403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.21.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.21 load[0] mem[62/71] mysql[2/8] httpd[29]
              total        used        free      shared  buff/cache   available
Mem:           2363        1423         188          23         751         753
Swap:          1999        1657         342
 02:21:01 up  6:18,  0 users,  load average: 0.27, 0.54, 0.66
## system overview
top - 02:21:01 up  6:18,  0 users,  load average: 0.27, 0.54, 0.66
Tasks: 208 total,   5 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 62.5 us, 28.1 sy,  0.0 ni,  9.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   192636 free,  1458468 used,   769196 buff/cache
KiB Swap:  2047996 total,   350984 free,  1697012 used.   771648 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 215356   3880 S  87.5  8.9   5:28.18 /usr/sbin+
  1668 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44428   3440   1516 S   6.2  0.1   0:31.80 /usr/lib/+
  1686 cloudw    20   0  351952  15232  10128 S   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.61 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.12 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.71 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.05 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.51 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.06 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.60 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.42 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.12 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   350 nobody    20   0  277792  17184   3400 S   0.0  0.7   0:00.10 /usr/sbin+
   357 root      20   0   40240   7324   7080 S   0.0  0.3   0:13.08 /usr/lib/+
   373 nobody    20   0  277932  17096   3404 S   0.0  0.7   0:00.15 /usr/sbin+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   383 nobody    20   0  277784  17188   3336 S   0.0  0.7   0:00.10 /usr/sbin+
   384 nobody    20   0  277784  15772   2136 S   0.0  0.7   0:00.17 /usr/sbin+
   385 nobody    20   0  277920  17412   3584 S   0.0  0.7   0:00.10 /usr/sbin+
   386 nobody    20   0  277784  15880   2176 S   0.0  0.7   0:00.09 /usr/sbin+
   402 nobody    20   0  277784  17688   3756 S   0.0  0.7   0:00.12 /usr/sbin+
   403 nobody    20   0  277936  17620   3604 S   0.0  0.7   0:00.07 /usr/sbin+
   406 nobody    20   0  277784  17608   3656 S   0.0  0.7   0:00.08 /usr/sbin+
   408 nobody    20   0  277784  17396   3540 S   0.0  0.7   0:00.10 /usr/sbin+
   409 nobody    20   0  277784  17736   3556 S   0.0  0.7   0:00.09 /usr/sbin+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:02.09 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.17 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.50 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:03.07 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.31 queueproc+
   507 root      20   0   52852    204    116 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 R   0.0  0.1   0:11.74 /usr/bin/+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:19.51 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.63 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3812    876 S   0.0  0.2   0:00.87 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   700 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13860   2768 S   0.0  0.6   0:05.52 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.47 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.31 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.00 /usr/bin/+
   933 telegraf  20   0 5654048  33832   5992 S   0.0  1.4   0:12.67 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.50 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.96 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    332    240 S   0.0  0.0   0:00.67 php-fpm: +
   961 named     20   0  636988  33312   1924 S   0.0  1.4   0:13.12 /usr/sbin+
   964 root      20   0  281936   6940   6404 S   0.0  0.3   0:06.16 /usr/sbin+
   981 root      20   0  436392    404    316 S   0.0  0.0   0:00.78 php-fpm: +
   984 root      20   0  385496    540    444 S   0.0  0.0   0:00.66 php-fpm: +
   985 root      20   0  261288   6388   1740 S   0.0  0.3   0:03.69 cpsrvd (S+
   989 root      20   0  392856    260    176 S   0.0  0.0   0:00.64 php-fpm: +
   992 root      20   0 1901916 232508    588 S   0.0  9.6   0:32.37 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.20 php-fpm: +
  1006 cpanelc+  20   0   10656   3692   2300 R   0.0  0.2   0:18.82 /usr/loca+
  1070 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.45 dovecot/p+
  1076 dovenull  20   0   48460   2840   1648 S   0.0  0.1   0:00.37 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.27 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.35 dovecot/p+
  1080 dovenull  20   0   48000   2568   1528 S   0.0  0.1   0:00.27 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1094 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1556   1016 S   0.0  0.1   0:00.87 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.56 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.25 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:18.82 /usr/bin/+
  1232 root      20   0  209372  10176   2384 S   0.0  0.4   0:02.98 tailwatchd
  1234 root      20   0  167452   4164   2792 S   0.0  0.2   0:00.44 dnsadmin +
  1237 root      20   0  183900   6096   2860 S   0.0  0.3   0:01.15 cpdavd - +
  1363 nigeria   20   0  402328  16084   6100 S   0.0  0.7   0:00.48 php-fpm: +
  1377 nigeria   20   0  421396  33812   6132 S   0.0  1.4   0:00.48 php-fpm: +
  1482 nobody    20   0  277784  17036   3384 S   0.0  0.7   0:00.01 /usr/sbin+
  1489 nobody    20   0  277932  17068   3380 S   0.0  0.7   0:00.01 /usr/sbin+
  1490 nobody    20   0  277476  16904   3372 S   0.0  0.7   0:00.01 /usr/sbin+
  1497 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
  1503 nobody    20   0  277784  15764   2128 S   0.0  0.7   0:00.01 /usr/sbin+
  1504 nobody    20   0  277784  15692   2124 S   0.0  0.6   0:00.01 /usr/sbin+
  1505 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  1506 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  1564 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  1571 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  1572 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  1583 nobody    20   0  277224  15144   2156 S   0.0  0.6   0:00.00 /usr/sbin+
  1584 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  1585 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  1586 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  1589 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  1590 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  1595 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1596 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1597 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1598 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1600 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1602 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1605 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  1607 cloudw    20   0  350316  16888  10452 S   0.0  0.7   0:00.01 /opt/cpan+
  1608 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  1609 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.62 php-fpm: +
  1643 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1644 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  1645 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1646 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  1647 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1649 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
  1664 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  1669 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1671 pactpay   20   0  476724  17112  11408 S   0.0  0.7   0:00.01 /opt/cpan+
  1679 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
  1691 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  1692 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  1693 cloudsms  20   0  131852   3320   2384 R   0.0  0.1   0:00.00 /usr/loca+
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.78 /usr/sbin+
  2063 root      20   0   12840    380    212 S   0.0  0.0   0:02.82 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.40 /usr/loca+
  2065 root      20   0   12888    392    216 S   0.0  0.0   0:02.65 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106624   2400 S   0.0  4.4   0:04.86 spamd chi+
  7886 root      20   0  261428  93268   2540 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.36 [kworker]
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 72516 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182316   9240   1104 S   0.0  0.4   0:08.14 lfd - sle+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.06 /usr/bin/+
 82872 root      20   0 1277312  11708    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    680    456 S   0.0  0.0   0:00.00 /usr/sbin+
 88739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93620 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 94658 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96561 nobody    20   0  277720  18340   3952 S   0.0  0.8   0:00.55 /usr/sbin+
 97557 nobody    20   0  277812  18428   4080 S   0.0  0.8   0:00.66 /usr/sbin+
 98469 nobody    20   0  277784  17768   3748 S   0.0  0.7   0:00.51 /usr/sbin+
 98486 nobody    20   0  277720  17928   3804 S   0.0  0.7   0:00.55 /usr/sbin+
 99537 nobody    20   0  277784  18176   3804 S   0.0  0.8   0:00.38 /usr/sbin+
100315 nobody    20   0  277784  17472   3412 S   0.0  0.7   0:00.32 /usr/sbin+
100347 nobody    20   0  277784  18032   3728 S   0.0  0.7   0:00.14 /usr/sbin+
100498 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100499 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
101153 nobody    20   0  277820  17384   3416 S   0.0  0.7   0:00.06 /usr/sbin+
101588 nobody    20   0  277784  17448   3660 S   0.0  0.7   0:00.18 /usr/sbin+
101604 nobody    20   0  277548  17020   3412 S   0.0  0.7   0:00.25 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        R    01:50   0:00  \_ [kworker/0:0]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root      88739  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:3]
root      93620  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:2]
root      94658  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:1]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root     100498  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/0:4]
root     100499  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:1]
root        658  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  40240  7324 ?        Ss   Nov12   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   204 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:19 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root       1590  0.0  0.1 183080  2424 ?        S    02:21   0:00  \_ /usr/sbin/CROND -n
root       1605  0.0  0.0 113284  1212 ?        Ss   02:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       1608  0.0  0.0 108052   360 ?        S    02:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       1609  0.0  0.0 113288  1516 ?        S    02:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       1695  0.0  0.0 153672  1776 ?        R    02:21   0:00  |               \_ ps auxf
root       1595  0.0  0.1 183080  2424 ?        S    02:21   0:00  \_ /usr/sbin/CROND -n
root       1645  0.0  0.0  20164   804 ?        Ss   02:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       1596  0.0  0.1 183080  2424 ?        S    02:21   0:00  \_ /usr/sbin/CROND -n
root       1649  0.0  0.0  20164   992 ?        Ss   02:21   0:00  |   \_ jailshell (cloudsms) [1691] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms   1691  0.0  0.0  20164   264 ?        S    02:21   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms   1692  0.0  0.0 113284  1212 ?        S    02:21   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms   1693  0.0  0.6 400652 15676 ?        R    02:21   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root       1597  0.0  0.0 183080  2420 ?        S    02:21   0:00  \_ /usr/sbin/CROND -n
root       1643  0.0  0.0  20164   804 ?        Ss   02:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       1598  0.0  0.0 183080  2420 ?        S    02:21   0:00  \_ /usr/sbin/CROND -n
root       1647  0.0  0.0  20164   804 ?        Ss   02:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       1600  0.0  0.1 183080  2424 ?        S    02:21   0:00  \_ /usr/sbin/CROND -n
root       1646  0.0  0.0  20164   968 ?        Ss   02:21   0:00  |   \_ jailshell (pactpay) [1669] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1669  0.0  0.0  20164   260 ?        S    02:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1671  0.0  0.7 476724 17112 ?        S    02:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       1602  0.0  0.0 183080  2420 ?        S    02:21   0:00  \_ /usr/sbin/CROND -n
root       1644  0.0  0.0  20164   972 ?        Ss   02:21   0:00      \_ jailshell (nigeria) [1664] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1664  0.0  0.0  20164   264 ?        S    02:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1668  0.0  0.6 400652 15940 ?        S    02:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3812 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13860 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2840 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2568 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1556 ?        S    Nov12   0:00  \_ dovecot/auth
root       1497  0.0  0.1  41052  2724 ?        S    02:20   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33832 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root        700  0.0  0.1 111304  4264 ?        Ss   02:20   0:00  \_ sshd: [accepted]
root       1070  0.0  0.1 111304  4268 ?        Ss   02:20   0:00  \_ sshd: [accepted]
sshd       1094  0.0  0.1 115644  2632 ?        S    02:20   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 33312 ?        Ssl  Nov12   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 281936  6940 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   540 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6388 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root       1589  0.0  0.0      0     0 ?        Z    02:21   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   260 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 232508 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    1363  3.2  0.6 402328 16084 ?        S    02:20   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria    1377  3.4  1.3 421396 33812 ?        S    02:20   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3692 ?        Ss   Nov12   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106624 ?       S    Nov12   0:04  \_ spamd child
root       7886  0.0  3.8 261428 93268 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 10176 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4164 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6096 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 215356 ?      Sl   Nov12   5:28 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12840   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12888   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    96561  0.1  0.7 277720 18340 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    97557  0.1  0.7 277812 18428 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98469  0.1  0.7 277784 17768 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98486  0.1  0.7 277720 17928 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    99537  0.1  0.7 277784 18176 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody   100315  0.1  0.7 277784 17472 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100347  0.0  0.7 277784 18032 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   101153  0.0  0.7 277820 17384 ?        S    02:18   0:00  \_ /usr/sbin/httpd -k start
nobody   101588  0.1  0.7 277784 17448 ?        S    02:18   0:00  \_ /usr/sbin/httpd -k start
nobody   101604  0.2  0.7 277548 17020 ?        S    02:18   0:00  \_ /usr/sbin/httpd -k start
nobody      350  0.1  0.7 277792 17184 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      373  0.2  0.7 277932 17096 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      383  0.1  0.7 277784 17188 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      384  0.2  0.6 277784 15772 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      385  0.1  0.7 277920 17412 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      386  0.1  0.6 277784 15880 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      402  0.1  0.7 277784 17688 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      403  0.1  0.7 277936 17620 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
cloudw     1686  0.0  0.6 351952 15232 ?        S    02:21   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody      406  0.1  0.7 277784 17608 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      408  0.1  0.7 277784 17396 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      409  0.1  0.7 277784 17736 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
cloudw     1607  0.0  0.6 350316 16888 ?        S    02:21   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     1482  0.1  0.7 277784 17036 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1489  0.1  0.7 277932 17068 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1490  0.1  0.6 277476 16904 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1503  0.1  0.6 277784 15764 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1504  0.1  0.6 277784 15692 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1505  0.0  0.6 277640 15524 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1506  0.0  0.6 277640 15524 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1564  0.0  0.6 277640 15524 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1571  0.0  0.6 277640 15524 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1572  0.0  0.6 277640 15524 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1583  0.0  0.6 277224 15144 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1584  0.0  0.5 277092 13584 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1585  0.0  0.5 277092 13584 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
nobody     1586  0.0  0.5 277092 13584 ?        S    02:20   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182316  9240 ?        Ss   00:00   0:08 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11708 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   680 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 22682  Threads: 3  Questions: 1986337  Slow queries: 0  Opens: 7374  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.573
*************************** 1. row ***************************
     Id: 28450
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 28452
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 28457
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.37.179 TIME_WAIT
      1 54.167.207.206 TIME_WAIT
      1 66.249.64.41 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 84.37.240.152 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     12 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:21:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 17 minutes 57 seconds
   Server load: 0.27 0.54 0.66
   Total accesses: 126541 - Total Traffic: 3.3 GB - Total Duration: 64775123
   CPU Usage: u3.56 s4.04 cu1619.07 cs1308.22 - 12.9% CPU load
   5.58 requests/sec - 153.0 kB/second - 27.4 kB/request - 511.89 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KK_KKKKWKKK__CK_K_KKKKKKKW_WKW_K..KK.K..........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  350    1/18/5660   K 0.44 3    286 2886017 31.4  0.47  143.48 66.249.70.64    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3013350141 HTTP/1.1
   1-0  1482   1/3/5736    K 0.03 2    303 2732324 30.5  0.07  142.85 66.249.70.169   http/1.1 schoolplus.cloudware.ng:80 GET /?p=190655049 HTTP/1.1
   2-0  373    0/25/5651   _ 0.66 0    274 3000998 0.0   0.70  162.79 66.249.70.163   http/1.1 schoolplus.cloudware.ng:80 GET /?p=727034355 HTTP/1.1
   3-0  1489   1/3/5733    K 0.02 0    407 2987697 32.1  0.07  161.83 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1459545622 HTTP/1.1
   4-0  1490   1/2/5456    K 0.01 1    348 2706570 31.2  2.55  143.42 192.178.4.98    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3741065056 HTTP/1.1
   5-0  383    1/16/5542   K 0.41 3    273 2875855 29.5  0.45  170.40 66.249.70.134   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1922900554 HTTP/1.1
   6-0  1503   1/2/5398    K 0.02 0    301 2732561 31.9  0.06  143.19 66.249.70.109   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3293103147 HTTP/1.1
   7-0  101588 44/64/6166  W 0.61 0    0   2999928 570.1 1.13  164.63 74.7.227.82     http/1.1 nigeriadecide.org:443      GET /Citizens_Popular_Party.php HTTP/1.1
   8-0  1504   2/2/4837    K 0.03 4    280 2492435 59.3  0.06  124.97 66.249.70.102   http/1.1 schoolplus.cloudware.ng:80 GET /?p=689683772 HTTP/1.1
   9-0  384    1/27/5054   K 0.76 4    273 2610907 29.1  0.79  134.19 66.249.70.69    http/1.1 schoolplus.cloudware.ng:80 GET /?p=786989050 HTTP/1.1
   10-0 101604 1/42/5103   K 1.12 3    264 2558028 30.8  1.17  140.01 66.249.70.1     http/1.1 schoolplus.cloudware.ng:80 GET /?p=2160340683 HTTP/1.1
   11-0 1505   0/1/5389    _ 0.00 0    309 2755947 0.0   0.03  170.69 66.249.64.38    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1624370064 HTTP/1.1
   12-0 385    0/17/4991   _ 0.42 0    405 2472156 0.0   0.47  123.15 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=974923252 HTTP/1.1
   13-0 1506   1/1/4246    C 0.00 5    360 2004751 28.8  0.03  99.74  66.249.64.32    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2555724155 HTTP/1.1
   14-0 1564   1/1/4445    K 0.00 2    259 2371094 28.7  0.03  131.81 66.249.64.129   http/1.1 schoolplus.cloudware.ng:80 GET /?p=346550038 HTTP/1.1
   15-0 96561  0/94/3724   _ 2.39 0    263 1929981 0.0   2.84  98.08  66.249.70.140   http/1.1 schoolplus.cloudware.ng:80 GET /?p=546809984 HTTP/1.1
   16-0 97557  98/161/5485 K 4.19 3    25  2618549 651.4 2.36  140.07 147.135.213.175 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   17-0 386    0/17/5527   _ 0.40 0    301 2876144 0.0   0.45  159.21 66.249.64.167   http/1.1 schoolplus.cloudware.ng:80 GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=210683
   18-0 402    1/23/3009   K 0.48 3    319 1660334 31.8  0.56  80.69  66.249.70.173   http/1.1 schoolplus.cloudware.ng:80 GET /list/114041803638 HTTP/1.1
   19-0 98469  1/87/3610   K 2.26 4    306 1964829 33.7  2.36  96.31  66.249.64.230   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3536603801 HTTP/1.1
   20-0 100315 1/54/2399   K 1.42 0    421 1224398 29.6  1.49  58.66  66.249.64.162   http/1.1 schoolplus.cloudware.ng:80 GET /?p=744155359 HTTP/1.1
   21-0 99537  1/84/2483   K 1.79 2    304 1325005 30.7  1.86  67.42  66.249.70.100   http/1.1 schoolplus.cloudware.ng:80 GET /?p=172283715 HTTP/1.1
   22-0 98486  1/91/2459   K 2.46 2    273 1343274 29.2  2.74  73.72  66.249.70.66    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3236646795 HTTP/1.1
   23-0 1571   1/1/1875    K 0.00 1    264 1004894 29.7  0.03  43.39  66.249.64.44    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2423902013 HTTP/1.1
   24-0 1572   1/1/2708    K 0.00 1    272 1210938 28.7  0.03  62.39  66.249.64.64    http/1.1 schoolplus.cloudware.ng:80 GET /?p=4211465018 HTTP/1.1
   25-0 403    1/15/1943   W 0.30 0    0   938118  29.7  0.31  49.86  66.249.70.67    http/1.1 schoolplus.cloudware.ng:80 GET /?p=199403305 HTTP/1.1
   26-0 1583   0/1/1018    _ 0.00 0    1   554847  0.0   0.02  26.38  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   27-0 1584   0/0/1080    W 0.00 0    0   592837  0.0   0.00  28.44  192.178.4.96    http/1.1 schoolplus.cloudware.ng:80 GET /?p=4231215614 HTTP/1.1
   28-0 406    1/15/2127   K 0.34 4    315 985656  31.2  0.38  52.30  192.178.4.103   http/1.1 schoolplus.cloudware.ng:80 GET /?p=534654910 HTTP/1.1
   29-0 1585   0/0/717     W 0.00 0    0   396334  0.0   0.00  18.54  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   30-0 1586   0/0/1295    _ 0.00 0    0   640018  0.0   0.00  28.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 408    1/17/877    K 0.44 4    289 507197  32.1  0.49  23.79  66.249.70.2     http/1.1 schoolplus.cloudware.ng:80 GET /?p=3360889583 HTTP/1.1
   32-0 -      0/0/713     . 0.00 52   0   440254  0.0   0.00  17.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/699     . 0.00 55   0   408322  0.0   0.00  17.94  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 409    2/18/522    K 0.38 0    462 308782  67.5  0.45  13.16  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=1450561540 HTTP/1.1
   35-0 100347 1/29/366    K 0.53 4    349 142565  30.9  0.67  7.45   66.249.70.65    http/1.1 schoolplus.cloudware.ng:80 GET /?p=50335308 HTTP/1.1
   36-0 -      0/0/133     . 0.00 135  0   70764   0.0   0.00  3.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 101153 1/12/242    K 0.21 3    396 260543  30.2  0.33  6.06   66.249.64.42    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2936444242 HTTP/1.1
   38-0 -      0/0/195     . 0.00 134  0   116045  0.0   0.00  4.76   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/104     . 0.00 56   0   51460   0.0   0.00  2.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/1126    . 0.00 465  4   653619  0.0   0.00  32.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/69      . 0.00 292  0   34662   0.0   0.00  1.59   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/16      . 0.00 459  0   6280    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/56      . 0.00 3273 0   30775   0.0   0.00  1.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/65      . 0.00 3238 0   29051   0.0   0.00  1.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/4       . 0.00 3301 0   2240    0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/6       . 0.00 3317 0   2519    0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/272     . 0.00 2510 0   144675  0.0   0.00  6.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/2       . 0.00 3330 0   3773    0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/4       . 0.00 3324 0   2208    0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/55      . 0.00 3167 0   30413   0.0   0.00  3.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/4       . 0.00 3325 0   3961    0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/7       . 0.00 3320 0   2145    0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/31      . 0.00 3235 0   17077   0.0   0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/54      . 0.00 3154 0   24170   0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/7       . 0.00 3318 0   1791    0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/9       . 0.00 3307 0   2519    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/37      . 0.00 3239 0   23864   0.0   0.00  0.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 455
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 15 seconds, (range: 0...44)
   index usage: 8%, cache usage: 10%
   total entries stored since starting: 32850
   total entries replaced since starting: 0
   total entries expired since starting: 32373
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit