403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.03.06.txt
 ## swap threshold exceeded
## server overview
2025-11-15.03.06 load[0] mem[56/77] mysql[1/12] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1161         210          60         991         956
Swap:          1999        1664         335
 03:06:02 up  8:10,  0 users,  load average: 0.92, 0.48, 0.37
## system overview
top - 03:06:02 up  8:10,  0 users,  load average: 0.92, 0.48, 0.37
Tasks: 200 total,   4 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.8 us, 14.7 sy,  0.0 ni, 23.5 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   221180 free,  1183968 used,  1015152 buff/cache
KiB Swap:  2047996 total,   343952 free,  1704044 used.   985084 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 269932   4168 S 125.0 11.2   6:11.43 /usr/sbin+
 87923 nigeria   20   0  404052  16140  10384 R  18.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44388   3320   1492 S   0.0  0.1   0:40.39 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.88 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.44 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:30.28 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.34 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.92 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.41 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.63 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.90 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:03.24 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.57 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   4552   4288 S   0.0  0.2   0:16.59 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    508    380 S   0.0  0.0   0:02.60 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6592   1572 S   0.0  0.3   0:00.39 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.04 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.02 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.66 /usr/sbin+
   519 root      20   0   52852    372    272 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1200    824 S   0.0  0.0   0:06.87 /usr/lib/+
   521 polkitd   20   0  612240   1068    676 S   0.0  0.0   0:04.07 /usr/lib/+
   522 dbus      20   0   58728   1384    636 S   0.0  0.1   0:15.54 /usr/bin/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1872    832 S   0.0  0.1   0:24.08 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.86 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3952    940 S   0.0  0.2   0:00.86 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:03.27 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.65 /usr/sbin+
   914 root      20   0 1350088   8448     44 S   0.0  0.3   0:24.60 /usr/bin/+
   916 root      20   0   51656   1200    808 S   0.0  0.0   0:00.38 /usr/sbin+
   918 root      20   0  261424   6760   1756 S   0.0  0.3   0:07.97 cpsrvd (S+
   922 root      20   0 1763124  94756   1332 S   0.0  3.9   0:16.03 /usr/loca+
   923 root      20   0  306512   5232   4328 S   0.0  0.2   0:08.02 /usr/sbin+
   924 root      20   0  396248    404    316 S   0.0  0.0   0:00.76 php-fpm: +
   933 root      20   0  389508    440    352 S   0.0  0.0   0:00.80 php-fpm: +
   935 named     20   0 1054792  42264   2180 S   0.0  1.7   0:16.80 /usr/sbin+
   937 root      20   0  388892    564    468 S   0.0  0.0   0:00.86 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  36828   5996 S   0.0  1.5   0:16.14 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.25 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.62 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.65 /usr/bin/+
   954 cpanelc+  20   0   10576   3708   2352 S   0.0  0.2   0:24.15 /usr/loca+
   958 root      20   0  439788    892    792 S   0.0  0.0   0:00.85 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2664    656 S   0.0  0.1   0:04.09 php-fpm: +
   971 systuser  20   0  114016  14036   2744 S   0.0  0.6   0:06.94 /usr/loca+
   972 root      20   0  572372    968    428 S   0.0  0.0   0:02.55 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.09 dovecot/a+
  1133 root      20   0  248092  11468    744 S   0.0  0.5   0:06.26 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.14 SonarPush+
  1173 wp-tool+  20   0  387556   4076   1792 S   0.0  0.2   0:00.31 /usr/bin/+
  1174 wp-tool+  20   0  410480  23360   2036 S   0.0  1.0   0:24.83 /usr/bin/+
  1253 root      20   0  167452   4048   2676 S   0.0  0.2   0:00.53 dnsadmin +
  1254 root      20   0  209336  10368   2328 S   0.0  0.4   0:03.22 tailwatchd
  1256 root      20   0  183900   6696   3460 S   0.0  0.3   0:02.99 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.82 php-fpm: +
  1715 root      38  18  130416   1392    712 S   0.0  0.1   0:00.07 cpanellog+
  1942 root      20   0  267052  30964   5472 S   0.0  1.3   0:02.99 /usr/sbin+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.55 [kworker]
  8135 root      20   0  316256 147108   3484 S   0.0  6.1   0:05.25 spamd chi+
  8136 root      20   0  249228  32524    736 S   0.0  1.3   0:00.05 spamd chi+
 10032 dovenull  20   0   46912   3928   2900 S   0.0  0.2   0:00.08 dovecot/p+
 10033 dovenull  20   0   47424   4484   3156 S   0.0  0.2   0:00.05 dovecot/i+
 10034 root      20   0   10452   1224    856 S   0.0  0.1   0:00.06 dovecot/l+
 10035 dovenull  20   0   46912   3924   2884 S   0.0  0.2   0:00.08 dovecot/p+
 10036 dovenull  20   0   47056   4424   3276 S   0.0  0.2   0:00.01 dovecot/i+
 10037 root      20   0   24564  12092   1100 S   0.0  0.5   0:00.04 dovecot/c+
 10038 dovecot   20   0   13568   1232    964 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12792   1408   1180 S   0.0  0.1   0:00.65 /usr/loca+
 10040 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.58 /usr/loca+
 10041 root      20   0   12812   1424   1180 S   0.0  0.1   0:00.63 /usr/loca+
 10042 dovecot   20   0   41188   2476   1676 S   0.0  0.1   0:00.19 dovecot/a+
 10043 root      20   0   53268  11680   2296 S   0.0  0.5   0:00.05 /usr/loca+
 33590 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 46515 root      20   0  182396  29688   1544 S   0.0  1.2   0:11.65 lfd - sle+
 49275 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 60582 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62296 nobody    20   0  277756  36484   4788 S   0.0  1.5   0:03.06 /usr/sbin+
 65570 nobody    20   0  277612  36136   4552 S   0.0  1.5   0:02.40 /usr/sbin+
 66349 nobody    20   0  277928  36408   4660 S   0.0  1.5   0:02.40 /usr/sbin+
 68158 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 68891 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 72228 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73985 nobody    20   0  277612  36048   4560 S   0.0  1.5   0:01.58 /usr/sbin+
 76062 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77773 nobody    20   0  277920  35676   4068 S   0.0  1.5   0:01.30 /usr/sbin+
 77785 nobody    20   0  277968  35784   4136 S   0.0  1.5   0:01.01 /usr/sbin+
 77786 nobody    20   0  277588  35780   4324 S   0.0  1.5   0:01.00 /usr/sbin+
 77788 nobody    20   0  277928  35864   4256 S   0.0  1.5   0:00.99 /usr/sbin+
 78252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80770 nobody    20   0  277568  35588   4152 S   0.0  1.5   0:00.79 /usr/sbin+
 80785 nobody    20   0  277896  35840   4180 S   0.0  1.5   0:00.75 /usr/sbin+
 80786 nobody    20   0  277568  35384   3952 S   0.0  1.5   0:00.87 /usr/sbin+
 83680 nobody    20   0  277588  35472   4016 S   0.0  1.5   0:00.48 /usr/sbin+
 83913 root      20   0  123364    760    532 S   0.0  0.0   0:00.00 /usr/sbin+
 83920 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84540 nobody    20   0  277568  35220   3788 S   0.0  1.5   0:00.41 /usr/sbin+
 84878 nobody    20   0  277556  35364   3940 S   0.0  1.5   0:00.31 /usr/sbin+
 86078 nobody    20   0  277568  35096   3664 S   0.0  1.5   0:00.25 /usr/sbin+
 86479 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86706 worencom  20   0   29148   2916   2372 S   0.0  0.1   0:00.00 dovecot/q+
 86748 worencom  20   0   61648   6132   4448 S   0.0  0.3   0:00.11 dovecot/l+
 87284 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 87499 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 87504 nobody    20   0  277896  35028   3444 S   0.0  1.4   0:00.08 /usr/sbin+
 87698 mailnull  20   0   91200   4272   1160 S   0.0  0.2   0:00.00 /usr/sbin+
 87781 nobody    20   0  277896  34992   3416 S   0.0  1.4   0:00.03 /usr/sbin+
 87821 nobody    20   0  277356  33852   2776 S   0.0  1.4   0:00.00 /usr/sbin+
 87846 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 87851 nigeria   20   0  400460   5200   2392 S   0.0  0.2   0:00.00 php-fpm: +
 87860 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87861 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87862 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87863 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87864 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87866 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87867 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87868 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87869 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87870 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87871 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87872 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87874 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87877 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 87878 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 87879 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 87895 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87896 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87899 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87900 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87901 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 87902 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 87903 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87904 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87905 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 87907 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87908 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87909 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87919 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87920 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87922 pactpay   20   0  480124  17684  11892 R   0.0  0.7   0:00.01 /opt/cpan+
 87935 cloudw    20   0  366220  16592  10892 S   0.0  0.7   0:00.00 /opt/cpan+
 87936 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 87940 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87941 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 87942 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      33590  0.0  0.0      0     0 ?        S    01:57   0:00  \_ [kworker/u200:1]
root      49275  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:2]
root      60582  0.0  0.0      0     0 ?        S    02:33   0:00  \_ [kworker/0:1]
root      68158  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/1:0]
root      68891  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/1:4]
root      72228  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/0:4]
root      76062  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/0:0]
root      78252  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:0]
root      83920  0.0  0.0      0     0 ?        S    03:01   0:00  \_ [kworker/1:3]
root      86479  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44388  3320 ?        Ss   Nov14   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4552 ?        Ss   Nov14   0:16 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   508 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6592 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   372 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1200 ?        Ss   Nov14   0:06 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240  1068 ?        Ssl  Nov14   0:04 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58728  1384 ?        Ss   Nov14   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1872 ?        Ssl  Nov14   0:24 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root      87860  0.0  0.0 183048  2144 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87877  0.0  0.0 113284  1212 ?        Ss   03:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      87878  0.0  0.0 108052   356 ?        S    03:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      87879  0.0  0.0 113288  1520 ?        S    03:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      87943  0.0  0.0 153840  2096 ?        R    03:06   0:00  |               \_ ps auxf
root      87861  0.0  0.0 183048  2148 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87895  0.0  0.0  20164   804 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      87862  0.0  0.0 183048  2148 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87901  0.0  0.0  20164   984 ?        Ss   03:06   0:00  |   \_ jailshell (cloudsms) [87940] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  87940  0.0  0.0  20164   260 ?        S    03:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  87941  0.0  0.0 113284  1212 ?        S    03:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  87942  0.0  0.0  51744  2156 ?        R    03:06   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php
root      87863  0.0  0.0 183048  2148 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87907  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      87864  0.0  0.0 183048  2148 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87904  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      87866  0.0  0.0 183048  2144 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87903  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      87867  0.0  0.0 183048  2140 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87909  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      87868  0.0  0.0 183048  2140 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87900  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      87869  0.0  0.0 183048  2140 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87896  0.0  0.0  20164   804 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      87870  0.0  0.0 183048  2140 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87899  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      87871  0.0  0.0 183048  2140 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87908  0.0  0.0  20164   808 ?        Ss   03:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      87872  0.0  0.0 183048  2140 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87905  0.0  0.0  20164   964 ?        Ss   03:06   0:00  |   \_ jailshell (pactpay) [87919] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87919  0.0  0.0  20164   260 ?        S    03:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87922  0.0  0.7 480124 17684 ?        S    03:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      87874  0.0  0.0 183048  2140 ?        S    03:06   0:00  \_ /usr/sbin/CROND -n
root      87902  0.0  0.0  20164   964 ?        Ss   03:06   0:00      \_ jailshell (nigeria) [87920] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87920  0.0  0.0  20164   260 ?        S    03:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87923  0.0  0.6 404052 16140 ?        S    03:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    20 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3952 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  87698  0.0  0.1  91200  4272 ?        S    03:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root      87284  0.0  0.1 111304  4268 ?        Ss   03:05   0:00  \_ sshd: [accepted]
root      87499  0.0  0.1 111304  4268 ?        Ss   03:05   0:00  \_ sshd: [accepted]
root        914  0.0  0.3 1350088 8448 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1200 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46912  3928 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47424  4484 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1224 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  3924 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  47056  4424 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.4  24564 12092 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1232 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41188  2476 ?        S    01:26   0:00  \_ dovecot/auth
worencom  86706  0.0  0.1  29148  2916 ?        S    03:04   0:00  \_ dovecot/quota-status -p postfix
worencom  86748  0.1  0.2  61648  6132 ?        S    03:04   0:00  \_ dovecot/lmtp
root        918  0.0  0.2 261424  6760 ?        Ss   Nov14   0:07 cpsrvd (SSL) - waiting for connections                   
root      87846  0.0  0.0      0     0 ?        Z    03:05   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  3.9 1763124 94756 ?       Ssl  Nov14   0:16 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.2 306512  5232 ?        Ssl  Nov14   0:08 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   404 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   440 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.7 1054792 42264 ?       Ssl  Nov14   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   564 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 36828 ?       SLsl Nov14   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3708 ?        Ss   Nov14   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788   892 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2664 ?        Ss   Nov14   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   87851  0.0  0.2 400460  5200 ?        S    03:06   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 14036 ?        Ssl  Nov14   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   968 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11468 ?        Ss   Nov14   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  6.0 316256 147108 ?       S    Nov14   0:05  \_ spamd child
root       8136  0.0  1.3 249228 32524 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.1 387556  4076 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.9 410480 23360 ?        Ss   Nov14   0:24 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4048 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.4 209336 10368 ?        Ss   Nov14   0:03 tailwatchd
root       1256  0.0  0.2 183900  6696 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1392 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.1 1458868 269932 ?      Sl   Nov14   6:11 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.2 267052 30964 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12792  1408 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1364 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12812  1424 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 11680 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    62296  0.1  1.5 277756 36484 ?        S    02:35   0:03  \_ /usr/sbin/httpd -k start
nobody    65570  0.1  1.4 277612 36136 ?        S    02:39   0:02  \_ /usr/sbin/httpd -k start
nobody    66349  0.1  1.5 277928 36408 ?        S    02:40   0:02  \_ /usr/sbin/httpd -k start
nobody    73985  0.1  1.4 277612 36048 ?        S    02:48   0:01  \_ /usr/sbin/httpd -k start
nobody    77773  0.1  1.4 277920 35676 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
cloudw    87935  0.0  0.6 366220 16592 ?        S    03:06   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    77785  0.1  1.4 277968 35784 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    77786  0.1  1.4 277588 35780 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    77788  0.1  1.4 277928 35864 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    80770  0.1  1.4 277568 35588 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    80785  0.1  1.4 277896 35840 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    80786  0.1  1.4 277568 35384 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    83680  0.1  1.4 277588 35472 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    84540  0.1  1.4 277568 35220 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84878  0.1  1.4 277556 35364 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody    86078  0.1  1.4 277568 35096 ?        S    03:03   0:00  \_ /usr/sbin/httpd -k start
nobody    87504  0.1  1.4 277896 35028 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    87781  0.3  1.4 277896 34992 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    87821  0.0  1.3 277356 33852 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 182396 29688 ?        Ss   00:00   0:11 lfd - sleeping
root      83913  0.0  0.0 123364   760 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 29440  Threads: 3  Questions: 2266106  Slow queries: 0  Opens: 8406  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.973
*************************** 1. row ***************************
     Id: 31431
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 31432
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 31438
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 114.119.145.216 TIME_WAIT
      1 117.41.244.211 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 209.126.105.207 TIME_WAIT
      1 3.86.37.23 TIME_WAIT
      1 52.167.144.206 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 178.20.45.159 TIME_WAIT
      4 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 03:06:02 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 8 hours 10 minutes 36 seconds
   Server load: 0.92 0.48 0.37
   Total accesses: 152832 - Total Traffic: 3.6 GB - Total Duration: 82935465
   CPU Usage: u13.14 s7.56 cu1952.04 cs1598.14 - 12.1% CPU load
   5.19 requests/sec - 129.7 kB/second - 25.0 kB/request - 542.658 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKKWKK__K_._..KKK.RK.._K........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-2  87781 4/5/7808   K 0.09  1     304 4085349 121.3 0.13  179.25 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1050325366 HTTP/1.1
   1-2  84540 6/75/7591  K 1.80  1     408 3956554 181.0 1.93  179.29 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2933574950 HTTP/1.1
   2-2  87504 8/14/7326  K 0.29  0     322 4039048 245.1 0.35  183.81 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=499305680 HTTP/1.1
   3-2  80770 0/139/7658 W 3.50  0     0   3945484 0.0   3.60  179.99 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-2  80785 1/136/7157 K 3.22  0     25  3807067 12.3  3.65  185.53 207.46.13.168 http/1.1 cloudsms.com.ng:443        GET /contact_us.php/recharge/SendToAll/recharge/draft.php HTTP/
   5-2  65570 5/492/6589 K 10.06 4     352 3638571 154.5 10.44 161.98 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3586429157 HTTP/1.1
   6-2  80786 0/143/7032 _ 3.72  1     348 3859897 0.0   3.88  171.79 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3027582581 HTTP/1.1
   7-2  86078 0/45/6727  _ 1.05  0     412 3661656 0.0   1.31  163.61 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=1461603013 HTTP/1.1
   8-2  87821 1/1/6943   K 0.00  1     731 3715435 188.9 0.18  169.48 102.89.75.108 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/uploads/2025/11/MINISTRY-OF-HEALTH-GRIEVANCE-RE
   9-2  84878 0/58/6186  _ 1.37  0     0   3295166 0.0   1.45  149.83 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-2 -     0/0/6267   . 0.00  203   0   3290157 0.0   0.00  158.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-2 66349 0/463/6468 _ 10.27 1     360 3590658 0.0   10.98 166.88 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=668234
   12-2 -     0/0/5575   . 0.00  311   0   3185335 0.0   0.00  142.40 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-2 -     0/0/6417   . 0.00  144   0   3375265 0.0   0.00  148.28 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-2 77773 8/222/6060 K 5.72  0     316 3191851 246.8 6.29  139.15 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4146798501 HTTP/1.1
   15-2 83680 3/84/5721  K 2.29  4     358 3103311 91.7  2.17  154.74 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1692677127 HTTP/1.1
   16-2 73985 2/272/5457 K 7.19  3     1   2851775 5.5   7.54  121.83 102.89.75.108 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/uploads/2025/11/MINISTRY-OF-HEALTH-GRIEVANCE-RE
   17-2 -     0/0/5333   . 0.00  14    0   2845740 0.0   0.00  128.13 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 77785 0/196/3754 R 4.83  12    255 2184359 0.0   4.40  88.61  102.89.75.108 http/1.1
   19-2 77786 1/184/4145 K 4.57  1     0   2415595 3.7   4.44  108.33 102.89.75.108 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/uploads/2025/11/MINISTRY-OF-HEALTH-GRIEVANCE-RE
   20-2 -     0/0/3706   . 0.00  354   0   2167033 0.0   0.00  93.82  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 -     0/0/2697   . 0.00  533   0   1571204 0.0   0.00  69.44  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 77788 0/174/2688 _ 4.38  0     336 1723213 0.0   4.48  72.33  66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3222253536 HTTP/1.1
   23-2 62296 9/541/2164 K 13.77 0     301 1281132 273.0 14.43 51.13  66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3287050453 HTTP/1.1
   24-2 -     0/0/1819   . 0.00  1837  0   1023693 0.0   0.00  42.93  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/999    . 0.00  2821  0   579221  0.0   0.00  23.60  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/1583   . 0.00  2728  0   934675  0.0   0.00  39.19  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/527    . 0.00  3274  0   370996  0.0   0.00  13.50  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/149    . 0.00  3187  0   132531  0.0   0.00  2.59   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/719    . 0.00  3266  0   391650  0.0   0.00  21.38  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/976    . 0.00  2165  0   524298  0.0   0.00  25.29  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/923    . 0.00  1913  0   538947  0.0   0.00  25.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/611    . 0.00  4076  0   340766  0.0   0.00  16.92  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-1 -     0/0/88     . 0.00  6028  0   55802   0.0   0.00  2.25   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1 -     0/0/312    . 0.00  6029  0   173940  0.0   0.00  8.57   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/106    . 0.00  5988  274 68641   0.0   0.00  2.42   66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285191
   36-1 -     0/0/45     . 0.00  5988  312 34406   0.0   0.00  0.88   66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1858531
   37-1 -     0/0/140    . 0.00  6048  0   94554   0.0   0.00  4.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1 -     0/0/520    . 0.00  6018  0   298993  0.0   0.00  13.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/189    . 0.00  6031  0   82924   0.0   0.00  2.20   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 -     0/0/390    . 0.00  6015  0   215765  0.0   0.00  10.21  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/504    . 0.00  6026  0   232467  0.0   0.00  10.53  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/51     . 0.00  6025  0   32716   0.0   0.00  0.81   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/146    . 0.00  6047  0   86203   0.0   0.00  3.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/526    . 0.00  5988  344 290992  0.0   0.00  16.18  66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2359430
   45-1 -     0/0/172    . 0.00  6046  0   111014  0.0   0.00  4.74   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/732    . 0.00  6030  0   247872  0.0   0.00  10.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/5      . 0.00  7888  0   13937   0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00  7914  0   4411    0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/18     . 0.00  7870  0   9848    0.0   0.00  0.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/299    . 0.00  7912  0   158547  0.0   0.00  8.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/347    . 0.00  7856  0   161044  0.0   0.00  6.97   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/29     . 0.00  7844  0   15555   0.0   0.00  0.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/12     . 0.00  7866  0   18089   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/10     . 0.00  7890  0   4405    0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4      . 0.00  7886  0   998     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00  7916  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00  7894  0   1939    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/6      . 0.00  7915  0   3734    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/1053   . 0.00  7889  0   467065  0.0   0.00  23.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/4      . 0.00  7887  0   13426   0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/13     . 0.00  7911  0   7394    0.0   0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/9      . 0.00  7913  0   7635    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/5      . 0.00  7891  0   739     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/42     . 0.00  7854  0   22252   0.0   0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/123    . 0.00  7614  0   72436   0.0   0.00  3.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/4      . 0.00  7910  0   160     0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  7909  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  7865  0   810     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/84     . 0.00  7872  0   48852   0.0   0.00  2.20   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/15     . 0.00  7877  0   7942    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/3      . 0.00  7880  0   864     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/32     . 0.00  7883  0   18076   0.0   0.00  0.70   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/42     . 0.00  7873  0   23305   0.0   0.00  1.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9      . 0.00  7908  0   4058    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/4      . 0.00  7869  0   49      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/934    . 0.00  7907  0   199287  0.0   0.00  9.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/2      . 0.00  7906  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/3      . 0.00  7905  0   4640    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  24275 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 346
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 29 seconds, (range: 2...162)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 6982
   total entries replaced since starting: 0
   total entries expired since starting: 6633
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 60 miss
   total removes since starting: 6 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit