403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.17.09.txt
 ## swap threshold exceeded
## server overview
2025-11-13.17.09 load[0] mem[56/77] mysql[3/12] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1220          97          84        1045         873
Swap:          1999        1631         368
 17:09:01 up  6:52,  0 users,  load average: 0.33, 0.48, 0.51
## system overview
top - 17:09:01 up  6:52,  0 users,  load average: 0.33, 0.48, 0.51
Tasks: 203 total,   4 running, 197 sleeping,   0 stopped,   2 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    84232 free,  1260928 used,  1075140 buff/cache
KiB Swap:  2047996 total,   377084 free,  1670912 used.   882684 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458860 274272   3664 S 100.0 11.3   5:41.06 /usr/sbin+
 18000 nigeria   20   0  400652  15936  10220 R  12.5  0.7   0:00.05 /opt/cpan+
 18048 root      20   0  185488   7872   4180 R  12.5  0.3   0:00.02 /usr/bin/+
 17998 root      20   0  169868  16852   2880 S   6.2  0.7   0:00.08 /usr/loca+
     1 root      20   0   44424   3672   1720 S   0.0  0.2   0:36.14 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.67 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:24.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.65 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.07 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.76 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.99 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40248   2864   2604 S   0.0  0.1   0:13.18 /usr/lib/+
   379 root      20   0   45352    100     96 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    496    364 S   0.0  0.0   0:02.06 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   488 dbus      20   0   58716   1380    628 S   0.0  0.1   0:13.11 /usr/bin/+
   512 rpc       20   0   69256     96     36 S   0.0  0.0   0:00.03 /sbin/rpc+
   518 root      20   0  152780    152    108 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24712   1252    824 S   0.0  0.1   0:05.78 /usr/lib/+
   521 root      20   0  224148   3120    844 S   0.0  0.1   0:00.30 queueproc+
   524 root      20   0   21540    380    292 S   0.0  0.0   0:00.55 /usr/sbin+
   525 polkitd   20   0  612240    820    428 S   0.0  0.0   0:03.39 /usr/lib/+
   533 root      20   0   52852    404    296 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0  928956   1360    680 S   0.0  0.1   0:20.05 /usr/sbin+
   540 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    460    328 S   0.0  0.0   0:00.68 /usr/sbin+
   574 root      20   0   24208     28      4 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296     60     56 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   3924    916 S   0.0  0.2   0:00.44 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044  82888    872 S   0.0  3.4   0:13.83 /usr/loca+
   931 named     20   0  711724  37400   1664 S   0.0  1.5   0:14.36 /usr/sbin+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   938 root      20   0  436392   2692   2604 S   0.0  0.1   0:00.78 php-fpm: +
   940 root      20   0  385496    512    416 S   0.0  0.0   0:00.75 php-fpm: +
   941 systuser  20   0  114016  14136   2528 S   0.0  0.6   0:05.93 /usr/loca+
   945 cpanelc+  20   0   10448   3404   2160 S   0.0  0.1   0:19.85 /usr/loca+
   946 root      20   0  392856    668    484 S   0.0  0.0   0:00.67 php-fpm: +
   948 memcach+  20   0  342400     72     72 S   0.0  0.0   0:00.55 /usr/bin/+
   950 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   952 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   959 root      20   0  397344   2800    648 S   0.0  0.1   0:03.48 php-fpm: +
   960 root      20   0  153404    312    228 S   0.0  0.0   0:00.53 pure-ftpd+
   963 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   988 root      20   0  386112    556    348 S   0.0  0.0   0:00.67 php-fpm: +
   989 root      20   0  261296   7156   1764 S   0.0  0.3   0:05.96 cpsrvd (S+
   990 root      20   0  572372    980    408 S   0.0  0.0   0:02.18 /usr/bin/+
   991 telegraf  20   0 5654048  37440   6200 S   0.0  1.5   0:13.62 /usr/loca+
   998 root      20   0  111304    416    316 S   0.0  0.0   0:02.80 /usr/sbin+
  1000 root      20   0  290128   3580   2548 S   0.0  0.1   0:06.46 /usr/sbin+
  1001 root      20   0   51508    504    344 S   0.0  0.0   0:00.30 /usr/sbin+
  1125 dovenull  20   0   47048   2544   1716 S   0.0  0.1   0:00.44 dovecot/p+
  1126 dovenull  20   0   48600   3736   1736 S   0.0  0.2   0:00.39 dovecot/i+
  1127 dovecot   20   0   10320    416    300 S   0.0  0.0   0:00.07 dovecot/a+
  1128 root      20   0   10452    568    376 S   0.0  0.0   0:00.28 dovecot/l+
  1129 dovenull  20   0   47052   2316   1516 S   0.0  0.1   0:00.33 dovecot/p+
  1130 dovenull  20   0   48060   3196   1580 S   0.0  0.1   0:00.27 dovecot/i+
  1133 root      20   0   24556   2280    260 S   0.0  0.1   0:00.15 dovecot/c+
  1137 dovecot   20   0   13568    708    472 S   0.0  0.0   0:00.05 dovecot/s+
  1147 root      20   0  248176  52808    692 S   0.0  2.2   0:05.78 /usr/loca+
  1164 systuser  20   0  157708   2824    832 S   0.0  0.1   0:00.12 SonarPush+
  1165 wp-tool+  20   0  410452  32640   1708 S   0.0  1.3   0:20.86 /usr/bin/+
  1166 wp-tool+  20   0  387528  13284   1684 S   0.0  0.5   0:00.28 /usr/bin/+
  1208 dovecot   20   0   41156   1516   1048 S   0.0  0.1   0:00.57 dovecot/a+
  1236 root      20   0  183900   6688   3460 S   0.0  0.3   0:01.76 cpdavd - +
  1239 root      20   0  209296  10268   2360 S   0.0  0.4   0:02.16 tailwatchd
  1241 root      20   0  167452   1308    704 S   0.0  0.1   0:00.38 dnsadmin +
  1631 root      20   0  299272    748    368 S   0.0  0.0   0:00.68 php-fpm: +
  1677 root      38  18  130416   1408    720 S   0.0  0.1   0:00.06 cpanellog+
  1979 root      20   0  267036   7760    668 S   0.0  0.3   0:04.95 /usr/sbin+
  1980 root      20   0  183284  11876   1140 S   0.0  0.5   0:21.91 lfd - sle+
  1981 root      20   0   12824    360    240 S   0.0  0.0   0:02.96 /usr/loca+
  1982 root      20   0   12732    312    232 S   0.0  0.0   0:02.52 /usr/loca+
  1983 root      20   0   12856    368    240 S   0.0  0.0   0:02.82 /usr/loca+
  1986 root      20   0   53268     96     96 S   0.0  0.0   0:00.04 /usr/loca+
  5405 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  5511 root      20   0  267032  98152   1224 S   0.0  4.1   0:03.72 spamd chi+
  5512 root      20   0  261652  91020    340 S   0.0  3.8   0:00.37 spamd chi+
  9666 root      20   0 1350088  11268    600 S   0.0  0.5   0:00.06 /usr/bin/+
  9704 root      20   0 1277312  11828    596 S   0.0  0.5   0:00.07 /usr/bin/+
 10491 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12412 root      20   0       0      0      0 R   0.0  0.0   0:00.01 [kworker/+
 13192 nobody    20   0  277788  18828   3880 S   0.0  0.8   0:00.46 /usr/sbin+
 14439 nobody    20   0  277784  18756   3788 S   0.0  0.8   0:00.36 /usr/sbin+
 15095 nobody    20   0  277784  18560   3664 S   0.0  0.8   0:00.29 /usr/sbin+
 15297 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15363 nobody    20   0  277784  18036   3244 S   0.0  0.7   0:00.29 /usr/sbin+
 16100 nobody    20   0  277784  18412   3620 S   0.0  0.8   0:00.16 /usr/sbin+
 16165 nobody    20   0  277924  18420   3624 S   0.0  0.8   0:00.26 /usr/sbin+
 16167 nobody    20   0  277784  18144   3340 S   0.0  0.7   0:00.21 /usr/sbin+
 16168 nobody    20   0  277784  18212   3396 S   0.0  0.8   0:00.23 /usr/sbin+
 16224 nobody    20   0  277784  18444   3584 S   0.0  0.8   0:00.20 /usr/sbin+
 16893 nobody    20   0  277784  18160   3344 S   0.0  0.8   0:00.12 /usr/sbin+
 16908 nobody    20   0  277784  18468   3700 S   0.0  0.8   0:00.07 /usr/sbin+
 16911 nobody    20   0  277784  18140   3404 S   0.0  0.7   0:00.12 /usr/sbin+
 16930 nobody    20   0  277784  16816   2148 S   0.0  0.7   0:00.16 /usr/sbin+
 16931 nobody    20   0  277920  18328   3612 S   0.0  0.8   0:00.09 /usr/sbin+
 16932 nobody    20   0  277784  17936   3188 S   0.0  0.7   0:00.10 /usr/sbin+
 16933 nobody    20   0  277784  16844   2172 S   0.0  0.7   0:00.08 /usr/sbin+
 17497 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.02 [httpd] <+
 17673 nobody    20   0  277932  18104   3376 S   0.0  0.7   0:00.03 /usr/sbin+
 17797 nobody    20   0  277784  16724   2124 S   0.0  0.7   0:00.01 /usr/sbin+
 17818 nobody    20   0  277784  17872   3128 S   0.0  0.7   0:00.02 /usr/sbin+
 17819 nobody    20   0  277784  16724   2124 S   0.0  0.7   0:00.01 /usr/sbin+
 17835 nobody    20   0  277776  17896   3288 S   0.0  0.7   0:00.01 /usr/sbin+
 17836 nobody    20   0  277784  17980   3348 S   0.0  0.7   0:00.00 /usr/sbin+
 17837 nobody    20   0  277784  16728   2120 S   0.0  0.7   0:00.01 /usr/sbin+
 17838 nobody    20   0  277784  16724   2124 S   0.0  0.7   0:00.00 /usr/sbin+
 17851 nigeria   20   0  397064   5348   2368 S   0.0  0.2   0:00.00 php-fpm: +
 17855 nobody    20   0  277780  18012   3380 S   0.0  0.7   0:00.00 /usr/sbin+
 17856 nobody    20   0  277640  16552   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 17857 nobody    20   0  277784  16728   2120 S   0.0  0.7   0:00.01 /usr/sbin+
 17858 nobody    20   0  277640  16724   2284 S   0.0  0.7   0:00.00 /usr/sbin+
 17859 nobody    20   0  277640  16552   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 17860 nobody    20   0  277504  16488   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 17861 nobody    20   0  277640  16552   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 17862 nobody    20   0  277640  16552   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 17952 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 17957 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 17959 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17960 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17961 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17962 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17964 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17965 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17967 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 17968 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17970 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17972 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 17973 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 17974 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 17975 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 17976 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 17983 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 17984 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17986 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17988 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17989 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17990 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 17991 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17992 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17994 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 17999 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 18008 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 18009 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 18013 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 18031 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 18036 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 18043 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
 34743 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.40 [kworker]
 51520 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 67540 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 82252 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 91029 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 91983 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 96704 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    10:16   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:16   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    10:16   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   10:16   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   10:16   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root      51520  0.0  0.0      0     0 ?        S    15:59   0:00  \_ [kworker/1:2]
root      67540  0.0  0.0      0     0 ?        S    16:15   0:00  \_ [kworker/1:3]
root      82252  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:1]
root      91029  0.0  0.0      0     0 ?        S    16:39   0:00  \_ [kworker/1:0]
root      91983  0.0  0.0      0     0 ?        S    16:40   0:00  \_ [kworker/0:4]
root      96704  0.0  0.0      0     0 ?        S    16:45   0:00  \_ [kworker/0:0]
root       5405  0.0  0.0      0     0 ?        S    16:56   0:00  \_ [kworker/0:2]
root      10491  0.0  0.0      0     0 ?        S    17:01   0:00  \_ [kworker/u200:0]
root      12412  0.0  0.0      0     0 ?        S    17:03   0:00  \_ [kworker/1:1]
root      15297  0.0  0.0      0     0 ?        S    17:06   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44424  3672 ?        Ss   10:16   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40248  2864 ?        Ss   10:16   0:13 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   100 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   496 ?        S<sl 10:16   0:02 /sbin/auditd
dbus        488  0.0  0.0  58716  1380 ?        Ss   10:16   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256    96 ?        Ss   10:16   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   152 ?        Ss   10:16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1252 ?        Ss   10:16   0:05 /usr/lib/systemd/systemd-logind
root        521  0.0  0.1 224148  3120 ?        Ss   10:16   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   380 ?        Ss   10:16   0:00 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240   820 ?        Ssl  10:16   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   404 ?        Ss   10:16   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.0  0.0 928956  1360 ?        Ssl  10:16   0:20 /usr/sbin/nscd
root        540  0.0  0.0   4388    36 ?        Ss   10:16   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208     0 ?        Ssl  10:16   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   460 ?        Ss   10:16   0:00 /usr/sbin/crond -n
root      17957  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17974  0.0  0.0 113284  1212 ?        Ss   17:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      17975  0.0  0.0 108052   356 ?        S    17:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      17976  0.0  0.0 113288  1516 ?        S    17:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      18050  0.0  0.0 153840  2088 ?        R    17:09   0:00  |               \_ ps auxf
root      17959  0.0  0.0 183048  2152 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17991  0.0  0.0  20164   804 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      17960  0.0  0.0 183048  2152 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17992  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      17961  0.0  0.0 183048  2152 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17989  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      17962  0.0  0.0 183048  2148 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17988  0.0  0.0  20164   804 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      17964  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17984  0.0  0.0  20164   804 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      17965  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17986  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      17967  0.0  0.0 183048  2136 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17990  0.0  0.0 113284  1212 ?        Ss   17:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      17998  0.0  0.6 169868 16852 ?        S    17:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      18043  0.0  0.0 113496  1420 ?        S    17:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      18048  0.0  0.4 239872 11608 ?        R    17:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      17968  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17994  0.0  0.0  20164   964 ?        Ss   17:09   0:00  |   \_ jailshell (pactpay) [18008] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18008  0.0  0.0  20164   260 ?        S    17:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   18009  0.0  0.7 476724 17484 ?        S    17:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      17970  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root      17983  0.0  0.0  20164   968 ?        Ss   17:09   0:00      \_ jailshell (nigeria) [17999] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17999  0.0  0.0  20164   264 ?        S    17:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   18000  0.0  0.6 400652 15936 ?        S    17:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    28 ?        Ss   10:16   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296    60 tty1     Ss+  10:16   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704    32 ttyS0    Ss+  10:16   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  3924 ?        Ss   10:16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.0  3.4 1763044 82888 ?       Ssl  10:16   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.5 711724 37400 ?        Ssl  10:16   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.0 445028     0 ?        Ss   10:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        938  0.0  0.1 436392  2692 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 385496   512 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    941  0.0  0.5 114016 14136 ?        Ssl  10:16   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10448  3404 ?        Ss   10:16   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        946  0.0  0.0 392856   668 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
memcach+    948  0.0  0.0 342400    72 ?        Ssl  10:16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    48 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524    72 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    44 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        959  0.0  0.1 397344  2800 ?        Ss   10:16   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   17851  0.0  0.2 397064  5348 ?        S    17:08   0:00  \_ php-fpm: pool nigeriadecide_org
root        960  0.0  0.0 153404   312 ?        Ss   10:16   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608    72 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        988  0.0  0.0 386112   556 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        989  0.0  0.2 261296  7156 ?        Ss   10:16   0:05 cpsrvd (SSL) - waiting for connections                   
root      17952  0.0  0.0      0     0 ?        Z    17:08   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   980 ?        Ssl  10:16   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.5 5654048 37440 ?       SLsl 10:16   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   416 ?        Ss   10:16   0:02 /usr/sbin/sshd -D
root      17972  0.0  0.1 111304  4268 ?        Ss   17:09   0:00  \_ sshd: [accepted]
sshd      17973  0.0  0.1 115644  2624 ?        S    17:09   0:00      \_ sshd: [net]
root       1000  0.0  0.1 290128  3580 ?        Ssl  10:16   0:06 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   504 ?        Ss   10:16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.1  47048  2544 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  48600  3736 ?        S    10:16   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   416 ?        S    10:16   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   568 ?        S    10:16   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  47052  2316 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  48060  3196 ?        S    10:16   0:00  \_ dovecot/imap-login
root       1133  0.0  0.0  24556  2280 ?        S    10:16   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   708 ?        S    10:16   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41156  1516 ?        S    10:16   0:00  \_ dovecot/auth
root       1147  0.0  2.1 248176 52808 ?        Ss   10:16   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  4.0 267032 98152 ?        S    10:20   0:03  \_ spamd child
root       5512  0.0  3.7 261652 91020 ?        S    10:20   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  2824 ?        S    10:16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  1.3 410452 32640 ?        Ss   10:16   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.5 387528 13284 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.2 183900  6688 ?        Ss   10:16   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209296 10268 ?        Ss   10:16   0:02 tailwatchd
root       1241  0.0  0.0 167452  1308 ?        Ss   10:16   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   748 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1408 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1731  1.3 11.3 1458860 274272 ?      Sl   10:16   5:41 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1979  0.0  0.3 267036  7760 ?        Ss   10:16   0:04 /usr/sbin/httpd -k start
root       1981  0.0  0.0  12824   360 ?        S    10:16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1982  0.0  0.0  12732   312 ?        S    10:16   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1983  0.0  0.0  12856   368 ?        S    10:16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1986  0.0  0.0  53268    96 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    13192  0.1  0.7 277788 18828 ?        S    17:03   0:00  \_ /usr/sbin/httpd -k start
nobody    14439  0.1  0.7 277784 18756 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody    15095  0.1  0.7 277784 18560 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody    15363  0.1  0.7 277784 18036 ?        S    17:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    18031  0.0  0.6 352096 15232 ?        S    17:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    16100  0.1  0.7 277784 18412 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16165  0.2  0.7 277924 18420 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16167  0.1  0.7 277784 18144 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16168  0.1  0.7 277784 18212 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16224  0.1  0.7 277784 18444 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16893  0.1  0.7 277784 18160 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16908  0.1  0.7 277784 18468 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16911  0.1  0.7 277784 18140 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16930  0.2  0.6 277784 16816 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16931  0.1  0.7 277920 18328 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16932  0.1  0.7 277784 17936 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    16933  0.1  0.6 277784 16844 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody    17497  0.0  0.0      0     0 ?        Z    17:08   0:00  \_ [httpd] <defunct>
nobody    17673  0.1  0.7 277932 18104 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17797  0.1  0.6 277784 16724 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17818  0.2  0.7 277784 17872 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17819  0.1  0.6 277784 16724 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17835  0.1  0.7 277776 17896 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17836  0.0  0.7 277784 17980 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17837  0.1  0.6 277784 16728 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17838  0.0  0.6 277784 16724 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17855  0.0  0.7 277780 18012 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17856  0.0  0.6 277640 16552 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17857  0.1  0.6 277784 16728 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17858  0.0  0.6 277640 16724 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17859  0.0  0.6 277640 16552 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17860  0.0  0.6 277504 16488 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    18013  0.0  0.6 352096 15232 ?        S    17:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    17861  0.0  0.6 277640 16552 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody    17862  0.0  0.6 277640 16552 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
root       1980  0.0  0.4 183284 11876 ?        Ss   10:16   0:21 lfd - sleeping
oysipao+  34743  0.0  0.0   3148   416 ?        Ss   11:00   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152   496 ?        S    11:00   0:00  \_ [kworker]
root       9666  0.0  0.4 1350088 11268 ?       Ssl  17:00   0:00 /usr/bin/cspdaemon
root       9704  0.0  0.4 1277312 11828 ?       Ssl  17:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 24734  Threads: 3  Questions: 1986176  Slow queries: 0  Opens: 7793  Flush tables: 1  Open tables: 2000  Queries per second avg: 80.301
*************************** 1. row ***************************
     Id: 27379
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 27380
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 27390
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.129.22 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 148.113.206.49 TIME_WAIT
      1 167.114.139.100 TIME_WAIT
      1 167.114.139.43 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 193.43.104.211 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.25 TIME_WAIT
      1 47.128.18.55 TIME_WAIT
      1 47.79.214.130 TIME_WAIT
      1 66.249.70.138 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 17:09:01 WAT
   Restart Time: Thursday, 13-Nov-2025 10:16:53 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 52 minutes 8 seconds
   Server load: 0.33 0.48 0.51
   Total accesses: 138188 - Total Traffic: 3.0 GB - Total Duration: 72450488
   CPU Usage: u2.54 s5.72 cu1724.21 cs1422.65 - 12.8% CPU load
   5.59 requests/sec - 127.7 kB/second - 22.8 kB/request - 524.289 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 14 idle workers

.._K_KKKK__K_.K_K_K___KCK_WK__K_KWK.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  -     0/0/6390  . 0.00 0     0   2976402 0.0   0.00  129.32 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  -     0/0/6152  . 0.00 2     0   2876304 0.0   0.00  145.37 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  16893 0/20/5960 _ 0.53 1     283 2875878 0.0   0.56  129.39 192.178.4.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2876095289 HTTP/1.1
   3-0  17673 5/6/6051  K 0.11 2     357 2849309 154.5 0.16  138.26 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1263908682 HTTP/1.1
   4-0  16908 0/14/6036 _ 0.29 1     1   2911165 0.0   0.30  137.12 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   5-0  17797 1/2/6195  K 0.02 1     358 2749039 29.3  0.06  130.75 66.249.70.4   http/1.1 schoolplus.cloudware.ng:80 GET /?p=895708199 HTTP/1.1
   6-0  17818 1/2/5932  K 0.04 1     364 2646791 35.2  0.06  123.86 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=3459326672 HTTP/1.1
   7-0  17819 1/2/5445  K 0.02 1     346 2604998 29.6  0.06  135.07 66.249.64.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3161381369 HTTP/1.1
   8-0  13192 2/83/5747 K 2.37 3     253 2520434 59.0  2.02  118.33 66.249.64.232 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1453271148 HTTP/1.1
   9-0  17835 0/2/5776  _ 0.01 1     375 2596375 0.0   0.04  120.36 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2239115514 HTTP/1.1
   10-0 17836 0/2/5742  _ 0.02 0     16  2632818 0.0   0.04  118.60 3.235.215.92  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/images/polling_unit_categ
   11-0 16100 1/29/5492 K 0.97 1     267 2850586 30.6  0.77  138.34 66.249.70.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4220540500 HTTP/1.1
   12-0 16165 0/44/4914 _ 1.19 1     314 2563243 0.0   1.22  108.34 66.249.70.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1954019729 HTTP/1.1
   13-0 -     0/0/4901  . 0.00 1     0   2280349 0.0   0.00  107.56 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 17837 2/2/4726  K 0.02 4     326 2188753 60.9  0.06  102.79 192.178.4.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1595912587 HTTP/1.1
   15-0 16167 0/36/4308 _ 0.98 0     255 2121548 0.0   1.03  93.93  66.249.70.107 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1643137330 HTTP/1.1
   16-0 17838 1/2/4120  K 0.02 0     409 2118576 32.2  0.06  94.70  66.249.70.7   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1446647181 HTTP/1.1
   17-0 15095 0/50/4078 _ 1.53 1     276 2072316 0.0   1.32  91.04  66.249.64.224 http/1.1 schoolplus.cloudware.ng:80 GET /?p=173366403 HTTP/1.1
   18-0 16168 1/38/4377 K 1.32 0     390 1969705 30.3  1.09  90.59  192.178.4.101 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2819375254 HTTP/1.1
   19-0 16911 0/21/3448 _ 0.53 1     1   1729789 0.0   0.56  82.24  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   20-0 14439 0/61/3195 _ 1.85 1     344 1798952 0.0   1.60  71.08  66.249.70.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2712197668 HTTP/1.1
   21-0 17855 0/2/3039  _ 0.00 0     308 1520833 0.0   0.04  64.74  66.249.64.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3193482913 HTTP/1.1
   22-0 16224 1/36/2756 K 0.91 3     353 1479456 29.2  0.93  58.13  66.249.64.9   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1906585489 HTTP/1.1
   23-0 17856 1/2/2352  C 0.01 0     0   1384370 0.2   0.03  59.84  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 17857 2/2/2683  K 0.03 3     272 1454080 58.3  0.06  57.95  66.249.64.168 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4145311338 HTTP/1.1
   25-0 17858 0/2/2203  _ 0.01 0     0   1115541 0.0   0.06  62.39  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   26-0 17859 0/1/2351  W 0.00 0     0   1267477 0.0   0.03  49.46  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   27-0 17860 1/2/1211  K 0.02 0     470 743674  32.1  0.04  26.48  66.249.64.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1842527633 HTTP/1.1
   28-0 17861 0/1/1268  _ 0.00 1     271 798951  0.0   0.03  28.85  66.249.64.231 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2256109652 HTTP/1.1
   29-0 17862 0/1/1297  _ 0.00 1     267 646395  0.0   0.03  27.31  192.178.4.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=642783215 HTTP/1.1
   30-0 16930 1/27/1179 K 0.74 1     403 703221  29.5  0.80  28.89  66.249.70.69  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4034833807 HTTP/1.1
   31-0 16931 0/18/830  _ 0.36 1     275 488713  0.0   0.43  19.85  66.249.70.160 http/1.1 schoolplus.cloudware.ng:80 GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=224226
   32-0 16932 1/18/640  K 0.47 2     273 483662  29.0  0.50  14.82  66.249.70.99  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2637462251 HTTP/1.1
   33-0 15363 0/49/833  W 1.39 0     0   644447  0.0   1.35  19.51  66.249.70.66  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1300449940 HTTP/1.1
   34-0 16933 1/15/823  K 0.37 4     309 497502  34.8  0.42  18.28  66.249.64.106 http/1.1 schoolplus.cloudware.ng:80 GET /?p=471481752 HTTP/1.1
   35-0 -     0/0/1007  . 0.00 277   0   422597  0.0   0.00  21.18  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/442   . 0.00 168   0   258992  0.0   0.00  11.41  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/503   . 0.00 217   0   346962  0.0   0.00  13.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/369   . 0.00 159   0   314946  0.0   0.00  9.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/282   . 0.00 3398  0   389482  0.0   0.00  7.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/406   . 0.00 3172  0   316941  0.0   0.00  10.20  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/191   . 0.00 3230  0   284194  0.0   0.00  4.74   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/223   . 0.00 3364  0   246375  0.0   0.00  5.85   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/204   . 0.00 7875  0   233250  0.0   0.00  5.43   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/211   . 0.00 7756  0   192910  0.0   0.00  3.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/125   . 0.00 7816  0   186238  0.0   0.00  3.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/159   . 0.00 7693  0   333599  0.0   0.00  4.47   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/173   . 0.00 7765  0   217736  0.0   0.00  4.49   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/62    . 0.00 7793  0   150932  0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/78    . 0.00 7878  0   104997  0.0   0.00  2.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/42    . 0.00 7861  0   74936   0.0   0.00  1.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/40    . 0.00 7783  0   91237   0.0   0.00  0.94   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/49    . 0.00 7696  0   155447  0.0   0.00  1.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/43    . 0.00 7754  0   114977  0.0   0.00  1.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/196   . 0.00 7039  0   251167  0.0   0.00  5.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/47    . 0.00 7828  0   130020  0.0   0.00  1.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/23    . 0.00 7795  0   73843   0.0   0.00  0.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/42    . 0.00 7796  0   67360   0.0   0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/19    . 0.00 7827  0   48527   0.0   0.00  0.50   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/47    . 0.00 7585  0   143523  0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/60    . 0.00 7635  0   118427  0.0   0.00  1.36   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/5     . 0.00 7869  0   67934   0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/13    . 0.00 7810  0   128175  0.0   0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/6     . 0.00 7863  0   66229   0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/67    . 0.00 7713  0   118099  0.0   0.00  1.73   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/24    . 0.00 7817  0   15292   0.0   0.00  0.60   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/13    . 0.00 7866  0   60306   0.0   0.00  0.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/17    . 0.00 7774  0   127718  0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/13    . 0.00 7840  0   77438   0.0   0.00  0.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/9     . 0.00 7753  0   128663  0.0   0.00  0.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/160   . 0.00 7146  0   198571  0.0   0.00  3.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/21    . 0.00 7758  0   71385   0.0   0.00  0.48   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/10    . 0.00 7802  0   58674   0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/12    . 0.00 7755  0   127820  0.0   0.00  0.24   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/11    . 0.00 7876  0   3646    0.0   0.00  0.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/36    . 0.00 7811  0   15886   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/5     . 0.00 7797  0   121937  0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/9     . 0.00 7881  0   5296    0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/18    . 0.00 7843  4   9846    0.0   0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/14    . 0.00 7766  0   129904  0.0   0.00  0.39   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/88    . 0.00 7476  0   167903  0.0   0.00  2.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/19    . 0.00 7769  0   133107  0.0   0.00  0.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/2     . 0.00 7935  1   8       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/14    . 0.00 7767  0   127868  0.0   0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/3     . 0.00 7934  0   5       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7     . 0.00 7907  0   2013    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   86-0 -     0/0/45    . 0.00 13791 0   25272   0.0   0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   87-0 -     0/0/1     . 0.00 14009 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   88-0 -     0/0/5     . 0.00 13957 0   1918    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   89-0 -     0/0/48    . 0.00 13779 0   28263   0.0   0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 365
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 1...63)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 44505
   total entries replaced since starting: 0
   total entries expired since starting: 44120
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 8 hit, 93 miss
   total removes since starting: 20 hit, 202 miss
Youez - 2016 - github.com/yon3zu
LinuXploit