403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.19.48.txt
 ## swap threshold exceeded
## server overview
2025-11-13.19.48 load[0] mem[53/78] mysql[1/12] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1188         162         104        1012         901
Swap:          1999        1681         318
 19:48:01 up  9:31,  0 users,  load average: 0.25, 0.20, 0.22
## system overview
top - 19:48:01 up  9:31,  0 users,  load average: 0.25, 0.20, 0.22
Tasks: 200 total,   5 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.3 us, 41.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   153440 free,  1230252 used,  1036608 buff/cache
KiB Swap:  2047996 total,   326396 free,  1721600 used.   910524 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458860 279360   3988 S  35.3 11.5   7:54.72 /usr/sbin+
     1 root      20   0   44424   3536   1580 S  11.8  0.1   0:49.62 /usr/lib/+
   488 dbus      20   0   58716   1380    628 S  11.8  0.1   0:18.17 /usr/bin/+
 71825 nigeria   20   0  400652  15932  10216 S  11.8  0.7   0:00.02 /opt/cpan+
   358 root      20   0   40248   5832   5572 S   5.9  0.2   0:18.26 /usr/lib/+
 69995 nobody    20   0  277720  18216   3748 S   5.9  0.8   0:00.16 /usr/sbin+
 71835 saboakin  20   0  400652  15408  10000 R   5.9  0.6   0:00.01 /opt/cpan+
 71837 pactpay   20   0  476460  15964  10408 S   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.47 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.84 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:34.76 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.75 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.97 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.81 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.68 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.98 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.66 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   379 root      20   0   45352    100     96 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    528    396 S   0.0  0.0   0:02.87 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 rpc       20   0   69256     96     36 S   0.0  0.0   0:00.03 /sbin/rpc+
   518 root      20   0  152780    152    108 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24712   1252    824 S   0.0  0.1   0:07.98 /usr/lib/+
   521 root      20   0  224148   3120    844 S   0.0  0.1   0:00.39 queueproc+
   524 root      20   0   21540    380    292 S   0.0  0.0   0:00.76 /usr/sbin+
   525 polkitd   20   0  612240    820    428 S   0.0  0.0   0:04.68 /usr/lib/+
   533 root      20   0   52852    324    216 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0  928956   1360    680 S   0.0  0.1   0:30.34 /usr/sbin+
   540 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    460    328 S   0.0  0.0   0:00.93 /usr/sbin+
   574 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296     60     56 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   3916    908 S   0.0  0.2   0:00.59 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.68 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044  78516    496 S   0.0  3.2   0:13.90 /usr/loca+
   931 named     20   0  711724  38388   1736 S   0.0  1.6   0:19.42 /usr/sbin+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   938 root      20   0  436392   2692   2604 S   0.0  0.1   0:01.01 php-fpm: +
   940 root      20   0  385496    512    416 S   0.0  0.0   0:01.00 php-fpm: +
   941 systuser  20   0  114016  14172   2432 S   0.0  0.6   0:08.10 /usr/loca+
   945 cpanelc+  20   0   10448   3396   2152 S   0.0  0.1   0:27.83 /usr/loca+
   946 root      20   0  392856    616    432 S   0.0  0.0   0:00.87 php-fpm: +
   948 memcach+  20   0  342400     72     72 S   0.0  0.0   0:00.75 /usr/bin/+
   950 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   952 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 systuser  20   0   14068     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   959 root      20   0  397344   2800    648 S   0.0  0.1   0:04.88 php-fpm: +
   960 root      20   0  153404    312    228 S   0.0  0.0   0:00.73 pure-ftpd+
   963 systuser  20   0  111608     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   988 root      20   0  386112    656    440 S   0.0  0.0   0:00.89 php-fpm: +
   989 root      20   0  261296   6928   1776 S   0.0  0.3   0:08.01 cpsrvd (S+
   990 root      20   0  572372    980    408 S   0.0  0.0   0:02.96 /usr/bin/+
   991 telegraf  20   0 5654048  37136   6104 S   0.0  1.5   0:18.77 /usr/loca+
   998 root      20   0  111304    416    316 S   0.0  0.0   0:03.84 /usr/sbin+
  1000 root      20   0  314704   6696   5472 S   0.0  0.3   0:09.03 /usr/sbin+
  1001 root      20   0   51508    504    344 S   0.0  0.0   0:00.40 /usr/sbin+
  1125 dovenull  20   0   47048   2532   1708 S   0.0  0.1   0:00.59 dovecot/p+
  1126 dovenull  20   0   48608   3816   1764 S   0.0  0.2   0:00.48 dovecot/i+
  1127 dovecot   20   0   10320    416    300 S   0.0  0.0   0:00.09 dovecot/a+
  1128 root      20   0   10452    568    376 S   0.0  0.0   0:00.38 dovecot/l+
  1129 dovenull  20   0   47052   2296   1496 S   0.0  0.1   0:00.44 dovecot/p+
  1130 dovenull  20   0   48308   3396   1764 S   0.0  0.1   0:00.37 dovecot/i+
  1133 root      20   0   24564   2652    512 S   0.0  0.1   0:00.20 dovecot/c+
  1137 dovecot   20   0   13568    708    472 S   0.0  0.0   0:00.08 dovecot/s+
  1147 root      20   0  248176  25628    692 S   0.0  1.1   0:06.88 /usr/loca+
  1164 systuser  20   0  157708   2824    832 S   0.0  0.1   0:00.16 SonarPush+
  1165 wp-tool+  20   0  410452  32380   1448 S   0.0  1.3   0:28.84 /usr/bin/+
  1166 wp-tool+  20   0  387528  13052   1452 S   0.0  0.5   0:00.34 /usr/bin/+
  1208 dovecot   20   0   41156   1516   1048 S   0.0  0.1   0:00.78 dovecot/a+
  1236 root      20   0  262224  24620   6760 S   0.0  1.0   0:02.59 cpdavd - +
  1239 root      20   0  209296  10332   2380 S   0.0  0.4   0:02.98 tailwatchd
  1241 root      20   0  167452   1308    704 S   0.0  0.1   0:00.50 dnsadmin +
  1631 root      20   0  299272    748    368 S   0.0  0.0   0:00.94 php-fpm: +
  1677 root      38  18  130416   1408    720 S   0.0  0.1   0:00.09 cpanellog+
  1979 root      20   0  267036   7352    668 S   0.0  0.3   0:07.30 /usr/sbin+
  1980 root      20   0  184240  13080   1140 S   0.0  0.5   0:30.49 lfd - sle+
  1981 root      20   0   12800    360    240 S   0.0  0.0   0:04.39 /usr/loca+
  1982 root      20   0   12732    312    232 S   0.0  0.0   0:03.75 /usr/loca+
  1983 root      20   0   12816    368    240 S   0.0  0.0   0:04.18 /usr/loca+
  1986 root      20   0   53268     96     96 S   0.0  0.0   0:00.04 /usr/loca+
  2109 worencom  20   0   38492   3916   2944 S   0.0  0.2   0:00.01 dovecot/i+
  5511 root      20   0  265188  94204   2540 S   0.0  3.9   0:04.92 spamd chi+
  5512 root      20   0  261652  70552    340 S   0.0  2.9   0:00.38 spamd chi+
 27531 root      20   0 1277056  11968    600 S   0.0  0.5   0:00.08 /usr/bin/+
 27569 root      20   0 1284296  11464    600 S   0.0  0.5   0:00.08 /usr/bin/+
 33167 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 34114 root      20   0       0      0      0 D   0.0  0.0   0:00.09 [kworker/+
 34743 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.58 [kworker]
 56223 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 56256 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 57942 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62545 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65411 nobody    20   0  277528  18000   3844 S   0.0  0.7   0:00.56 /usr/sbin+
 66302 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68267 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68268 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69295 nobody    20   0  277784  18056   3664 S   0.0  0.7   0:00.24 /usr/sbin+
 69315 nobody    20   0  277784  18184   3688 S   0.0  0.8   0:00.26 /usr/sbin+
 69940 nobody    20   0  277784  17484   3140 S   0.0  0.7   0:00.29 /usr/sbin+
 69957 nobody    20   0  277916  17708   3396 S   0.0  0.7   0:00.19 /usr/sbin+
 69993 nobody    20   0  277784  17952   3576 S   0.0  0.7   0:00.20 /usr/sbin+
 70436 nobody    20   0  277920  17712   3360 S   0.0  0.7   0:00.13 /usr/sbin+
 70457 nobody    20   0  277932  17932   3568 S   0.0  0.7   0:00.16 /usr/sbin+
 70774 nobody    20   0  277924  17776   3444 S   0.0  0.7   0:00.07 /usr/sbin+
 70786 nobody    20   0  277784  18216   3836 S   0.0  0.8   0:00.11 /usr/sbin+
 70787 nobody    20   0  277784  17852   3468 S   0.0  0.7   0:00.13 /usr/sbin+
 70788 nobody    20   0  277784  18436   3564 S   0.0  0.8   0:00.12 /usr/sbin+
 70808 nobody    20   0  277656  17712   3356 S   0.0  0.7   0:00.12 /usr/sbin+
 70809 nobody    20   0  277784  17936   3560 S   0.0  0.7   0:00.14 /usr/sbin+
 70813 nobody    20   0  277784  18016   3612 S   0.0  0.7   0:00.09 /usr/sbin+
 70940 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 71057 nobody    20   0  277784  18316   3608 S   0.0  0.8   0:00.06 /usr/sbin+
 71305 nobody    20   0  277924  17976   3384 S   0.0  0.7   0:00.10 /usr/sbin+
 71326 nobody    20   0  277784  17692   3336 S   0.0  0.7   0:00.03 /usr/sbin+
 71327 nobody    20   0  277784  17556   3216 S   0.0  0.7   0:00.03 /usr/sbin+
 71640 cloudw    20   0  544220  83160   6816 S   0.0  3.4   0:00.93 php-fpm: +
 71717 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 71741 nigeria   20   0  397064   5348   2368 S   0.0  0.2   0:00.00 php-fpm: +
 71752 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71753 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71754 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71755 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71757 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71758 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71760 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71761 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71762 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71763 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71764 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 71766 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71767 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 71768 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 71769 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 71770 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 71784 cloudw    20   0  352096  15228  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 71796 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 71798 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 71800 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71801 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71802 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 71804 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71805 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 71807 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 71808 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 71809 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 71810 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 71811 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 71813 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 71814 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 71815 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 71822 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 71830 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 71833 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 71841 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 71842 nobody    20   0  277784  14376      0 R   0.0  0.6   0:00.00 /usr/sbin+
 90193 root      20   0       0      0      0 R   0.0  0.0   0:00.11 [kworker/+
 99630 root      20   0       0      0      0 D   0.0  0.0   0:00.20 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    10:16   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    10:16   0:34  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:16   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    10:16   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   10:16   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    10:16   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root      90193  0.0  0.0      0     0 ?        S    18:20   0:00  \_ [kworker/1:0]
root      99630  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/u200:0]
root      33167  0.0  0.0      0     0 ?        S    19:06   0:00  \_ [kworker/0:0]
root      34114  0.0  0.0      0     0 ?        S    19:07   0:00  \_ [kworker/0:2]
root      56223  0.0  0.0      0     0 ?        S    19:31   0:00  \_ [kworker/1:2]
root      56256  0.0  0.0      0     0 ?        S    19:31   0:00  \_ [kworker/0:3]
root      57942  0.0  0.0      0     0 ?        S    19:33   0:00  \_ [kworker/u200:1]
root      62545  0.0  0.0      0     0 ?        S    19:38   0:00  \_ [kworker/0:1]
root      66302  0.0  0.0      0     0 ?        S    19:42   0:00  \_ [kworker/1:1]
root      68267  0.0  0.0      0     0 ?        S    19:44   0:00  \_ [kworker/0:4]
root      68268  0.0  0.0      0     0 ?        S    19:44   0:00  \_ [kworker/0:5]
root      70940  0.0  0.0      0     0 ?        R    19:47   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44424  3536 ?        Ss   10:16   0:49 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40248  5832 ?        Ss   10:16   0:18 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   100 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   528 ?        S<sl 10:16   0:02 /sbin/auditd
dbus        488  0.0  0.0  58716  1380 ?        Ss   10:16   0:18 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256    96 ?        Ss   10:16   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   152 ?        Ss   10:16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1252 ?        Ss   10:16   0:07 /usr/lib/systemd/systemd-logind
root        521  0.0  0.1 224148  3120 ?        Ss   10:16   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   380 ?        Ss   10:16   0:00 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240   820 ?        Ssl  10:16   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   324 ?        Ss   10:16   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.0  0.0 928956  1360 ?        Ssl  10:16   0:30 /usr/sbin/nscd
root        540  0.0  0.0   4388    36 ?        Ss   10:16   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208     0 ?        Ssl  10:16   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   460 ?        Ss   10:16   0:00 /usr/sbin/crond -n
root      71752  0.0  0.0 183048  2148 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71768  0.0  0.0 113284  1208 ?        Ss   19:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      71769  0.0  0.0 108052   356 ?        S    19:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      71770  0.0  0.0 113288  1516 ?        S    19:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      71843  0.0  0.0 153840  2096 ?        R    19:48   0:00  |               \_ ps auxf
root      71753  0.0  0.0 183048  2148 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71801  0.0  0.0  20164   808 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      71754  0.0  0.0 183048  2148 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71807  0.0  0.0  20164   804 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      71755  0.0  0.0 183048  2148 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71800  0.0  0.0  20164   808 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      71757  0.0  0.0 183048  2144 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71805  0.0  0.0  20164   804 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      71758  0.0  0.0 183048  2148 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71810  0.0  0.0  20164   808 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      71760  0.0  0.0 183048  2144 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71796  0.0  0.0  20164   804 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      71761  0.0  0.0 183048  2140 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71804  0.0  0.0  20164   808 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      71762  0.0  0.0 183048  2140 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71808  0.0  0.0  20164   804 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      71763  0.0  0.0 183048  2140 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71802  0.0  0.0  20164   804 ?        Ss   19:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      71764  0.0  0.0 183048  2140 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71813  0.0  0.0  20164   968 ?        Ss   19:48   0:00  |   \_ jailshell (pactpay) [71833] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   71833  0.0  0.0  20164   264 ?        S    19:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   71837  1.0  0.6 476460 15964 ?        Sl   19:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      71766  0.0  0.0 183048  2144 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71809  0.0  0.0  20164   964 ?        Ss   19:48   0:00  |   \_ jailshell (nigeria) [71822] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   71822  0.0  0.0  20164   260 ?        S    19:48   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   71825  3.0  0.6 400652 15932 ?        S    19:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      71767  0.0  0.0 183048  2144 ?        S    19:48   0:00  \_ /usr/sbin/CROND -n
root      71814  0.0  0.0  20164   964 ?        Ss   19:48   0:00      \_ jailshell (saboakin) [71830] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  71830  0.0  0.0      0     0 ?        R    19:48   0:00          \_ [jailshell]
root        574  0.0  0.0  24208    24 ?        Ss   10:16   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296    60 tty1     Ss+  10:16   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704    32 ttyS0    Ss+  10:16   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  3916 ?        Ss   10:16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.0  3.2 1763044 78516 ?       Ssl  10:16   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.5 711724 38388 ?        Ssl  10:16   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.0 445028     0 ?        Ss   10:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        938  0.0  0.1 436392  2692 ?        Ss   10:16   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 385496   512 ?        Ss   10:16   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    941  0.0  0.5 114016 14172 ?        Ssl  10:16   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10448  3396 ?        Ss   10:16   0:27 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        946  0.0  0.0 392856   616 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
memcach+    948  0.0  0.0 342400    72 ?        Ssl  10:16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    44 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524    68 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    40 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        959  0.0  0.1 397344  2800 ?        Ss   10:16   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71640 18.6  3.4 544220 83160 ?        S    19:47   0:00  \_ php-fpm: pool cloudware_ng
nigeria   71741  0.0  0.2 397064  5348 ?        S    19:48   0:00  \_ php-fpm: pool nigeriadecide_org
root        960  0.0  0.0 153404   312 ?        Ss   10:16   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608    68 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        988  0.0  0.0 386112   656 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        989  0.0  0.2 261296  6928 ?        Ss   10:16   0:08 cpsrvd (SSL) - waiting for connections                   
root      71717  0.0  0.0      0     0 ?        Z    19:47   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   980 ?        Ssl  10:16   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.5 5654048 37136 ?       SLsl 10:16   0:18 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   416 ?        Ss   10:16   0:03 /usr/sbin/sshd -D
root      71798  0.0  0.1 111304  4264 ?        Ss   19:48   0:00  \_ sshd: [accepted]
sshd      71815  0.0  0.1 115644  2628 ?        S    19:48   0:00      \_ sshd: [net]
root       1000  0.0  0.2 314704  6696 ?        Ssl  10:16   0:09 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   504 ?        Ss   10:16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.1  47048  2532 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  48608  3816 ?        S    10:16   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   416 ?        S    10:16   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   568 ?        S    10:16   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  47052  2296 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  48308  3396 ?        S    10:16   0:00  \_ dovecot/imap-login
root       1133  0.0  0.1  24564  2652 ?        S    10:16   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   708 ?        S    10:16   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41156  1516 ?        S    10:16   0:00  \_ dovecot/auth
worencom   2109  0.0  0.1  38492  3916 ?        S    18:34   0:00  \_ dovecot/imap
root       1147  0.0  1.0 248176 25628 ?        Ss   10:16   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  3.8 265188 94204 ?        S    10:20   0:04  \_ spamd child
root       5512  0.0  2.9 261652 70552 ?        S    10:20   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  2824 ?        S    10:16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  1.3 410452 32380 ?        Ss   10:16   0:28 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.5 387528 13052 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  1.0 262224 24620 ?        Ss   10:16   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.4 209296 10332 ?        Ss   10:16   0:02 tailwatchd
root       1241  0.0  0.0 167452  1308 ?        Ss   10:16   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   748 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1408 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1731  1.3 11.5 1458860 279360 ?      Sl   10:16   7:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1979  0.0  0.3 267036  7352 ?        Ss   10:16   0:07 /usr/sbin/httpd -k start
root       1981  0.0  0.0  12800   360 ?        S    10:16   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1982  0.0  0.0  12732   312 ?        S    10:16   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1983  0.0  0.0  12816   368 ?        S    10:16   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1986  0.0  0.0  53268    96 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    65411  0.1  0.7 277528 18000 ?        S    19:41   0:00  \_ /usr/sbin/httpd -k start
nobody    69295  0.1  0.7 277784 18056 ?        S    19:45   0:00  \_ /usr/sbin/httpd -k start
nobody    69315  0.1  0.7 277784 18184 ?        S    19:45   0:00  \_ /usr/sbin/httpd -k start
nobody    69940  0.2  0.7 277784 17484 ?        S    19:45   0:00  \_ /usr/sbin/httpd -k start
nobody    69957  0.1  0.7 277916 17708 ?        S    19:45   0:00  \_ /usr/sbin/httpd -k start
nobody    69993  0.1  0.7 277784 17952 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
root      71842  0.0  0.0   6516   416 ?        S    19:48   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php70
nobody    69995  0.1  0.7 277720 18216 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70436  0.1  0.7 277920 17712 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70457  0.1  0.7 277932 17932 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70774  0.1  0.7 277924 17776 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
cloudw    71784  1.0  0.6 352096 15228 ?        S    19:48   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    70786  0.1  0.7 277784 18216 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70787  0.1  0.7 277784 17852 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70788  0.1  0.7 277784 18436 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70808  0.1  0.7 277656 17712 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70809  0.2  0.7 277784 17936 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    70813  0.1  0.7 277784 18016 ?        S    19:46   0:00  \_ /usr/sbin/httpd -k start
nobody    71057  0.1  0.7 277784 18316 ?        R    19:47   0:00  \_ /usr/sbin/httpd -k start
nobody    71305  0.2  0.7 277924 17976 ?        S    19:47   0:00  \_ /usr/sbin/httpd -k start
nobody    71326  0.0  0.7 277784 17692 ?        S    19:47   0:00  \_ /usr/sbin/httpd -k start
nobody    71327  0.0  0.7 277784 17556 ?        S    19:47   0:00  \_ /usr/sbin/httpd -k start
root       1980  0.0  0.5 184240 13080 ?        Ss   10:16   0:30 lfd - sleeping
oysipao+  34743  0.0  0.0   3148   416 ?        Ss   11:00   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152   496 ?        S    11:00   0:00  \_ [kworker]
root      27531  0.0  0.4 1277056 11968 ?       Ssl  19:00   0:00 /usr/bin/checkstatus
root      27569  0.0  0.4 1284296 11464 ?       Ssl  19:00   0:00 /usr/bin/cspdaemon
## mysql stats
Uptime: 34274  Threads: 3  Questions: 2801917  Slow queries: 0  Opens: 10385  Flush tables: 1  Open tables: 2000  Queries per second avg: 81.750
*************************** 1. row ***************************
     Id: 38931
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 38934
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 38937
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.175 TIME_WAIT
      1 185.220.101.9 TIME_WAIT
      1 192.36.198.147 TIME_WAIT
      1 192.36.226.103 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.137.14.92 TIME_WAIT
      1 52.167.144.167 TIME_WAIT
      1 54.39.0.222 TIME_WAIT
      1 54.39.0.228 TIME_WAIT
      1 66.249.64.131 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 78.157.49.100 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.248.90.230 TIME_WAIT
      2 114.119.155.170 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.194 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 19:48:02 WAT
   Restart Time: Thursday, 13-Nov-2025 10:16:53 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 31 minutes 8 seconds
   Server load: 0.25 0.20 0.22
   Total accesses: 205179 - Total Traffic: 4.7 GB - Total Duration: 111777294
   CPU Usage: u2.54 s7.95 cu2613.59 cs2174.57 - 14% CPU load
   5.99 requests/sec - 144.0 kB/second - 24.0 kB/request - 544.779 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

..K._KKK._W.KK.K._K_.K...KW..R.W.K.K............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol              VHost                                          Request
   0-0  -     0/0/8640   . 0.00 22    0   4286166 0.0   0.00  188.23 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   1-0  -     0/0/8548   . 0.00 23    0   4229838 0.0   0.00  203.73 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-0  70436 1/21/8330  K 0.54 1     259 4219327 30.5  0.60  190.23 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2903485082 HTTP/1.1
   3-0  -     0/0/8547   . 0.00 10    0   4237169 0.0   0.00  201.65 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   4-0  69295 0/40/8433  _ 1.06 0     8   4228060 0.0   1.12  199.48 52.54.249.218 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/images/blog/blog/blog/201
   5-0  70457 3/26/8449  K 0.67 4     341 4020625 95.8  0.71  185.73 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2799999984 HTTP/1.1
   6-0  71305 16/18/8288 K 0.44 0     357 4027607 497.3 0.50  194.47 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3205676624 HTTP/1.1
   7-0  71326 1/6/7761   K 0.11 1     415 3999732 30.5  0.15  198.65 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1232685248 HTTP/1.1
   8-0  -     0/0/7938   . 0.00 11    0   3844369 0.0   0.00  175.78 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-0  71327 0/5/7822   _ 0.10 1     366 3800190 0.0   0.13  173.43 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2633931004 HTTP/1.1
   10-0 70774 0/15/7749  W 0.28 0     0   3853700 0.0   0.32  171.97 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80      GET /?p=982886994 HTTP/1.1
   11-0 -     0/0/7749   . 0.00 43    0   4105230 0.0   0.00  193.85 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 69315 33/73/6950 K 1.10 0     26  3797830 22.6  1.15  165.59 20.48.160.218 http/1.1 workflow-management-software.co GET /x.php HTTP/1.1
   13-0 71057 34/42/7036 K 0.18 0     11  3531874 17.5  0.19  161.92 20.48.160.218 http/1.1 proxy-subdomains-vhost.localhos GET /asd67.php HTTP/1.1
   14-0 -     0/0/6683   . 0.00 58    0   3359433 0.0   0.00  151.96 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 69940 5/45/6282  K 1.33 0     317 3309651 155.7 1.37  145.12 66.249.70.38  http/1.1 support.cloudware.ng:443        GET /browse/112727573519 HTTP/1.1
   16-0 -     0/0/6113   . 0.00 53    0   3203867 0.0   0.00  141.91 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 70786 0/21/6310  _ 0.50 0     0   3247928 0.0   0.56  147.82 ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   18-0 70787 2/20/5980  K 0.52 1     401 2928090 66.3  0.56  133.18 66.249.70.39  http/1.1 support.cloudware.ng:443        GET /browse/111380871140 HTTP/1.1
   19-0 69957 0/33/5347  _ 0.85 1     345 2911269 0.0   0.92  132.55 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3070854149 HTTP/1.1
   20-0 -     0/0/5368   . 0.00 36    0   3116700 0.0   0.00  128.09 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 70788 5/21/4599  K 0.52 0     381 2376339 151.8 0.56  105.71 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1475346699 HTTP/1.1
   22-0 -     0/0/4283   . 0.00 57    0   2418538 0.0   0.00  96.44  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/3768   . 0.00 37    0   2231211 0.0   0.00  95.42  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/4130   . 0.00 64    0   2375286 0.0   0.00  98.07  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 70808 6/19/3964  K 0.51 2     297 2166984 180.7 0.71  107.22 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1160807628 HTTP/1.1
   26-0 70809 0/23/4118  W 0.63 0     0   2191515 0.0   0.68  93.26  ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   27-0 -     0/0/2588   . 0.00 42    0   1587636 0.0   0.00  61.95  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/2944   . 0.00 40    0   1757384 0.0   0.00  69.90  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 65411 0/97/2831  R 2.47 84    358 1632951 0.0   2.58  66.70  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80      GET /?p=4130738196 HTTP/1.1
   30-0 -     0/0/2437   . 0.00 56    0   1510107 0.0   0.00  62.06  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 69993 3/32/1775  W 0.88 0     0   1053746 91.1  0.93  44.82  66.249.70.194 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3124438168 HTTP/1.1
   32-0 -     0/0/1787   . 0.00 38    0   1096271 0.0   0.00  38.99  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 69995 5/29/1638  K 0.69 0     363 1112130 151.4 0.94  40.77  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1065397318 HTTP/1.1
   34-0 -     0/0/1528   . 0.00 55    0   961828  0.0   0.00  36.50  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 70813 3/17/1874  K 0.41 0     283 883732  97.3  0.45  48.86  66.249.70.32  http/1.1 support.cloudware.ng:443        GET /browse/113769707484 HTTP/1.1
   36-0 -     0/0/1155   . 0.00 275   0   743033  0.0   0.00  29.84  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/883    . 0.00 289   0   656343  0.0   0.00  22.96  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/580    . 0.00 232   0   455064  0.0   0.00  14.53  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/558    . 0.00 133   0   594141  0.0   0.00  14.89  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/552    . 0.00 843   0   403890  0.0   0.00  13.91  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/225    . 0.00 834   0   302588  0.0   0.00  5.55   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/246    . 0.00 793   0   258834  0.0   0.00  6.43   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/209    . 0.00 844   0   234966  0.0   0.00  5.52   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/270    . 0.00 583   0   227956  0.0   0.00  5.59   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/128    . 0.00 831   0   186916  0.0   0.00  3.15   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/163    . 0.00 821   0   334876  0.0   0.00  4.54   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/177    . 0.00 822   0   219196  0.0   0.00  4.55   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/65     . 0.00 830   0   151495  0.0   0.00  1.49   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/78     . 0.00 17418 0   104997  0.0   0.00  2.09   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/42     . 0.00 17401 0   74936   0.0   0.00  1.13   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/40     . 0.00 17324 0   91237   0.0   0.00  0.94   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/49     . 0.00 17237 0   155447  0.0   0.00  1.26   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/43     . 0.00 17295 0   114977  0.0   0.00  1.21   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/196    . 0.00 16579 0   251167  0.0   0.00  5.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/47     . 0.00 17369 0   130020  0.0   0.00  1.14   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/23     . 0.00 17336 0   73843   0.0   0.00  0.56   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/42     . 0.00 17337 0   67360   0.0   0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/19     . 0.00 17368 0   48527   0.0   0.00  0.50   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/47     . 0.00 17125 0   143523  0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/60     . 0.00 17175 0   118427  0.0   0.00  1.36   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/5      . 0.00 17409 0   67934   0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/13     . 0.00 17351 0   128175  0.0   0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/6      . 0.00 17403 0   66229   0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/67     . 0.00 17254 0   118099  0.0   0.00  1.73   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/24     . 0.00 17358 0   15292   0.0   0.00  0.60   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/13     . 0.00 17406 0   60306   0.0   0.00  0.33   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/17     . 0.00 17315 0   127718  0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/13     . 0.00 17381 0   77438   0.0   0.00  0.26   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/9      . 0.00 17294 0   128663  0.0   0.00  0.28   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/160    . 0.00 16686 0   198571  0.0   0.00  3.69   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/21     . 0.00 17299 0   71385   0.0   0.00  0.48   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/10     . 0.00 17343 0   58674   0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/12     . 0.00 17296 0   127820  0.0   0.00  0.24   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/11     . 0.00 17416 0   3646    0.0   0.00  0.19   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/36     . 0.00 17352 0   15886   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/5      . 0.00 17338 0   121937  0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/9      . 0.00 17421 0   5296    0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/18     . 0.00 17384 4   9846    0.0   0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/14     . 0.00 17307 0   129904  0.0   0.00  0.39   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/88     . 0.00 17016 0   167903  0.0   0.00  2.14   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-0 -     0/0/19     . 0.00 17310 0   133107  0.0   0.00  0.51   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-0 -     0/0/2      . 0.00 17475 1   8       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-0 -     0/0/14     . 0.00 17308 0   127868  0.0   0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-0 -     0/0/3      . 0.00 17474 0   5       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-0 -     0/0/7      . 0.00 17447 0   2013    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   86-0 -     0/0/45     . 0.00 23331 0   25272   0.0   0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   87-0 -     0/0/1      . 0.00 23549 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   88-0 -     0/0/5      . 0.00 23497 0   1918    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   89-0 -     0/0/48     . 0.00 23319 0   28263   0.0   0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 332
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 19 seconds, (range: 0...83)
   index usage: 5%, cache usage: 8%
   total entries stored since starting: 62108
   total entries replaced since starting: 0
   total entries expired since starting: 61748
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 8 hit, 108 miss
   total removes since starting: 29 hit, 206 miss
Youez - 2016 - github.com/yon3zu
LinuXploit