403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.02.09.txt
 ## swap threshold exceeded
## server overview
2025-11-15.02.09 load[0] mem[51/77] mysql[1/12] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1065         161          70        1136        1042
Swap:          1999        1656         343
 02:09:01 up  7:13,  0 users,  load average: 0.31, 0.20, 0.23
## system overview
top - 02:09:02 up  7:13,  0 users,  load average: 0.31, 0.20, 0.23
Tasks: 195 total,   4 running, 190 sleeping,   0 stopped,   1 zombie
%Cpu(s): 67.7 us, 22.6 sy,  0.0 ni,  0.0 id,  9.7 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   139900 free,  1110940 used,  1169460 buff/cache
KiB Swap:  2047996 total,   351996 free,  1696000 used.  1047164 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 268772   4556 S  62.5 11.1   5:22.99 /usr/sbin+
 42500 root      20   0  169868  16844   2876 S  18.8  0.7   0:00.07 /usr/loca+
 42532 nigeria   20   0  404052  16136  10380 S  18.8  0.7   0:00.03 /opt/cpan+
 42546 root      20   0  209904   9652   4500 R  12.5  0.4   0:00.02 /usr/bin/+
   522 dbus      20   0   58728   1384    636 S   6.2  0.1   0:13.57 /usr/bin/+
 42534 pactpay   20   0  480124  17312  11580 R   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44388   3308   1492 S   0.0  0.1   0:36.04 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.67 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.66 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.19 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:05.19 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.00 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.57 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.73 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:03.02 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.35 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   3168   2904 S   0.0  0.1   0:14.95 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    352    240 S   0.0  0.0   0:02.36 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6764   1744 S   0.0  0.3   0:00.36 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.01 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.59 /usr/sbin+
   519 root      20   0   52852    412    312 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1196    824 S   0.0  0.0   0:06.03 /usr/lib/+
   521 polkitd   20   0  612240    840    480 S   0.0  0.0   0:03.55 /usr/lib/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1876    836 S   0.0  0.1   0:21.19 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.76 /usr/sbin+
   569 root      20   0   24208     28      8 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3952    940 S   0.0  0.2   0:00.76 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.01 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.35 /usr/sbin+
   914 root      20   0 1350088   8452     44 S   0.0  0.3   0:24.55 /usr/bin/+
   916 root      20   0   51656   1216    824 S   0.0  0.1   0:00.34 /usr/sbin+
   918 root      20   0  261424   6736   1772 S   0.0  0.3   0:07.41 cpsrvd (S+
   922 root      20   0 1763124  67808    784 S   0.0  2.8   0:13.82 /usr/loca+
   923 root      20   0  298320   3668   2736 S   0.0  0.2   0:07.20 /usr/sbin+
   924 root      20   0  396248    448    360 S   0.0  0.0   0:00.69 php-fpm: +
   933 root      20   0  389508    472    384 S   0.0  0.0   0:00.72 php-fpm: +
   935 named     20   0 1054792  40184   2320 S   0.0  1.7   0:14.87 /usr/sbin+
   937 root      20   0  388892    576    480 S   0.0  0.0   0:00.78 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  36944   6124 S   0.0  1.5   0:14.29 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.24 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.55 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.57 /usr/bin/+
   954 cpanelc+  20   0   10576   3716   2360 S   0.0  0.2   0:21.41 /usr/loca+
   958 root      20   0  439788   1000    900 S   0.0  0.0   0:00.77 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2664    656 S   0.0  0.1   0:03.58 php-fpm: +
   971 systuser  20   0  114016  13952   2708 S   0.0  0.6   0:06.17 /usr/loca+
   972 root      20   0  572372    968    428 S   0.0  0.0   0:02.26 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.08 dovecot/a+
  1133 root      20   0  248092  11488    744 S   0.0  0.5   0:05.86 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.12 SonarPush+
  1173 wp-tool+  20   0  387556   4136   1792 S   0.0  0.2   0:00.28 /usr/bin/+
  1174 wp-tool+  20   0  410480  25228   2040 S   0.0  1.0   0:21.93 /usr/bin/+
  1253 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.49 dnsadmin +
  1254 root      20   0  209336  10368   2368 S   0.0  0.4   0:02.84 tailwatchd
  1256 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.72 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.73 php-fpm: +
  1715 root      38  18  130416   1396    716 S   0.0  0.1   0:00.06 cpanellog+
  1942 root      20   0  267052  31184   5692 S   0.0  1.3   0:02.73 /usr/sbin+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.49 [kworker]
  8135 root      20   0  270332 100456   3408 S   0.0  4.2   0:04.09 spamd chi+
  8136 root      20   0  249228  32540    736 S   0.0  1.3   0:00.05 spamd chi+
 10032 dovenull  20   0   46912   4144   3140 S   0.0  0.2   0:00.03 dovecot/p+
 10033 dovenull  20   0   47280   4680   3396 S   0.0  0.2   0:00.01 dovecot/i+
 10034 root      20   0   10452   1344    976 S   0.0  0.1   0:00.02 dovecot/l+
 10035 dovenull  20   0   46912   4396   3356 S   0.0  0.2   0:00.03 dovecot/p+
 10036 dovenull  20   0   46780   3360   2512 S   0.0  0.1   0:00.00 dovecot/i+
 10037 root      20   0   24396  12060   1232 S   0.0  0.5   0:00.02 dovecot/c+
 10038 dovecot   20   0   13568   1356   1088 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12828   1424   1196 S   0.0  0.1   0:00.27 /usr/loca+
 10040 root      20   0   12732   1380   1196 S   0.0  0.1   0:00.24 /usr/loca+
 10041 root      20   0   12868   1440   1196 S   0.0  0.1   0:00.26 /usr/loca+
 10042 dovecot   20   0   41056   2600   1864 S   0.0  0.1   0:00.07 dovecot/a+
 10043 root      20   0   53268  11900   2516 S   0.0  0.5   0:00.05 /usr/loca+
 10376 worencom  20   0   38496   3472   2608 S   0.0  0.1   0:00.00 dovecot/i+
 10709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 15265 nobody    20   0  277564  36164   4644 S   0.0  1.5   0:02.98 /usr/sbin+
 23109 nobody    20   0  277636  36044   4536 S   0.0  1.5   0:02.21 /usr/sbin+
 23529 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26685 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 27892 nobody    20   0  277620  35560   4072 S   0.0  1.5   0:01.84 /usr/sbin+
 30928 nobody    20   0  277548  35624   4164 S   0.0  1.5   0:01.43 /usr/sbin+
 30952 nobody    20   0  277536  35856   4384 S   0.0  1.5   0:01.65 /usr/sbin+
 33590 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 33846 nobody    20   0  277928  35880   4264 S   0.0  1.5   0:00.98 /usr/sbin+
 33883 nobody    20   0  277568  35448   4012 S   0.0  1.5   0:01.07 /usr/sbin+
 33885 nobody    20   0  277568  35628   4160 S   0.0  1.5   0:00.98 /usr/sbin+
 34323 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34874 nobody    20   0  277568  35780   4280 S   0.0  1.5   0:00.93 /usr/sbin+
 34975 nobody    20   0  277572  35548   4108 S   0.0  1.5   0:00.88 /usr/sbin+
 36172 nobody    20   0  277544  35444   3968 S   0.0  1.5   0:00.77 /usr/sbin+
 37196 nobody    20   0  277568  35380   3952 S   0.0  1.5   0:00.62 /usr/sbin+
 38277 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38915 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38971 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38985 nobody    20   0  277616  35208   3728 S   0.0  1.5   0:00.50 /usr/sbin+
 40402 nobody    20   0  277568  34912   3476 S   0.0  1.4   0:00.37 /usr/sbin+
 40478 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40592 nobody    20   0  277568  35092   3664 S   0.0  1.4   0:00.32 /usr/sbin+
 42078 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 42166 nobody    20   0  277572  34788   3356 S   0.0  1.4   0:00.07 /usr/sbin+
 42178 nobody    20   0  277568  35104   3676 S   0.0  1.5   0:00.05 /usr/sbin+
 42179 nobody    20   0  277904  35252   3676 S   0.0  1.5   0:00.05 /usr/sbin+
 42457 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 42464 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42465 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42466 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42467 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42468 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42469 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42470 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42471 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42472 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42474 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42475 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42477 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42479 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 42480 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 42482 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 42497 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 42506 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42507 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42508 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 42510 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 42511 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42512 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42513 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42514 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42515 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42517 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 42522 nigeria   20   0  400460   4948   2152 S   0.0  0.2   0:00.00 php-fpm: +
 42524 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 42531 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 42537 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 42540 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 42541 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 42545 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
 46515 root      20   0  181980  29292   1544 S   0.0  1.2   0:08.22 lfd - sle+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
 91172 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      91172  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      10709  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:3]
root      23529  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/0:2]
root      26685  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:3]
root      33590  0.0  0.0      0     0 ?        S    01:57   0:00  \_ [kworker/u200:1]
root      34323  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/0:0]
root      38277  0.0  0.0      0     0 ?        S    02:03   0:00  \_ [kworker/1:1]
root      38915  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/1:2]
root      38971  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/0:1]
root      40478  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44388  3308 ?        Ss   Nov14   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  3168 ?        Ss   Nov14   0:14 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   352 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6764 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   412 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1196 ?        Ss   Nov14   0:06 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240   840 ?        Ssl  Nov14   0:03 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58728  1384 ?        Ss   Nov14   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1876 ?        Ssl  Nov14   0:21 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root      42464  0.0  0.0 183048  2144 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42479  0.0  0.0 113284  1208 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      42480  0.0  0.0 108052   360 ?        S    02:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      42482  0.0  0.0 113288  1520 ?        S    02:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      42547  0.0  0.0 153840  2092 ?        R    02:09   0:00  |               \_ ps auxf
root      42465  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42515  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      42466  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42507  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      42467  0.0  0.0 183048  2148 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42513  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      42468  0.0  0.0 183048  2144 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42512  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      42469  0.0  0.0 183048  2144 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42511  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      42470  0.0  0.0 183048  2144 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42506  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      42471  0.0  0.0 183048  2140 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42510  0.0  0.0  20164   812 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      42472  0.0  0.0 183048  2140 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42514  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      42474  0.0  0.0 183048  2136 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42497  0.0  0.0 113284  1208 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      42500  7.0  0.6 169868 16844 ?        S    02:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      42545  0.0  0.0 113496  1420 ?        S    02:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      42546  0.0  0.4 239872 11864 ?        R    02:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      42475  0.0  0.0 183048  2140 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42517  0.0  0.0  20164   968 ?        Ss   02:09   0:00  |   \_ jailshell (pactpay) [42531] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42531  0.0  0.0  20164   264 ?        S    02:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42534  0.0  0.7 480124 17312 ?        S    02:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      42477  0.0  0.0 183048  2140 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      42508  0.0  0.0  20164   960 ?        Ss   02:09   0:00      \_ jailshell (nigeria) [42524] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42524  0.0  0.0  20164   256 ?        S    02:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42532  0.0  0.6 404052 16136 ?        S    02:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    28 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3952 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root      42078  0.0  0.1 111304  4264 ?        Ss   02:08   0:00  \_ sshd: [accepted]
root      42540  0.0  0.1 111304  4268 ?        Ss   02:09   0:00  \_ sshd: [accepted]
root      42541  0.0  0.1 111304  4268 ?        Ss   02:09   0:00  \_ sshd: [accepted]
root        914  0.0  0.3 1350088 8452 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1216 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46912  4144 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47280  4680 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1344 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  4396 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  46780  3360 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.4  24396 12060 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1356 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41056  2600 ?        S    01:26   0:00  \_ dovecot/auth
worencom  10376  0.0  0.1  38496  3472 ?        S    01:26   0:00  \_ dovecot/imap
root        918  0.0  0.2 261424  6736 ?        Ss   Nov14   0:07 cpsrvd (SSL) - waiting for connections                   
root      42457  0.0  0.0      0     0 ?        Z    02:08   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  2.8 1763124 67808 ?       Ssl  Nov14   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.1 298320  3668 ?        Ssl  Nov14   0:07 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   448 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   472 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.6 1054792 40184 ?       Ssl  Nov14   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   576 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 36944 ?       SLsl Nov14   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3716 ?        Ss   Nov14   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788  1000 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2664 ?        Ss   Nov14   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   42522  0.0  0.2 400460  4948 ?        S    02:09   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 13952 ?        Ssl  Nov14   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   968 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11488 ?        Ss   Nov14   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  4.1 270332 100456 ?       S    Nov14   0:04  \_ spamd child
root       8136  0.0  1.3 249228 32540 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.1 387556  4136 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.0 410480 25228 ?        Ss   Nov14   0:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4168 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.4 209336 10368 ?        Ss   Nov14   0:02 tailwatchd
root       1256  0.0  0.2 183900  6692 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1396 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.1 1458868 268772 ?      Sl   Nov14   5:22 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.2 267052 31184 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12828  1424 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1380 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12868  1440 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 11900 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    15265  0.1  1.4 277564 36164 ?        S    01:33   0:02  \_ /usr/sbin/httpd -k start
nobody    23109  0.1  1.4 277636 36044 ?        S    01:43   0:02  \_ /usr/sbin/httpd -k start
nobody    27892  0.1  1.4 277620 35560 ?        S    01:49   0:01  \_ /usr/sbin/httpd -k start
nobody    30928  0.1  1.4 277548 35624 ?        S    01:53   0:01  \_ /usr/sbin/httpd -k start
nobody    30952  0.1  1.4 277536 35856 ?        S    01:53   0:01  \_ /usr/sbin/httpd -k start
nobody    33846  0.1  1.4 277928 35880 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    33883  0.1  1.4 277568 35448 ?        S    01:57   0:01  \_ /usr/sbin/httpd -k start
nobody    33885  0.1  1.4 277568 35628 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    34874  0.1  1.4 277568 35780 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    34975  0.1  1.4 277572 35548 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    36172  0.1  1.4 277544 35444 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    37196  0.1  1.4 277568 35380 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    38985  0.1  1.4 277616 35208 ?        S    02:04   0:00  \_ /usr/sbin/httpd -k start
nobody    40402  0.2  1.4 277568 34912 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    40592  0.1  1.4 277568 35092 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    42166  0.2  1.4 277572 34788 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    42178  0.1  1.4 277568 35104 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    42179  0.1  1.4 277904 35252 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 181980 29292 ?        Ss   00:00   0:08 lfd - sleeping
## mysql stats
Uptime: 26020  Threads: 3  Questions: 1982008  Slow queries: 0  Opens: 7576  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.172
*************************** 1. row ***************************
     Id: 27068
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 27069
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 27071
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.46 TIME_WAIT
      1 114.119.140.113 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.208.42.16 TIME_WAIT
      1 34.217.131.250 TIME_WAIT
      1 44.243.164.115 TIME_WAIT
      1 44.248.35.126 TIME_WAIT
      1 52.167.144.20 TIME_WAIT
      1 57.141.0.25 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.36 TIME_WAIT
      1 91.196.152.16 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.155.140.157 TIME_WAIT
      2 49.51.253.26 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 02:09:02 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 7 hours 13 minutes 36 seconds
   Server load: 0.31 0.20 0.23
   Total accesses: 135421 - Total Traffic: 3.2 GB - Total Duration: 73356877
   CPU Usage: u12.81 s7.62 cu1724.1 cs1415.02 - 12.1% CPU load
   5.21 requests/sec - 129.5 kB/second - 24.9 kB/request - 541.695 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_K___.KK_C_WKKK_W_......K.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol            VHost                                        Request
   0-2  33846 0/254/6870  _ 4.07  1     407 3576973 0.0   4.19  157.20 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80  GET /?p=756366156 HTTP/1.1
   1-2  27892 11/470/6692 K 10.57 2     258 3450865 332.5 7.58  157.21 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3184815514 HTTP/1.1
   2-2  34874 0/255/6506  _ 4.27  1     370 3569751 0.0   3.86  162.91 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3996620423 HTTP/1.1
   3-2  30928 0/346/6748  _ 5.82  1     1   3430323 0.0   7.10  158.14 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80      GET / HTTP/1.1
   4-2  34975 0/164/6483  _ 4.01  1     1   3427829 0.0   3.90  167.89 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80      GET / HTTP/1.1
   5-2  -     0/0/5613    . 0.00  17    0   3256326 0.0   0.00  144.10 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   6-2  36172 5/132/6221  K 3.53  0     323 3415900 150.1 3.35  151.95 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3535590243 HTTP/1.1
   7-2  15265 5/540/5988  K 13.49 3     306 3254230 150.7 13.45 145.56 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80  GET /?p=4009751651 HTTP/1.1
   8-2  40402 0/58/6029   _ 1.64  0     289 3240692 0.0   1.65  148.40 66.249.64.74  http/1.1 schoolplus.cloudware.ng:80  GET /?p=508375834 HTTP/1.1
   9-2  30952 1/281/5550  C 7.26  5     162 2936420 7.4   7.41  133.46 180.60.30.5   http/1.1 schoolplus.cloudware.ng:443 GET /?p=1044415110 HTTP/1.1
   10-2 37196 0/117/5504  _ 2.64  2     349 2852604 0.0   2.97  128.45 66.249.70.34  http/1.1 wptraining.cloudware.ng:80  GET /?q=671775478 HTTP/1.1
   11-2 33883 0/181/5600  W 4.97  0     0   3099457 0.0   4.65  146.59 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   12-2 42166 1/13/5199   K 0.30  1     267 2968367 29.3  0.36  133.01 66.249.70.37  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1506083227 HTTP/1.1
   13-2 38985 3/88/5907   K 2.11  3     327 3094773 90.1  2.25  136.30 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80  GET /?p=874620957 HTTP/1.1
   14-2 33885 8/172/5247  K 4.31  0     314 2732012 240.4 4.42  118.80 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80  GET /?p=456225885 HTTP/1.1
   15-2 42178 0/9/5262    _ 0.21  0     27  2837373 0.0   0.22  140.34 44.215.235.20 http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php/images/images/polling_unit_categ
   16-2 40592 2/54/4867   W 1.42  0     0   2498251 59.6  1.47  107.04 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80  GET /?p=81538689 HTTP/1.1
   17-2 42179 0/10/5077   _ 0.23  0     0   2714974 0.0   0.27  122.55 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   18-2 -     0/0/3263    . 0.00  1404  0   1926085 0.0   0.00  76.47  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-2 -     0/0/3338    . 0.00  651   0   1966001 0.0   0.00  90.14  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   20-2 -     0/0/2943    . 0.00  1524  0   1731894 0.0   0.00  74.14  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   21-2 -     0/0/2453    . 0.00  1525  0   1438742 0.0   0.00  63.50  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-2 -     0/0/2286    . 0.00  655   0   1504902 0.0   0.00  62.14  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-2 -     0/0/1503    . 0.00  1405  0   901084  0.0   0.00  34.27  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-2 23109 2/442/1778  K 10.70 1     279 1003208 59.3  9.79  41.97  66.249.70.197 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3969038509 HTTP/1.1
   25-2 -     0/0/860     . 0.00  1493  0   499680  0.0   0.00  19.97  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-2 -     0/0/1416    . 0.00  565   0   838587  0.0   0.00  34.14  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-2 -     0/0/526     . 0.00  1528  0   370995  0.0   0.00  13.50  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-2 -     0/0/126     . 0.00  1530  0   118122  0.0   0.00  1.93   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-2 -     0/0/717     . 0.00  673   0   391631  0.0   0.00  21.37  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-2 -     0/0/654     . 0.00  154   0   333736  0.0   0.00  16.81  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-2 -     0/0/527     . 0.00  1090  0   316495  0.0   0.00  15.39  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-2 -     0/0/611     . 0.00  656   0   340766  0.0   0.00  16.92  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-1 -     0/0/88      . 0.00  2608  0   55802   0.0   0.00  2.25   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-1 -     0/0/312     . 0.00  2609  0   173940  0.0   0.00  8.57   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-1 -     0/0/106     . 0.00  2568  274 68641   0.0   0.00  2.42   66.249.70.199 http/1.1 schoolplus.cloudware.ng:80  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285191
   36-1 -     0/0/45      . 0.00  2568  312 34406   0.0   0.00  0.88   66.249.70.195 http/1.1 schoolplus.cloudware.ng:80  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1858531
   37-1 -     0/0/140     . 0.00  2628  0   94554   0.0   0.00  4.26   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-1 -     0/0/520     . 0.00  2598  0   298993  0.0   0.00  13.13  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-1 -     0/0/189     . 0.00  2611  0   82924   0.0   0.00  2.20   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-1 -     0/0/390     . 0.00  2595  0   215765  0.0   0.00  10.21  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-1 -     0/0/504     . 0.00  2606  0   232467  0.0   0.00  10.53  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-1 -     0/0/51      . 0.00  2605  0   32716   0.0   0.00  0.81   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-1 -     0/0/146     . 0.00  2627  0   86203   0.0   0.00  3.56   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-1 -     0/0/526     . 0.00  2568  344 290992  0.0   0.00  16.18  66.249.70.200 http/1.1 schoolplus.cloudware.ng:80  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2359430
   45-1 -     0/0/172     . 0.00  2626  0   111014  0.0   0.00  4.74   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-1 -     0/0/732     . 0.00  2610  0   247872  0.0   0.00  10.12  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/5       . 0.00  4468  0   13937   0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/8       . 0.00  4494  0   4411    0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/18      . 0.00  4450  0   9848    0.0   0.00  0.38   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/299     . 0.00  4492  0   158547  0.0   0.00  8.15   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/347     . 0.00  4436  0   161044  0.0   0.00  6.97   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/29      . 0.00  4424  0   15555   0.0   0.00  0.67   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/12      . 0.00  4446  0   18089   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/10      . 0.00  4470  0   4405    0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00  4466  0   998     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/2       . 0.00  4496  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00  4474  0   1939    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/6       . 0.00  4495  0   3734    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -     0/0/1053    . 0.00  4469  0   467065  0.0   0.00  23.46  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/4       . 0.00  4467  0   13426   0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/13      . 0.00  4491  0   7394    0.0   0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/9       . 0.00  4493  0   7635    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/5       . 0.00  4471  0   739     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/42      . 0.00  4434  0   22252   0.0   0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/123     . 0.00  4194  0   72436   0.0   0.00  3.21   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/4       . 0.00  4490  0   160     0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  4489  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00  4445  0   810     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/84      . 0.00  4452  0   48852   0.0   0.00  2.20   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/15      . 0.00  4457  0   7942    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/3       . 0.00  4460  0   864     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/32      . 0.00  4463  0   18076   0.0   0.00  0.70   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/42      . 0.00  4453  0   23305   0.0   0.00  1.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00  4488  0   4058    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/4       . 0.00  4449  0   49      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/934     . 0.00  4487  0   199287  0.0   0.00  9.09   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/2       . 0.00  4486  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/3       . 0.00  4485  0   4640    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00  20855 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 249
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 37 seconds, (range: 0...151)
   index usage: 4%, cache usage: 6%
   total entries stored since starting: 2889
   total entries replaced since starting: 0
   total entries expired since starting: 2639
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 35 miss
   total removes since starting: 1 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit