403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.12.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.12 load[0] mem[59/68] mysql[1/8] httpd[26]
              total        used        free      shared  buff/cache   available
Mem:           2363        1348          74          16         940         833
Swap:          1999        1541         458
 01:12:01 up  5:09,  0 users,  load average: 0.32, 0.51, 0.61
## system overview
top - 01:12:01 up  5:09,  0 users,  load average: 0.45, 0.54, 0.61
Tasks: 202 total,   5 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.8 us, 23.5 sy,  0.0 ni, 14.7 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    89616 free,  1394916 used,   935768 buff/cache
KiB Swap:  2047996 total,   470132 free,  1577864 used.   840024 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 204392   4532 S  88.2  8.4   4:14.86 /usr/sbin+
 35377 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44428   3604   1692 S   5.9  0.1   0:26.45 /usr/lib/+
    36 root      20   0       0      0      0 S   5.9  0.0   0:23.36 [kswapd0]
 35382 cloudw    20   0  352096  15228  10128 S   5.9  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.23 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.88 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:18.83 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.82 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.47 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.13 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   3488   3252 S   0.0  0.1   0:10.79 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    152     44 S   0.0  0.0   0:01.70 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.22 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.41 /usr/sbin+
   501 polkitd   20   0  612240    840    560 S   0.0  0.0   0:02.50 /usr/lib/+
   503 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3116    900 S   0.0  0.1   0:00.26 queueproc+
   507 root      20   0   52852    336    248 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:09.55 /usr/bin/+
   519 nscd      20   0 1062080   1320    592 S   0.0  0.1   0:15.06 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    428    296 S   0.0  0.0   0:00.52 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3744    832 S   0.0  0.2   0:00.69 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.20 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  13324   2700 S   0.0  0.6   0:04.56 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.39 pure-ftpd+
   931 root      20   0   51508    460    300 S   0.0  0.0   0:00.27 /usr/sbin+
   932 root      20   0  572372    656    184 S   0.0  0.0   0:01.67 /usr/bin/+
   933 telegraf  20   0 5654048  33600   5900 S   0.0  1.4   0:10.40 /usr/loca+
   935 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.42 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.39 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    336    252 S   0.0  0.0   0:00.58 php-fpm: +
   961 named     20   0  637992  23676   1600 S   0.0  1.0   0:10.33 /usr/sbin+
   964 root      20   0  273744   3464   3076 S   0.0  0.1   0:05.02 /usr/sbin+
   981 root      20   0  436392    400    312 S   0.0  0.0   0:00.67 php-fpm: +
   984 root      20   0  385496    368    280 S   0.0  0.0   0:00.55 php-fpm: +
   985 root      20   0  261288   3744    876 S   0.0  0.2   0:02.84 cpsrvd (S+
   989 root      20   0  392856    216    132 S   0.0  0.0   0:00.54 php-fpm: +
   992 root      20   0 1828184 420544      0 S   0.0 17.4   0:32.13 /usr/loca+
  1000 root      20   0  397344   1872    596 S   0.0  0.1   0:02.50 php-fpm: +
  1006 cpanelc+  20   0   10604   3548   2304 S   0.0  0.1   0:15.15 /usr/loca+
  1075 dovenull  20   0   46984    772    532 S   0.0  0.0   0:00.39 dovecot/p+
  1076 dovenull  20   0   48324   2572   1660 S   0.0  0.1   0:00.33 dovecot/i+
  1077 dovecot   20   0   10320    364    256 S   0.0  0.0   0:00.10 dovecot/a+
  1078 root      20   0   10452    448    284 S   0.0  0.0   0:00.23 dovecot/l+
  1079 dovenull  20   0   46984   2064   1528 S   0.0  0.1   0:00.30 dovecot/p+
  1080 dovenull  20   0   48000   2532   1640 S   0.0  0.1   0:00.25 dovecot/i+
  1084 root      20   0   24528   1864    496 S   0.0  0.1   0:00.13 dovecot/c+
  1088 dovecot   20   0   13568    628    452 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2888    960 S   0.0  0.1   0:00.10 SonarPush+
  1166 dovecot   20   0   41260   1544   1012 S   0.0  0.1   0:00.72 dovecot/a+
  1172 root      20   0  248152   3724    688 S   0.0  0.2   0:05.06 /usr/loca+
  1173 wp-tool+  20   0  387556   3512   1644 S   0.0  0.1   0:00.22 /usr/bin/+
  1174 wp-tool+  20   0  410616  18204   1648 S   0.0  0.8   0:15.42 /usr/bin/+
  1232 root      20   0  209372   8292   2000 S   0.0  0.3   0:02.37 tailwatchd
  1234 root      20   0  167452   1200    652 S   0.0  0.0   0:00.34 dnsadmin +
  1237 root      20   0  262224  24240   6376 S   0.0  1.0   0:01.00 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.50 php-fpm: +
  1702 root      38  18  130416   1332    676 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:01.64 /usr/sbin+
  2063 root      20   0   12828    380    212 S   0.0  0.0   0:02.16 /usr/loca+
  2064 root      20   0   12732    260    180 S   0.0  0.0   0:01.83 /usr/loca+
  2065 root      20   0   12852    388    216 S   0.0  0.0   0:02.01 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  45628   1192 S   0.0  1.9   0:02.69 spamd chi+
  7886 root      20   0  248152   2552    400 S   0.0  0.1   0:00.00 spamd chi+
 12759 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 16898 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 16928 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 17677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 20440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23292 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23372 root      20   0  108056    352    280 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.06 /usr/bin/+
 23946 root      20   0 1277056  11568    596 S   0.0  0.5   0:00.05 /usr/bin/+
 24669 nobody    20   0  277720  18356   3900 S   0.0  0.8   0:01.21 /usr/sbin+
 24735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25500 worencom  20   0   38380   3004   2208 S   0.0  0.1   0:00.00 dovecot/i+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 28517 nobody    20   0  277656  18396   4228 S   0.0  0.8   0:00.68 /usr/sbin+
 28978 nobody    20   0  277720  17920   3832 S   0.0  0.7   0:00.67 /usr/sbin+
 29603 nobody    20   0  277720  18176   4036 S   0.0  0.8   0:00.77 /usr/sbin+
 31529 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31600 nobody    20   0  277720  18272   3804 S   0.0  0.8   0:00.33 /usr/sbin+
 31603 nobody    20   0  277784  17752   3716 S   0.0  0.7   0:00.35 /usr/sbin+
 32318 nobody    20   0  277784  17648   3728 S   0.0  0.7   0:00.24 /usr/sbin+
 32327 nobody    20   0  277932  17868   3808 S   0.0  0.7   0:00.30 /usr/sbin+
 32418 nobody    20   0  277720  18064   3912 S   0.0  0.7   0:00.24 /usr/sbin+
 32419 nobody    20   0  277784  17516   3708 S   0.0  0.7   0:00.38 /usr/sbin+
 33311 nobody    20   0  277516  17156   3588 S   0.0  0.7   0:00.20 /usr/sbin+
 33325 nobody    20   0  277784  17088   3384 S   0.0  0.7   0:00.24 /usr/sbin+
 33364 nobody    20   0  277720  17912   3876 S   0.0  0.7   0:00.15 /usr/sbin+
 33399 nobody    20   0  277784  17588   3712 S   0.0  0.7   0:00.27 /usr/sbin+
 33401 nobody    20   0  277784  17776   3792 S   0.0  0.7   0:00.18 /usr/sbin+
 33727 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 34455 nobody    20   0  277784  17720   3748 S   0.0  0.7   0:00.05 /usr/sbin+
 34499 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 34520 nobody    20   0  277724  17332   3380 S   0.0  0.7   0:00.09 /usr/sbin+
 34521 nobody    20   0  277924  17484   3604 S   0.0  0.7   0:00.12 /usr/sbin+
 34571 nobody    20   0  277784  17100   3396 S   0.0  0.7   0:00.08 /usr/sbin+
 35156 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 35259 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 35268 nobody    20   0  277512  16536   3096 S   0.0  0.7   0:00.00 /usr/sbin+
 35269 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 35278 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 35279 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 35280 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 35281 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 35292 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 35295 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35297 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35298 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35299 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35300 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35301 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35302 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35303 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35305 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35307 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35309 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35312 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 35314 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 35315 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 35341 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35342 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35345 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35346 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35347 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 35348 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35351 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35352 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35354 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 35355 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 35369 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 35373 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 35374 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 35381 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 35386 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 35388 cloudw    20   0  286416  15204  10108 R   0.0  0.6   0:00.00 /opt/cpan+
 35389 root      20   0   38648   6504   3044 R   0.0  0.3   0:00.00 /usr/loca+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.29 [kworker]
 76167 root      20   0  181568   7072   1104 S   0.0  0.3   0:04.20 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov12   0:18  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root      12759  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:3]
root      16898  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/0:1]
root      16928  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/1:2]
root      17677  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:4]
root      20440  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:1]
root      24735  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/0:4]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      31529  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:1]
root      34499  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44428  3604 ?        Ss   Nov12   0:26 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  3488 ?        Ss   Nov12   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   152 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    60 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3116 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   336 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1320 ?        Ssl  Nov12   0:15 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   428 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   352 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      35295  0.0  0.0 183048  2140 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35312  0.0  0.0 113284  1212 ?        Ss   01:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      35314  0.0  0.0 108052   360 ?        S    01:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      35315  0.0  0.0 113288  1516 ?        S    01:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      35391  0.0  0.0 153840  2092 ?        R    01:12   0:00  |               \_ ps auxf
root      35297  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35346  0.0  0.0  20164   808 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      35298  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35345  0.0  0.0  20164   808 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      35299  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35347  0.0  0.0  20164   984 ?        Ss   01:12   0:00  |   \_ jailshell (cloudsms) [35392] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      35300  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35341  0.0  0.0  20164   804 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      35301  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35348  0.0  0.0  20164   808 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      35302  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35342  0.0  0.0  20164   808 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      35303  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35352  0.0  0.0  20164   804 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      35305  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35351  0.0  0.0  20164   808 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      35307  0.0  0.0 183048  2140 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35355  0.0  0.0  20164   964 ?        Ss   01:12   0:00  |   \_ jailshell (pactpay) [35369] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35369  0.0  0.0  20164   256 ?        S    01:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35374  0.0  0.7 476724 17480 ?        S    01:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      35309  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      35354  0.0  0.0  20164   968 ?        Ss   01:12   0:00      \_ jailshell (nigeria) [35373] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35373  0.0  0.0  20164   264 ?        S    01:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35377  0.0  0.6 400652 15936 ?        S    01:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3744 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13324 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984   772 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2572 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   364 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   448 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984  2064 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2532 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  1864 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   628 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1544 ?        S    Nov12   0:00  \_ dovecot/auth
worencom  25500  0.0  0.1  38380  3004 ?        S    01:01   0:00  \_ dovecot/imap
root      33727  0.0  0.1  60820  4508 ?        S    01:10   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   656 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33600 ?       SLsl Nov12   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400     0 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268     4 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   336 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  0.9 637992 23676 ?        Ssl  Nov12   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 273744  3464 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   400 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   368 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 261288  3744 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      35292  0.0  0.0      0     0 ?        Z    01:12   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   216 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 17.3 1828184 420544 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1872 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   35156  0.0  0.1 397064  4472 ?        S    01:11   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10604  3548 ?        Rs   Nov12   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2888 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.1 248152  3724 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  1.8 306476 45628 ?        S    Nov12   0:02  \_ spamd child
root       7886  0.0  0.1 248152  2552 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3512 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18204 ?        Ss   Nov12   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8292 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.0 167452  1200 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  1.0 262224 24240 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1332 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3  8.4 1457796 204392 ?      Sl   Nov12   4:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12828   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   260 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12852   388 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    24669  0.1  0.7 277720 18356 ?        S    01:01   0:01  \_ /usr/sbin/httpd -k start
nobody    28517  0.1  0.7 277656 18396 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28978  0.1  0.7 277720 17920 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    35388  0.0  0.6 351952 15232 ?        S    01:12   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    29603  0.2  0.7 277720 18176 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    31600  0.1  0.7 277720 18272 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    31603  0.1  0.7 277784 17752 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32318  0.1  0.7 277784 17648 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    35386  0.0  0.6 352096 15236 ?        S    01:12   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    32327  0.1  0.7 277932 17868 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32418  0.1  0.7 277720 18064 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32419  0.2  0.7 277784 17516 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    35382  0.0  0.6 352096 15228 ?        S    01:12   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    33311  0.1  0.7 277516 17156 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    33325  0.1  0.7 277784 17088 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    33364  0.1  0.7 277720 17912 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    33399  0.2  0.7 277784 17588 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    33401  0.1  0.7 277784 17776 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    34455  0.0  0.7 277784 17720 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    34520  0.1  0.7 277724 17332 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    34521  0.2  0.7 277924 17484 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    34571  0.1  0.7 277784 17100 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35259  0.0  0.6 277640 15520 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35268  0.0  0.6 277512 16536 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35269  0.0  0.6 277640 15520 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35278  0.0  0.6 277640 15520 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35279  0.0  0.6 277640 15520 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35280  0.0  0.6 277640 15520 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35281  0.0  0.6 277640 15520 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.2 181568  7072 ?        Ss   00:00   0:04 lfd - sleeping
root      23911  0.0  0.4 1276100 10744 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11568 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 18542  Threads: 3  Questions: 1537578  Slow queries: 0  Opens: 6029  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.924
*************************** 1. row ***************************
     Id: 21778
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 21779
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 21781
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.140.48 TIME_WAIT
      1 142.44.233.32 TIME_WAIT
      1 15.235.27.229 TIME_WAIT
      1 195.40.101.47 TIME_WAIT
      1 195.40.118.192 TIME_WAIT
      1 ::1 TIME_WAIT
      1 4.196.198.95 TIME_WAIT
      1 43.155.195.141 TIME_WAIT
      1 45.82.78.114 TIME_WAIT
      1 47.128.20.163 TIME_WAIT
      1 66.249.64.37 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 84.37.53.45 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      6 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:12:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 8 minutes 58 seconds
   Server load: 0.45 0.54 0.61
   Total accesses: 95733 - Total Traffic: 2.6 GB - Total Duration: 47875794
   CPU Usage: u4.86 s3.33 cu1233.46 cs985.75 - 12% CPU load
   5.16 requests/sec - 145.2 kB/second - 28.1 kB/request - 500.097 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

WKKKKKKKKKKKKKKKKKKKKW_KW_K_____..K..K..........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                        Request
   0-0  32318 0/44/4722  W 1.05 0     0   2336116 0.0   1.12  120.00 66.249.64.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=684193387 HTTP/1.1
   1-0  32327 1/50/4707  K 1.30 2     395 2167598 30.0  1.31  114.78 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1668277960 HTTP/1.1
   2-0  33311 2/34/4560  K 0.89 0     294 2369028 61.0  0.91  135.12 66.249.64.227 http/1.1 schoolplus.cloudware.ng:80 GET /?p=62303947 HTTP/1.1
   3-0  34455 1/11/4673  K 0.20 1     356 2461748 29.2  0.23  137.98 66.249.70.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1323871936 HTTP/1.1
   4-0  34520 1/17/4457  K 0.43 2     366 2174257 29.3  0.68  115.93 66.249.70.6   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2949436672 HTTP/1.1
   5-0  34521 2/22/4643  K 0.53 3     350 2374042 57.7  0.59  148.15 66.249.64.8   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4043178054 HTTP/1.1
   6-0  34571 1/15/4372  K 0.34 4     263 2208747 30.3  0.41  117.85 66.249.70.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=348020975 HTTP/1.1
   7-0  33325 1/39/5108  K 1.08 3     339 2381925 30.5  1.14  136.43 66.249.64.165 http/1.1 schoolplus.cloudware.ng:80 GET /?p=806493687 HTTP/1.1
   8-0  35259 1/1/3864   K 0.00 2     341 1960294 31.2  0.03  100.40 66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3926312411 HTTP/1.1
   9-0  35268 1/2/4066   K 0.00 1     342 2053041 31.2  0.04  109.39 66.249.64.160 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2012303796 HTTP/1.1
   10-0 35269 1/1/4228   K 0.00 1     306 2046536 29.8  0.03  118.84 192.178.4.105 http/1.1 schoolplus.cloudware.ng:80 GET /?p=787384576 HTTP/1.1
   11-0 32418 4/45/4523  K 1.03 3     390 2294493 122.1 1.07  147.96 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3918512919 HTTP/1.1
   12-0 24669 1/201/4105 K 5.44 0     273 1985157 30.0  5.99  103.64 66.249.64.67  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4279126384 HTTP/1.1
   13-0 35278 1/1/3304   K 0.00 0     314 1523223 31.4  0.03  78.36  66.249.70.5   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2989272723 HTTP/1.1
   14-0 35279 1/1/3477   K 0.00 0     291 1780788 29.2  0.03  107.60 66.249.70.171 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4281267381 HTTP/1.1
   15-0 32419 1/66/2880  K 1.76 0     326 1440150 31.4  1.89  74.30  66.249.64.166 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3445438480 HTTP/1.1
   16-0 35280 1/1/4127   K 0.00 0     273 2026809 29.9  0.03  110.94 66.249.64.41  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1352700148 HTTP/1.1
   17-0 28517 1/118/4772 K 3.01 4     262 2452721 30.7  3.19  140.56 66.249.64.2   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2232137604 HTTP/1.1
   18-0 33364 1/29/2101  K 0.60 3     412 1144974 32.8  0.91  57.89  66.249.70.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=324007913 HTTP/1.1
   19-0 35281 1/1/2738   K 0.00 0     311 1445769 29.9  0.03  76.00  66.249.64.36  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3719558173 HTTP/1.1
   20-0 29603 1/127/1538 K 3.52 3     402 816045  29.7  3.84  40.25  66.249.70.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3266522228 HTTP/1.1
   21-0 28978 0/136/1622 W 3.62 0     0   841815  0.0   2.90  45.95  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1871208129 HTTP/1.1
   22-0 35395 0/0/1658   _ 0.00 0     0   890439  0.0   0.00  54.05  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 33399 1/47/1115  K 1.20 2     413 563589  32.0  1.27  26.38  66.249.64.3   http/1.1 schoolplus.cloudware.ng:80 GET /?p=864881628 HTTP/1.1
   24-0 35396 0/0/2019   W 0.00 0     0   807031  0.0   0.00  44.16  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   25-0 35397 0/0/987    _ 0.00 0     0   515164  0.0   0.00  27.27  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 33401 1/35/461   K 0.79 3     356 250492  30.6  0.89  12.32  66.249.64.171 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2568459451 HTTP/1.1
   27-0 35398 0/0/493    _ 0.00 0     0   248410  0.0   0.00  13.30  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 35399 0/0/1435   _ 0.00 0     0   637400  0.0   0.00  33.42  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 35400 0/0/303    _ 0.00 0     0   177690  0.0   0.00  8.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 35401 0/0/637    _ 0.00 0     0   324993  0.0   0.00  14.82  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 35402 0/0/247    _ 0.00 0     0   140137  0.0   0.00  6.80   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/109    . 0.00 143   0   58722   0.0   0.00  3.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/158    . 0.00 169   0   88995   0.0   0.00  4.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 31600 2/57/128   K 1.40 1     338 76101   59.9  1.75  3.72   66.249.64.76  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2155100941 HTTP/1.1
   35-0 -     0/0/38     . 0.00 114   0   21242   0.0   0.00  1.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/21     . 0.00 225   0   12813   0.0   0.00  0.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 31603 1/61/130   K 1.59 3     407 79484   31.9  1.70  3.69   66.249.64.232 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3580483463 HTTP/1.1
   38-0 -     0/0/3      . 0.00 237   0   994     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00 172   0   14173   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1109   . 0.00 226   0   644863  0.0   0.00  31.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/7      . 0.00 223   0   1042    0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 17980 0   1967    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41     . 0.00 17864 0   25843   0.0   0.00  1.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18     . 0.00 17921 0   8912    0.0   0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 414
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 0...50)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 26774
   total entries replaced since starting: 0
   total entries expired since starting: 26351
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 147 miss
   total removes since starting: 9 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit