403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-14.00.33.txt
 ## swap threshold exceeded
## server overview
2025-11-14.00.33 load[0] mem[58/81] mysql[4/12] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1246         190         103         926         828
Swap:          1999        1666         333
 00:33:01 up 14:16,  0 users,  load average: 0.26, 0.57, 0.65
## system overview
top - 00:33:01 up 14:16,  0 users,  load average: 0.26, 0.57, 0.65
Tasks: 209 total,   6 running, 200 sleeping,   0 stopped,   3 zombie
%Cpu(s): 63.6 us, 18.2 sy,  0.0 ni, 15.2 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   205228 free,  1265852 used,   949220 buff/cache
KiB Swap:  2047996 total,   341756 free,  1706240 used.   858960 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458860 309120   3948 S 100.0 12.8  11:43.96 /usr/sbin+
  8476 nigeria   20   0  404052  16144  10384 S  18.8  0.7   0:00.05 /opt/cpan+
   520 root      20   0   24712   1256    824 S   6.2  0.1   0:12.06 /usr/lib/+
  8432 cloudw    20   0       0      0      0 Z   6.2  0.0   0:00.01 [php-cgi]+
  8474 pactpay   20   0  480124  17688  11892 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0  192956   4800   1568 S   0.0  0.2   1:15.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:04.25 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:03.20 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:55.47 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:03.08 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:12.12 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.81 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.11 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:01.01 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.84 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:03.19 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.72 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   1672   1412 S   0.0  0.1   0:27.45 /usr/lib/+
   379 root      20   0   45352    100     96 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    440    308 S   0.0  0.0   0:04.32 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   488 dbus      20   0   58716   1360    628 S   0.0  0.1   0:27.50 /usr/bin/+
   512 rpc       20   0   69256     64      4 S   0.0  0.0   0:00.05 /sbin/rpc+
   518 root      20   0  152780    136     92 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0  224148   4328    892 S   0.0  0.2   0:00.57 queueproc+
   524 root      20   0   21540    380    292 S   0.0  0.0   0:01.14 /usr/sbin+
   525 polkitd   20   0  612240    844    448 S   0.0  0.0   0:07.01 /usr/lib/+
   533 root      20   0   52852    304    204 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0 1129668   1740    832 S   0.0  0.1   0:53.33 /usr/sbin+
   540 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    460    328 S   0.0  0.0   0:01.40 /usr/sbin+
   574 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296     60     56 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   3548    600 S   0.0  0.1   0:00.91 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.80 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   839 nobody    20   0  277516  35308   3672 S   0.0  1.5   0:00.51 /usr/sbin+
   925 root      20   0 1763044  79376    956 S   0.0  3.3   0:14.16 /usr/loca+
   931 named     20   0  711724  38824   1660 S   0.0  1.6   0:28.91 /usr/sbin+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   941 systuser  20   0  114016  14040   2280 S   0.0  0.6   0:12.02 /usr/loca+
   945 cpanelc+  20   0   10568   3644   2352 S   0.0  0.2   0:43.43 /usr/loca+
   948 memcach+  20   0  342400     72     72 S   0.0  0.0   0:01.13 /usr/bin/+
   950 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   952 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   957 systuser  20   0   14068     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   960 root      20   0  153404    312    228 S   0.0  0.0   0:01.08 pure-ftpd+
   963 systuser  20   0  111608     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   989 root      20   0  261296   6768   1748 S   0.0  0.3   0:11.50 cpsrvd (S+
   990 root      20   0  572372    948    404 S   0.0  0.0   0:04.37 /usr/bin/+
   991 telegraf  20   0 5654048  36772   5612 S   0.0  1.5   0:28.17 /usr/loca+
   998 root      20   0  111304    416    316 S   0.0  0.0   0:05.75 /usr/sbin+
  1000 root      20   0  331088   3140   1900 S   0.0  0.1   0:13.72 /usr/sbin+
  1001 root      20   0   51508    604    428 S   0.0  0.0   0:00.58 /usr/sbin+
  1125 dovenull  20   0   47048   2196   1492 S   0.0  0.1   0:00.89 dovecot/p+
  1126 dovenull  20   0   48664   2200    788 S   0.0  0.1   0:00.66 dovecot/i+
  1127 dovecot   20   0   10320    364    248 S   0.0  0.0   0:00.14 dovecot/a+
  1128 root      20   0   10452    520    328 S   0.0  0.0   0:00.56 dovecot/l+
  1129 dovenull  20   0   47052   2184   1480 S   0.0  0.1   0:00.66 dovecot/p+
  1130 dovenull  20   0   48568   3100   1576 S   0.0  0.1   0:00.54 dovecot/i+
  1133 root      20   0   24564   2104    380 S   0.0  0.1   0:00.29 dovecot/c+
  1137 dovecot   20   0   13568    576    356 S   0.0  0.0   0:00.12 dovecot/s+
  1147 root      20   0  248176  24832    532 S   0.0  1.0   0:08.89 /usr/loca+
  1164 systuser  20   0  157708   2932    956 S   0.0  0.1   0:00.23 SonarPush+
  1165 wp-tool+  20   0  410480  12948   1444 S   0.0  0.5   0:43.63 /usr/bin/+
  1166 wp-tool+  20   0  387556   3492   1412 S   0.0  0.1   0:00.45 /usr/bin/+
  1208 dovecot   20   0   41156   1544   1040 S   0.0  0.1   0:01.19 dovecot/a+
  1236 root      20   0  183900   4816   1584 S   0.0  0.2   0:03.91 cpdavd - +
  1239 root      20   0  209168  19840   2620 S   0.0  0.8   0:04.80 tailwatchd
  1241 root      20   0  167452   1252    704 S   0.0  0.1   0:00.73 dnsadmin +
  1327 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
  1333 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1631 root      20   0  299272    532    368 S   0.0  0.0   0:01.40 php-fpm: +
  1677 root      38  18  130416   1368    720 S   0.0  0.1   0:00.12 cpanellog+
  3418 nobody    20   0  277476  35328   3728 S   0.0  1.5   0:00.39 /usr/sbin+
  3880 nobody    20   0  277520  35084   3440 S   0.0  1.4   0:00.37 /usr/sbin+
  4497 nobody    20   0  277476  35232   3628 S   0.0  1.5   0:00.17 /usr/sbin+
  4593 nobody    20   0  277476  35196   3640 S   0.0  1.5   0:00.27 /usr/sbin+
  4721 nobody    20   0  277468  35428   3836 S   0.0  1.5   0:00.29 /usr/sbin+
  5511 root      20   0  271880 100996   3020 S   0.0  4.2   0:08.00 spamd chi+
  5512 root      20   0  261652  23632    316 S   0.0  1.0   0:00.40 spamd chi+
  5827 nobody    20   0  277476  35152   3556 S   0.0  1.5   0:00.29 /usr/sbin+
  5834 nobody    20   0  277816  35192   3448 S   0.0  1.5   0:00.18 /usr/sbin+
  5854 nobody    20   0  277476  35024   3428 S   0.0  1.4   0:00.18 /usr/sbin+
  6011 nobody    20   0  277464  34992   3404 S   0.0  1.4   0:00.21 /usr/sbin+
  6036 nobody    20   0  277476  34876   3280 S   0.0  1.4   0:00.19 /usr/sbin+
  6919 nobody    20   0  277584  35308   3604 S   0.0  1.5   0:00.09 /usr/sbin+
  6934 nobody    20   0  277476  35020   3424 S   0.0  1.4   0:00.12 /usr/sbin+
  6951 nobody    20   0  277476  35028   3432 S   0.0  1.4   0:00.11 /usr/sbin+
  6953 nobody    20   0  277476  34852   3256 S   0.0  1.4   0:00.11 /usr/sbin+
  6973 nobody    20   0  277516  34820   3184 S   0.0  1.4   0:00.11 /usr/sbin+
  6976 nobody    20   0  277476  35024   3428 S   0.0  1.4   0:00.14 /usr/sbin+
  6978 nobody    20   0  277476  35460   3864 S   0.0  1.5   0:00.13 /usr/sbin+
  7199 nobody    20   0  277476  34876   3280 S   0.0  1.4   0:00.10 /usr/sbin+
  7215 nobody    20   0  277476  35200   3604 S   0.0  1.5   0:00.09 /usr/sbin+
  7677 nobody    20   0  277476  35192   3596 S   0.0  1.5   0:00.07 /usr/sbin+
  7678 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.06 [httpd] <+
  7715 nobody    20   0  277808  35276   3540 S   0.0  1.5   0:00.04 /usr/sbin+
  7810 mailnull  20   0   89316   5516   2264 S   0.0  0.2   0:00.00 /usr/sbin+
  7820 nigeria   20   0  400460   8236   2440 S   0.0  0.3   0:00.01 php-fpm: +
  8137 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8142 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8143 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.02 /usr/sbin+
  8162 nobody    20   0  277476  33776   2180 S   0.0  1.4   0:00.01 /usr/sbin+
  8163 nobody    20   0  277816  35324   3588 S   0.0  1.5   0:00.02 /usr/sbin+
  8164 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.02 /usr/sbin+
  8186 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8187 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8188 nobody    20   0  277476  33772   2176 R   0.0  1.4   0:00.02 /usr/sbin+
  8189 nobody    20   0  277516  34820   3184 S   0.0  1.4   0:00.01 /usr/sbin+
  8190 nobody    20   0  277512  35012   3380 S   0.0  1.4   0:00.01 /usr/sbin+
  8191 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8192 nobody    20   0  277732  33776   2176 R   0.0  1.4   0:00.02 /usr/sbin+
  8193 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8253 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8270 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8271 nobody    20   0  277476  33772   2176 S   0.0  1.4   0:00.01 /usr/sbin+
  8398 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8411 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8413 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8415 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8417 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8418 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8419 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8420 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8421 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8423 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8426 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8427 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8428 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8438 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
  8439 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8447 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8448 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8449 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  8451 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  8452 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8453 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  8472 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8475 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8483 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8484 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8485 cloudw    20   0  355492  15428  10292 S   0.0  0.6   0:00.00 /opt/cpan+
  8494 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  8500 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8501 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
  8502 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
  8503 cloudsms  20   0  129464   2584   2100 R   0.0  0.1   0:00.00 /usr/loca+
 34743 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.90 [kworker]
 68024 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 71096 root      20   0  181060  28260   1604 S   0.0  1.2   0:01.92 lfd - sle+
 71479 root      20   0       0      0      0 D   0.0  0.0   0:00.13 [kworker/+
 71692 root      20   0 1276100  11268    592 S   0.0  0.5   0:00.08 /usr/bin/+
 71726 root      20   0 1277312  11908    592 S   0.0  0.5   0:00.07 /usr/bin/+
 72069 root      20   0  266980  28668   2988 S   0.0  1.2   0:00.92 /usr/sbin+
 72072 root      20   0   12796   1392   1180 S   0.0  0.1   0:00.34 /usr/loca+
 72073 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.30 /usr/loca+
 72074 root      20   0   12808   1404   1180 S   0.0  0.1   0:00.33 /usr/loca+
 72075 root      20   0   53272  10616   1240 S   0.0  0.4   0:00.05 /usr/loca+
 72127 root      20   0  400740  12352   7076 S   0.0  0.5   0:00.28 php-fpm: +
 72132 root      20   0  388892  11268   6188 S   0.0  0.5   0:00.09 php-fpm: +
 72145 root      20   0  396248  10976   5356 S   0.0  0.5   0:00.06 php-fpm: +
 72153 root      20   0  389508  12820   8160 S   0.0  0.5   0:00.06 php-fpm: +
 72158 root      20   0  439788  24220  16784 S   0.0  1.0   0:00.07 php-fpm: +
 76303 root      20   0       0      0      0 D   0.0  0.0   0:00.07 [kworker/+
 79804 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 96338 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 97917 root      20   0       0      0      0 S   0.0  0.0   0:00.36 [kworker/+
 99849 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov13   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov13   0:04  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov13   0:03  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov13   0:55  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov13   0:03  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov13   0:12  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov13   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov13   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov13   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    Nov13   0:01  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov13   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov13   0:03  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov13   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   Nov13   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ext4-rsv-conver]
root      97917  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/u200:2]
root      68024  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/1:0]
root      71479  0.0  0.0      0     0 ?        S    00:00   0:00  \_ [kworker/u200:1]
root      76303  0.0  0.0      0     0 ?        S    00:04   0:00  \_ [kworker/0:2]
root      79804  0.0  0.0      0     0 ?        S    00:07   0:00  \_ [kworker/1:2]
root      96338  0.0  0.0      0     0 ?        S    00:21   0:00  \_ [kworker/0:3]
root      99849  0.0  0.0      0     0 ?        S    00:24   0:00  \_ [kworker/1:1]
root       1327  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:4]
root       1333  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/0:1]
root       8483  0.0  0.0      0     0 ?        S    00:33   0:00  \_ [kworker/0:0]
root       8484  0.0  0.0      0     0 ?        S    00:33   0:00  \_ [kworker/0:4]
root          1  0.1  0.1 192956  4800 ?        Ss   Nov13   1:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  1672 ?        Ss   Nov13   0:27 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   100 ?        Ss   Nov13   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   440 ?        S<sl Nov13   0:04 /sbin/auditd
dbus        488  0.0  0.0  58716  1360 ?        Ss   Nov13   0:27 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256    64 ?        Ss   Nov13   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   136 ?        Ss   Nov13   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1256 ?        Ss   Nov13   0:12 /usr/lib/systemd/systemd-logind
root        521  0.0  0.1 224148  4328 ?        Ss   Nov13   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   380 ?        Ss   Nov13   0:01 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240   844 ?        Ssl  Nov13   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   304 ?        Ss   Nov13   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.1  0.0 1129668 1740 ?        Ssl  Nov13   0:53 /usr/sbin/nscd
root        540  0.0  0.0   4388    36 ?        Ss   Nov13   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208     0 ?        Ssl  Nov13   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   460 ?        Ss   Nov13   0:01 /usr/sbin/crond -n
root       8411  0.0  0.0 183048  2144 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8426  0.0  0.0 113284  1212 ?        Ss   00:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8427  0.0  0.0 108052   356 ?        S    00:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8428  0.0  0.0 113288  1516 ?        S    00:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8504  0.0  0.0 153840  2100 ?        R    00:33   0:00  |               \_ ps auxf
root       8413  0.0  0.0 183048  2148 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8452  0.0  0.0  20164   808 ?        Ss   00:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       8415  0.0  0.0 183048  2144 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8447  0.0  0.0  20164   804 ?        Ss   00:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       8417  0.0  0.0 183048  2144 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8448  0.0  0.0  20164   804 ?        Ss   00:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       8418  0.0  0.0 183048  2144 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8438  0.0  0.0  20164   812 ?        Ss   00:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8419  0.0  0.0 183048  2140 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8453  0.0  0.0  20164   984 ?        Ss   00:33   0:00  |   \_ jailshell (cloudsms) [8500] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms   8500  0.0  0.0      0     0 ?        D    00:33   0:00  |       \_ [jailshell]
root       8420  0.0  0.0 183048  2140 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8439  0.0  0.0  20164   804 ?        Ss   00:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8421  0.0  0.0 183048  2144 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8449  0.0  0.0  20164   968 ?        Ss   00:33   0:00  |   \_ jailshell (pactpay) [8472] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8472  0.0  0.0  20164   264 ?        S    00:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8474  0.0  0.7 480124 17688 ?        S    00:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8423  0.0  0.0 183048  2140 ?        S    00:33   0:00  \_ /usr/sbin/CROND -n
root       8451  0.0  0.0  20164   972 ?        Ss   00:33   0:00      \_ jailshell (nigeria) [8475] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8475  0.0  0.0  20164   264 ?        S    00:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8476  0.0  0.6 404052 16144 ?        S    00:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    24 ?        Ss   Nov13   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296    60 tty1     Ss+  Nov13   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704    32 ttyS0    Ss+  Nov13   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  3548 ?        Ss   Nov13   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   7810  0.0  0.2  89316  5516 ?        S    00:32   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.0  3.2 1763044 79376 ?       Ssl  Nov13   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.6 711724 38824 ?        Ssl  Nov13   0:28 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.0 445028     0 ?        Ss   Nov13   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    941  0.0  0.5 114016 14040 ?        Ssl  Nov13   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10568  3644 ?        Ss   Nov13   0:43 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
memcach+    948  0.0  0.0 342400    72 ?        Ssl  Nov13   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    44 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524    68 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    40 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 153404   312 ?        Ss   Nov13   0:01 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608    68 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        989  0.0  0.2 261296  6768 ?        Ss   Nov13   0:11 cpsrvd (SSL) - waiting for connections                   
root       8398  0.0  0.0      0     0 ?        Z    00:32   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   948 ?        Ssl  Nov13   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.5 5654048 36772 ?       SLsl Nov13   0:28 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   416 ?        Ss   Nov13   0:05 /usr/sbin/sshd -D
root       1000  0.0  0.1 331088  3140 ?        Ssl  Nov13   0:13 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   604 ?        Ss   Nov13   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.0  47048  2196 ?        S    Nov13   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.0  48664  2200 ?        S    Nov13   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   364 ?        S    Nov13   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   520 ?        S    Nov13   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  47052  2184 ?        S    Nov13   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  48568  3100 ?        S    Nov13   0:00  \_ dovecot/imap-login
root       1133  0.0  0.0  24564  2104 ?        S    Nov13   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   576 ?        S    Nov13   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41156  1544 ?        S    Nov13   0:01  \_ dovecot/auth
root       1147  0.0  1.0 248176 24832 ?        Ss   Nov13   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  4.1 271880 100996 ?       S    Nov13   0:08  \_ spamd child
root       5512  0.0  0.9 261652 23632 ?        S    Nov13   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  2932 ?        S    Nov13   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  0.5 410480 12948 ?        Ss   Nov13   0:43 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.1 387556  3492 ?        Ss   Nov13   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.1 183900  4816 ?        Ss   Nov13   0:03 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.8 209168 19840 ?        Ss   Nov13   0:04 tailwatchd
root       1241  0.0  0.0 167452  1252 ?        Ss   Nov13   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   532 ?        Ss   Nov13   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1368 ?        SN   Nov13   0:00 cpanellogd - sleeping for logs
mysql      1731  1.3 12.7 1458860 309120 ?      Sl   Nov13  11:44 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  34743  0.0  0.0   3148     8 ?        Ss   Nov13   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152    36 ?        S    Nov13   0:00  \_ [kworker]
root      71096  0.0  1.1 181060 28260 ?        Ss   00:00   0:01 lfd - sleeping
root      71692  0.0  0.4 1276100 11268 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      71726  0.0  0.4 1277312 11908 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
root      72069  0.0  1.1 266980 28668 ?        Ss   00:00   0:00 /usr/sbin/httpd -k start
root      72072  0.0  0.0  12796  1392 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      72073  0.0  0.0  12732  1364 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      72074  0.0  0.0  12808  1404 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      72075  0.0  0.4  53272 10616 ?        S    00:00   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody      839  0.1  1.4 277516 35308 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody     3418  0.1  1.4 277476 35328 ?        S    00:28   0:00  \_ /usr/sbin/httpd -k start
nobody     3880  0.1  1.4 277520 35084 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
nobody     4497  0.0  1.4 277476 35232 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
nobody     4593  0.1  1.4 277476 35196 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
cloudw     8485  0.0  0.6 355492 15428 ?        S    00:33   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     4721  0.1  1.4 277468 35428 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
nobody     5827  0.2  1.4 277476 35152 ?        S    00:30   0:00  \_ /usr/sbin/httpd -k start
nobody     5834  0.1  1.4 277816 35192 ?        S    00:30   0:00  \_ /usr/sbin/httpd -k start
nobody     5854  0.1  1.4 277476 35024 ?        S    00:30   0:00  \_ /usr/sbin/httpd -k start
nobody     6011  0.1  1.4 277464 34992 ?        S    00:30   0:00  \_ /usr/sbin/httpd -k start
nobody     6036  0.1  1.4 277476 34876 ?        S    00:30   0:00  \_ /usr/sbin/httpd -k start
nobody     6919  0.1  1.4 277584 35308 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     6934  0.1  1.4 277476 35020 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     6951  0.1  1.4 277476 35028 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     6953  0.1  1.4 277476 34852 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     6973  0.1  1.4 277516 34820 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     6976  0.1  1.4 277476 35024 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     6978  0.1  1.4 277476 35460 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     7199  0.1  1.4 277476 34876 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     7215  0.1  1.4 277476 35200 ?        S    00:31   0:00  \_ /usr/sbin/httpd -k start
nobody     7677  0.1  1.4 277476 35192 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     7678  0.1  0.0      0     0 ?        Z    00:32   0:00  \_ [httpd] <defunct>
nobody     7715  0.1  1.4 277808 35276 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8137  0.0  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8142  0.0  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8143  0.1  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8162  0.0  1.3 277476 33776 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8163  0.1  1.4 277816 35324 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8164  0.1  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8186  0.0  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8187  0.0  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8188  0.1  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8189  0.0  1.4 277516 34820 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8190  0.0  1.4 277512 35012 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8191  0.0  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8192  0.1  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8193  0.0  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8253  0.1  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8270  0.1  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody     8271  0.1  1.3 277476 33772 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
root      72127  0.0  0.5 400740 12352 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    7820  0.0  0.3 400460  8236 ?        S    00:32   0:00  \_ php-fpm: pool nigeriadecide_org
root      72132  0.0  0.4 388892 11268 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      72145  0.0  0.4 396248 10976 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      72153  0.0  0.5 389508 12820 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      72158  0.0  1.0 439788 24220 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
## mysql stats
Uptime: 51374  Threads: 2  Questions: 4225939  Slow queries: 0  Opens: 15357  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.258
*************************** 1. row ***************************
     Id: 58349
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 58354
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.48 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 148.113.128.234 TIME_WAIT
      1 172.70.220.26 TIME_WAIT
      1 174.138.18.135 TIME_WAIT
      1 ::1 TIME_WAIT
      1 220.181.108.82 TIME_WAIT
      1 43.173.175.103 TIME_WAIT
      1 51.222.168.14 TIME_WAIT
      1 66.249.64.128 TIME_WAIT
      1 66.249.64.163 TIME_WAIT
      1 66.249.64.173 TIME_WAIT
      1 66.249.64.227 TIME_WAIT
      1 66.249.64.71 TIME_WAIT
      1 66.249.64.7 TIME_WAIT
      1 66.249.70.101 TIME_WAIT
      1 66.249.70.169 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 66.249.70.5 TIME_WAIT
      1 74.7.227.91 TIME_WAIT
      1 91.90.142.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 14-Nov-2025 00:33:01 WAT
   Restart Time: Friday, 14-Nov-2025 00:00:24 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 32 minutes 37 seconds
   Server load: 0.26 0.57 0.65
   Total accesses: 16623 - Total Traffic: 465.6 MB - Total Duration: 10538130
   CPU Usage: u3.14 s2.22 cu228.27 cs188.03 - 21.5% CPU load
   8.49 requests/sec - 243.6 kB/second - 28.7 kB/request - 633.949 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 14 idle workers

_KKRKKKWKKK_.C_W._K__KK.W___KK_KK_K__KKKKK_.....................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID    Acc    M CPU   SS  Req  Dur   Conn Child  Slot    Client     Protocol           VHost                                        Request
   0-0  6919 0/16/407 _ 0.39 0    277 286669 0.0  0.60  11.24 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3408587564 HTTP/1.1
   1-0  8137 1/3/364  K 0.04 4    257 241540 29.7 0.09  9.71  66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=42935399 HTTP/1.1
   2-0  6011 1/34/400 K 0.92 0    401 271181 31.5 1.00  11.61 192.178.4.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4243805679 HTTP/1.1
   3-0  4497 0/29/414 R 0.76 88   5   288284 0.0  0.79  10.99 54.162.69.192 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/images/blog/blog/ima
   4-0  8142 1/3/398  K 0.04 3    256 271083 29.4 0.09  11.38 66.249.70.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3039535054 HTTP/1.1
   5-0  6934 2/21/405 K 0.53 3    300 279713 61.4 0.60  10.99 66.249.70.168 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2152556779 HTTP/1.1
   6-0  8143 1/3/398  K 0.06 2    267 272222 29.3 0.09  10.96 66.249.70.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4229686202 HTTP/1.1
   7-0  4593 0/45/368 W 1.40 0    0   227686 0.0  1.21  10.00 66.249.64.9   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2142751118 HTTP/1.1
   8-0  5827 1/47/485 K 1.24 0    282 264365 30.3 1.36  10.57 66.249.70.174 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2562401010 HTTP/1.1
   9-0  3418 1/65/529 K 1.61 3    299 287869 29.5 1.72  11.70 192.178.4.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3882379075 HTTP/1.1
   10-0 4721 1/49/409 K 1.45 1    305 264977 31.7 1.33  11.44 66.249.64.224 http/1.1 schoolplus.cloudware.ng:80 GET /?p=803308555 HTTP/1.1
   11-0 7677 0/12/345 _ 0.28 0    5   225474 0.0  0.32  9.39  23.23.137.202 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/assets/css/blog/poll
   12-0 -    0/0/401  . 0.00 1    0   289134 0.0  0.00  10.76 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 7678 1/11/393 C 0.24 0    0   245233 0.2  0.28  10.30 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 5834 0/30/461 _ 0.75 0    352 319221 0.0  0.84  12.68 66.249.64.129 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2981816595 HTTP/1.1
   15-0 6951 0/18/349 W 0.43 0    0   243951 0.0  0.50  9.65  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 -    0/0/384  . 0.00 2    0   262978 0.0  0.00  11.22 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 6953 0/17/410 _ 0.46 0    266 259770 0.0  0.48  10.93 66.249.70.140 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3646749484 HTTP/1.1
   18-0 8162 1/3/456  K 0.05 2    257 231332 29.4 0.09  10.86 66.249.64.162 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2638895682 HTTP/1.1
   19-0 8163 0/4/401  _ 0.03 1    360 260529 0.0  0.08  10.92 66.249.70.64  http/1.1 schoolplus.cloudware.ng:80 GET /?p=528373913 HTTP/1.1
   20-0 7715 0/8/339  _ 0.16 0    267 234802 0.0  0.21  9.26  66.249.70.65  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1004722075 HTTP/1.1
   21-0 8164 1/3/357  K 0.06 0    268 248376 29.7 0.09  17.59 66.249.64.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1473361494 HTTP/1.1
   22-0 839  1/84/398 K 2.17 0    304 262525 30.0 2.50  11.00 66.249.64.129 http/1.1 schoolplus.cloudware.ng:80 GET /?p=775732374 HTTP/1.1
   23-0 -    0/0/329  . 0.00 0    0   194302 0.0  0.00  16.66 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 8186 0/2/346  W 0.03 0    0   222726 0.0  0.06  9.44  66.249.64.69  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2864924479 HTTP/1.1
   25-0 8187 0/2/303  _ 0.02 0    359 199745 0.0  0.06  8.56  66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1207792726 HTTP/1.1
   26-0 8188 0/3/350  _ 0.06 0    267 202682 0.0  0.09  9.28  66.249.64.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2192211114 HTTP/1.1
   27-0 8189 0/2/304  _ 0.02 1    338 184466 0.0  0.06  7.89  66.249.64.228 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1843551348 HTTP/1.1
   28-0 8190 1/2/378  K 0.01 4    343 227104 29.8 0.05  10.53 66.249.64.67  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1273602154 HTTP/1.1
   29-0 3880 1/63/402 K 1.66 1    279 252665 32.1 2.87  11.83 66.249.70.69  http/1.1 schoolplus.cloudware.ng:80 GET /?p=450692407 HTTP/1.1
   30-0 7199 0/16/317 _ 0.43 0    312 202977 0.0  0.47  9.74  66.249.70.169 http/1.1 schoolplus.cloudware.ng:80 GET /?p=237005773 HTTP/1.1
   31-0 5854 3/28/304 K 0.75 1    316 190286 90.8 0.81  8.16  66.249.64.227 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2657076696 HTTP/1.1
   32-0 6973 1/18/292 K 0.48 2    275 180840 30.5 0.53  8.34  66.249.64.45  http/1.1 schoolplus.cloudware.ng:80 GET /?p=117813861 HTTP/1.1
   33-0 8191 0/2/250  _ 0.03 1    351 151290 0.0  0.06  6.89  66.249.64.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=41914564 HTTP/1.1
   34-0 8192 1/3/293  K 0.06 0    383 154093 31.0 0.09  7.05  66.249.64.6   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3789999500 HTTP/1.1
   35-0 8193 0/2/398  _ 0.02 1    349 259769 0.0  0.06  11.63 66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=933498711 HTTP/1.1
   36-0 6036 0/32/318 _ 0.84 1    277 195186 0.0  0.90  8.45  66.249.64.1   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1781755605 HTTP/1.1
   37-0 6976 1/24/286 K 0.60 2    264 181635 30.0 0.66  7.82  66.249.70.66  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3459613258 HTTP/1.1
   38-0 8253 1/2/277  K 0.02 2    281 167562 30.1 0.06  8.93  66.249.70.110 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3956833459 HTTP/1.1
   39-0 7215 1/15/326 K 0.36 3    269 200603 30.1 0.40  9.11  192.178.4.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1403647533 HTTP/1.1
   40-0 8270 1/2/187  K 0.02 1    284 102856 30.8 0.06  4.61  66.249.70.7   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3641593120 HTTP/1.1
   41-0 8271 1/2/335  K 0.03 0    396 224162 30.2 0.06  9.28  66.249.64.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=337062880 HTTP/1.1
   42-0 6978 0/23/181 _ 0.54 0    0   107131 0.0  0.61  4.88  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   43-0 -    0/0/158  . 0.00 102  0   103900 0.0  0.00  3.99  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -    0/0/95   . 0.00 101  0   54549  0.0  0.00  2.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -    0/0/170  . 0.00 105  0   98396  0.0  0.00  5.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -    0/0/125  . 0.00 22   0   74371  0.0  0.00  3.34  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -    0/0/83   . 0.00 65   0   50241  0.0  0.00  2.25  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -    0/0/47   . 0.00 230  0   28501  0.0  0.00  1.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -    0/0/20   . 0.00 1032 0   9970   0.0  0.00  0.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -    0/0/10   . 0.00 1054 0   4700   0.0  0.00  0.22  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -    0/0/54   . 0.00 993  0   31585  0.0  0.00  1.43  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -    0/0/32   . 0.00 935  0   18732  0.0  0.00  0.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -    0/0/43   . 0.00 883  0   27321  0.0  0.00  1.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -    0/0/56   . 0.00 875  0   34560  0.0  0.00  1.57  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -    0/0/8    . 0.00 1009 0   2331   0.0  0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -    0/0/2    . 0.00 1055 0   4      0.0  0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -    0/0/7    . 0.00 1016 0   2202   0.0  0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -    0/0/52   . 0.00 816  0   37652  0.0  0.00  1.61  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -    0/0/49   . 0.00 818  0   29045  0.0  0.00  1.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -    0/0/4    . 0.00 1029 0   1440   0.0  0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -    0/0/2    . 0.00 1046 0   4      0.0  0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -    0/0/6    . 0.00 1005 0   2879   0.0  0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -    0/0/2    . 0.00 1050 0   181    0.0  0.00  0.06  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -    0/0/2    . 0.00 1042 0   52     0.0  0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -    0/0/2    . 0.00 1045 0   4      0.0  0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -    0/0/9    . 0.00 1011 0   2617   0.0  0.00  0.15  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -    0/0/2    . 0.00 1044 0   67     0.0  0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -    0/0/3    . 0.00 1026 0   3315   0.0  0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -    0/0/6    . 0.00 1007 0   2651   0.0  0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -    0/0/35   . 0.00 868  0   18199  0.0  0.00  0.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -    0/0/2    . 0.00 1043 0   3      0.0  0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -    0/0/38   . 0.00 878  0   23433  0.0  0.00  0.92  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -    0/0/12   . 0.00 1003 0   9388   0.0  0.00  0.34  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -    0/0/3    . 0.00 1030 0   624    0.0  0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -    0/0/35   . 0.00 951  0   24154  0.0  0.00  0.99  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -    0/0/2    . 0.00 1041 0   27     0.0  0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 373
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 21 seconds, (range: 2...83)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 2722
   total entries replaced since starting: 0
   total entries expired since starting: 2347
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 93 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit