403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.03.18.txt
 ## swap threshold exceeded
## server overview
2025-11-15.03.18 load[0] mem[58/77] mysql[1/25] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1230         227          54         906         894
Swap:          1999        1663         336
 03:18:01 up  8:22,  0 users,  load average: 0.21, 0.28, 0.32
## system overview
top - 03:18:02 up  8:22,  0 users,  load average: 0.21, 0.28, 0.32
Tasks: 206 total,   5 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 43.8 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   222036 free,  1270176 used,   928088 buff/cache
KiB Swap:  2047996 total,   344444 free,  1703552 used.   904908 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1462300 325336   4504 S  33.3 13.4   6:23.09 /usr/sbin+
     1 root      20   0   44392   3320   1492 R  13.3  0.1   0:41.29 /usr/lib/+
   358 root      20   0   40244   6176   5912 S   6.7  0.3   0:16.99 /usr/lib/+
   521 polkitd   20   0  612240   1068    676 S   6.7  0.0   0:04.16 /usr/lib/+
   522 dbus      20   0   58728   1384    636 S   6.7  0.1   0:15.90 /usr/bin/+
 90849 nobody    20   0  277872  35932   4220 S   6.7  1.5   0:00.66 /usr/sbin+
 97535 pactpay   20   0  479860  16172  10576 S   6.7  0.7   0:00.01 /opt/cpan+
 97541 nigeria   20   0  404052  16144  10384 R   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.91 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.48 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:31.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.37 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.76 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.65 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.93 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:03.28 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.60 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    508    380 S   0.0  0.0   0:02.66 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6592   1572 S   0.0  0.3   0:00.40 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.04 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.02 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.67 /usr/sbin+
   519 root      20   0   52852    332    232 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1200    824 D   0.0  0.0   0:07.03 /usr/lib/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1888    832 S   0.0  0.1   0:24.74 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.88 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3936    924 S   0.0  0.2   0:00.90 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:03.29 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.74 /usr/sbin+
   914 root      20   0 1350088   8448     44 S   0.0  0.3   0:24.61 /usr/bin/+
   916 root      20   0   51656   1200    808 S   0.0  0.0   0:00.39 /usr/sbin+
   918 root      20   0  261424   6756   1740 S   0.0  0.3   0:08.09 cpsrvd (S+
   922 root      20   0 1763124  94624   1216 S   0.0  3.9   0:16.03 /usr/loca+
   923 root      20   0  306512   6676   5808 S   0.0  0.3   0:08.21 /usr/sbin+
   924 root      20   0  396248    404    316 S   0.0  0.0   0:00.78 php-fpm: +
   933 root      20   0  389508    468    380 S   0.0  0.0   0:00.81 php-fpm: +
   935 named     20   0 1054792  42372   2252 S   0.0  1.8   0:17.18 /usr/sbin+
   937 root      20   0  388892    488    392 S   0.0  0.0   0:00.88 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  36716   5924 S   0.0  1.5   0:16.53 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.26 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.63 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.67 /usr/bin/+
   954 cpanelc+  20   0   10576   3708   2352 S   0.0  0.2   0:24.76 /usr/loca+
   958 root      20   0  439788    880    780 S   0.0  0.0   0:00.86 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2660    652 S   0.0  0.1   0:04.20 php-fpm: +
   971 systuser  20   0  114016  14208   2788 S   0.0  0.6   0:07.12 /usr/loca+
   972 root      20   0  572372    968    428 S   0.0  0.0   0:02.61 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.09 dovecot/a+
  1133 root      20   0  248092  11468    744 S   0.0  0.5   0:06.35 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.15 SonarPush+
  1173 wp-tool+  20   0  387556   4072   1788 S   0.0  0.2   0:00.31 /usr/bin/+
  1174 wp-tool+  20   0  410480  23356   2032 S   0.0  1.0   0:25.44 /usr/bin/+
  1253 root      20   0  167452   4044   2672 S   0.0  0.2   0:00.55 dnsadmin +
  1254 root      20   0  209336  10348   2296 S   0.0  0.4   0:03.30 tailwatchd
  1256 root      20   0  262224  24108   6248 S   0.0  1.0   0:03.06 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.83 php-fpm: +
  1715 root      38  18  130416   1396    716 S   0.0  0.1   0:00.08 cpanellog+
  1942 root      20   0  267052  30964   5472 S   0.0  1.3   0:03.08 /usr/sbin+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.56 [kworker]
  8135 root      20   0  316256 146988   3364 S   0.0  6.1   0:05.33 spamd chi+
  8136 root      20   0  249228  32524    736 S   0.0  1.3   0:00.05 spamd chi+
 10032 dovenull  20   0   46912   3928   2900 S   0.0  0.2   0:00.09 dovecot/p+
 10033 dovenull  20   0   47424   4476   3148 S   0.0  0.2   0:00.06 dovecot/i+
 10034 root      20   0   10452   1224    856 S   0.0  0.1   0:00.06 dovecot/l+
 10035 dovenull  20   0   46912   3924   2884 S   0.0  0.2   0:00.08 dovecot/p+
 10036 dovenull  20   0   47056   4396   3248 S   0.0  0.2   0:00.03 dovecot/i+
 10037 root      20   0   24564  12092   1100 S   0.0  0.5   0:00.05 dovecot/c+
 10038 dovecot   20   0   13568   1232    964 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12776   1408   1180 S   0.0  0.1   0:00.74 /usr/loca+
 10040 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.66 /usr/loca+
 10041 root      20   0   12792   1424   1180 S   0.0  0.1   0:00.70 /usr/loca+
 10042 dovecot   20   0   41188   2476   1676 S   0.0  0.1   0:00.22 dovecot/a+
 10043 root      20   0   53268  11680   2296 S   0.0  0.5   0:00.05 /usr/loca+
 33590 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 46515 root      20   0  182496  29772   1544 S   0.0  1.2   0:12.35 lfd - sle+
 49275 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kworker/+
 68158 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 76062 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77785 nobody    20   0  277968  36220   4516 S   0.0  1.5   0:01.82 /usr/sbin+
 78252 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 80786 nobody    20   0  277568  35772   4332 S   0.0  1.5   0:01.85 /usr/sbin+
 83913 root      20   0  123576    752    524 S   0.0  0.0   0:00.00 /usr/sbin+
 86479 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 88687 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 89574 nobody    20   0  277576  35372   3928 S   0.0  1.5   0:00.92 /usr/sbin+
 90748 nobody    20   0  277796  35760   4112 S   0.0  1.5   0:00.77 /usr/sbin+
 90826 nobody    20   0  277652  35460   3940 S   0.0  1.5   0:00.76 /usr/sbin+
 90857 nobody    20   0  277564  35476   4044 S   0.0  1.5   0:00.60 /usr/sbin+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
 91655 nobody    20   0  277680  35800   4156 S   0.0  1.5   0:00.68 /usr/sbin+
 91795 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 92323 nobody    20   0  277568  35412   3980 S   0.0  1.5   0:00.64 /usr/sbin+
 93291 nobody    20   0  277904  35696   4088 S   0.0  1.5   0:00.39 /usr/sbin+
 93735 nobody    20   0  277568  35280   3844 S   0.0  1.5   0:00.48 /usr/sbin+
 94114 root      30  10  113284   1484   1276 S   0.0  0.1   0:00.00 /bin/bash+
 94120 root      30  10  132964   4552   1012 S   0.0  0.2   0:00.00 ConfigSer+
 94131 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 5883
 94409 root      30  10  113284   1500   1256 S   0.0  0.1   0:00.00 bash /etc+
 94410 root      30  10  113644    980    832 S   0.0  0.0   0:00.00 awk -v pr+
 94464 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 293
 94475 nobody    20   0  277544  34980   3572 S   0.0  1.4   0:00.19 /usr/sbin+
 94503 nobody    20   0  277568  35372   3940 S   0.0  1.5   0:00.26 /usr/sbin+
 96221 nobody    20   0  277896  35208   3604 S   0.0  1.5   0:00.18 /usr/sbin+
 96233 nobody    20   0  277568  34640   3208 S   0.0  1.4   0:00.13 /usr/sbin+
 96234 nobody    20   0  277568  35060   3628 S   0.0  1.4   0:00.15 /usr/sbin+
 96271 nobody    20   0  277568  35040   3608 S   0.0  1.4   0:00.18 /usr/sbin+
 96287 nobody    20   0  277900  34976   3404 S   0.0  1.4   0:00.11 /usr/sbin+
 96288 nobody    20   0  277568  35212   3780 S   0.0  1.5   0:00.09 /usr/sbin+
 96585 nobody    20   0  277568  35036   3604 S   0.0  1.4   0:00.14 /usr/sbin+
 96690 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96710 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 97018 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 97161 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 97162 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 97376 mailnull  20   0   91200   4272   1160 S   0.0  0.2   0:00.00 /usr/sbin+
 97451 root      20   0  162436   5824   4336 S   0.0  0.2   0:00.01 sshd: roo+
 97452 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 97461 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 97471 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97472 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97473 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97475 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97476 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97477 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97478 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97479 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97480 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97481 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97482 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97483 root      20   0  183048   2152   1596 S   0.0  0.1   0:00.00 /usr/sbin+
 97485 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97488 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 97489 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 97490 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 97512 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 97514 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97515 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97516 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97517 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97518 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97521 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97522 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97523 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 97524 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97525 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97526 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 97528 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97533 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97537 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97547 pactpay   20   0  400460   3924   1540 S   0.0  0.2   0:00.00 php-fpm: +
 97549 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kthreadd]
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      33590  0.0  0.0      0     0 ?        S    01:57   0:00  \_ [kworker/u200:1]
root      49275  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:2]
root      68158  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/1:0]
root      76062  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/0:0]
root      78252  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:0]
root      86479  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/0:2]
root      88687  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/0:3]
root      91795  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/1:1]
root      96690  0.0  0.0      0     0 ?        S    03:17   0:00  \_ [kworker/1:3]
root      96710  0.0  0.0      0     0 ?        D    03:17   0:00  \_ [kworker/0:1]
root      97549  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44388  3320 ?        Ss   Nov14   0:41 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  6176 ?        Ss   Nov14   0:16 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   508 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6592 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   332 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1200 ?        Ss   Nov14   0:07 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240  1068 ?        Ssl  Nov14   0:04 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58728  1384 ?        Ss   Nov14   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1888 ?        Ssl  Nov14   0:24 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root      97471  0.0  0.0 183048  2148 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97488  0.0  0.0 113284  1212 ?        Ss   03:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      97489  0.0  0.0 108052   356 ?        S    03:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      97490  0.0  0.0 113288  1516 ?        S    03:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      97552  0.0  0.0 153840  2100 ?        R    03:18   0:00  |               \_ ps auxf
root      97472  0.0  0.0 183048  2152 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97514  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      97473  0.0  0.0 183048  2152 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97521  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      97475  0.0  0.0 183048  2152 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97525  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      97476  0.0  0.0 183048  2152 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97517  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      97477  0.0  0.0 183048  2148 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97524  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      97478  0.0  0.0 183048  2148 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97515  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      97479  0.0  0.0 183048  2144 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97518  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      97480  0.0  0.0 183048  2144 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97516  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      97481  0.0  0.0 183048  2144 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97528  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      97482  0.0  0.0 183048  2144 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97522  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      97483  0.0  0.0 183048  2152 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97523  0.0  0.0  20164   968 ?        Ss   03:18   0:00  |   \_ jailshell (pactpay) [97533] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97533  0.0  0.0  20164   260 ?        S    03:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97535  1.0  0.6 479860 16172 ?        Rl   03:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      97485  0.0  0.0 183048  2144 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97526  0.0  0.0  20164   968 ?        Ss   03:18   0:00      \_ jailshell (nigeria) [97537] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97537  0.0  0.0  20164   260 ?        S    03:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97541  0.0  0.6 404052 16144 ?        R    03:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    20 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3936 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  97376  0.0  0.1  91200  4272 ?        S    03:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root      97161  0.0  0.1 111304  4268 ?        Ss   03:17   0:00  \_ sshd: [accepted]
sshd      97162  0.0  0.1 115644  2628 ?        S    03:17   0:00  |   \_ sshd: [net]
root      97451  0.3  0.2 162436  5824 ?        Ss   03:17   0:00  \_ sshd: root [priv]
sshd      97452  0.0  0.1 115644  2628 ?        S    03:17   0:00      \_ sshd: root [net]
root        914  0.0  0.3 1350088 8448 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1200 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46912  3928 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47424  4476 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1224 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  3924 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  47056  4396 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.4  24564 12092 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1232 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41188  2476 ?        S    01:26   0:00  \_ dovecot/auth
root      97018  0.0  0.1  60820  4508 ?        S    03:17   0:00  \_ dovecot/lmtp
root        918  0.0  0.2 261424  6756 ?        Ss   Nov14   0:08 cpsrvd (SSL) - waiting for connections                   
root      97461  0.0  0.0      0     0 ?        Z    03:17   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  3.9 1763124 94624 ?       Ssl  Nov14   0:16 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.2 306512  6676 ?        Ssl  Nov14   0:08 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   404 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   468 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.7 1054792 42372 ?       Ssl  Nov14   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   488 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 36716 ?       SLsl Nov14   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3708 ?        Ss   Nov14   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788   880 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2660 ?        Ss   Nov14   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
pactpay   97547  0.0  0.1 400460  3924 ?        S    03:18   0:00  \_ php-fpm: pool pactpay_com
systuser    971  0.0  0.5 114016 14208 ?        Ssl  Nov14   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   968 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11468 ?        Ss   Nov14   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  6.0 316256 146988 ?       S    Nov14   0:05  \_ spamd child
root       8136  0.0  1.3 249228 32524 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.1 387556  4072 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.9 410480 23356 ?        Ss   Nov14   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4044 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.4 209336 10348 ?        Ss   Nov14   0:03 tailwatchd
root       1256  0.0  0.9 262224 24108 ?        Ss   Nov14   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1396 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 13.4 1462300 325336 ?      Sl   Nov14   6:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.2 267052 30964 ?        Ss   Nov14   0:03 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12776  1408 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1364 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12792  1424 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 11680 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    77785  0.1  1.4 277968 36220 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    80786  0.1  1.4 277568 35772 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    89574  0.1  1.4 277576 35372 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    90748  0.1  1.4 277796 35760 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    90826  0.1  1.4 277652 35460 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    90849  0.1  1.4 277872 35932 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    90857  0.1  1.4 277564 35476 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    91655  0.1  1.4 277680 35800 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    92323  0.1  1.4 277568 35412 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    93291  0.1  1.4 277904 35696 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody    93735  0.1  1.4 277568 35280 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    94475  0.0  1.4 277544 34980 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
nobody    94503  0.1  1.4 277568 35372 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
nobody    96221  0.1  1.4 277896 35208 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96233  0.1  1.4 277568 34640 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96234  0.1  1.4 277568 35060 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96271  0.1  1.4 277568 35040 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96287  0.1  1.4 277900 34976 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96288  0.0  1.4 277568 35212 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96585  0.2  1.4 277568 35036 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 182496 29772 ?        Ss   00:00   0:12 lfd - sleeping
root      83913  0.0  0.0 123576   752 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      94114  0.0  0.0 113284  1484 ?        SN   03:14   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      94409  0.0  0.0 113284  1500 ?        SN   03:14   0:00      \_ bash /etc/cron.daily/maldet
root      94464  0.0  0.0 108056   356 ?        SN   03:14   0:00      |   \_ sleep 293
root      94410  0.0  0.0 113644   980 ?        SN   03:14   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      94120  0.0  0.1 132964  4552 ?        SN   03:14   0:00 ConfigServer Version Check
root      94131  0.0  0.0 108056   360 ?        SN   03:14   0:00  \_ sleep 5883
## mysql stats
Uptime: 30160  Threads: 3  Questions: 2363873  Slow queries: 0  Opens: 9664  Flush tables: 1  Open tables: 2000  Queries per second avg: 78.377
*************************** 1. row ***************************
     Id: 32156
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 32158
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `35` WHERE `phone`='2348104886540' LIMIT 1
*************************** 3. row ***************************
     Id: 32162
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 69.163.137.216 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 03:18:02 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 8 hours 22 minutes 35 seconds
   Server load: 0.21 0.28 0.32
   Total accesses: 156391 - Total Traffic: 3.7 GB - Total Duration: 84876107
   CPU Usage: u8.23 s5.84 cu2005.57 cs1639.38 - 12.1% CPU load
   5.19 requests/sec - 129.7 kB/second - 25.0 kB/request - 542.717 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

_.KRKKKK.RKKRKKK_WK............_.........K.......K..............
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                        Request
   0-2  93291 0/76/7967   _ 1.63 0     0   4163330 0.0   1.79  182.94 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-2  -     0/0/7788    . 0.00 15    0   4061985 0.0   0.00  184.56 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-2  96221 4/30/7519   K 0.82 0     273 4146961 120.6 0.87  188.73 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3689934282 HTTP/1.1
   3-2  89574 0/157/7849  R 4.01 4     7   4050775 0.0   4.14  185.02 140.228.21.27 http/1.1
   4-2  91655 6/124/7301  K 2.93 2     280 3879001 190.2 4.54  190.42 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1525157717 HTTP/1.1
   5-2  92323 11/113/6734 K 2.71 2     344 3710685 333.5 3.09  165.62 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4049528239 HTTP/1.1
   6-2  80786 3/311/7200  K 8.01 1     343 3952071 89.8  8.27  176.19 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=972208795 HTTP/1.1
   7-2  96585 10/22/6873  K 0.59 4     334 3755905 303.7 0.60  167.40 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1865975226 HTTP/1.1
   8-2  -     0/0/7094    . 0.00 53    0   3793208 0.0   0.00  173.29 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-2  96233 0/21/6333   R 0.58 34    273 3386406 0.0   0.62  153.55 182.2.7.56    http/1.1
   10-2 93735 8/79/6415   K 2.57 1     294 3380345 241.5 2.07  162.09 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1664188404 HTTP/1.1
   11-2 94475 2/33/6590   K 0.78 2     414 3667375 61.2  0.84  170.05 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2385208187 HTTP/1.1
   12-2 94503 0/46/5666   R 1.08 54    25  3233269 0.0   1.12  144.62 194.233.93.96 http/1.1 cloudware.ng:443
   13-2 96234 4/26/6482   K 0.60 2     368 3403300 117.1 0.66  149.62 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2420087143 HTTP/1.1
   14-2 96271 1/30/6163   K 0.80 0     0   3240110 0.8   0.83  141.39 140.228.21.27 http/1.1 pactpay.com:80             GET / HTTP/1.1
   15-2 96287 2/20/5860   K 0.46 0     260 3185420 59.6  0.51  158.25 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=578980262 HTTP/1.1
   16-2 96288 0/16/5607   _ 0.36 0     393 2936162 0.0   0.41  125.70 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2341854884 HTTP/1.1
   17-2 90748 0/135/5468  W 3.58 0     0   2918638 0.0   3.41  131.54 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-2 77785 6/337/3895  K 8.28 2     338 2262612 180.6 8.06  92.27  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3325100819 HTTP/1.1
   19-2 -     0/0/4216    . 0.00 479   0   2450197 0.0   0.00  110.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 -     0/0/3710    . 0.00 481   0   2167060 0.0   0.00  93.89  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 -     0/0/2740    . 0.00 295   0   1596970 0.0   0.00  70.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 -     0/0/2753    . 0.00 447   0   1757747 0.0   0.00  73.92  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 -     0/0/2202    . 0.00 469   0   1301785 0.0   0.00  52.06  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/1824    . 0.00 475   0   1023720 0.0   0.00  43.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/1003    . 0.00 464   0   579286  0.0   0.00  23.69  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/1587    . 0.00 463   0   934847  0.0   0.00  39.22  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/534     . 0.00 456   0   372803  0.0   0.00  13.61  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/151     . 0.00 477   0   132534  0.0   0.00  2.59   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/728     . 0.00 444   0   395767  0.0   0.00  21.60  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/1019    . 0.00 291   0   548574  0.0   0.00  26.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 90826 0/128/1051  _ 3.34 1     1   616282  0.0   3.70  29.01  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   32-2 -     0/0/646     . 0.00 326   0   360967  0.0   0.00  17.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/94      . 0.00 455   0   57472   0.0   0.00  2.35   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/314     . 0.00 476   0   173942  0.0   0.00  8.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/111     . 0.00 461   0   69387   0.0   0.00  2.47   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/48      . 0.00 470   0   35090   0.0   0.00  0.91   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/142     . 0.00 480   0   94558   0.0   0.00  4.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/569     . 0.00 293   0   329438  0.0   0.00  14.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/190     . 0.00 487   0   82925   0.0   0.00  2.20   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/398     . 0.00 446   0   220863  0.0   0.00  10.41  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 90849 1/124/628   K 2.88 0     40  297489  8.0   3.19  13.72  140.228.21.27 http/1.1 pactpay.com:443            GET / HTTP/1.1
   42-2 -     0/0/52      . 0.00 483   0   32717   0.0   0.00  0.81   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/148     . 0.00 474   0   86223   0.0   0.00  3.57   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/527     . 0.00 486   0   290993  0.0   0.00  16.18  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/183     . 0.00 445   4   117015  0.0   0.00  5.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/733     . 0.00 485   0   247873  0.0   0.00  10.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-2 -     0/0/40      . 0.00 352   0   34842   0.0   0.00  1.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-2 -     0/0/9       . 0.00 484   0   4412    0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 90857 8/108/126   K 2.85 3     413 68804   242.7 2.67  3.05   66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2135763383 HTTP/1.1
   50-2 -     0/0/300     . 0.00 488   0   158548  0.0   0.00  8.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/352     . 0.00 468   0   163660  0.0   0.00  7.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/29      . 0.00 8564  0   15555   0.0   0.00  0.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/12      . 0.00 8586  0   18089   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/10      . 0.00 8610  0   4405    0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00 8606  0   998     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2       . 0.00 8636  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 8614  0   1939    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/6       . 0.00 8635  0   3734    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/1053    . 0.00 8609  0   467065  0.0   0.00  23.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/4       . 0.00 8607  0   13426   0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/13      . 0.00 8631  0   7394    0.0   0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/9       . 0.00 8633  0   7635    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/5       . 0.00 8611  0   739     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/42      . 0.00 8574  0   22252   0.0   0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/123     . 0.00 8333  0   72436   0.0   0.00  3.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/4       . 0.00 8630  0   160     0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00 8629  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00 8585  0   810     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/84      . 0.00 8592  0   48852   0.0   0.00  2.20   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/15      . 0.00 8597  0   7942    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/3       . 0.00 8600  0   864     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/32      . 0.00 8603  0   18076   0.0   0.00  0.70   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/42      . 0.00 8593  0   23305   0.0   0.00  1.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00 8628  0   4058    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/4       . 0.00 8589  0   49      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/934     . 0.00 8627  0   199287  0.0   0.00  9.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/2       . 0.00 8626  0   1       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/3       . 0.00 8625  0   4640    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00 24995 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 354
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 29 seconds, (range: 3...96)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 7830
   total entries replaced since starting: 0
   total entries expired since starting: 7469
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 65 miss
   total removes since starting: 7 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit