403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.19.42.txt
 ## swap threshold exceeded
## server overview
2025-11-13.19.42 load[0] mem[52/78] mysql[1/12] httpd[24]
              total        used        free      shared  buff/cache   available
Mem:           2363        1143         173         104        1047         947
Swap:          1999        1680         319
 19:42:01 up  9:25,  0 users,  load average: 0.23, 0.26, 0.24
## system overview
top - 19:42:02 up  9:25,  0 users,  load average: 0.23, 0.26, 0.24
Tasks: 203 total,   5 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 60.6 us, 36.4 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   166288 free,  1181572 used,  1072440 buff/cache
KiB Swap:  2047996 total,   327676 free,  1720320 used.   959140 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458860 279360   3988 S  33.3 11.5   7:50.39 /usr/sbin+
 66293 nigeria   20   0  400652  15936  10220 R  13.3  0.7   0:00.02 /opt/cpan+
 66297 pactpay   20   0  476460  15968  10408 S  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44424   3536   1580 S   6.7  0.1   0:49.16 /usr/lib/+
   488 dbus      20   0   58716   1380    628 S   6.7  0.1   0:17.99 /usr/bin/+
   535 nscd      20   0  928956   1360    680 S   6.7  0.1   0:29.97 /usr/sbin+
  1000 root      20   0  314704   6040   4824 S   6.7  0.2   0:08.96 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.44 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.82 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:34.36 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.73 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.88 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.77 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.67 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.97 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.64 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40248   5108   4848 S   0.0  0.2   0:18.09 /usr/lib/+
   379 root      20   0   45352    100     96 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    528    396 S   0.0  0.0   0:02.84 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 rpc       20   0   69256     96     36 S   0.0  0.0   0:00.03 /sbin/rpc+
   518 root      20   0  152780    152    108 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24712   1252    824 S   0.0  0.1   0:07.90 /usr/lib/+
   521 root      20   0  224148   3120    844 S   0.0  0.1   0:00.39 queueproc+
   524 root      20   0   21540    380    292 S   0.0  0.0   0:00.75 /usr/sbin+
   525 polkitd   20   0  612240    820    428 S   0.0  0.0   0:04.63 /usr/lib/+
   533 root      20   0   52852    324    216 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    460    328 S   0.0  0.0   0:00.93 /usr/sbin+
   574 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296     60     56 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   3916    908 S   0.0  0.2   0:00.58 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.68 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044  78516    496 S   0.0  3.2   0:13.90 /usr/loca+
   931 named     20   0  711724  38300   1736 S   0.0  1.6   0:19.23 /usr/sbin+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   938 root      20   0  436392   2692   2604 S   0.0  0.1   0:01.01 php-fpm: +
   940 root      20   0  385496    512    416 S   0.0  0.0   0:00.98 php-fpm: +
   941 systuser  20   0  114016  14172   2432 S   0.0  0.6   0:08.01 /usr/loca+
   945 cpanelc+  20   0   10448   3396   2152 S   0.0  0.1   0:27.51 /usr/loca+
   946 root      20   0  392856    616    432 S   0.0  0.0   0:00.87 php-fpm: +
   948 memcach+  20   0  342400     72     72 S   0.0  0.0   0:00.75 /usr/bin/+
   950 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   952 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 systuser  20   0   14068     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   959 root      20   0  397344   2800    648 S   0.0  0.1   0:04.84 php-fpm: +
   960 root      20   0  153404    312    228 S   0.0  0.0   0:00.73 pure-ftpd+
   963 systuser  20   0  111608     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   988 root      20   0  386112    656    440 S   0.0  0.0   0:00.88 php-fpm: +
   989 root      20   0  261296   6920   1768 S   0.0  0.3   0:07.97 cpsrvd (S+
   990 root      20   0  572372    980    408 S   0.0  0.0   0:02.93 /usr/bin/+
   991 telegraf  20   0 5654048  38364   6116 S   0.0  1.6   0:18.58 /usr/loca+
   998 root      20   0  111304    416    316 S   0.0  0.0   0:03.81 /usr/sbin+
  1001 root      20   0   51508    504    344 S   0.0  0.0   0:00.39 /usr/sbin+
  1125 dovenull  20   0   47048   2532   1708 S   0.0  0.1   0:00.57 dovecot/p+
  1126 dovenull  20   0   48608   3816   1764 S   0.0  0.2   0:00.48 dovecot/i+
  1127 dovecot   20   0   10320    416    300 S   0.0  0.0   0:00.09 dovecot/a+
  1128 root      20   0   10452    568    376 S   0.0  0.0   0:00.37 dovecot/l+
  1129 dovenull  20   0   47052   2296   1496 S   0.0  0.1   0:00.44 dovecot/p+
  1130 dovenull  20   0   48308   3396   1764 S   0.0  0.1   0:00.37 dovecot/i+
  1133 root      20   0   24564   2652    512 S   0.0  0.1   0:00.20 dovecot/c+
  1137 dovecot   20   0   13568    708    472 S   0.0  0.0   0:00.08 dovecot/s+
  1147 root      20   0  248176  25628    692 S   0.0  1.1   0:06.84 /usr/loca+
  1164 systuser  20   0  157708   2824    832 S   0.0  0.1   0:00.16 SonarPush+
  1165 wp-tool+  20   0  410452  32380   1448 S   0.0  1.3   0:28.54 /usr/bin/+
  1166 wp-tool+  20   0  387528  13052   1452 S   0.0  0.5   0:00.34 /usr/bin/+
  1208 dovecot   20   0   41156   1516   1048 S   0.0  0.1   0:00.77 dovecot/a+
  1236 root      20   0  183900   6696   3460 S   0.0  0.3   0:02.45 cpdavd - +
  1239 root      20   0  209296  10332   2380 S   0.0  0.4   0:02.95 tailwatchd
  1241 root      20   0  167452   1308    704 S   0.0  0.1   0:00.50 dnsadmin +
  1631 root      20   0  299272    748    368 S   0.0  0.0   0:00.93 php-fpm: +
  1677 root      38  18  130416   1408    720 S   0.0  0.1   0:00.09 cpanellog+
  1979 root      20   0  267036   7352    668 S   0.0  0.3   0:07.18 /usr/sbin+
  1980 root      20   0  184240  13048   1140 S   0.0  0.5   0:30.19 lfd - sle+
  1981 root      20   0   12848    360    240 S   0.0  0.0   0:04.33 /usr/loca+
  1982 root      20   0   12732    312    232 S   0.0  0.0   0:03.72 /usr/loca+
  1983 root      20   0   12884    368    240 S   0.0  0.0   0:04.13 /usr/loca+
  1986 root      20   0   53268     96     96 S   0.0  0.0   0:00.04 /usr/loca+
  2109 worencom  20   0   38492   3916   2944 S   0.0  0.2   0:00.01 dovecot/i+
  5511 root      20   0  265188  94204   2540 S   0.0  3.9   0:04.90 spamd chi+
  5512 root      20   0  261652  72136    340 S   0.0  3.0   0:00.38 spamd chi+
 27531 root      20   0 1277056  11968    600 S   0.0  0.5   0:00.08 /usr/bin/+
 27569 root      20   0 1284296  11464    600 S   0.0  0.5   0:00.08 /usr/bin/+
 33167 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 33216 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 34114 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 34743 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.58 [kworker]
 45511 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 54173 nobody    20   0  277720  18808   4140 S   0.0  0.8   0:01.34 /usr/sbin+
 56223 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 56256 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 57942 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60664 nobody    20   0  277720  18540   4028 S   0.0  0.8   0:00.64 /usr/sbin+
 61546 nobody    20   0  277788  18404   3788 S   0.0  0.8   0:00.51 /usr/sbin+
 61698 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 62545 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62662 nobody    20   0  277784  18168   3756 S   0.0  0.8   0:00.41 /usr/sbin+
 63372 nobody    20   0  277784  18308   3688 S   0.0  0.8   0:00.27 /usr/sbin+
 63382 nobody    20   0  277724  18320   3800 S   0.0  0.8   0:00.28 /usr/sbin+
 63384 nobody    20   0  277568  17424   3212 S   0.0  0.7   0:00.38 /usr/sbin+
 64015 nobody    20   0  277940  17980   3608 S   0.0  0.7   0:00.31 /usr/sbin+
 64269 nobody    20   0  277796  18036   3428 S   0.0  0.7   0:00.21 /usr/sbin+
 64289 nobody    20   0  277952  18292   3612 S   0.0  0.8   0:00.23 /usr/sbin+
 64358 nobody    20   0  277784  18004   3628 S   0.0  0.7   0:00.14 /usr/sbin+
 65176 nobody    20   0  277928  18332   3764 S   0.0  0.8   0:00.08 /usr/sbin+
 65198 nobody    20   0  277720  18036   3400 S   0.0  0.7   0:00.15 /usr/sbin+
 65199 nobody    20   0  277640  18116   3760 S   0.0  0.7   0:00.08 /usr/sbin+
 65321 nobody    20   0  277920  17864   3556 S   0.0  0.7   0:00.08 /usr/sbin+
 65322 nobody    20   0  277568  17504   3352 S   0.0  0.7   0:00.12 /usr/sbin+
 65335 nobody    20   0  277784  16400   2128 S   0.0  0.7   0:00.16 /usr/sbin+
 65336 nobody    20   0  277784  17940   3604 S   0.0  0.7   0:00.07 /usr/sbin+
 65338 nobody    20   0  277784  16404   2132 S   0.0  0.7   0:00.11 /usr/sbin+
 65411 nobody    20   0  277528  17524   3372 S   0.0  0.7   0:00.09 /usr/sbin+
 65414 nobody    20   0  277784  17716   3380 R   0.0  0.7   0:00.12 /usr/sbin+
 65417 nobody    20   0  277784  16396   2128 S   0.0  0.7   0:00.16 /usr/sbin+
 65540 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 65562 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 65821 root      20   0   41052   2784   2128 S   0.0  0.1   0:00.00 dovecot/a+
 66030 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66126 nigeria   20   0  397064   5348   2368 S   0.0  0.2   0:00.00 php-fpm: +
 66135 nobody    20   0  277792  16336   2132 S   0.0  0.7   0:00.00 /usr/sbin+
 66151 nobody    20   0  277784  16328   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 66152 nobody    20   0  277784  17568   3368 S   0.0  0.7   0:00.01 /usr/sbin+
 66205 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 66223 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66224 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66225 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66226 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66227 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66229 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66230 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66231 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66232 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66233 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66234 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66235 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66237 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66240 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 66241 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 66242 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 66243 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 66266 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 66268 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66270 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66271 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66272 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66275 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66276 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66277 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66278 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66279 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 66280 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66281 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 66282 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66291 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66294 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 66302 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66303 cloudw    20   0  141372   5952   4260 R   0.0  0.2   0:00.00 /opt/cpan+
 90193 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 99630 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    10:16   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    10:16   0:34  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:16   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    10:16   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   10:16   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root      90193  0.0  0.0      0     0 ?        S    18:20   0:00  \_ [kworker/1:0]
root      99630  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/u200:0]
root      33167  0.0  0.0      0     0 ?        S    19:06   0:00  \_ [kworker/0:0]
root      33216  0.0  0.0      0     0 ?        S    19:06   0:00  \_ [kworker/1:4]
root      34114  0.0  0.0      0     0 ?        S    19:07   0:00  \_ [kworker/0:2]
root      45511  0.0  0.0      0     0 ?        S    19:19   0:00  \_ [kworker/0:4]
root      56223  0.0  0.0      0     0 ?        S    19:31   0:00  \_ [kworker/1:2]
root      56256  0.0  0.0      0     0 ?        S    19:31   0:00  \_ [kworker/0:3]
root      57942  0.0  0.0      0     0 ?        S    19:33   0:00  \_ [kworker/u200:1]
root      61698  0.0  0.0      0     0 ?        S    19:37   0:00  \_ [kworker/1:3]
root      62545  0.0  0.0      0     0 ?        S    19:38   0:00  \_ [kworker/0:1]
root      66302  0.0  0.0      0     0 ?        S    19:42   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44424  3536 ?        Ss   10:16   0:49 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40248  5108 ?        Ss   10:16   0:18 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   100 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   528 ?        S<sl 10:16   0:02 /sbin/auditd
dbus        488  0.0  0.0  58716  1380 ?        Ss   10:16   0:17 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256    96 ?        Ss   10:16   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   152 ?        Ss   10:16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1252 ?        Ss   10:16   0:07 /usr/lib/systemd/systemd-logind
root        521  0.0  0.1 224148  3120 ?        Ss   10:16   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   380 ?        Ss   10:16   0:00 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240   820 ?        Ssl  10:16   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   324 ?        Ss   10:16   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.0  0.0 928956  1360 ?        Ssl  10:16   0:29 /usr/sbin/nscd
root        540  0.0  0.0   4388    36 ?        Ss   10:16   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208     0 ?        Ssl  10:16   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   460 ?        Ss   10:16   0:00 /usr/sbin/crond -n
root      66223  0.0  0.0 183048  2148 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66241  0.0  0.0 113284  1212 ?        Ss   19:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      66242  0.0  0.0 108052   360 ?        S    19:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      66243  0.0  0.0 113288  1516 ?        S    19:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      66304  0.0  0.0 153840  2092 ?        R    19:42   0:00  |               \_ ps auxf
root      66224  0.0  0.0 183048  2148 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66280  0.0  0.0  20164   804 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      66225  0.0  0.0 183048  2148 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66271  0.0  0.0  20164   808 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      66226  0.0  0.0 183048  2148 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66272  0.0  0.0  20164   808 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      66227  0.0  0.0 183048  2148 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66277  0.0  0.0  20164   804 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      66229  0.0  0.0 183048  2144 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66276  0.0  0.0  20164   808 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      66230  0.0  0.0 183048  2144 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66282  0.0  0.0  20164   808 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      66231  0.0  0.0 183048  2140 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66275  0.0  0.0  20164   808 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      66232  0.0  0.0 183048  2140 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66268  0.0  0.0  20164   804 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      66233  0.0  0.0 183048  2140 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66278  0.0  0.0  20164   808 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      66234  0.0  0.0 183048  2140 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66270  0.0  0.0  20164   808 ?        Ss   19:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      66235  0.0  0.0 183048  2140 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66281  0.0  0.0  20164   968 ?        Ss   19:42   0:00  |   \_ jailshell (pactpay) [66294] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66294  0.0  0.0  20164   264 ?        S    19:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66297  0.0  0.6 476460 16056 ?        R    19:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      66237  0.0  0.0 183048  2140 ?        S    19:42   0:00  \_ /usr/sbin/CROND -n
root      66279  0.0  0.0  20164   964 ?        Ss   19:42   0:00      \_ jailshell (nigeria) [66291] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66291  0.0  0.0  20164   260 ?        S    19:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66293  0.0  0.6 400652 15936 ?        S    19:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    24 ?        Ss   10:16   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296    60 tty1     Ss+  10:16   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704    32 ttyS0    Ss+  10:16   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  3916 ?        Ss   10:16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.0  3.2 1763044 78516 ?       Ssl  10:16   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.5 711724 38300 ?        Ssl  10:16   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.0 445028     0 ?        Ss   10:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        938  0.0  0.1 436392  2692 ?        Ss   10:16   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 385496   512 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    941  0.0  0.5 114016 14172 ?        Ssl  10:16   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10448  3396 ?        Ss   10:16   0:27 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        946  0.0  0.0 392856   616 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
memcach+    948  0.0  0.0 342400    72 ?        Ssl  10:16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    44 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524    68 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    40 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        959  0.0  0.1 397344  2800 ?        Ss   10:16   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   66126  0.0  0.2 397064  5348 ?        S    19:41   0:00  \_ php-fpm: pool nigeriadecide_org
root        960  0.0  0.0 153404   312 ?        Ss   10:16   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608    68 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        988  0.0  0.0 386112   656 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        989  0.0  0.2 261296  6920 ?        Ss   10:16   0:07 cpsrvd (SSL) - waiting for connections                   
root      66205  0.0  0.0      0     0 ?        Z    19:41   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   980 ?        Ssl  10:16   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.5 5654048 38364 ?       SLsl 10:16   0:18 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   416 ?        Ss   10:16   0:03 /usr/sbin/sshd -D
root      65540  0.0  0.1 111304  4440 ?        Ss   19:41   0:00  \_ sshd: [accepted]
sshd      65562  0.0  0.1 115644  2628 ?        S    19:41   0:00  |   \_ sshd: [net]
root      66030  0.0  0.1 111304  4268 ?        Ss   19:41   0:00  \_ sshd: [accepted]
root       1000  0.0  0.2 314704  6040 ?        Ssl  10:16   0:08 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   504 ?        Ss   10:16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.1  47048  2532 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  48608  3816 ?        S    10:16   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   416 ?        S    10:16   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   568 ?        S    10:16   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  47052  2296 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  48308  3396 ?        S    10:16   0:00  \_ dovecot/imap-login
root       1133  0.0  0.1  24564  2652 ?        S    10:16   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   708 ?        S    10:16   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41156  1516 ?        S    10:16   0:00  \_ dovecot/auth
worencom   2109  0.0  0.1  38492  3916 ?        S    18:34   0:00  \_ dovecot/imap
root      65821  0.0  0.1  41052  2784 ?        S    19:41   0:00  \_ dovecot/auth -w
root       1147  0.0  1.0 248176 25628 ?        Ss   10:16   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  3.8 265188 94204 ?        S    10:20   0:04  \_ spamd child
root       5512  0.0  2.9 261652 72136 ?        S    10:20   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  2824 ?        S    10:16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  1.3 410452 32380 ?        Ss   10:16   0:28 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.5 387528 13052 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.2 183900  6696 ?        Ss   10:16   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209296 10332 ?        Ss   10:16   0:02 tailwatchd
root       1241  0.0  0.0 167452  1308 ?        Ss   10:16   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   748 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1408 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1731  1.3 11.5 1458860 279360 ?      Sl   10:16   7:50 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1979  0.0  0.3 267036  7352 ?        Ss   10:16   0:07 /usr/sbin/httpd -k start
root       1981  0.0  0.0  12848   360 ?        S    10:16   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1982  0.0  0.0  12732   312 ?        S    10:16   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1983  0.0  0.0  12884   368 ?        S    10:16   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1986  0.0  0.0  53268    96 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    54173  0.1  0.7 277720 18808 ?        S    19:28   0:01  \_ /usr/sbin/httpd -k start
nobody    60664  0.1  0.7 277720 18540 ?        S    19:35   0:00  \_ /usr/sbin/httpd -k start
nobody    61546  0.1  0.7 277788 18404 ?        S    19:36   0:00  \_ /usr/sbin/httpd -k start
nobody    62662  0.1  0.7 277784 18168 ?        S    19:38   0:00  \_ /usr/sbin/httpd -k start
nobody    63372  0.1  0.7 277784 18308 ?        S    19:38   0:00  \_ /usr/sbin/httpd -k start
nobody    63382  0.1  0.7 277724 18320 ?        S    19:38   0:00  \_ /usr/sbin/httpd -k start
cloudw    66303  0.0  0.6 351952 15232 ?        S    19:42   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    63384  0.1  0.7 277568 17424 ?        S    19:38   0:00  \_ /usr/sbin/httpd -k start
nobody    64015  0.2  0.7 277940 17980 ?        S    19:39   0:00  \_ /usr/sbin/httpd -k start
nobody    64269  0.1  0.7 277796 18036 ?        S    19:39   0:00  \_ /usr/sbin/httpd -k start
nobody    64289  0.1  0.7 277952 18292 ?        S    19:39   0:00  \_ /usr/sbin/httpd -k start
nobody    64358  0.1  0.7 277784 18004 ?        S    19:39   0:00  \_ /usr/sbin/httpd -k start
nobody    65176  0.1  0.7 277928 18332 ?        S    19:40   0:00  \_ /usr/sbin/httpd -k start
nobody    65198  0.2  0.7 277720 18036 ?        S    19:40   0:00  \_ /usr/sbin/httpd -k start
nobody    65199  0.1  0.7 277640 18116 ?        S    19:40   0:00  \_ /usr/sbin/httpd -k start
nobody    65321  0.1  0.7 277920 17864 ?        S    19:40   0:00  \_ /usr/sbin/httpd -k start
nobody    65322  0.1  0.7 277568 17504 ?        S    19:40   0:00  \_ /usr/sbin/httpd -k start
nobody    65335  0.2  0.6 277784 16400 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    65336  0.1  0.7 277784 17940 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    65338  0.1  0.6 277784 16404 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    65411  0.1  0.7 277528 17524 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    65414  0.2  0.7 277784 17716 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    65417  0.2  0.6 277784 16396 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    66135  0.0  0.6 277792 16336 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    66151  0.1  0.6 277784 16328 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    66152  0.1  0.7 277784 17568 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    66240  1.0  0.6 352096 15232 ?        S    19:42   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
root       1980  0.0  0.5 184240 13048 ?        Ss   10:16   0:30 lfd - sleeping
oysipao+  34743  0.0  0.0   3148   416 ?        Ss   11:00   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152   496 ?        S    11:00   0:00  \_ [kworker]
root      27531  0.0  0.4 1277056 11968 ?       Ssl  19:00   0:00 /usr/bin/checkstatus
root      27569  0.0  0.4 1284296 11464 ?       Ssl  19:00   0:00 /usr/bin/cspdaemon
## mysql stats
Uptime: 33915  Threads: 3  Questions: 2778663  Slow queries: 0  Opens: 10316  Flush tables: 1  Open tables: 2000  Queries per second avg: 81.930
*************************** 1. row ***************************
     Id: 38597
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 38599
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: NULL
   Info: NULL
*************************** 3. row ***************************
     Id: 38601
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.157.111 TIME_WAIT
      1 17.22.245.211 TIME_WAIT
      1 17.22.253.132 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.107 TIME_WAIT
      1 40.77.167.72 TIME_WAIT
      1 51.161.37.27 TIME_WAIT
      1 54.39.89.51 TIME_WAIT
      1 66.249.64.108 TIME_WAIT
      1 66.249.64.130 TIME_WAIT
      1 66.249.64.35 TIME_WAIT
      1 66.249.70.142 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      1 66.249.70.37 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 19:42:02 WAT
   Restart Time: Thursday, 13-Nov-2025 10:16:53 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 25 minutes 8 seconds
   Server load: 0.23 0.26 0.24
   Total accesses: 202793 - Total Traffic: 4.6 GB - Total Duration: 110438055
   CPU Usage: u4.47 s8.66 cu2580.1 cs2146.2 - 14% CPU load
   5.98 requests/sec - 143.6 kB/second - 24.0 kB/request - 544.585 ms/request
   23 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

KKKKKWKKKKK.WK..KWKK_..KKK.K.K..._..K...........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                        Request
   0-0  66135 1/2/8581   K 0.02 1     273 4256170 30.3 0.06  186.86 192.178.4.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2686168887 HTTP/1.1
   1-0  66151 1/2/8467   K 0.03 0     341 4184663 29.5 0.06  201.46 66.249.64.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2946369203 HTTP/1.1
   2-0  65176 1/18/8250  K 0.31 2     306 4173548 31.1 0.82  188.16 66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3902925795 HTTP/1.1
   3-0  64015 1/50/8471  K 1.37 1     263 4195970 29.3 1.42  199.75 66.249.64.170 http/1.1 schoolplus.cloudware.ng:80 GET /?p=571400968 HTTP/1.1
   4-0  61546 1/88/8372  K 2.28 3     315 4199377 31.4 2.68  197.08 66.249.64.15  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4044277058 HTTP/1.1
   5-0  66152 0/2/8383   W 0.01 0     0   3969628 0.0  0.04  183.70 66.249.70.160 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2238650454 HTTP/1.1
   6-0  65198 1/34/8210  K 0.61 2     270 3987625 30.8 0.97  192.64 66.249.70.3   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3586575248 HTTP/1.1
   7-0  64269 1/38/7684  K 0.94 0     286 3941975 30.4 1.02  196.43 66.249.64.225 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3190501312 HTTP/1.1
   8-0  63372 1/52/7851  K 1.24 0     413 3793444 30.9 1.26  173.41 66.249.64.41  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2083075533 HTTP/1.1
   9-0  65199 1/19/7777  K 0.28 4     271 3778624 30.5 0.91  172.47 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=464140932 HTTP/1.1
   10-0 64289 1/41/7684  K 1.01 2     279 3814870 29.7 1.06  170.22 66.249.70.4   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3496931900 HTTP/1.1
   11-0 -     0/0/7673   . 0.00 45    0   4058270 0.0  0.00  191.77 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 63382 0/49/6832  W 1.24 0     0   3749439 0.0  1.48  163.37 66.249.70.64  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2603540894 HTTP/1.1
   13-0 54173 1/232/6934 K 6.11 1     338 3496501 29.5 6.91  160.12 66.249.64.164 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2690474068 HTTP/1.1
   14-0 -     0/0/6647   . 0.00 53    0   3340380 0.0  0.00  151.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/6188   . 0.00 56    0   3246104 0.0  0.00  142.34 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 64358 1/25/6065  K 0.57 2     292 3177942 31.1 0.64  140.69 66.249.70.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1291186936 HTTP/1.1
   17-0 60664 0/107/6261 W 2.95 0     0   3221246 0.0  3.61  146.55 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 62662 2/67/5919  K 1.83 1     346 2889663 59.6 1.90  131.33 66.249.64.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1859709701 HTTP/1.1
   19-0 65321 1/14/5260  K 0.32 3     277 2860074 30.3 0.38  129.82 66.249.64.8   http/1.1 schoolplus.cloudware.ng:80 GET /?p=699076129 HTTP/1.1
   20-0 63384 0/62/5322  _ 1.76 0     264 3090936 0.0  1.80  126.73 66.249.70.106 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3069074838 HTTP/1.1
   21-0 -     0/0/4549   . 0.00 44    0   2346942 0.0  0.00  104.42 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/4238   . 0.00 41    0   2394224 0.0  0.00  95.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 65322 1/25/3695  K 0.49 3     402 2190343 31.7 0.66  93.56  66.249.70.36  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4280434928 HTTP/1.1
   24-0 65335 1/25/4070  K 0.70 3     260 2338223 30.5 0.75  96.43  192.178.4.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1463687642 HTTP/1.1
   25-0 65336 1/14/3904  K 0.27 0     466 2132550 30.4 0.34  105.49 66.249.64.228 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2265527274 HTTP/1.1
   26-0 -     0/0/4070   . 0.00 52    0   2168016 0.0  0.00  91.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 65338 1/18/2520  K 0.49 0     385 1548482 30.1 0.53  60.08  66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=292396668 HTTP/1.1
   28-0 -     0/0/2906   . 0.00 43    0   1736369 0.0  0.00  68.73  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 65411 1/17/2751  K 0.38 3     308 1584758 31.5 0.42  64.54  66.249.64.14  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3853631517 HTTP/1.1
   30-0 -     0/0/2428   . 0.00 48    0   1506840 0.0  0.00  61.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/1712   . 0.00 47    0   1016825 0.0  0.00  43.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/1742   . 0.00 16    0   1071230 0.0  0.00  37.82  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 65414 0/20/1588  _ 0.53 0     305 1084053 0.0  0.58  39.23  66.249.64.103 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2145112619 HTTP/1.1
   34-0 -     0/0/1509   . 0.00 35    0   949447  0.0  0.00  36.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/1801   . 0.00 46    0   842376  0.0  0.00  46.75  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 65417 1/27/1137  K 0.75 1     275 735872  29.9 0.81  29.27  66.249.64.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3958363775 HTTP/1.1
   37-0 -     0/0/872    . 0.00 49    0   652537  0.0  0.00  22.50  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/548    . 0.00 475   0   435941  0.0  0.00  13.47  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/506    . 0.00 485   0   562175  0.0  0.00  13.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/552    . 0.00 483   0   403890  0.0  0.00  13.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/225    . 0.00 474   0   302588  0.0  0.00  5.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/246    . 0.00 433   0   258834  0.0  0.00  6.43   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/209    . 0.00 484   0   234966  0.0  0.00  5.52   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/270    . 0.00 223   0   227956  0.0  0.00  5.59   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/128    . 0.00 471   0   186916  0.0  0.00  3.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/163    . 0.00 461   0   334876  0.0  0.00  4.54   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/177    . 0.00 462   0   219196  0.0  0.00  4.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/65     . 0.00 470   0   151495  0.0  0.00  1.49   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/78     . 0.00 17058 0   104997  0.0  0.00  2.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/42     . 0.00 17041 0   74936   0.0  0.00  1.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/40     . 0.00 16964 0   91237   0.0  0.00  0.94   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/49     . 0.00 16877 0   155447  0.0  0.00  1.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/43     . 0.00 16935 0   114977  0.0  0.00  1.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/196    . 0.00 16219 0   251167  0.0  0.00  5.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/47     . 0.00 17009 0   130020  0.0  0.00  1.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/23     . 0.00 16976 0   73843   0.0  0.00  0.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/42     . 0.00 16977 0   67360   0.0  0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/19     . 0.00 17008 0   48527   0.0  0.00  0.50   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/47     . 0.00 16766 0   143523  0.0  0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/60     . 0.00 16816 0   118427  0.0  0.00  1.36   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/5      . 0.00 17049 0   67934   0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/13     . 0.00 16991 0   128175  0.0  0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/6      . 0.00 17043 0   66229   0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/67     . 0.00 16894 0   118099  0.0  0.00  1.73   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/24     . 0.00 16998 0   15292   0.0  0.00  0.60   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/13     . 0.00 17046 0   60306   0.0  0.00  0.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/17     . 0.00 16955 0   127718  0.0  0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/13     . 0.00 17021 0   77438   0.0  0.00  0.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/9      . 0.00 16934 0   128663  0.0  0.00  0.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/160    . 0.00 16326 0   198571  0.0  0.00  3.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/21     . 0.00 16939 0   71385   0.0  0.00  0.48   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/10     . 0.00 16983 0   58674   0.0  0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/12     . 0.00 16936 0   127820  0.0  0.00  0.24   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/11     . 0.00 17056 0   3646    0.0  0.00  0.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/36     . 0.00 16992 0   15886   0.0  0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/5      . 0.00 16978 0   121937  0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/9      . 0.00 17061 0   5296    0.0  0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/18     . 0.00 17024 4   9846    0.0  0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/14     . 0.00 16947 0   129904  0.0  0.00  0.39   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/88     . 0.00 16656 0   167903  0.0  0.00  2.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/19     . 0.00 16950 0   133107  0.0  0.00  0.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/2      . 0.00 17115 1   8       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/14     . 0.00 16948 0   127868  0.0  0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/3      . 0.00 17114 0   5       0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7      . 0.00 17087 0   2013    0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   86-0 -     0/0/45     . 0.00 22971 0   25272   0.0  0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   87-0 -     0/0/1      . 0.00 23189 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   88-0 -     0/0/5      . 0.00 23137 0   1918    0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   89-0 -     0/0/48     . 0.00 22959 0   28263   0.0  0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 355
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 2...60)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 61683
   total entries replaced since starting: 0
   total entries expired since starting: 61301
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 8 hit, 108 miss
   total removes since starting: 28 hit, 206 miss
Youez - 2016 - github.com/yon3zu
LinuXploit