403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.18.33.txt
 ## swap threshold exceeded
## server overview
2025-11-13.18.33 load[0] mem[52/78] mysql[1/12] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1163         179         100        1020         927
Swap:          1999        1670         329
 18:33:01 up  8:16,  0 users,  load average: 0.14, 0.23, 0.61
## system overview
top - 18:33:01 up  8:16,  0 users,  load average: 0.14, 0.23, 0.61
Tasks: 202 total,   2 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.6 us, 41.9 sy,  0.0 ni,  6.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   173584 free,  1201812 used,  1044904 buff/cache
KiB Swap:  2047996 total,   337916 free,  1710080 used.   939328 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458860 285392   3524 S  40.0 11.8   6:57.76 /usr/sbin+
     1 root      20   0   44424   3676   1720 S   6.7  0.2   0:43.31 /usr/lib/+
   318 cloudw    20   0  352096  15232  10128 S   6.7  0.6   0:00.01 /opt/cpan+
   385 nigeria   20   0  400652  15932  10220 S   6.7  0.7   0:00.01 /opt/cpan+
   391 pactpay   20   0  476460  16052  10480 S   6.7  0.7   0:00.01 /opt/cpan+
   535 nscd      20   0  928956   1360    680 S   6.7  0.1   0:25.60 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.54 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:29.94 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.47 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.10 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.89 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   308 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
   311 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
   312 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
   321 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
   322 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   323 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   324 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   325 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   326 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   327 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   329 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   330 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
   331 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
   333 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   335 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
   336 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
   337 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
   358 root      20   0   39500   2360   2104 S   0.0  0.1   0:16.02 /usr/lib/+
   360 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
   362 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   363 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
   364 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
   365 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   367 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   368 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   369 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
   371 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
   372 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
   373 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   379 root      20   0   45352    100     96 S   0.0  0.0   0:00.35 /usr/lib/+
   381 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
   390 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
   409 root      16  -4   55532    516    384 S   0.0  0.0   0:02.52 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   488 dbus      20   0   58716   1380    628 S   0.0  0.1   0:15.79 /usr/bin/+
   512 rpc       20   0   69256     96     36 S   0.0  0.0   0:00.03 /sbin/rpc+
   518 root      20   0  152780    152    108 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24712   1252    824 S   0.0  0.1   0:06.94 /usr/lib/+
   521 root      20   0  224148   3120    844 S   0.0  0.1   0:00.35 queueproc+
   524 root      20   0   21540    380    292 S   0.0  0.0   0:00.66 /usr/sbin+
   525 polkitd   20   0  612240    820    428 S   0.0  0.0   0:04.07 /usr/lib/+
   533 root      20   0   52852    364    256 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    460    328 S   0.0  0.0   0:00.80 /usr/sbin+
   574 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296     60     56 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   3924    916 S   0.0  0.2   0:00.52 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.66 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044  79984    836 S   0.0  3.3   0:13.90 /usr/loca+
   931 named     20   0  711724  37804   1752 S   0.0  1.6   0:17.01 /usr/sbin+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   938 root      20   0  436392   2692   2604 S   0.0  0.1   0:00.90 php-fpm: +
   940 root      20   0  385496    456    360 S   0.0  0.0   0:00.88 php-fpm: +
   941 systuser  20   0  114016  14320   2596 S   0.0  0.6   0:07.06 /usr/loca+
   945 cpanelc+  20   0   10448   3400   2156 S   0.0  0.1   0:24.06 /usr/loca+
   946 root      20   0  392856    564    380 S   0.0  0.0   0:00.78 php-fpm: +
   948 memcach+  20   0  342400     72     72 S   0.0  0.0   0:00.65 /usr/bin/+
   950 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   952 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   959 root      20   0  397344   2804    652 S   0.0  0.1   0:04.27 php-fpm: +
   960 root      20   0  153404    312    228 S   0.0  0.0   0:00.64 pure-ftpd+
   963 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   988 root      20   0  386112    556    348 S   0.0  0.0   0:00.78 php-fpm: +
   989 root      20   0  261296   7208   1776 S   0.0  0.3   0:07.04 cpsrvd (S+
   990 root      20   0  572372    980    408 S   0.0  0.0   0:02.59 /usr/bin/+
   991 telegraf  20   0 5654048  37636   6108 S   0.0  1.6   0:16.35 /usr/loca+
   998 root      20   0  111304    416    316 S   0.0  0.0   0:03.39 /usr/sbin+
  1000 root      20   0  306512   3328   2176 S   0.0  0.1   0:07.90 /usr/sbin+
  1001 root      20   0   51508    504    344 S   0.0  0.0   0:00.35 /usr/sbin+
  1125 dovenull  20   0   47048   2536   1708 S   0.0  0.1   0:00.52 dovecot/p+
  1126 dovenull  20   0   48600   3616   1696 S   0.0  0.1   0:00.44 dovecot/i+
  1127 dovecot   20   0   10320    416    300 S   0.0  0.0   0:00.08 dovecot/a+
  1128 root      20   0   10452    568    376 S   0.0  0.0   0:00.34 dovecot/l+
  1129 dovenull  20   0   47052   2296   1496 S   0.0  0.1   0:00.39 dovecot/p+
  1130 dovenull  20   0   48060   3416   1744 S   0.0  0.1   0:00.33 dovecot/i+
  1133 root      20   0   24564   2652    512 S   0.0  0.1   0:00.18 dovecot/c+
  1137 dovecot   20   0   13568    708    472 S   0.0  0.0   0:00.07 dovecot/s+
  1147 root      20   0  248176  25628    692 S   0.0  1.1   0:06.36 /usr/loca+
  1164 systuser  20   0  157708   2824    832 S   0.0  0.1   0:00.14 SonarPush+
  1165 wp-tool+  20   0  410452  32640   1708 S   0.0  1.3   0:25.07 /usr/bin/+
  1166 wp-tool+  20   0  387528  13284   1684 S   0.0  0.5   0:00.30 /usr/bin/+
  1208 dovecot   20   0   41156   1516   1048 S   0.0  0.1   0:00.69 dovecot/a+
  1236 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.24 cpdavd - +
  1239 root      20   0  209296  10376   2392 S   0.0  0.4   0:02.67 tailwatchd
  1241 root      20   0  167452   1308    704 S   0.0  0.1   0:00.45 dnsadmin +
  1631 root      20   0  299272    748    368 S   0.0  0.0   0:00.81 php-fpm: +
  1677 root      38  18  130416   1408    720 S   0.0  0.1   0:00.07 cpanellog+
  1979 root      20   0  267036   7748    668 S   0.0  0.3   0:06.14 /usr/sbin+
  1980 root      20   0  183840  12692   1140 S   0.0  0.5   0:26.71 lfd - sle+
  1981 root      20   0   12816    360    240 S   0.0  0.0   0:03.74 /usr/loca+
  1982 root      20   0   12732    312    232 S   0.0  0.0   0:03.20 /usr/loca+
  1983 root      20   0   12852    368    240 S   0.0  0.0   0:03.57 /usr/loca+
  1986 root      20   0   53268     96     96 S   0.0  0.0   0:00.04 /usr/loca+
  5511 root      20   0  265188  94412   2736 S   0.0  3.9   0:04.55 spamd chi+
  5512 root      20   0  261652  72344    340 S   0.0  3.0   0:00.37 spamd chi+
 34743 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.50 [kworker]
 36225 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 55578 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 70560 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 70917 root      20   0 1349832  11072    600 S   0.0  0.5   0:00.08 /usr/bin/+
 70952 root      20   0 1277056  11844    596 S   0.0  0.5   0:00.07 /usr/bin/+
 78675 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 83479 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 87279 nobody    20   0  277908  19268   4252 S   0.0  0.8   0:01.48 /usr/sbin+
 87433 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 90193 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 92031 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 92885 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93707 nobody    20   0  277720  18920   4012 S   0.0  0.8   0:00.92 /usr/sbin+
 95553 nobody    20   0  277784  19180   4200 S   0.0  0.8   0:00.77 /usr/sbin+
 95640 nobody    20   0  277784  18820   3920 S   0.0  0.8   0:00.87 /usr/sbin+
 98616 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98644 nobody    20   0  277784  18780   3968 S   0.0  0.8   0:00.46 /usr/sbin+
 98681 nobody    20   0  277796  18524   3700 S   0.0  0.8   0:00.37 /usr/sbin+
 99104 nobody    20   0  277940  18880   3996 S   0.0  0.8   0:00.33 /usr/sbin+
 99408 nobody    20   0  277784  18480   3664 S   0.0  0.8   0:00.29 /usr/sbin+
 99465 nobody    20   0  277784  18496   3660 S   0.0  0.8   0:00.24 /usr/sbin+
 99484 nobody    20   0  277784  18664   3796 S   0.0  0.8   0:00.35 /usr/sbin+
 99499 nobody    20   0  277916  17900   3184 S   0.0  0.7   0:00.29 /usr/sbin+
 99500 nobody    20   0  277784  18400   3632 S   0.0  0.8   0:00.37 /usr/sbin+
 99501 nobody    20   0  277916  18532   3688 S   0.0  0.8   0:00.29 /usr/sbin+
 99502 nobody    20   0  277784  18512   3676 S   0.0  0.8   0:00.27 /usr/sbin+
 99630 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
100539 nobody    20   0  277920  18460   3704 S   0.0  0.8   0:00.18 /usr/sbin+
100643 nobody    20   0  277784  18384   3652 S   0.0  0.8   0:00.13 /usr/sbin+
100770 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
101497 nobody    20   0  277568  17900   3336 S   0.0  0.7   0:00.09 /usr/sbin+
101512 nobody    20   0  277544  18316   3672 S   0.0  0.8   0:00.08 /usr/sbin+
101513 nobody    20   0  277784  18308   3488 S   0.0  0.8   0:00.06 /usr/sbin+
101514 nobody    20   0  277932  18120   3404 S   0.0  0.7   0:00.15 /usr/sbin+
101597 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101974 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
101975 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
102162 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
102179 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
102328 nobody    20   0  277784  16720   2132 S   0.0  0.7   0:00.01 /usr/sbin+
102341 nobody    20   0  277792  16800   2128 S   0.0  0.7   0:00.01 /usr/sbin+
102342 nobody    20   0  277784  16812   2160 S   0.0  0.7   0:00.01 /usr/sbin+
102349 nobody    20   0  277784  17704   3100 S   0.0  0.7   0:00.01 /usr/sbin+
102350 nobody    20   0  277784  16716   2128 S   0.0  0.7   0:00.01 /usr/sbin+
102351 nobody    20   0  277640  16544   2120 S   0.0  0.7   0:00.01 /usr/sbin+
102352 nobody    20   0  277780  17988   3376 S   0.0  0.7   0:00.00 /usr/sbin+
102357 nigeria   20   0  397064   5348   2368 S   0.0  0.2   0:00.00 php-fpm: +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    10:16   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    10:16   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:16   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    10:16   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   10:16   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root      36225  0.0  0.0      0     0 ?        S    17:27   0:00  \_ [kworker/u200:2]
root      55578  0.0  0.0      0     0 ?        S    17:46   0:00  \_ [kworker/1:4]
root      70560  0.0  0.0      0     0 ?        S    18:00   0:00  \_ [kworker/u200:1]
root      78675  0.0  0.0      0     0 ?        S    18:08   0:00  \_ [kworker/1:2]
root      83479  0.0  0.0      0     0 ?        S    18:13   0:00  \_ [kworker/0:2]
root      87433  0.0  0.0      0     0 ?        S    18:17   0:00  \_ [kworker/0:4]
root      90193  0.0  0.0      0     0 ?        S    18:20   0:00  \_ [kworker/1:0]
root      92031  0.0  0.0      0     0 ?        S    18:22   0:00  \_ [kworker/0:0]
root      92885  0.0  0.0      0     0 ?        S    18:23   0:00  \_ [kworker/0:1]
root      98616  0.0  0.0      0     0 ?        S    18:29   0:00  \_ [kworker/1:1]
root      99630  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/u200:0]
root     101597  0.0  0.0      0     0 ?        S    18:32   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44424  3676 ?        Ss   10:16   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  2360 ?        Ss   10:16   0:16 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   100 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   516 ?        S<sl 10:16   0:02 /sbin/auditd
dbus        488  0.0  0.0  58716  1380 ?        Ss   10:16   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256    96 ?        Ss   10:16   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   152 ?        Ss   10:16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1252 ?        Ss   10:16   0:06 /usr/lib/systemd/systemd-logind
root        521  0.0  0.1 224148  3120 ?        Ss   10:16   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   380 ?        Ss   10:16   0:00 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240   820 ?        Ssl  10:16   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   364 ?        Ss   10:16   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.0  0.0 928956  1360 ?        Ssl  10:16   0:25 /usr/sbin/nscd
root        540  0.0  0.0   4388    36 ?        Ss   10:16   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208     0 ?        Ssl  10:16   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   460 ?        Ss   10:16   0:00 /usr/sbin/crond -n
root        321  0.0  0.0 183048  2144 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        335  0.0  0.0 113284  1212 ?        Ss   18:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root        336  0.0  0.0 108052   356 ?        S    18:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root        337  0.0  0.0 113288  1520 ?        S    18:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root        396  0.0  0.0 153672  1780 ?        R    18:33   0:00  |               \_ ps auxf
root        322  0.0  0.0 183048  2148 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        367  0.0  0.0  20164   808 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root        323  0.0  0.0 183048  2148 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        372  0.0  0.0  20164   804 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root        324  0.0  0.0 183048  2148 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        363  0.0  0.0  20164   804 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root        325  0.0  0.0 183048  2144 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        373  0.0  0.0  20164   808 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root        326  0.0  0.0 183048  2144 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        368  0.0  0.0  20164   808 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root        327  0.0  0.0 183048  2144 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        365  0.0  0.0  20164   808 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root        329  0.0  0.0 183048  2140 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        369  0.0  0.0  20164   804 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root        330  0.0  0.0 183048  2136 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        362  0.0  0.0  20164   808 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root        331  0.0  0.0 183048  2148 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        371  0.0  0.0  20164   964 ?        Ss   18:33   0:00  |   \_ jailshell (pactpay) [390] shell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay     390  0.0  0.0  20164   260 ?        S    18:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay     391  0.0  0.6 476724 16580 ?        S    18:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root        333  0.0  0.0 183048  2140 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root        364  0.0  0.0  20164   968 ?        Ss   18:33   0:00      \_ jailshell (nigeria) [381] shell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria     381  0.0  0.0  20164   264 ?        S    18:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria     385  0.0  0.6 400652 15932 ?        S    18:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    24 ?        Ss   10:16   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296    60 tty1     Ss+  10:16   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704    32 ttyS0    Ss+  10:16   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  3924 ?        Ss   10:16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.0  3.3 1763044 79984 ?       Ssl  10:16   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.5 711724 37804 ?        Ssl  10:16   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.0 445028     0 ?        Ss   10:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        938  0.0  0.1 436392  2692 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 385496   456 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    941  0.0  0.5 114016 14320 ?        Ssl  10:16   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10448  3400 ?        Ss   10:16   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        946  0.0  0.0 392856   564 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
memcach+    948  0.0  0.0 342400    72 ?        Ssl  10:16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    48 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524    72 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    44 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        959  0.0  0.1 397344  2804 ?        Ss   10:16   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria  102357  0.0  0.2 397064  5348 ?        S    18:32   0:00  \_ php-fpm: pool nigeriadecide_org
root        960  0.0  0.0 153404   312 ?        Ss   10:16   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608    72 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        988  0.0  0.0 386112   556 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        989  0.0  0.2 261296  7208 ?        Ss   10:16   0:07 cpsrvd (SSL) - waiting for connections                   
root        308  0.0  0.0      0     0 ?        Z    18:32   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   980 ?        Ssl  10:16   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.5 5654048 37636 ?       SLsl 10:16   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   416 ?        Ss   10:16   0:03 /usr/sbin/sshd -D
root     101974  0.0  0.1 111304  4264 ?        Ss   18:32   0:00  \_ sshd: [accepted]
sshd     101975  0.0  0.1 115644  2628 ?        S    18:32   0:00  |   \_ sshd: [net]
root     102162  0.0  0.1 111304  4268 ?        Ss   18:32   0:00  \_ sshd: [accepted]
sshd     102179  0.0  0.1 115644  2632 ?        S    18:32   0:00  |   \_ sshd: [net]
root        311  0.0  0.1 111304  4444 ?        Ss   18:32   0:00  \_ sshd: [accepted]
sshd        312  0.0  0.1 115644  2624 ?        S    18:32   0:00      \_ sshd: [net]
root       1000  0.0  0.1 306512  3328 ?        Ssl  10:16   0:07 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   504 ?        Ss   10:16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.1  47048  2536 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  48600  3616 ?        S    10:16   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   416 ?        S    10:16   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   568 ?        S    10:16   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  47052  2296 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  48060  3416 ?        S    10:16   0:00  \_ dovecot/imap-login
root       1133  0.0  0.1  24564  2652 ?        S    10:16   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   708 ?        S    10:16   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41156  1516 ?        S    10:16   0:00  \_ dovecot/auth
root     100770  0.0  0.1  60820  4512 ?        S    18:31   0:00  \_ dovecot/lmtp
root       1147  0.0  1.0 248176 25628 ?        Ss   10:16   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  3.9 265188 94412 ?        S    10:20   0:04  \_ spamd child
root       5512  0.0  2.9 261652 72344 ?        S    10:20   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  2824 ?        S    10:16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  1.3 410452 32640 ?        Ss   10:16   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.5 387528 13284 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.2 183900  6692 ?        Ss   10:16   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209296 10376 ?        Ss   10:16   0:02 tailwatchd
root       1241  0.0  0.0 167452  1308 ?        Ss   10:16   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   748 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1408 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1731  1.4 11.7 1458860 285392 ?      Sl   10:16   6:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1979  0.0  0.3 267036  7748 ?        Ss   10:16   0:06 /usr/sbin/httpd -k start
root       1981  0.0  0.0  12816   360 ?        S    10:16   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1982  0.0  0.0  12732   312 ?        S    10:16   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1983  0.0  0.0  12852   368 ?        S    10:16   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1986  0.0  0.0  53268    96 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    87279  0.1  0.7 277908 19268 ?        S    18:16   0:01  \_ /usr/sbin/httpd -k start
nobody    93707  0.1  0.7 277720 18920 ?        S    18:23   0:00  \_ /usr/sbin/httpd -k start
nobody    95553  0.1  0.7 277784 19180 ?        S    18:25   0:00  \_ /usr/sbin/httpd -k start
nobody    95640  0.2  0.7 277784 18820 ?        S    18:26   0:00  \_ /usr/sbin/httpd -k start
nobody    98644  0.1  0.7 277784 18780 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    98681  0.1  0.7 277796 18524 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99104  0.1  0.7 277940 18880 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99408  0.1  0.7 277784 18480 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99465  0.1  0.7 277784 18496 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99484  0.1  0.7 277784 18664 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99499  0.1  0.7 277916 17900 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99500  0.2  0.7 277784 18400 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99501  0.1  0.7 277916 18532 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99502  0.1  0.7 277784 18512 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody   100539  0.1  0.7 277920 18460 ?        S    18:31   0:00  \_ /usr/sbin/httpd -k start
nobody   100643  0.1  0.7 277784 18384 ?        S    18:31   0:00  \_ /usr/sbin/httpd -k start
nobody   101497  0.1  0.7 277568 17900 ?        S    18:31   0:00  \_ /usr/sbin/httpd -k start
nobody   101512  0.1  0.7 277544 18316 ?        S    18:31   0:00  \_ /usr/sbin/httpd -k start
nobody   101513  0.0  0.7 277784 18308 ?        S    18:31   0:00  \_ /usr/sbin/httpd -k start
nobody   101514  0.2  0.7 277932 18120 ?        S    18:31   0:00  \_ /usr/sbin/httpd -k start
cloudw      318  0.0  0.6 352096 15232 ?        S    18:33   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody   102328  0.1  0.6 277784 16720 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody   102341  0.1  0.6 277792 16800 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody   102342  0.1  0.6 277784 16812 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody   102349  0.1  0.7 277784 17704 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody   102350  0.1  0.6 277784 16716 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody   102351  0.1  0.6 277640 16544 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody   102352  0.0  0.7 277780 17988 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
root       1980  0.0  0.5 183840 12692 ?        Ss   10:16   0:26 lfd - sleeping
oysipao+  34743  0.0  0.0   3148   416 ?        Ss   11:00   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152   496 ?        S    11:00   0:00  \_ [kworker]
root      70917  0.0  0.4 1349832 11072 ?       Ssl  18:00   0:00 /usr/bin/cspdaemon
root      70952  0.0  0.4 1277056 11844 ?       Ssl  18:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 29774  Threads: 3  Questions: 2475697  Slow queries: 0  Opens: 8946  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.149
*************************** 1. row ***************************
     Id: 34389
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 34393
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 34395
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.124.95.161 TIME_WAIT
      1 104.210.140.138 TIME_WAIT
      1 104.210.140.142 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 148.113.128.178 TIME_WAIT
      1 15.235.96.116 TIME_WAIT
      1 ::1 TIME_WAIT
      1 2.57.179.98 TIME_WAIT
      1 51.222.95.166 TIME_WAIT
      1 54.39.203.234 TIME_WAIT
      1 57.141.0.14 TIME_WAIT
      1 66.249.64.169 TIME_WAIT
      1 66.249.64.225 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 85.254.84.204 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 103.131.71.30 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 45.76.149.92 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 18:33:01 WAT
   Restart Time: Thursday, 13-Nov-2025 10:16:53 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 16 minutes 8 seconds
   Server load: 0.14 0.23 0.61
   Total accesses: 174858 - Total Traffic: 3.9 GB - Total Duration: 95411334
   CPU Usage: u6.05 s8.14 cu2203.34 cs1826.51 - 13.6% CPU load
   5.87 requests/sec - 137.4 kB/second - 23.4 kB/request - 545.65 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

WKKKKKK_K_KKKKKKK_WKKKK..KK...K.K...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  98644  0/75/7647  W 2.04 0     0   3761579 0.0  2.16  161.39 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  98681  2/65/7457  K 1.69 1     264 3662859 64.0 1.73  176.14 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /browse/11100183298 HTTP/1.1
   2-0  102328 1/2/7231   K 0.02 1     359 3641104 30.9 0.06  160.17 66.249.64.101 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1336737049 HTTP/1.1
   3-0  102341 1/2/7476   K 0.03 0     318 3669975 37.6 0.07  173.92 66.249.64.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2649441587 HTTP/1.1
   4-0  102342 1/3/7383   K 0.02 1     269 3659052 30.9 0.06  168.56 66.249.64.109 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3096736652 HTTP/1.1
   5-0  100539 1/33/7420  K 0.79 3     355 3510070 30.5 0.86  159.73 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2698467224 HTTP/1.1
   6-0  102349 1/2/7140   K 0.01 3     300 3421687 31.4 0.05  163.34 66.249.64.108 http/1.1 schoolplus.cloudware.ng:80 GET /?p=129950727 HTTP/1.1
   7-0  100643 0/28/6743  _ 0.52 0     4   3381474 0.0  0.61  169.56 52.3.102.51   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/assets/c
   8-0  102350 1/2/6936   K 0.03 0     314 3291056 31.4 0.06  149.73 66.249.73.72  http/1.1 schoolplus.cloudware.ng:80 GET /?p=733481815 HTTP/1.1
   9-0  102351 0/1/6871   _ 0.01 0     340 3313003 0.0  0.03  148.52 66.249.64.45  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3912419840 HTTP/1.1
   10-0 99104  1/60/6868  K 1.66 2     284 3358941 29.9 1.52  147.70 66.249.70.168 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1457403765 HTTP/1.1
   11-0 101497 1/16/6658  K 0.40 2     281 3507856 29.9 0.45  164.74 66.249.64.128 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3989051606 HTTP/1.1
   12-0 93707  1/154/5959 K 4.17 1     303 3253298 30.8 4.59  135.45 66.249.70.101 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1429816626 HTTP/1.1
   13-0 99408  1/50/6029  K 1.34 2     267 3011179 29.2 1.39  136.18 66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2287119556 HTTP/1.1
   14-0 101512 1/17/5814  K 0.28 0     275 2892182 30.0 0.36  130.20 192.178.4.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2358459494 HTTP/1.1
   15-0 99465  1/41/5491  K 0.97 1     296 2867554 31.2 1.04  123.00 66.249.70.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4180594801 HTTP/1.1
   16-0 95553  2/133/5287 K 3.70 2     292 2762720 61.3 3.50  120.15 66.249.70.35  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3989328358 HTTP/1.1
   17-0 101513 0/13/5241  _ 0.31 0     0   2688394 0.0  0.37  119.24 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 101514 2/25/5180  W 0.64 0     0   2482096 62.4 0.71  110.61 66.249.70.137 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2086098567 HTTP/1.1
   19-0 102352 1/2/4436   K 0.00 4     357 2391851 30.3 0.04  106.69 66.249.70.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3989318143 HTTP/1.1
   20-0 99484  1/60/4359  K 1.60 2     270 2551008 30.2 1.68  100.91 66.249.64.107 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=735196
   21-0 99499  1/47/3885  K 1.31 3     363 2029891 29.9 1.39  86.47  192.178.4.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1777374629 HTTP/1.1
   22-0 99500  1/63/3650  K 1.64 3     269 2071035 29.7 1.74  79.56  66.249.64.65  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2472165080 HTTP/1.1
   23-0 -      0/0/3043   . 0.00 104   0   1842564 0.0  0.00  76.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/3435   . 0.00 177   0   1994287 0.0  0.00  79.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 99501  1/52/3162  K 1.55 3     295 1742558 31.0 1.37  87.34  66.249.64.231 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1805007875 HTTP/1.1
   26-0 99502  1/46/3241  K 1.16 3     329 1756549 31.3 1.29  68.04  66.249.64.228 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3769057879 HTTP/1.1
   27-0 -      0/0/1945   . 0.00 292   0   1228125 0.0  0.00  44.52  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/2291   . 0.00 49    0   1395667 0.0  0.00  52.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/2038   . 0.00 265   0   1186240 0.0  0.00  44.97  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 87279  1/259/2036 K 7.06 3     261 1281568 30.1 7.03  51.35  66.249.70.141 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3611131158 HTTP/1.1
   31-0 -      0/0/1363   . 0.00 126   0   823480  0.0  0.00  33.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 95640  1/230/1451 K 3.57 2     282 913831  29.9 3.74  30.53  66.249.70.129 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1897106014 HTTP/1.1
   33-0 -      0/0/1280   . 0.00 289   6   915106  0.0  0.00  31.14  177.230.57.46 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Udung+uko&state=Akwa+ibom&wa
   34-0 -      0/0/1170   . 0.00 943   0   751157  0.0  0.00  26.42  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/1349   . 0.00 936   0   644520  0.0  0.00  29.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/909    . 0.00 613   0   597617  0.0  0.00  22.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/713    . 0.00 1878  0   553262  0.0  0.00  17.41  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/502    . 0.00 2091  0   411856  0.0  0.00  12.18  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/465    . 0.00 2088  0   536565  0.0  0.00  12.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/529    . 0.00 2153  0   392058  0.0  0.00  13.37  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/218    . 0.00 3287  0   299409  0.0  0.00  5.41   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/238    . 0.00 3256  0   254989  0.0  0.00  6.25   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/208    . 0.00 3286  0   234965  0.0  0.00  5.52   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/211    . 0.00 12796 0   192910  0.0  0.00  3.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/125    . 0.00 12856 0   186238  0.0  0.00  3.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/159    . 0.00 12733 0   333599  0.0  0.00  4.47   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/173    . 0.00 12805 0   217736  0.0  0.00  4.49   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/62     . 0.00 12833 0   150932  0.0  0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/78     . 0.00 12918 0   104997  0.0  0.00  2.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/42     . 0.00 12900 0   74936   0.0  0.00  1.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/40     . 0.00 12823 0   91237   0.0  0.00  0.94   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/49     . 0.00 12736 0   155447  0.0  0.00  1.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/43     . 0.00 12794 0   114977  0.0  0.00  1.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/196    . 0.00 12079 0   251167  0.0  0.00  5.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/47     . 0.00 12868 0   130020  0.0  0.00  1.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/23     . 0.00 12835 0   73843   0.0  0.00  0.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/42     . 0.00 12836 0   67360   0.0  0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/19     . 0.00 12867 0   48527   0.0  0.00  0.50   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/47     . 0.00 12625 0   143523  0.0  0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/60     . 0.00 12675 0   118427  0.0  0.00  1.36   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/5      . 0.00 12909 0   67934   0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/13     . 0.00 12850 0   128175  0.0  0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/6      . 0.00 12902 0   66229   0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/67     . 0.00 12753 0   118099  0.0  0.00  1.73   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/24     . 0.00 12857 0   15292   0.0  0.00  0.60   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/13     . 0.00 12905 0   60306   0.0  0.00  0.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/17     . 0.00 12814 0   127718  0.0  0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/13     . 0.00 12880 0   77438   0.0  0.00  0.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/9      . 0.00 12793 0   128663  0.0  0.00  0.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/160    . 0.00 12186 0   198571  0.0  0.00  3.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/21     . 0.00 12798 0   71385   0.0  0.00  0.48   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/10     . 0.00 12842 0   58674   0.0  0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/12     . 0.00 12795 0   127820  0.0  0.00  0.24   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/11     . 0.00 12916 0   3646    0.0  0.00  0.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/36     . 0.00 12851 0   15886   0.0  0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/5      . 0.00 12837 0   121937  0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/9      . 0.00 12921 0   5296    0.0  0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/18     . 0.00 12883 4   9846    0.0  0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/14     . 0.00 12806 0   129904  0.0  0.00  0.39   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -      0/0/88     . 0.00 12516 0   167903  0.0  0.00  2.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -      0/0/19     . 0.00 12809 0   133107  0.0  0.00  0.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -      0/0/2      . 0.00 12975 1   8       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -      0/0/14     . 0.00 12807 0   127868  0.0  0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -      0/0/3      . 0.00 12974 0   5       0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -      0/0/7      . 0.00 12947 0   2013    0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   86-0 -      0/0/45     . 0.00 18831 0   25272   0.0  0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   87-0 -      0/0/1      . 0.00 19049 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   88-0 -      0/0/5      . 0.00 18997 0   1918    0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   89-0 -      0/0/48     . 0.00 18819 0   28263   0.0  0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 401
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 22 seconds, (range: 2...108)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 55508
   total entries replaced since starting: 0
   total entries expired since starting: 55086
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 8 hit, 103 miss
   total removes since starting: 21 hit, 206 miss
Youez - 2016 - github.com/yon3zu
LinuXploit