403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.01.48.txt
 ## swap threshold exceeded
## server overview
2025-11-15.01.48 load[0] mem[52/77] mysql[1/12] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1084         415          63         864        1030
Swap:          1999        1654         345
 01:48:02 up  6:52,  0 users,  load average: 0.14, 0.27, 0.33
## system overview
top - 01:48:02 up  6:52,  0 users,  load average: 0.14, 0.27, 0.33
Tasks: 200 total,   5 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.6 us, 41.9 sy,  0.0 ni,  6.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   402964 free,  1132264 used,   885072 buff/cache
KiB Swap:  2047996 total,   353788 free,  1694208 used.  1032804 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 267488   4532 S  18.8 11.1   5:07.76 /usr/sbin+
     1 root      20   0   44388   3304   1492 S  12.5  0.1   0:34.50 /usr/lib/+
   358 root      20   0   39500   7016   6756 S   6.2  0.3   0:14.32 /usr/lib/+
   520 root      20   0   24704   1184    824 D   6.2  0.0   0:05.73 /usr/lib/+
   522 dbus      20   0   58596   1324    636 R   6.2  0.1   0:12.90 /usr/bin/+
 26608 pactpay   20   0  479860  16172  10576 S   6.2  0.7   0:00.01 /opt/cpan+
 26619 nigeria   20   0  404052  16144  10384 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.61 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:25.42 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.13 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:04.95 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.90 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.69 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.98 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.27 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    352    240 S   0.0  0.0   0:02.26 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6764   1744 S   0.0  0.3   0:00.36 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.01 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.55 /usr/sbin+
   519 root      20   0   52852    412    312 S   0.0  0.0   0:00.01 /usr/sbin+
   521 polkitd   20   0  612240    840    480 S   0.0  0.0   0:03.38 /usr/lib/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1872    832 S   0.0  0.1   0:20.13 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.71 /usr/sbin+
   569 root      20   0   24208     28      8 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3924    916 S   0.0  0.2   0:00.73 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.01 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.22 /usr/sbin+
   914 root      20   0 1350088   8452     44 S   0.0  0.3   0:24.54 /usr/bin/+
   916 root      20   0   51656   1216    824 S   0.0  0.1   0:00.33 /usr/sbin+
   918 root      20   0  261424   6708   1772 S   0.0  0.3   0:07.25 cpsrvd (S+
   922 root      20   0 1763124  67808    784 S   0.0  2.8   0:13.82 /usr/loca+
   923 root      20   0  290128   6900   6000 S   0.0  0.3   0:06.89 /usr/sbin+
   924 root      20   0  396248    448    360 S   0.0  0.0   0:00.66 php-fpm: +
   933 root      20   0  389508    424    336 S   0.0  0.0   0:00.69 php-fpm: +
   935 named     20   0 1054792  39300   2264 S   0.0  1.6   0:14.16 /usr/sbin+
   937 root      20   0  388892    576    480 S   0.0  0.0   0:00.74 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  37940   6060 S   0.0  1.6   0:13.62 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.23 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.51 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.55 /usr/bin/+
   954 cpanelc+  20   0   10576   3716   2360 S   0.0  0.2   0:20.41 /usr/loca+
   958 root      20   0  439788   1000    900 S   0.0  0.0   0:00.74 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2664    656 S   0.0  0.1   0:03.41 php-fpm: +
   971 systuser  20   0  114016  13988   2740 S   0.0  0.6   0:05.88 /usr/loca+
   972 root      20   0  572372    968    428 S   0.0  0.0   0:02.17 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.08 dovecot/a+
  1133 root      20   0  248092  11488    744 S   0.0  0.5   0:05.71 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.12 SonarPush+
  1173 wp-tool+  20   0  387556   4368   1556 S   0.0  0.2   0:00.27 /usr/bin/+
  1174 wp-tool+  20   0  410480  28616   1744 S   0.0  1.2   0:20.87 /usr/bin/+
  1253 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.48 dnsadmin +
  1254 root      20   0  209336   8968   1952 S   0.0  0.4   0:02.72 tailwatchd
  1256 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.72 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.70 php-fpm: +
  1715 root      38  18  130416   1396    716 S   0.0  0.1   0:00.06 cpanellog+
  1942 root      20   0  267052  31228   5736 S   0.0  1.3   0:02.66 /usr/sbin+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.46 [kworker]
  8135 root      20   0  270332 100488   3440 S   0.0  4.2   0:03.98 spamd chi+
  8136 root      20   0  249228  32540    736 S   0.0  1.3   0:00.05 spamd chi+
  9166 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 10032 dovenull  20   0   46772   3356   2512 S   0.0  0.1   0:00.01 dovecot/p+
 10033 dovenull  20   0   47152   4504   3388 S   0.0  0.2   0:00.01 dovecot/i+
 10034 root      20   0   10452   1344    976 S   0.0  0.1   0:00.00 dovecot/l+
 10035 dovenull  20   0   46912   4136   3128 S   0.0  0.2   0:00.02 dovecot/p+
 10036 dovenull  20   0   46780   3360   2512 S   0.0  0.1   0:00.00 dovecot/i+
 10037 root      20   0   24396  12060   1232 S   0.0  0.5   0:00.02 dovecot/c+
 10038 dovecot   20   0   13568   1356   1088 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12916   1412   1200 S   0.0  0.1   0:00.13 /usr/loca+
 10040 root      20   0   12732   1380   1200 S   0.0  0.1   0:00.12 /usr/loca+
 10041 root      20   0   13008   1676   1200 S   0.0  0.1   0:00.12 /usr/loca+
 10042 dovecot   20   0   41056   2596   1860 S   0.0  0.1   0:00.02 dovecot/a+
 10043 root      20   0   53268  11912   2528 S   0.0  0.5   0:00.05 /usr/loca+
 10044 nobody    20   0  277544  35700   4232 S   0.0  1.5   0:01.66 /usr/sbin+
 10376 worencom  20   0   38496   3492   2628 S   0.0  0.1   0:00.00 dovecot/i+
 10709 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 10765 nobody    20   0  277564  35792   4360 S   0.0  1.5   0:01.89 /usr/sbin+
 15265 nobody    20   0  277564  35636   4148 S   0.0  1.5   0:01.27 /usr/sbin+
 17545 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19934 nobody    20   0  277596  35692   4224 S   0.0  1.5   0:00.77 /usr/sbin+
 19935 nobody    20   0  277904  35884   4172 S   0.0  1.5   0:00.74 /usr/sbin+
 20375 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21971 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22680 nobody    20   0  277560  35288   3840 S   0.0  1.5   0:00.42 /usr/sbin+
 23089 nobody    20   0  277580  35524   4012 S   0.0  1.5   0:00.46 /usr/sbin+
 23107 nobody    20   0  277544  35172   3768 S   0.0  1.5   0:00.22 /usr/sbin+
 23109 nobody    20   0  277524  35560   4172 S   0.0  1.5   0:00.39 /usr/sbin+
 23133 nobody    20   0  277580  35320   3880 S   0.0  1.5   0:00.37 /usr/sbin+
 23136 nobody    20   0  277912  35460   3876 S   0.0  1.5   0:00.31 /usr/sbin+
 23137 nobody    20   0  277904  35384   3796 S   0.0  1.5   0:00.33 /usr/sbin+
 23138 nobody    20   0  277572  35464   4028 S   0.0  1.5   0:00.33 /usr/sbin+
 23139 nobody    20   0  277576  35160   3716 S   0.0  1.5   0:00.45 /usr/sbin+
 23529 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24291 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24687 nobody    20   0  277904  35228   3644 S   0.0  1.5   0:00.26 /usr/sbin+
 25243 nobody    20   0  277580  34800   3356 S   0.0  1.4   0:00.22 /usr/sbin+
 25987 nobody    20   0  277568  34860   3432 S   0.0  1.4   0:00.13 /usr/sbin+
 26127 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 26136 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 26162 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 26334 nigeria   20   0  483656  20764   6636 S   0.0  0.9   0:00.23 php-fpm: +
 26435 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 26485 root      20   0  162436   5840   4344 S   0.0  0.2   0:00.01 sshd: roo+
 26486 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 26514 nigeria   20   0  409372  16028   3916 S   0.0  0.7   0:00.19 php-fpm: +
 26534 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 26544 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26546 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26547 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26548 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26549 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26550 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26551 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26552 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26553 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26554 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26555 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26556 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26558 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26561 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 26562 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 26563 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 26585 root      20   0  160248   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 26587 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26588 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26589 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 26590 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26592 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 26594 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26595 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26596 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26597 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26598 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26599 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26600 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26604 cloudw    20   0  366088  16596  10892 S   0.0  0.7   0:00.00 /opt/cpan+
 26605 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 26618 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 26623 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 46515 root      20   0  181876  29168   1544 S   0.0  1.2   0:06.93 lfd - sle+
 81457 root      20   0       0      0      0 R   0.0  0.0   0:00.27 [kworker/+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
 91172 root      20   0       0      0      0 D   0.0  0.0   0:00.06 [kworker/+
 98007 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 99640 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:25  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      81457  0.0  0.0      0     0 ?        R    00:48   0:00  \_ [kworker/1:0]
root      91172  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      98007  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      99640  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:4]
root       9166  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:0]
root      10709  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:3]
root      17545  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/0:1]
root      20375  0.0  0.0      0     0 ?        S    01:40   0:00  \_ [kworker/1:1]
root      21971  0.0  0.0      0     0 ?        S    01:42   0:00  \_ [kworker/0:0]
root      23529  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/0:2]
root      24291  0.0  0.0      0     0 ?        S    01:45   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44388  3304 ?        Ss   Nov14   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  7020 ?        Ss   Nov14   0:14 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   352 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6764 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   412 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1184 ?        Ss   Nov14   0:05 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240   840 ?        Ssl  Nov14   0:03 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58596  1324 ?        Ss   Nov14   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1872 ?        Ssl  Nov14   0:20 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root      26544  0.0  0.0 183048  2148 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26561  0.0  0.0 113284  1212 ?        Ss   01:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      26562  0.0  0.0 108052   356 ?        S    01:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      26563  0.0  0.0 113288  1512 ?        S    01:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      26624  0.0  0.0 153840  2096 ?        R    01:48   0:00  |               \_ ps auxf
root      26546  0.0  0.0 183048  2148 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26594  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      26547  0.0  0.0 183048  2148 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26600  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      26548  0.0  0.0 183048  2148 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26588  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      26549  0.0  0.0 183048  2144 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26598  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      26550  0.0  0.0 183048  2144 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26590  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      26551  0.0  0.0 183048  2144 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26597  0.0  0.0  20164   804 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      26552  0.0  0.0 183048  2144 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26587  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      26553  0.0  0.0 183048  2140 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26599  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      26554  0.0  0.0 183048  2140 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26596  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      26555  0.0  0.0 183048  2140 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26595  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      26556  0.0  0.0 183048  2144 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26592  0.0  0.0  20164   968 ?        Ss   01:48   0:00  |   \_ jailshell (pactpay) [26605] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26605  0.0  0.0  20164   264 ?        S    01:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26608  0.0  0.6 479860 16172 ?        Sl   01:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      26558  0.0  0.0 183048  2140 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      26589  0.0  0.0  20164   968 ?        Ss   01:48   0:00      \_ jailshell (nigeria) [26618] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26618  0.0  0.0  20164   264 ?        S    01:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26619  0.0  0.6 404052 16144 ?        S    01:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    28 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3924 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root      26127  0.0  0.1 111304  4268 ?        Ss   01:47   0:00  \_ sshd: [accepted]
sshd      26136  0.0  0.1 115644  2632 ?        S    01:47   0:00  |   \_ sshd: [net]
root      26162  0.0  0.1 111304  4272 ?        Ss   01:47   0:00  \_ sshd: [accepted]
root      26435  0.0  0.1 111304  4272 ?        Ss   01:47   0:00  \_ sshd: [accepted]
root      26485  0.1  0.2 162436  5840 ?        Ss   01:47   0:00  \_ sshd: root [priv]
sshd      26486  0.0  0.1 115644  2632 ?        S    01:47   0:00      \_ sshd: root [net]
root        914  0.0  0.3 1350088 8452 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1216 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46772  3356 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47152  4504 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1344 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  4136 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  46780  3360 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.4  24396 12060 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1356 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41056  2596 ?        S    01:26   0:00  \_ dovecot/auth
worencom  10376  0.0  0.1  38496  3492 ?        S    01:26   0:00  \_ dovecot/imap
root        918  0.0  0.2 261424  6708 ?        Ss   Nov14   0:07 cpsrvd (SSL) - waiting for connections                   
root      26534  0.0  0.0      0     0 ?        Z    01:47   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  2.8 1763124 67808 ?       Ssl  Nov14   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.2 290128  6908 ?        Ssl  Nov14   0:06 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   448 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   424 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.6 1054792 39300 ?       Ssl  Nov14   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   576 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 37940 ?       SLsl Nov14   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3716 ?        Ss   Nov14   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788  1000 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2664 ?        Ss   Nov14   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   26334  1.0  0.8 483656 20764 ?        S    01:47   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   26514  9.5  0.6 409372 16028 ?        S    01:47   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 13988 ?        Ssl  Nov14   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   968 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11488 ?        Ss   Nov14   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  4.1 270332 100488 ?       S    Nov14   0:03  \_ spamd child
root       8136  0.0  1.3 249228 32540 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.1 387556  4368 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410480 28616 ?        Ss   Nov14   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4168 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.3 209336  8968 ?        Ss   Nov14   0:02 tailwatchd
root       1256  0.0  1.0 262224 24616 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1396 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.0 1458868 267488 ?      Sl   Nov14   5:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.2 267052 31228 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12916  1412 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1380 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  13008  1676 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 11912 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    10044  0.1  1.4 277544 35700 ?        S    01:26   0:01  \_ /usr/sbin/httpd -k start
nobody    10765  0.1  1.4 277564 35792 ?        S    01:27   0:01  \_ /usr/sbin/httpd -k start
nobody    15265  0.1  1.4 277564 35636 ?        S    01:33   0:01  \_ /usr/sbin/httpd -k start
nobody    19934  0.1  1.4 277596 35692 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    19935  0.1  1.4 277904 35884 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    22680  0.1  1.4 277560 35288 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody    23089  0.1  1.4 277580 35524 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    23107  0.0  1.4 277544 35172 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
cloudw    26604  0.0  0.6 366220 16596 ?        S    01:48   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    23109  0.1  1.4 277524 35560 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    23133  0.1  1.4 277580 35320 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    23136  0.1  1.4 277912 35460 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    23137  0.1  1.4 277904 35384 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    23138  0.1  1.4 277572 35464 ?        R    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    23139  0.1  1.4 277576 35160 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    24687  0.1  1.4 277904 35228 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    25243  0.1  1.4 277580 34800 ?        S    01:46   0:00  \_ /usr/sbin/httpd -k start
nobody    25987  0.2  1.4 277568 34860 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 181876 29168 ?        Ss   00:00   0:06 lfd - sleeping
## mysql stats
Uptime: 24760  Threads: 3  Questions: 1898072  Slow queries: 0  Opens: 7300  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.658
*************************** 1. row ***************************
     Id: 25641
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 25645
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 25647
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 154.30.68.144 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.26.246.162 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.195 TIME_WAIT
      3 149.88.20.203 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 01:48:02 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 6 hours 52 minutes 36 seconds
   Server load: 0.14 0.27 0.33
   Total accesses: 128821 - Total Traffic: 3.1 GB - Total Duration: 70315112
   CPU Usage: u7.73 s5.15 cu1646.99 cs1351.12 - 12.2% CPU load
   5.2 requests/sec - 129.3 kB/second - 24.9 kB/request - 545.836 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KKK.KK.W...._K..._.K..W.K.K..KR_K...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol            VHost                                         Request
   0-2  24687 8/44/6499  K 1.14 1     362 3424554 240.9 1.18  149.91 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80   GET /?p=474143902 HTTP/1.1
   1-2  25243 1/36/6207  K 1.01 1     337 3316238 30.5  1.03  149.34 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80   GET /?p=544181162 HTTP/1.1
   2-2  25987 10/21/6110 K 0.56 0     258 3415401 301.0 0.61  155.17 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80   GET /?p=574065576 HTTP/1.1
   3-2  -     0/0/6352   . 0.00 35    0   3272216 0.0   0.00  149.83 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   4-2  19934 1/190/6180 K 3.51 2     220 3267831 13.0  3.41  160.06 92.112.92.204  http/1.1 nigeriadecide.org:443        GET /blog/dont-stop-our-rallies-apc-tells-inec/ HTTP/1.1
   5-2  19935 7/136/5330 K 3.16 3     350 3100662 207.6 3.52  136.80 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80   GET /?p=2316659794 HTTP/1.1
   6-2  -     0/0/5967   . 0.00 263   0   3279048 0.0   0.00  145.37 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   7-2  15265 0/226/5674 W 5.84 0     0   3096154 0.0   5.63  137.74 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   8-2  -     0/0/5651   . 0.00 262   0   3079138 0.0   0.00  140.78 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   9-2  -     0/0/5269   . 0.00 267   0   2775417 0.0   0.00  126.05 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   10-2 -     0/0/5349   . 0.00 250   0   2774448 0.0   0.00  124.47 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   11-2 -     0/0/5419   . 0.00 269   0   2995315 0.0   0.00  141.93 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   12-2 22680 0/76/4921  _ 1.80 0     0   2820684 0.0   1.93  125.89 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   13-2 10765 1/412/5653 K 8.25 1     299 2953506 33.2  8.47  129.28 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80   GET /?p=2289286198 HTTP/1.1
   14-2 -     0/0/5075   . 0.00 111   0   2632930 0.0   0.00  114.38 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   15-2 -     0/0/5022   . 0.00 261   0   2764676 0.0   0.00  125.08 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   16-2 -     0/0/4813   . 0.00 266   0   2467335 0.0   0.00  105.57 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   17-2 10044 0/287/4778 _ 7.52 0     273 2611065 0.0   7.55  117.72 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80   GET /?p=1852518580 HTTP/1.1
   18-2 -     0/0/3263   . 0.00 144   0   1926085 0.0   0.00  76.47  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   19-2 23089 7/80/3190  K 1.99 1     347 1891295 209.6 2.11  86.23  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80   GET /?p=4204401620 HTTP/1.1
   20-2 -     0/0/2943   . 0.00 264   0   1731894 0.0   0.00  74.14  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   21-2 -     0/0/2453   . 0.00 265   0   1438742 0.0   0.00  63.50  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   22-2 23107 8/37/2127  W 0.92 0     0   1417901 248.0 1.06  57.76  66.249.70.194  http/1.1 schoolplus.cloudware.ng:80   GET /?p=3447595313 HTTP/1.1
   23-2 -     0/0/1503   . 0.00 145   0   901084  0.0   0.00  34.27  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   24-2 23109 3/71/1407  K 1.69 0     271 853177  89.6  1.89  34.07  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80   GET /?p=2598995665 HTTP/1.1
   25-2 -     0/0/860    . 0.00 233   0   499680  0.0   0.00  19.97  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   26-2 23133 1/68/1246  K 1.50 1     353 740050  29.2  1.97  27.03  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80   GET /?p=1666395725 HTTP/1.1
   27-2 -     0/0/526    . 0.00 268   0   370995  0.0   0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   28-2 -     0/0/126    . 0.00 270   0   118122  0.0   0.00  1.93   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   29-2 23136 1/58/552   K 1.31 0     269 308562  30.6  1.56  16.73  66.249.70.196  http/1.1 schoolplus.cloudware.ng:80   GET /?p=3799474929 HTTP/1.1
   30-2 23137 0/60/352   R 1.47 19    361 189085  0.0   1.61  9.90   91.231.89.122  http/1.1 placesdiary.cloudware.ng:443
   31-2 23138 0/61/489   _ 1.46 0     3   296354  0.0   1.57  14.41  114.119.155.44 http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php?state=Yobe&=Gumsa HTTP/1.1
   32-2 23139 2/80/458   K 1.96 1     361 267637  58.4  2.07  12.67  66.249.70.192  http/1.1 schoolplus.cloudware.ng:80   GET /?p=410316166 HTTP/1.1
   33-1 -     0/0/88     . 0.00 1348  0   55802   0.0   0.00  2.25   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   34-1 -     0/0/312    . 0.00 1349  0   173940  0.0   0.00  8.57   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   35-1 -     0/0/106    . 0.00 1308  274 68641   0.0   0.00  2.42   66.249.70.199  http/1.1 schoolplus.cloudware.ng:80   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285191
   36-1 -     0/0/45     . 0.00 1308  312 34406   0.0   0.00  0.88   66.249.70.195  http/1.1 schoolplus.cloudware.ng:80   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1858531
   37-1 -     0/0/140    . 0.00 1368  0   94554   0.0   0.00  4.26   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   38-1 -     0/0/520    . 0.00 1338  0   298993  0.0   0.00  13.13  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   39-1 -     0/0/189    . 0.00 1351  0   82924   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   40-1 -     0/0/390    . 0.00 1335  0   215765  0.0   0.00  10.21  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   41-1 -     0/0/504    . 0.00 1346  0   232467  0.0   0.00  10.53  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   42-1 -     0/0/51     . 0.00 1345  0   32716   0.0   0.00  0.81   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   43-1 -     0/0/146    . 0.00 1367  0   86203   0.0   0.00  3.56   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   44-1 -     0/0/526    . 0.00 1308  344 290992  0.0   0.00  16.18  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2359430
   45-1 -     0/0/172    . 0.00 1366  0   111014  0.0   0.00  4.74   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   46-1 -     0/0/732    . 0.00 1350  0   247872  0.0   0.00  10.12  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   47-0 -     0/0/5      . 0.00 3208  0   13937   0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 3234  0   4411    0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   49-0 -     0/0/18     . 0.00 3190  0   9848    0.0   0.00  0.38   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   50-0 -     0/0/299    . 0.00 3232  0   158547  0.0   0.00  8.15   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   51-0 -     0/0/347    . 0.00 3176  0   161044  0.0   0.00  6.97   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   52-0 -     0/0/29     . 0.00 3164  0   15555   0.0   0.00  0.67   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   53-0 -     0/0/12     . 0.00 3186  0   18089   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   54-0 -     0/0/10     . 0.00 3210  0   4405    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   55-0 -     0/0/4      . 0.00 3206  0   998     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00 3236  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00 3214  0   1939    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   58-0 -     0/0/6      . 0.00 3235  0   3734    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   59-0 -     0/0/1053   . 0.00 3209  0   467065  0.0   0.00  23.46  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   60-0 -     0/0/4      . 0.00 3207  0   13426   0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   61-0 -     0/0/13     . 0.00 3231  0   7394    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   62-0 -     0/0/9      . 0.00 3233  0   7635    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   63-0 -     0/0/5      . 0.00 3211  0   739     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   64-0 -     0/0/42     . 0.00 3174  0   22252   0.0   0.00  0.99   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   65-0 -     0/0/123    . 0.00 2934  0   72436   0.0   0.00  3.21   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   66-0 -     0/0/4      . 0.00 3230  0   160     0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00 3229  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00 3185  0   810     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   69-0 -     0/0/84     . 0.00 3192  0   48852   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   70-0 -     0/0/15     . 0.00 3197  0   7942    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   71-0 -     0/0/3      . 0.00 3200  0   864     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   72-0 -     0/0/32     . 0.00 3203  0   18076   0.0   0.00  0.70   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   73-0 -     0/0/42     . 0.00 3193  0   23305   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   74-0 -     0/0/9      . 0.00 3228  0   4058    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   75-0 -     0/0/4      . 0.00 3189  0   49      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   76-0 -     0/0/934    . 0.00 3227  0   199287  0.0   0.00  9.09   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   77-0 -     0/0/2      . 0.00 3226  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   78-0 -     0/0/3      . 0.00 3225  0   4640    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 19595 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 340
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...26)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 1471
   total entries replaced since starting: 0
   total entries expired since starting: 1130
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 15 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit