403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-14.00.18.txt
 ## swap threshold exceeded
## server overview
2025-11-14.00.18 load[0] mem[59/81] mysql[3/12] httpd[38]
              total        used        free      shared  buff/cache   available
Mem:           2363        1314         171          98         878         780
Swap:          1999        1682         317
 00:18:01 up 14:01,  0 users,  load average: 0.52, 0.57, 0.64
## system overview
top - 00:18:02 up 14:01,  0 users,  load average: 0.52, 0.57, 0.64
Tasks: 212 total,   2 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 76.5 us, 23.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   160548 free,  1355568 used,   904184 buff/cache
KiB Swap:  2047996 total,   325340 free,  1722656 used.   789016 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458860 294548   2732 S 117.6 12.2  11:35.78 /usr/sbin+
 92572 nigeria   20   0  404052  16140  10384 S  11.8  0.7   0:00.04 /opt/cpan+
   488 dbus      20   0   58716   1360    628 S   5.9  0.1   0:27.04 /usr/bin/+
 92407 nobody    20   0  277476  34752   3144 S   5.9  1.4   0:00.01 /usr/sbin+
 92511 robocal+  20   0  409160  18188   3212 D   5.9  0.8   0:00.06 php-fpm: +
 92563 pactpay   20   0  480124  17688  11892 S   5.9  0.7   0:00.02 /opt/cpan+
 92609 root      20   0  160220   2064   1580 R   5.9  0.1   0:00.01 top -bcn1
 92610 cloudw    20   0  355492  15428  10292 S   5.9  0.6   0:00.01 /opt/cpan+
 92611 cloudw    20   0  355492  15428  10292 S   5.9  0.6   0:00.01 /opt/cpan+
 92614 cloudw    20   0  355352  15428  10292 S   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0  192956   4804   1568 S   0.0  0.2   1:14.24 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:04.18 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:03.12 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:54.38 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:03.01 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:11.85 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.50 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.10 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.99 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.79 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:03.14 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.68 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   6400   6140 S   0.0  0.3   0:26.98 /usr/lib/+
   379 root      20   0   45352    100     96 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    440    308 S   0.0  0.0   0:04.25 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 rpc       20   0   69256     64      4 S   0.0  0.0   0:00.05 /sbin/rpc+
   518 root      20   0  152780    136     92 S   0.0  0.0   0:00.02 /usr/sbin+
   520 root      20   0   24712   1256    824 S   0.0  0.1   0:11.84 /usr/lib/+
   521 root      20   0  224148   4360    892 S   0.0  0.2   0:00.56 queueproc+
   524 root      20   0   21540    380    292 S   0.0  0.0   0:01.11 /usr/sbin+
   525 polkitd   20   0  612240    844    448 S   0.0  0.0   0:06.89 /usr/lib/+
   533 root      20   0   52852    344    244 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0 1129668   1728    820 S   0.0  0.1   0:52.09 /usr/sbin+
   540 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    460    328 S   0.0  0.0   0:01.37 /usr/sbin+
   574 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296     60     56 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   3520    568 S   0.0  0.1   0:00.90 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.79 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044  78196    584 S   0.0  3.2   0:14.12 /usr/loca+
   931 named     20   0  711724  38928   1492 S   0.0  1.6   0:28.36 /usr/sbin+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   941 systuser  20   0  114016  13892   2128 S   0.0  0.6   0:11.81 /usr/loca+
   945 cpanelc+  20   0   10568   3644   2352 S   0.0  0.2   0:42.59 /usr/loca+
   948 memcach+  20   0  342400     72     72 S   0.0  0.0   0:01.11 /usr/bin/+
   950 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   952 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   957 systuser  20   0   14068     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   960 root      20   0  153404    312    228 S   0.0  0.0   0:01.06 pure-ftpd+
   963 systuser  20   0  111608     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   989 root      20   0  261296   6188   1168 S   0.0  0.3   0:11.34 cpsrvd (S+
   990 root      20   0  572372    948    404 S   0.0  0.0   0:04.29 /usr/bin/+
   991 telegraf  20   0 5654048  35832   4340 S   0.0  1.5   0:27.68 /usr/loca+
   998 root      20   0  111304    416    316 S   0.0  0.0   0:05.65 /usr/sbin+
  1000 root      20   0  331088   7380   6128 S   0.0  0.3   0:13.47 /usr/sbin+
  1001 root      20   0   51508    604    428 S   0.0  0.0   0:00.57 /usr/sbin+
  1125 dovenull  20   0   47048   1404    700 S   0.0  0.1   0:00.86 dovecot/p+
  1126 dovenull  20   0   48664   2200    788 S   0.0  0.1   0:00.66 dovecot/i+
  1127 dovecot   20   0   10320    364    248 S   0.0  0.0   0:00.14 dovecot/a+
  1128 root      20   0   10452    520    328 S   0.0  0.0   0:00.56 dovecot/l+
  1129 dovenull  20   0   47052   1656    952 S   0.0  0.1   0:00.65 dovecot/p+
  1130 dovenull  20   0   48568   2084    564 S   0.0  0.1   0:00.53 dovecot/i+
  1133 root      20   0   24564   2104    380 S   0.0  0.1   0:00.29 dovecot/c+
  1137 dovecot   20   0   13568    576    356 S   0.0  0.0   0:00.12 dovecot/s+
  1147 root      20   0  248176  24832    532 S   0.0  1.0   0:08.77 /usr/loca+
  1164 systuser  20   0  157708   2948    956 S   0.0  0.1   0:00.23 SonarPush+
  1165 wp-tool+  20   0  410480  12948   1444 S   0.0  0.5   0:42.87 /usr/bin/+
  1166 wp-tool+  20   0  387556   3492   1412 S   0.0  0.1   0:00.45 /usr/bin/+
  1208 dovecot   20   0   41156   1504   1000 S   0.0  0.1   0:01.16 dovecot/a+
  1236 root      20   0  183900   4816   1584 S   0.0  0.2   0:03.91 cpdavd - +
  1239 root      20   0  209032  19812   2664 S   0.0  0.8   0:04.72 tailwatchd
  1241 root      20   0  167452   1240    692 S   0.0  0.1   0:00.73 dnsadmin +
  1631 root      20   0  299272    460    296 S   0.0  0.0   0:01.37 php-fpm: +
  1677 root      38  18  130416   1292    608 S   0.0  0.1   0:00.12 cpanellog+
  5511 root      20   0  271880  99840   1700 S   0.0  4.1   0:07.79 spamd chi+
  5512 root      20   0  261652  23632    316 S   0.0  1.0   0:00.40 spamd chi+
 22875 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 34743 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.87 [kworker]
 59466 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 68024 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 71096 root      20   0  181060  28380   1584 S   0.0  1.2   0:01.09 lfd - sle+
 71479 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 71692 root      20   0 1276100  11028    592 S   0.0  0.5   0:00.07 /usr/bin/+
 71726 root      20   0 1277312  11908    592 S   0.0  0.5   0:00.07 /usr/bin/+
 72069 root      20   0  266980  28720   3028 S   0.0  1.2   0:00.54 /usr/sbin+
 72072 root      20   0   12812   1384   1180 S   0.0  0.1   0:00.18 /usr/loca+
 72073 root      20   0   12732   1360   1180 S   0.0  0.1   0:00.16 /usr/loca+
 72074 root      20   0   12836   1392   1180 S   0.0  0.1   0:00.17 /usr/loca+
 72075 root      20   0   53272  10616   1240 S   0.0  0.4   0:00.05 /usr/loca+
 72127 root      20   0  400740  12344   7068 S   0.0  0.5   0:00.17 php-fpm: +
 72132 root      20   0  388892  11276   6196 S   0.0  0.5   0:00.07 php-fpm: +
 72145 root      20   0  396248  10976   5356 S   0.0  0.5   0:00.04 php-fpm: +
 72153 root      20   0  389508  12692   8036 S   0.0  0.5   0:00.03 php-fpm: +
 72158 root      20   0  439788  24360  16828 S   0.0  1.0   0:00.05 php-fpm: +
 76303 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 77518 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 79804 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86531 nobody    20   0  277476  35252   3640 S   0.0  1.5   0:00.53 /usr/sbin+
 86619 nobody    20   0  277528  35332   3668 S   0.0  1.5   0:00.50 /usr/sbin+
 87542 nobody    20   0  277480  35160   3544 S   0.0  1.5   0:00.36 /usr/sbin+
 87586 nobody    20   0  277476  35432   3824 S   0.0  1.5   0:00.27 /usr/sbin+
 88579 nobody    20   0  277528  35096   3432 S   0.0  1.5   0:00.30 /usr/sbin+
 89366 nobody    20   0  277468  34880   3276 S   0.0  1.4   0:00.31 /usr/sbin+
 89428 nobody    20   0  277836  35464   3688 S   0.0  1.5   0:00.23 /usr/sbin+
 89429 nobody    20   0  277488  34904   3280 S   0.0  1.4   0:00.31 /usr/sbin+
 89433 nobody    20   0  277448  35000   3420 S   0.0  1.4   0:00.22 /usr/sbin+
 89434 nobody    20   0  277820  35400   3636 S   0.0  1.5   0:00.20 /usr/sbin+
 89454 nobody    20   0  277500  35396   3760 S   0.0  1.5   0:00.16 /usr/sbin+
 89456 nobody    20   0  277448  35388   3800 S   0.0  1.5   0:00.17 /usr/sbin+
 90305 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 91157 nobody    20   0  277484  33792   2176 S   0.0  1.4   0:00.14 /usr/sbin+
 91172 nobody    20   0  277504  34840   3204 S   0.0  1.4   0:00.18 /usr/sbin+
 91173 nobody    20   0  277476  35348   3740 S   0.0  1.5   0:00.11 /usr/sbin+
 91197 nobody    20   0  277476  34812   3204 S   0.0  1.4   0:00.10 /usr/sbin+
 91198 nobody    20   0  277476  35376   3768 S   0.0  1.5   0:00.07 /usr/sbin+
 91201 nobody    20   0  277508  35052   3412 S   0.0  1.4   0:00.14 /usr/sbin+
 91203 nobody    20   0  277476  33800   2192 S   0.0  1.4   0:00.16 /usr/sbin+
 91283 nobody    20   0  277476  34808   3196 S   0.0  1.4   0:00.09 /usr/sbin+
 91308 nobody    20   0  277476  35216   3608 S   0.0  1.5   0:00.10 /usr/sbin+
 91309 nobody    20   0  277476  33784   2176 S   0.0  1.4   0:00.08 /usr/sbin+
 91310 nobody    20   0  277476  35028   3420 S   0.0  1.4   0:00.10 /usr/sbin+
 91459 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92183 nobody    20   0  277476  33784   2176 S   0.0  1.4   0:00.02 /usr/sbin+
 92190 nobody    20   0  277448  35152   3572 S   0.0  1.5   0:00.03 /usr/sbin+
 92191 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.02 /usr/sbin+
 92247 nigeria   20   0  493660  31204   4764 S   0.0  1.3   0:00.22 php-fpm: +
 92282 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.02 /usr/sbin+
 92293 nobody    20   0  277476  33932   2324 S   0.0  1.4   0:00.02 /usr/sbin+
 92294 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.02 /usr/sbin+
 92307 nobody    20   0  277808  35152   3412 S   0.0  1.5   0:00.01 /usr/sbin+
 92308 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.02 /usr/sbin+
 92309 nobody    20   0  277480  33948   2336 S   0.0  1.4   0:00.02 /usr/sbin+
 92310 nobody    20   0  277480  33828   2216 S   0.0  1.4   0:00.02 /usr/sbin+
 92372 nobody    20   0  277476  33816   2208 S   0.0  1.4   0:00.01 /usr/sbin+
 92384 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 92385 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 92404 nobody    20   0  277324  33576   2164 S   0.0  1.4   0:00.00 /usr/sbin+
 92405 nobody    20   0  277324  33576   2164 S   0.0  1.4   0:00.00 /usr/sbin+
 92406 nobody    20   0  277324  33576   2164 S   0.0  1.4   0:00.01 /usr/sbin+
 92452 nobody    20   0  277672  35076   3416 S   0.0  1.4   0:00.00 /usr/sbin+
 92487 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 92488 nobody    20   0  277500  33576   2064 S   0.0  1.4   0:00.00 /usr/sbin+
 92501 nigeria   20   0  419608  28676   3912 S   0.0  1.2   0:00.19 php-fpm: +
 92504 nobody    20   0  277324  33576   2164 S   0.0  1.4   0:00.00 /usr/sbin+
 92505 nobody    20   0  277324  33576   2164 S   0.0  1.4   0:00.00 /usr/sbin+
 92513 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 92517 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92518 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92520 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92521 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92522 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92523 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92524 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92525 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92527 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92530 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 92531 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 92535 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92536 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92538 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92540 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92542 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 92543 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 92545 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 92546 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92549 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 92559 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 92561 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 92570 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97917 root      20   0       0      0      0 S   0.0  0.0   0:00.36 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov13   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov13   0:04  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov13   0:03  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov13   0:54  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov13   0:03  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov13   0:11  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov13   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov13   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov13   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov13   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov13   0:03  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov13   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   Nov13   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ext4-rsv-conver]
root      22875  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/0:0]
root      97917  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/u200:2]
root      59466  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/0:4]
root      68024  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/1:0]
root      71479  0.0  0.0      0     0 ?        S    00:00   0:00  \_ [kworker/u200:1]
root      76303  0.0  0.0      0     0 ?        S    00:04   0:00  \_ [kworker/0:2]
root      77518  0.0  0.0      0     0 ?        S    00:05   0:00  \_ [kworker/1:1]
root      79804  0.0  0.0      0     0 ?        S    00:07   0:00  \_ [kworker/1:2]
root      90305  0.0  0.0      0     0 ?        S    00:16   0:00  \_ [kworker/1:3]
root      91459  0.0  0.0      0     0 ?        S    00:17   0:00  \_ [kworker/0:1]
root          1  0.1  0.1 192956  4804 ?        Ss   Nov13   1:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  6400 ?        Ss   Nov13   0:26 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   100 ?        Ss   Nov13   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   440 ?        S<sl Nov13   0:04 /sbin/auditd
dbus        488  0.0  0.0  58716  1360 ?        Ss   Nov13   0:27 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256    64 ?        Ss   Nov13   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   136 ?        Ss   Nov13   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1256 ?        Ss   Nov13   0:11 /usr/lib/systemd/systemd-logind
root        521  0.0  0.1 224148  4360 ?        Ss   Nov13   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   380 ?        Ss   Nov13   0:01 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240   844 ?        Ssl  Nov13   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   344 ?        Ss   Nov13   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.1  0.0 1129668 1728 ?        Ssl  Nov13   0:52 /usr/sbin/nscd
root        540  0.0  0.0   4388    36 ?        Ss   Nov13   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208     0 ?        Ssl  Nov13   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   460 ?        Ss   Nov13   0:01 /usr/sbin/crond -n
root      92513  0.0  0.0 183048  2144 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92543  0.0  0.0 113284  1212 ?        Ss   00:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      92549  0.0  0.0 108052   356 ?        S    00:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      92561  0.0  0.0 113288  1520 ?        S    00:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      92618  0.0  0.0 153840  2092 ?        R    00:18   0:00  |               \_ ps auxf
root      92517  0.0  0.0 183048  2148 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92530  0.0  0.0  20164   988 ?        Ss   00:18   0:00  |   \_ jailshell (cloudsms) [92619] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  92619  0.0  0.0  20164   260 ?        S    00:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      92518  0.0  0.0 183048  2148 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92531  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      92520  0.0  0.0 183048  2144 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92538  0.0  0.0  20164   804 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      92521  0.0  0.0 183048  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92536  0.0  0.0  20164   804 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      92522  0.0  0.0 183048  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92546  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      92523  0.0  0.0 183048  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92535  0.0  0.0  20164   808 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      92524  0.0  0.0 183048  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92540  0.0  0.0  20164   804 ?        Ss   00:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      92525  0.0  0.0 183048  2144 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92545  0.0  0.0  20164   964 ?        Ss   00:18   0:00  |   \_ jailshell (pactpay) [92559] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92559  0.0  0.0      0     0 ?        D    00:18   0:00  |       \_ [jailshell]
root      92527  0.0  0.0 183048  2140 ?        S    00:18   0:00  \_ /usr/sbin/CROND -n
root      92542  0.0  0.0  20164   972 ?        Ss   00:18   0:00      \_ jailshell (nigeria) [92570] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92570  0.0  0.0  20164   260 ?        S    00:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92572  4.0  0.6 404052 16140 ?        S    00:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    24 ?        Ss   Nov13   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296    60 tty1     Ss+  Nov13   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704    32 ttyS0    Ss+  Nov13   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  3520 ?        Ss   Nov13   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.0  3.2 1763044 78196 ?       Ssl  Nov13   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.6 711724 38928 ?        Ssl  Nov13   0:28 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.0 445028     0 ?        Ss   Nov13   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    941  0.0  0.5 114016 13892 ?        Ssl  Nov13   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10568  3644 ?        Ss   Nov13   0:42 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
memcach+    948  0.0  0.0 342400    72 ?        Ssl  Nov13   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    44 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524    68 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    40 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 153404   312 ?        Ss   Nov13   0:01 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608    68 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        989  0.0  0.2 261296  6188 ?        Ss   Nov13   0:11 cpsrvd (SSL) - waiting for connections                   
root      92487  0.0  0.0      0     0 ?        Z    00:17   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   948 ?        Ssl  Nov13   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.4 5654048 35832 ?       SLsl Nov13   0:27 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   416 ?        Ss   Nov13   0:05 /usr/sbin/sshd -D
root       1000  0.0  0.3 331088  7380 ?        Ssl  Nov13   0:13 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   604 ?        Ss   Nov13   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.0  47048  1404 ?        S    Nov13   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.0  48664  2200 ?        S    Nov13   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   364 ?        S    Nov13   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   520 ?        S    Nov13   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  47052  1656 ?        S    Nov13   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.0  48568  2084 ?        S    Nov13   0:00  \_ dovecot/imap-login
root       1133  0.0  0.0  24564  2104 ?        S    Nov13   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   576 ?        S    Nov13   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41156  1504 ?        S    Nov13   0:01  \_ dovecot/auth
root       1147  0.0  1.0 248176 24832 ?        Ss   Nov13   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  4.1 271880 99840 ?        S    Nov13   0:07  \_ spamd child
root       5512  0.0  0.9 261652 23632 ?        S    Nov13   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  2948 ?        S    Nov13   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  0.5 410480 12948 ?        Ss   Nov13   0:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.1 387556  3492 ?        Ss   Nov13   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.1 183900  4816 ?        Ss   Nov13   0:03 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.8 209032 19812 ?        Ss   Nov13   0:04 tailwatchd
root       1241  0.0  0.0 167452  1240 ?        Ss   Nov13   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   460 ?        Ss   Nov13   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1292 ?        SN   Nov13   0:00 cpanellogd - sleeping for logs
mysql      1731  1.3 12.1 1458860 294548 ?      Sl   Nov13  11:35 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  34743  0.0  0.0   3148     8 ?        Ss   Nov13   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152    36 ?        S    Nov13   0:00  \_ [kworker]
root      71096  0.1  1.1 181060 28380 ?        Ss   00:00   0:01 lfd - sleeping
root      71692  0.0  0.4 1276100 11028 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      71726  0.0  0.4 1277312 11908 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
root      72069  0.0  1.1 266980 28720 ?        Ss   00:00   0:00 /usr/sbin/httpd -k start
root      72072  0.0  0.0  12812  1384 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      72073  0.0  0.0  12732  1360 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      72074  0.0  0.0  12836  1392 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      72075  0.0  0.4  53272 10616 ?        S    00:00   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    86531  0.1  1.4 277476 35252 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
cloudw    92614  0.0  0.6 355492 15428 ?        S    00:18   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    86619  0.1  1.4 277528 35332 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
nobody    87542  0.1  1.4 277480 35160 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87586  0.1  1.4 277476 35432 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    88579  0.1  1.4 277528 35096 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    89366  0.1  1.4 277468 34880 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    89428  0.1  1.4 277836 35464 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    89429  0.1  1.4 277488 34904 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    89433  0.1  1.4 277448 35000 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    89434  0.1  1.4 277820 35400 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    89454  0.0  1.4 277500 35396 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    89456  0.1  1.4 277448 35388 ?        S    00:15   0:00  \_ /usr/sbin/httpd -k start
nobody    91157  0.1  1.3 277484 33792 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91172  0.2  1.4 277504 34840 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91173  0.1  1.4 277476 35348 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91197  0.1  1.4 277476 34812 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
cloudw    92611  1.0  0.6 355492 15428 ?        S    00:18   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    91198  0.0  1.4 277476 35376 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91201  0.1  1.4 277508 35052 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91203  0.2  1.3 277476 33800 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91283  0.1  1.4 277476 34808 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91308  0.1  1.4 277476 35216 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91309  0.1  1.3 277476 33784 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    91310  0.1  1.4 277476 35028 ?        S    00:16   0:00  \_ /usr/sbin/httpd -k start
nobody    92183  0.0  1.3 277476 33784 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92190  0.1  1.4 277448 35152 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92191  0.1  1.3 277476 33780 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92282  0.1  1.3 277476 33780 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92293  0.1  1.4 277476 33932 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92294  0.1  1.3 277476 33780 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92307  0.0  1.4 277808 35152 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92308  0.1  1.3 277476 33780 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92309  0.1  1.4 277480 33948 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92310  0.1  1.3 277480 33828 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92372  0.1  1.3 277476 33816 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92384  0.1  1.3 277476 33780 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92385  0.1  1.3 277476 33780 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92404  0.0  1.3 277324 33576 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92405  0.0  1.3 277324 33576 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92406  0.1  1.3 277324 33576 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
cloudw    92610  1.0  0.6 355492 15428 ?        S    00:18   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    92407  0.1  1.4 277476 34752 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92452  0.0  1.4 277672 35076 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92488  0.0  1.3 277500 33576 ?        S    00:17   0:00  \_ /usr/sbin/httpd -k start
nobody    92504  0.0  1.3 277324 33576 ?        S    00:18   0:00  \_ /usr/sbin/httpd -k start
nobody    92505  0.0  1.3 277324 33576 ?        S    00:18   0:00  \_ /usr/sbin/httpd -k start
root      72127  0.0  0.5 400740 12344 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   92247  1.4  1.2 493660 31204 ?        S    00:17   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   92501 19.0  1.1 419608 28676 ?        S    00:18   0:00  \_ php-fpm: pool nigeriadecide_org
robocal+  92511  6.0  0.8 411208 20032 ?        R    00:18   0:00  \_ php-fpm: pool robocalls_cloudsms_com_ng
root      72132  0.0  0.4 388892 11276 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      72145  0.0  0.4 396248 10976 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      72153  0.0  0.5 389508 12692 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      72158  0.0  1.0 439788 24360 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
## mysql stats
Uptime: 50475  Threads: 2  Questions: 4161177  Slow queries: 0  Opens: 15084  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.440
*************************** 1. row ***************************
     Id: 57444
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 57454
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 114.119.145.216 TIME_WAIT
      1 123.31.38.154 TIME_WAIT
      1 167.114.139.56 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.8.25.25 TIME_WAIT
      1 45.8.25.30 TIME_WAIT
      1 45.8.25.33 TIME_WAIT
      1 45.8.25.35 TIME_WAIT
      1 45.8.25.36 TIME_WAIT
      1 45.8.25.42 TIME_WAIT
      1 45.8.25.43 TIME_WAIT
      1 45.8.25.4 TIME_WAIT
      1 45.8.25.6 TIME_WAIT
      1 66.249.64.11 TIME_WAIT
      1 66.249.64.167 TIME_WAIT
      1 66.249.64.173 TIME_WAIT
      1 66.249.64.37 TIME_WAIT
      1 66.249.70.136 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.64 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.198 TIME_WAIT
      2 66.249.70.38 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 14-Nov-2025 00:18:02 WAT
   Restart Time: Friday, 14-Nov-2025 00:00:24 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 17 minutes 37 seconds
   Server load: 0.80 0.63 0.66
   Total accesses: 9000 - Total Traffic: 238.4 MB - Total Duration: 5653283
   CPU Usage: u3.64 s1.97 cu118.01 cs97.92 - 21% CPU load
   8.51 requests/sec - 231.0 kB/second - 27.1 kB/request - 628.143 ms/request
   39 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKKKKK_KK_KKKKWKK_KKKK_K_WKKKKWKKKKWK..K.............KW...WK....
......K.K.......................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn Child Slot     Client     Protocol             VHost                                         Request
   0-0  92183 1/4/224   K 0.08 4   363 168449 28.9 0.12  6.29 66.249.70.128  http/1.1 schoolplus.cloudware.ng:80    GET /?p=1518318141 HTTP/1.1
   1-0  92190 1/5/178   K 0.07 1   397 114146 31.4 0.10  4.74 192.178.4.97   http/1.1 schoolplus.cloudware.ng:80    GET /?p=1227882523 HTTP/1.1
   2-0  92282 1/3/197   K 0.06 2   287 145766 31.0 0.09  5.86 66.249.64.13   http/1.1 schoolplus.cloudware.ng:80    GET /?p=1944762546 HTTP/1.1
   3-0  91157 2/22/231  K 0.61 2   347 168367 58.8 0.66  6.20 66.249.70.6    http/1.1 schoolplus.cloudware.ng:80    GET /?p=3112641073 HTTP/1.1
   4-0  88579 1/47/210  K 1.29 4   360 150247 30.5 1.52  6.28 66.249.64.34   http/1.1 schoolplus.cloudware.ng:80    GET /?p=3037858663 HTTP/1.1
   5-0  92191 1/4/210   K 0.08 3   358 148400 29.5 0.12  5.67 66.249.64.164  http/1.1 schoolplus.cloudware.ng:80    GET /?p=2683578252 HTTP/1.1
   6-0  92293 0/5/222   _ 0.08 0   959 160666 0.0  0.10  6.02 84.200.208.126 http/1.1 nigeriadecide.org:80          GET /blog/2015-presidential-election-results/ HTTP/1.1
   7-0  92294 1/4/182   K 0.08 2   407 108918 31.2 0.12  4.84 66.249.64.45   http/1.1 schoolplus.cloudware.ng:80    GET /?p=3309927517 HTTP/1.1
   8-0  92307 1/3/293   K 0.02 4   416 141204 30.0 0.07  5.43 66.249.64.97   http/1.1 schoolplus.cloudware.ng:80    GET /?p=1667624472 HTTP/1.1
   9-0  87542 0/150/315 _ 1.26 0   2   150270 0.0  1.30  6.09 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   10-0 91172 1/29/203  K 0.79 3   362 134551 29.1 1.06  5.61 66.249.64.15   http/1.1 schoolplus.cloudware.ng:80    GET /?p=3625678452 HTTP/1.1
   11-0 91173 1/20/183  K 0.45 3   381 123173 29.0 0.51  4.86 66.249.64.46   http/1.1 schoolplus.cloudware.ng:80    GET /?p=806863990 HTTP/1.1
   12-0 92308 1/3/216   K 0.06 0   324 162187 31.5 0.09  5.77 66.249.70.4    http/1.1 schoolplus.cloudware.ng:80    GET /?p=2937725513 HTTP/1.1
   13-0 92309 1/5/196   K 0.06 0   402 114964 31.6 0.09  5.26 66.249.70.5    http/1.1 schoolplus.cloudware.ng:80    GET /?p=1815288383 HTTP/1.1
   14-0 91197 1/15/233  W 0.42 0   0   157592 29.3 0.46  6.37 192.178.4.104  http/1.1 schoolplus.cloudware.ng:80    GET /?p=468591360 HTTP/1.1
   15-0 91198 1/14/189  K 0.24 3   334 146369 29.4 0.31  5.49 192.178.4.96   http/1.1 schoolplus.cloudware.ng:80    GET /?p=3655573767 HTTP/1.1
   16-0 92310 1/4/190   K 0.05 3   367 134685 30.5 0.09  5.60 66.249.70.129  http/1.1 schoolplus.cloudware.ng:80    GET /?p=1837501102 HTTP/1.1
   17-0 87586 0/48/206  _ 1.09 0   348 134119 0.0  1.21  5.15 66.249.64.173  http/1.1 schoolplus.cloudware.ng:80    GET /?p=2670499186 HTTP/1.1
   18-0 92372 1/4/285   K 0.04 1   343 128185 32.3 0.09  5.50 66.249.64.131  http/1.1 schoolplus.cloudware.ng:80    GET /?p=2452850236 HTTP/1.1
   19-0 92384 1/2/191   K 0.02 1   297 132558 30.2 0.06  4.99 66.249.70.169  http/1.1 schoolplus.cloudware.ng:80    GET /?p=4104170204 HTTP/1.1
   20-0 92385 1/2/191   K 0.02 1   401 147546 31.2 0.06  5.21 66.249.64.5    http/1.1 schoolplus.cloudware.ng:80    GET /?p=3387598747 HTTP/1.1
   21-0 91201 1/22/196  K 0.57 1   297 139441 29.9 0.85  5.27 66.249.70.35   http/1.1 schoolplus.cloudware.ng:80    GET /?p=1673245112 HTTP/1.1
   22-0 92404 0/1/209   _ 0.00 0   353 133922 0.0  0.03  5.78 66.249.70.33   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2751087970 HTTP/1.1
   23-0 91203 1/26/150  K 0.71 0   348 88032  33.3 0.78  4.11 66.249.70.107  http/1.1 schoolplus.cloudware.ng:80    GET /?p=3143247741 HTTP/1.1
   24-0 92405 0/1/200   _ 0.00 0   355 126244 0.0  0.03  5.60 66.249.64.37   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2757871369 HTTP/1.1
   25-0 92406 0/1/130   W 0.00 0   0   74624  0.0  0.03  3.33 66.249.64.132  http/1.1 schoolplus.cloudware.ng:80    GET /?p=527616643 HTTP/1.1
   26-0 91283 1/15/162  K 0.42 4   354 88894  31.0 0.46  3.97 66.249.70.32   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2517416858 HTTP/1.1
   27-0 92407 1/2/179   K 0.02 0   365 106398 29.4 0.06  4.77 66.249.70.135  http/1.1 schoolplus.cloudware.ng:80    GET /?p=2066288550 HTTP/1.1
   28-0 91308 1/17/218  K 0.43 1   2   137492 5.1  0.46  6.06 66.249.92.41   http/1.1 secure.pactpay.com:443        GET /.well-known/assetlinks.json HTTP/1.1
   29-0 92452 1/2/196   K 0.00 2   431 116519 34.3 0.04  5.23 66.249.70.96   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2097031471 HTTP/1.1
   30-0 91309 0/13/151  W 0.35 0   0   94872  0.0  0.39  5.36 66.249.64.128  http/1.1 schoolplus.cloudware.ng:80    GET /?p=2776775321 HTTP/1.1
   31-0 91310 1/17/172  K 0.42 4   395 105967 31.1 0.49  4.77 66.249.64.8    http/1.1 schoolplus.cloudware.ng:80    GET /?p=4244131141 HTTP/1.1
   32-0 92488 1/1/138   K 0.00 1   260 80783  29.6 0.03  3.76 192.178.4.97   http/1.1 schoolplus.cloudware.ng:80    GET /ctg/search/similarImageSearchResultView/?ctgItemCd=762503
   33-0 92504 1/1/154   K 0.00 0   362 93445  28.8 0.03  4.10 66.249.64.96   http/1.1 schoolplus.cloudware.ng:80    GET /?p=1051390562 HTTP/1.1
   34-0 92505 1/1/180   K 0.00 0   351 84842  29.5 0.03  4.24 66.249.64.166  http/1.1 schoolplus.cloudware.ng:80    GET /?p=2091333100 HTTP/1.1
   35-0 86531 1/83/209  W 2.29 0   0   136338 30.3 2.39  6.08 66.249.70.8    http/1.1 schoolplus.cloudware.ng:80    GET /?p=3087384884 HTTP/1.1
   36-0 89366 1/49/151  K 1.35 3   424 92500  30.6 1.44  4.00 66.249.64.170  http/1.1 schoolplus.cloudware.ng:80    GET /?p=26792460 HTTP/1.1
   37-0 -     0/0/152   . 0.00 150 0   92144  0.0  0.00  4.15 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/139   . 0.00 100 0   84217  0.0  0.00  3.76 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 86619 1/81/218  K 2.40 3   414 137437 30.5 2.47  6.33 66.249.70.38   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2751433050 HTTP/1.1
   40-0 -     0/0/111   . 0.00 113 0   62644  0.0  0.00  2.90 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/142   . 0.00 147 0   86933  0.0  0.00  3.98 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/61    . 0.00 139 0   33807  0.0  0.00  1.65 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/101   . 0.00 61  0   58120  0.0  0.00  2.58 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/61    . 0.00 135 0   36236  0.0  0.00  1.81 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/99    . 0.00 55  0   56989  0.0  0.00  2.61 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/86    . 0.00 127 0   51412  0.0  0.00  2.32 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/19    . 0.00 159 0   9581   0.0  0.00  0.45 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/23    . 0.00 117 0   12616  0.0  0.00  0.55 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/20    . 0.00 132 0   9970   0.0  0.00  0.58 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/10    . 0.00 155 0   4700   0.0  0.00  0.22 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/54    . 0.00 93  0   31585  0.0  0.00  1.43 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/32    . 0.00 35  0   18732  0.0  0.00  0.78 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 89428 1/40/40   K 0.99 4   417 25663  31.4 1.07  1.07 66.249.64.233  http/1.1 schoolplus.cloudware.ng:80    GET /?p=4288048032 HTTP/1.1
   54-0 89429 0/51/51   W 1.41 0   0   32758  0.0  1.46  1.46 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   55-0 -     0/0/8     . 0.00 109 0   2331   0.0  0.00  0.12 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 156 0   4      0.0  0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/7     . 0.00 116 0   2202   0.0  0.00  0.13 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 89433 0/36/36   W 0.93 0   0   26753  0.0  1.22  1.22 66.249.92.198  http/1.1 robocalls.cloudsms.com.ng:443 GET /.well-known/assetlinks.json HTTP/1.1
   59-0 89434 1/35/35   K 0.88 2   274 20311  30.6 0.92  0.92 66.249.64.224  http/1.1 schoolplus.cloudware.ng:80    GET /?p=1452738934 HTTP/1.1
   60-0 -     0/0/4     . 0.00 129 0   1440   0.0  0.00  0.07 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 146 0   4      0.0  0.00  0.02 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/6     . 0.00 105 0   2879   0.0  0.00  0.12 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 151 0   181    0.0  0.00  0.06 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   64-0 -     0/0/2     . 0.00 142 0   52     0.0  0.00  0.02 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 145 0   4      0.0  0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   66-0 -     0/0/9     . 0.00 111 0   2617   0.0  0.00  0.15 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 144 0   67     0.0  0.00  0.05 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   68-0 -     0/0/3     . 0.00 126 0   3315   0.0  0.00  0.11 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   69-0 -     0/0/6     . 0.00 107 0   2651   0.0  0.00  0.13 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   70-0 89454 1/30/30   K 0.63 2   400 16367  30.1 0.81  0.81 66.249.64.67   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2107358811 HTTP/1.1
   71-0 -     0/0/2     . 0.00 143 0   3      0.0  0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   72-0 89456 1/31/31   K 0.70 3   503 19653  31.4 0.77  0.77 66.249.64.225  http/1.1 schoolplus.cloudware.ng:80    GET /?p=2435897969 HTTP/1.1
   73-0 -     0/0/12    . 0.00 103 0   9388   0.0  0.00  0.34 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   74-0 -     0/0/3     . 0.00 130 0   624    0.0  0.00  0.09 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   75-0 -     0/0/35    . 0.00 51  0   24154  0.0  0.00  0.99 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   76-0 -     0/0/2     . 0.00 141 0   27     0.0  0.00  0.01 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 566
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 19 seconds, (range: 0...92)
   index usage: 9%, cache usage: 13%
   total entries stored since starting: 1600
   total entries replaced since starting: 0
   total entries expired since starting: 1034
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 88 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit