 1    272 715745   35.3  0.06  24.10 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=126636507 HTTP/1.1
   12-0 78254 1/5/1549   K 0.06 0    1   643105   6.6   0.06  18.40 17.22.237.74  http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/elementor/assets/js/text-editor.abc8f59
   13-0 64585 0/273/1312 _ 6.39 1    261 897769   0.0   5.58  23.17 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=1415126112 HTTP/1.1
   14-0 78258 2/4/1773   K 0.02 2    14  791277   115.1 0.16  22.14 17.22.237.14  http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/revslider/sr6/assets/js/rs6.min.js?ver=
   15-0 78259 1/5/1380   K 0.01 4    1   648289   6.5   0.04  15.13 17.22.245.225 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/thegov-core/includes/elementor//assets/
   16-0 78260 0/4/275    _ 0.01 0    1   139519   0.0   0.02  3.16  17.22.237.17  http/1.1 health.oyostate.gov.ng:443 GET /wp-content/themes/thegov/js/jarallax-video.min.js?ver=1.0.
   17-0 78261 0/4/948    _ 0.04 0    25  562107   0.0   0.06  13.00 128.140.8.200 http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   18-0 78323 0/1/645    _ 0.00 0    7   201225   0.0   0.01  5.35  100.29.160.53 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/2019elections/blog/2019elec
   19-0 -     0/0/95     . 0.00 2584 0   60658    0.0   0.00  1.43  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/94     . 0.00 2555 0   71360    0.0   0.00  1.35  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/194    . 0.00 1728 0   225947   0.0   0.00  1.79  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 57446 0/714/763  W 7.50 0    0   380251   0.0   7.90  8.41  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   23-0 -     0/0/13     . 0.00 2548 0   32567    0.0   0.00  0.18  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/9      . 0.00 2554 0   29442    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00 2571 0   29769    0.0   0.00  0.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00 2531 0   24649    0.0   0.00  0.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00 2567 0   34716    0.0   0.00  0.61  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00 2580 0   143065   0.0   0.00  3.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00 2596 0   59764    0.0   0.00  2.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00 2521 0   22779    0.0   0.00  9.52  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00 2322 0   179005   0.0   0.00  0.84  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 2597 0   9851     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 2546 0   21858    0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 2592 0   17699    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 2561 0   19399    0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 2570 0   14235    0.0   0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 2593 0   15595    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 2326 0   148319   0.0   0.00  0.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 2594 0   15338    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 2549 0   21858    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 1725 0   243070   0.0   0.00  2.95  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 2589 0   19835    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 2590 0   19620    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 2547 0   24371    0.0   0.00  0.22  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 2556 0   19070    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 2551 0   20569    0.0   0.00  0.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 2566 0   17777    0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 2563 0   16933    0.0   0.00  0.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 2591 0   17743    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 2573 0   22693    0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 2560 0   22016    0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 2569 0   22448    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 2577 0   9096     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 2565 0   23840    0.0   0.00  0.22  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 2538 0   16331    0.0   0.00  0.47  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 2359 0   130360   0.0   0.00  0.50  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 2574 0   22445    0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 2578 0   7899     0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 2553 0   23139    0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 2223 0   237404   0.0   0.00  1.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 2587 0   2361     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 2536 0   9214     0.0   0.00  0.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 2562 0   8490     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 2604 0   0        0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 2601 0   0        0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 2585 0   8680     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 2600 0   0        0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 2576 0   742      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 2602 11  22       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 2583 0   10366    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 2396 0   105003   0.0   0.00  1.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 2224 0   218700   0.0   0.00  1.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 2582 0   8818     0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 2572 0   1447     0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 2588 0   463      0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 2308 0   159456   0.0   0.00  0.87  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 2557 0   4997     0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 801  0   272159   0.0   0.00  5.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 2599 0   0        0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 2581 0   7766     0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 2564 0   10368    0.0   0.00  0.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 599
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 0...70)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 21290
   total entries replaced since starting: 0
   total entries expired since starting: 20670
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 67 miss
   total removes since starting: 22 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit