403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.51.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.51 load[0] mem[56/72] mysql[1/8] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1262         304          24         796         914
Swap:          1999        1696         303
 01:51:02 up  5:48,  0 users,  load average: 0.33, 1.04, 1.28
## system overview
top - 01:51:02 up  5:48,  0 users,  load average: 0.63, 1.09, 1.29
Tasks: 209 total,   8 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 52.9 us, 47.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   272952 free,  1329248 used,   818100 buff/cache
KiB Swap:  2047996 total,   310696 free,  1737300 used.   899576 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 213292   3508 R  43.8  8.8   5:02.15 /usr/sbin+
 73479 saboakin  20   0  400652  15408  10000 S   6.2  0.6   0:00.01 /opt/cpan+
 73488 nigeria   20   0  400652  15672   9960 R   6.2  0.6   0:00.01 /opt/cpan+
 73490 cloudsms  20   0  400652  15676  10060 S   6.2  0.6   0:00.01 /opt/cpan+
 73491 pactpay   20   0  400652  15412   9980 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3408   1496 S   0.0  0.1   0:29.36 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.48 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.00 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:21.69 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.93 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.55 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.53 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.35 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.03 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   2708   2468 S   0.0  0.1   0:12.08 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:01.92 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.74 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.46 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.81 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.29 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:10.74 /usr/bin/+
   519 nscd      20   0 1062080   1316    588 S   0.0  0.1   0:17.50 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.58 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3716    784 S   0.0  0.2   0:00.80 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13620   2604 S   0.0  0.6   0:05.11 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.44 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.30 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.85 /usr/bin/+
   933 telegraf  20   0 5654048  34288   5740 S   0.0  1.4   0:11.69 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.47 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.72 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    380    288 S   0.0  0.0   0:00.63 php-fpm: +
   961 named     20   0  636988  31176   1764 S   0.0  1.3   0:11.91 /usr/sbin+
   964 root      20   0  281936   2824   2360 S   0.0  0.1   0:05.65 /usr/sbin+
   981 root      20   0  436392    284    196 S   0.0  0.0   0:00.74 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.61 php-fpm: +
   985 root      20   0  261288   6168   1628 S   0.0  0.3   0:03.38 cpsrvd (S+
   989 root      20   0  392856    312    228 S   0.0  0.0   0:00.60 php-fpm: +
   992 root      20   0 1901916 215108    616 S   0.0  8.9   0:32.27 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:02.98 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 R   0.0  0.2   0:17.24 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.42 dovecot/p+
  1076 dovenull  20   0   48460   2852   1660 S   0.0  0.1   0:00.36 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.11 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.26 dovecot/l+
  1079 dovenull  20   0   47112   2040   1292 S   0.0  0.1   0:00.33 dovecot/p+
  1080 dovenull  20   0   48000   2588   1548 S   0.0  0.1   0:00.26 dovecot/i+
  1084 root      20   0   24528   2028    352 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1536    996 S   0.0  0.1   0:00.81 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.34 /usr/loca+
  1173 wp-tool+  20   0  387556   3216   1348 S   0.0  0.1   0:00.24 /usr/bin/+
  1174 wp-tool+  20   0  410616  17824   1268 S   0.0  0.7   0:17.34 /usr/bin/+
  1232 root      20   0  209372   9960   2172 S   0.0  0.4   0:02.79 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.41 dnsadmin +
  1237 root      20   0  262224  21024   3096 S   0.0  0.9   0:01.13 cpdavd - +
  1642 root      20   0  299272    392    228 S   0.0  0.0   0:00.56 php-fpm: +
  1702 root      38  18  130416   1360    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.28 /usr/sbin+
  2063 root      20   0   12804    380    212 S   0.0  0.0   0:02.55 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.16 /usr/loca+
  2065 root      20   0   12828    392    216 S   0.0  0.0   0:02.39 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  93564   1932 S   0.0  3.9   0:03.30 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1416    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10708    560 S   0.0  0.4   0:00.08 /usr/bin/+
 23946 root      20   0 1277056  11532    560 S   0.0  0.5   0:00.06 /usr/bin/+
 39115 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.33 [kworker]
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 56661 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 65158 nobody    20   0  277804  18544   3912 S   0.0  0.8   0:00.78 /usr/sbin+
 65618 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66331 nobody    20   0  277720  18624   3860 S   0.0  0.8   0:00.77 /usr/sbin+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67352 nobody    20   0  277720  18284   3964 R   0.0  0.8   0:00.48 /usr/sbin+
 67559 nobody    20   0  277720  18272   3924 S   0.0  0.8   0:00.39 /usr/sbin+
 70352 nobody    20   0  277720  17684   3752 S   0.0  0.7   0:00.35 /usr/sbin+
 70355 nobody    20   0  277784  17320   3580 S   0.0  0.7   0:00.32 /usr/sbin+
 70383 nobody    20   0  277916  16948   3172 S   0.0  0.7   0:00.20 /usr/sbin+
 70385 nobody    20   0  277680  17840   3740 S   0.0  0.7   0:00.28 /usr/sbin+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71414 nobody    20   0  277908  17424   3552 S   0.0  0.7   0:00.23 /usr/sbin+
 71415 nobody    20   0  277784  17252   3552 S   0.0  0.7   0:00.21 /usr/sbin+
 71416 nobody    20   0  277784  17428   3604 S   0.0  0.7   0:00.25 /usr/sbin+
 71417 nobody    20   0  277720  17596   3608 S   0.0  0.7   0:00.20 /usr/sbin+
 71562 mailnull  20   0   89300   5748   2500 S   0.0  0.2   0:00.00 /usr/sbin+
 72275 nobody    20   0  277784  17432   3592 S   0.0  0.7   0:00.08 /usr/sbin+
 72278 nobody    20   0  277920  16984   3312 S   0.0  0.7   0:00.09 /usr/sbin+
 72299 nobody    20   0  277784  17716   3656 S   0.0  0.7   0:00.06 /usr/sbin+
 72317 nobody    20   0  277916  16836   3108 S   0.0  0.7   0:00.09 /usr/sbin+
 72320 nobody    20   0  277784  16944   3136 S   0.0  0.7   0:00.08 /usr/sbin+
 72322 nobody    20   0  277784  15768   2124 S   0.0  0.7   0:00.13 /usr/sbin+
 72323 nobody    20   0  277916  17304   3516 S   0.0  0.7   0:00.09 /usr/sbin+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72661 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 72671 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 72945 nigeria   20   0  397064   4472   2352 S   0.0  0.2   0:00.02 php-fpm: +
 73070 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 73155 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73272 nigeria   20   0  397064   4472   2352 S   0.0  0.2   0:00.00 php-fpm: +
 73368 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73401 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73410 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73412 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73413 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73414 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73415 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73416 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73417 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73418 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73419 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73420 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73421 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73422 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73423 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73424 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 73425 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73426 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73453 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 73454 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73455 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73456 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 73458 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 73459 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 73460 cloudsms  20   0  400652  15408  10000 R   0.0  0.6   0:00.00 /opt/cpan+
 73461 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73462 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 73463 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 73464 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73465 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73466 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73467 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 73468 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73469 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 73474 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 73477 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73480 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 73482 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73483 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73485 cloudw    20   0  286416  15204  10108 R   0.0  0.6   0:00.00 /opt/cpan+
 73486 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73487 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 76167 root      20   0  182112   8452   1104 S   0.0  0.3   0:06.36 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:21  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      39115  0.0  0.0      0     0 ?        S    01:16   0:00  \_ [kworker/1:2]
root      51088  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        D    01:29   0:00  \_ [kworker/1:3]
root      56661  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/0:2]
root      58816  0.0  0.0      0     0 ?        R    01:36   0:00  \_ [kworker/u200:0]
root      65618  0.0  0.0      0     0 ?        D    01:43   0:00  \_ [kworker/1:1]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        R    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44428  3408 ?        Ss   Nov12   0:29 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  2708 ?        Ss   Nov12   0:12 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Rsl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Rs   Nov12   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1316 ?        Ssl  Nov12   0:17 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1416 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      73410  0.0  0.1 183080  2432 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73424  0.0  0.0 113284  1212 ?        Ss   01:51   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73425  0.0  0.0 108052   356 ?        S    01:51   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73426  0.0  0.0 113288  1520 ?        S    01:51   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      73494  0.0  0.0 153840  2092 ?        R    01:51   0:00  |               \_ ps auxf
root      73412  0.0  0.1 183080  2432 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73455  0.0  0.0  20164   804 ?        Ss   01:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      73413  0.0  0.1 183080  2432 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73464  0.0  0.0  20164   804 ?        Ss   01:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      73414  0.0  0.1 183080  2432 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73453  0.0  0.0  20164   968 ?        Ss   01:51   0:00  |   \_ jailshell (cloudsms) [73458] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  73458  0.0  0.0      0     0 ?        D    01:51   0:00  |       \_ [jailshell]
root      73415  0.0  0.1 183080  2428 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73465  0.0  0.0  20164   804 ?        Ss   01:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      73416  0.0  0.1 183080  2424 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73454  0.0  0.0  20164   804 ?        Ss   01:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      73417  0.0  0.1 183080  2424 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73468  0.0  0.0  20164   964 ?        Ss   01:51   0:00  |   \_ jailshell (cloudsms) [73482] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  73482  0.0  0.0      0     0 ?        D    01:51   0:00  |       \_ [jailshell]
root      73418  0.0  0.1 183080  2424 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73461  0.0  0.0  20164   808 ?        Ss   01:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      73420  0.0  0.1 183080  2424 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73466  0.0  0.0  20164   964 ?        Ss   01:51   0:00  |   \_ jailshell (pactpay) [73486] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73486  0.0  0.0  20164   260 ?        S    01:51   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73491  0.0  0.6 476460 15972 ?        Rl   01:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      73422  0.0  0.0 183080  2420 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73469  0.0  0.0  20164   968 ?        Ss   01:51   0:00  |   \_ jailshell (nigeria) [73483] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73483  0.0  0.0  20164   260 ?        S    01:51   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73488  0.0  0.6 400652 15672 ?        R    01:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      73423  0.0  0.1 183080  2428 ?        S    01:51   0:00  \_ /usr/sbin/CROND -n
root      73467  0.0  0.0  20164   968 ?        Ss   01:51   0:00      \_ jailshell (saboakin) [73477] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  73477  0.0  0.0      0     0 ?        D    01:51   0:00          \_ [jailshell]
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3716 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  71562  0.0  0.2  89300  5748 ?        S    01:49   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13620 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2852 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2040 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2588 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  2028 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1536 ?        S    Nov12   0:00  \_ dovecot/auth
root      73070  0.0  0.1  60820  4512 ?        S    01:50   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34288 ?       SLsl Nov12   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      72661  0.0  0.1 111304  4268 ?        Ss   01:50   0:00  \_ sshd: [accepted]
root      72671  0.0  0.1 111304  4276 ?        Ss   01:50   0:00  \_ sshd: [accepted]
root      73155  0.0  0.1 111304  4268 ?        Ss   01:50   0:00  \_ sshd: [accepted]
root      73368  0.0  0.1 111304  4264 ?        Ss   01:50   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   380 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.2 636988 31176 ?        Ssl  Nov12   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 281936  2824 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   284 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6168 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      73401  0.0  0.0      0     0 ?        Z    01:51   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   312 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  8.8 1901916 215108 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   72945  0.0  0.1 397064  4472 ?        S    01:50   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   73272  0.0  0.1 397064  4472 ?        S    01:50   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3696 ?        Ss   Nov12   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  3.8 306476 93564 ?        S    Nov12   0:03  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3216 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17824 ?        Ss   Nov12   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372  9960 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.8 262224 21024 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   392 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1360 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 213292 ?      Sl   Nov12   5:02 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12804   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12828   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    65158  0.1  0.7 277804 18544 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody    66331  0.1  0.7 277720 18624 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    67352  0.1  0.7 277720 18284 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    67559  0.1  0.7 277720 18272 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    70352  0.1  0.7 277720 17684 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70355  0.1  0.7 277784 17320 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70383  0.1  0.7 277916 16948 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70385  0.1  0.7 277680 17840 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    71414  0.1  0.7 277908 17424 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
cloudw    73485  0.0  0.6 351952 15232 ?        S    01:51   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    71415  0.1  0.7 277784 17252 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody    71416  0.2  0.7 277784 17428 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody    71417  0.1  0.7 277720 17596 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody    72275  0.1  0.7 277784 17432 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    72278  0.1  0.7 277920 16984 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    72299  0.0  0.7 277784 17716 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    72317  0.1  0.6 277916 16836 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    72320  0.1  0.7 277784 16944 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    72322  0.2  0.6 277784 15768 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    72323  0.1  0.7 277916 17304 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182112  8452 ?        Ss   00:00   0:06 lfd - sleeping
root      23911  0.0  0.4 1276100 10708 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 20883  Threads: 3  Questions: 1854756  Slow queries: 0  Opens: 6748  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.816
*************************** 1. row ***************************
     Id: 26262
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `12` WHERE `phone`='2347038121127' LIMIT 1
*************************** 2. row ***************************
     Id: 26263
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 26266
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 26267
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 148.113.130.33 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.51 TIME_WAIT
      1 66.249.64.168 TIME_WAIT
      1 66.249.70.139 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 66.249.70.66 TIME_WAIT
      1 74.7.227.156 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 162.142.125.33 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 96.30.57.23 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:51:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 47 minutes 58 seconds
   Server load: 0.63 1.09 1.29
   Total accesses: 113968 - Total Traffic: 3.0 GB - Total Duration: 57912664
   CPU Usage: u3.84 s3.52 cu1449.19 cs1164.44 - 12.6% CPU load
   5.46 requests/sec - 150.8 kB/second - 27.6 kB/request - 508.148 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

KCKK....K.WK.K.KKK.K.K..K.K....KKW.K............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  72275 6/14/5222  K 0.33 1    289 2619441 182.4 0.38  131.98 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1713160279 HTTP/1.1
   1-0  67352 1/83/5336  C 2.11 0    7   2511056 9.3   2.54  132.65 98.84.200.43  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/assets/c
   2-0  65158 1/150/5156 K 3.25 0    382 2697987 29.7  4.10  149.59 66.249.64.38  http/1.1 schoolplus.cloudware.ng:80 GET /?p=430260107 HTTP/1.1
   3-0  72278 3/16/5269  K 0.38 1    347 2789772 90.9  0.43  152.33 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3703404799 HTTP/1.1
   4-0  -     0/0/5046   . 0.00 41   0   2503858 0.0   0.00  131.63 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  -     0/0/5206   . 0.00 47   0   2690048 0.0   0.00  161.59 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  -     0/0/4968   . 0.00 12   0   2478037 0.0   0.00  130.63 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  -     0/0/5696   . 0.00 49   0   2733850 0.0   0.00  152.79 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  66331 6/129/4421 K 3.36 2    284 2259522 181.4 3.77  114.18 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2449156498 HTTP/1.1
   9-0  -     0/0/4625   . 0.00 50   0   2354322 0.0   0.00  122.56 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 71414 0/35/4736  W 0.97 0    0   2350925 0.0   1.03  130.87 66.249.70.141 http/1.1 schoolplus.cloudware.ng:80 GET /?p=40615347 HTTP/1.1
   11-0 67559 1/76/5012  K 1.64 1    337 2571388 28.9  2.11  162.35 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=636506264 HTTP/1.1
   12-0 -     0/0/4709   . 0.00 11   0   2322210 0.0   0.00  116.13 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 70352 37/84/3855 K 1.33 0    7   1812562 192.1 1.85  90.87  74.7.227.156  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Giwa&state=Kaduna&ward=Shika
   14-0 -     0/0/3990   . 0.00 51   0   2076806 0.0   0.00  121.27 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 71415 6/35/3409  K 0.95 3    272 1749188 178.9 0.99  89.61  66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1602622330 HTTP/1.1
   16-0 71416 1/41/4835  K 1.08 0    365 2348445 29.5  1.13  127.01 66.249.70.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=606447306 HTTP/1.1
   17-0 72299 2/11/5204  K 0.50 3    272 2692527 59.7  0.26  150.58 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=915639957 HTTP/1.1
   18-0 -     0/0/2674   . 0.00 13   0   1477095 0.0   0.00  72.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 71417 5/35/3294  K 0.84 2    391 1783816 152.2 1.07  88.15  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=210154986 HTTP/1.1
   20-0 -     0/0/2104   . 0.00 53   0   1060531 0.0   0.00  51.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 72317 2/14/2169  K 0.33 1    304 1154907 60.2  0.37  59.56  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2749428243 HTTP/1.1
   22-0 -     0/0/2089   . 0.00 45   0   1131949 0.0   0.00  63.77  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/1627   . 0.00 48   0   869863  0.0   0.00  37.25  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 70355 3/52/2355  K 1.45 1    361 998411  89.9  1.48  52.61  66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2692289197 HTTP/1.1
   25-0 -     0/0/1466   . 0.00 55   0   789896  0.0   0.00  39.89  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 72320 1/13/776   K 0.36 0    350 420440  30.4  0.39  20.11  66.249.64.232 http/1.1 schoolplus.cloudware.ng:80 GET /?p=319786912 HTTP/1.1
   27-0 -     0/0/903    . 0.00 44   0   488105  0.0   0.00  24.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1810   . 0.00 40   0   838335  0.0   0.00  45.52  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/521    . 0.00 52   0   288432  0.0   0.00  13.50  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/974    . 0.00 56   0   520408  0.0   0.00  22.93  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 72322 4/21/572   K 0.59 1    354 325888  125.2 0.63  15.23  66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1910882533 HTTP/1.1
   32-0 70383 1/76/449   K 0.24 0    356 284939  31.1  0.76  10.49  66.249.64.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4253222441 HTTP/1.1
   33-0 72323 0/17/506   W 0.38 0    0   293061  0.0   0.42  12.71  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   34-0 -     0/0/451    . 0.00 103  0   269842  0.0   0.00  11.40  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 70385 4/122/275  K 0.93 3    349 96527   120.7 1.59  5.36   66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=239755025 HTTP/1.1
   36-0 -     0/0/101    . 0.00 28   0   53229   0.0   0.00  2.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/223    . 0.00 102  0   130665  0.0   0.00  5.61   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/106    . 0.00 472  0   62326   0.0   0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/71     . 0.00 640  0   33332   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1120   . 0.00 1500 0   651566  0.0   0.00  32.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/11     . 0.00 1513 0   1258    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/13     . 0.00 1506 0   4689    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 1474 0   30775   0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 1439 0   29051   0.0   0.00  1.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 1502 0   2240    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 1518 0   2519    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 711  0   144675  0.0   0.00  6.70   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 1531 0   3773    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 1525 0   2208    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 1368 0   30413   0.0   0.00  3.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 1526 0   3961    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 1521 0   2145    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 1436 0   17077   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 1355 0   24170   0.0   0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 1519 0   1791    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 1508 0   2519    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 1440 0   23864   0.0   0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 423
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 27 seconds, (range: 1...159)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 30733
   total entries replaced since starting: 0
   total entries expired since starting: 30294
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 168 miss
   total removes since starting: 17 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit