403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.01.33.txt
 ## swap threshold exceeded
## server overview
2025-11-16.01.33 load[1] mem[49/80] mysql[5/10] httpd[6]
              total        used        free      shared  buff/cache   available
Mem:           2363        1076         677          98         609        1013
Swap:          1999        1698         301
 01:33:02 up 11:08,  0 users,  load average: 1.19, 0.80, 0.60
## system overview
top - 01:33:02 up 11:08,  0 users,  load average: 1.19, 0.80, 0.60
Tasks: 201 total,   2 running, 197 sleeping,   0 stopped,   2 zombie
%Cpu(s): 62.5 us, 25.0 sy,  0.0 ni, 12.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   656052 free,  1096116 used,   668132 buff/cache
KiB Swap:  2047996 total,   308476 free,  1739520 used.  1044128 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 266124   3288 S 112.5 11.0   9:31.91 /usr/sbin+
 98365 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44412   3452   1588 S   6.2  0.1   0:55.41 /usr/lib/+
 98388 root      20   0  160220   2060   1580 R   6.2  0.1   0:00.01 top -bcn1
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.43 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.90 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:40.60 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.77 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.08 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.63 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.70 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.01 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.60 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [kworker/+
   358 root      20   0   40244   2952   2644 S   0.0  0.1   0:19.87 /usr/lib/+
   385 root      20   0   45444    412    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    536    408 S   0.0  0.0   0:02.94 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.90 /usr/sbin+
   516 root      20   0  152780    328    284 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1332    952 S   0.0  0.1   0:09.27 /usr/lib/+
   523 nscd      20   0 1264844   1928    888 S   0.0  0.1   0:32.35 /usr/sbin+
   524 root      20   0   52852    508    396 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1196    800 S   0.0  0.0   0:05.44 /usr/lib/+
   529 root      20   0  224148   5292    984 S   0.0  0.2   0:00.46 queueproc+
   531 dbus      20   0   58740   1532    788 S   0.0  0.1   0:21.05 /usr/bin/+
   539 rpc       20   0   69256    132     72 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    584    448 S   0.0  0.0   0:01.13 /usr/sbin+
   577 root      20   0   24208     92     64 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4016    976 S   0.0  0.2   0:00.74 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:04.08 /usr/sbin+
   919 root      20   0 1350088   7416    200 S   0.0  0.3   0:20.08 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  32876   2676 S   0.0  1.4   0:21.92 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.87 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.82 pure-ftpd+
   926 root      20   0  572372   1076    500 S   0.0  0.0   0:03.46 /usr/bin/+
   927 systuser  20   0  114016  15676   2612 S   0.0  0.6   0:09.48 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    656    492 S   0.0  0.0   0:00.47 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   6460    220 S   0.0  0.3   0:24.31 /usr/bin/+
   946 root      20   0  396248    712    528 S   0.0  0.0   0:01.00 php-fpm: +
   954 named     20   0 1054792  42740   1876 S   0.0  1.8   0:20.36 /usr/sbin+
   957 root      20   0  331088   4308   3000 S   0.0  0.2   0:10.19 /usr/sbin+
   973 root      20   0  400740   2996    884 S   0.0  0.1   0:06.17 php-fpm: +
   975 root      20   0  439788   1724   1516 S   0.0  0.1   0:01.18 php-fpm: +
   978 cpanelc+  20   0   10456   3696   2432 S   0.0  0.2   0:31.98 /usr/loca+
   980 root      20   0  388892    824    608 S   0.0  0.0   0:01.23 php-fpm: +
   991 root      20   0  389508    644    552 S   0.0  0.0   0:01.10 php-fpm: +
   992 root      20   0 1763124  73328    612 S   0.0  3.0   0:14.13 /usr/loca+
   993 root      20   0  261288   6800   1680 S   0.0  0.3   0:08.22 cpsrvd (S+
  1065 dovenull  20   0   47524   2672   1396 S   0.0  0.1   0:00.74 dovecot/p+
  1066 dovenull  20   0   47948   3300   1696 S   0.0  0.1   0:00.43 dovecot/i+
  1067 dovecot   20   0   10320    548    432 S   0.0  0.0   0:00.13 dovecot/a+
  1068 root      20   0   10452    632    436 S   0.0  0.0   0:00.45 dovecot/l+
  1069 dovenull  20   0   47600   2804   1432 S   0.0  0.1   0:00.59 dovecot/p+
  1070 dovenull  20   0   47884   3452   1924 S   0.0  0.1   0:00.38 dovecot/i+
  1077 root      20   0   24528   2600    544 S   0.0  0.1   0:00.23 dovecot/c+
  1078 dovecot   20   0   13568    548    316 S   0.0  0.0   0:00.09 dovecot/s+
  1150 root      20   0  248140  23500   1104 S   0.0  1.0   0:07.58 /usr/loca+
  1151 systuser  20   0  157704   3060   1016 S   0.0  0.1   0:00.19 SonarPush+
  1152 dovecot   20   0   41180   1540   1044 S   0.0  0.1   0:00.95 dovecot/a+
  1153 wp-tool+  20   0  387556   5088   1732 S   0.0  0.2   0:00.36 /usr/bin/+
  1154 wp-tool+  20   0  410480  30692   1640 S   0.0  1.3   0:33.85 /usr/bin/+
  1229 root      20   0  183900   5248   2020 S   0.0  0.2   0:02.39 cpdavd - +
  1231 root      20   0  209920  11788   1644 S   0.0  0.5   0:05.06 tailwatchd
  1232 root      20   0  167452   3388   2012 S   0.0  0.1   0:00.65 dnsadmin +
  1638 root      20   0  299272    808    428 S   0.0  0.0   0:01.07 php-fpm: +
  1681 root      38  18  130416   1512    804 S   0.0  0.1   0:00.09 cpanellog+
  1909 root      20   0  266984   8636    800 S   0.0  0.4   0:03.84 /usr/sbin+
  1911 root      20   0   12768    508    364 S   0.0  0.0   0:04.58 /usr/loca+
  1912 root      20   0   12732    464    356 S   0.0  0.0   0:04.01 /usr/loca+
  1913 root      20   0   12780    516    360 S   0.0  0.0   0:04.40 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  268280  96288   1868 S   0.0  4.0   0:04.60 spamd chi+
  8199 root      20   0  249268  44376    696 S   0.0  1.8   0:00.06 spamd chi+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.72 [kworker]
 48777 root      20   0  181664  29168   1812 S   0.0  1.2   0:06.09 lfd - sle+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
 76487 nobody    20   0  277752  21412   4984 S   0.0  0.9   0:02.52 /usr/sbin+
 81352 root      20   0  183052   1664   1096 S   0.0  0.1   0:00.00 /usr/sbin+
 81404 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056    292    216 S   0.0  0.0   0:00.00 sleep 3h +
 84196 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 87355 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 89675 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89760 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 91544 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92477 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 92925 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96121 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96123 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96688 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96984 nobody    20   0  277872  19684   4044 S   0.0  0.8   0:00.07 /usr/sbin+
 97867 nobody    20   0  277408  18948   3728 S   0.0  0.8   0:00.02 /usr/sbin+
 97869 nobody    20   0  277724  18872   3436 S   0.0  0.8   0:00.01 /usr/sbin+
 97870 nobody    20   0  277468  18832   3572 S   0.0  0.8   0:00.01 /usr/sbin+
 97881 nobody    20   0  277856  19012   3592 S   0.0  0.8   0:00.01 /usr/sbin+
 97887 nobody    20   0  277444  19056   3772 S   0.0  0.8   0:00.04 /usr/sbin+
 97896 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.01 [httpd] <+
 97897 nobody    20   0  277592  18820   3488 S   0.0  0.8   0:00.01 /usr/sbin+
 97900 nobody    20   0  277312  18528   3476 S   0.0  0.8   0:00.01 /usr/sbin+
 97901 nobody    20   0  277312  18596   3548 S   0.0  0.8   0:00.01 /usr/sbin+
 97904 nobody    20   0  277408  18752   3564 S   0.0  0.8   0:00.06 /usr/sbin+
 97918 nobody    20   0  277464  18888   3524 S   0.0  0.8   0:00.01 /usr/sbin+
 97922 nobody    20   0  277172  18104   3088 S   0.0  0.7   0:00.00 /usr/sbin+
 97928 nobody    20   0  277312  18216   3176 S   0.0  0.8   0:00.00 /usr/sbin+
 97930 nobody    20   0  277312  18624   3516 S   0.0  0.8   0:00.01 /usr/sbin+
 97933 nobody    20   0  277312  18608   3500 S   0.0  0.8   0:00.00 /usr/sbin+
 97934 nobody    20   0  277444  18820   3592 S   0.0  0.8   0:00.01 /usr/sbin+
 97935 nobody    20   0  277448  18700   3444 S   0.0  0.8   0:00.02 /usr/sbin+
 97937 nobody    20   0  277312  18412   3380 S   0.0  0.8   0:00.00 /usr/sbin+
 97940 nobody    20   0  277400  18932   3724 S   0.0  0.8   0:00.02 /usr/sbin+
 97942 nobody    20   0  277376  18724   3452 S   0.0  0.8   0:00.01 /usr/sbin+
 97944 nobody    20   0  277312  18820   3688 S   0.0  0.8   0:00.01 /usr/sbin+
 97948 nobody    20   0  277400  18892   3680 S   0.0  0.8   0:00.18 /usr/sbin+
 98146 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 98153 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 98267 nigeria   20   0  400460   5304   2344 S   0.0  0.2   0:00.00 php-fpm: +
 98304 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 98307 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 98308 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 98316 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98317 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98318 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98319 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98320 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98321 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98322 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98324 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98325 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98326 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 98328 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98330 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 98331 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 98332 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 98333 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98334 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 98335 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98336 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98337 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 98339 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98341 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98343 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 98344 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 98348 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 98357 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 98358 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 98360 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 98393 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 98394 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 98395 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov15   0:40  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov15   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      56928  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      84196  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/0:1]
root      87355  0.0  0.0      0     0 ?        S    01:10   0:00  \_ [kworker/1:3]
root      89675  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:2]
root      89760  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/1:2]
root      91544  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/0:4]
root      92477  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/1:1]
root      92925  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/1:4]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root      96121  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:0]
root      96123  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:3]
root      96688  0.0  0.0      0     0 ?        S    01:30   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44412  3452 ?        Ss   Nov15   0:55 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  2952 ?        Ss   Nov15   0:19 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   412 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   536 ?        S<sl Nov15   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   328 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1332 ?        Ss   Nov15   0:09 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1928 ?        Ssl  Nov15   0:32 /usr/sbin/nscd
root        524  0.0  0.0  52852   508 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1196 ?        Ssl  Nov15   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5292 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1532 ?        Ss   Nov15   0:21 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   132 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   584 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052  1664 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056   292 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root      98316  0.0  0.0 183048  2156 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98330  0.0  0.0 113284  1212 ?        Ss   01:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      98344  0.0  0.0 108052   360 ?        S    01:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      98348  0.0  0.0 113288  1516 ?        S    01:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      98396  0.0  0.0 153840  2092 ?        R    01:33   0:00  |               \_ ps auxf
root      98317  0.0  0.0 183048  2156 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98337  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      98318  0.0  0.0 183048  2156 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98334  0.0  0.0  20164   988 ?        Ss   01:33   0:00  |   \_ jailshell (cloudsms) [98393] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  98393  0.0  0.0  20164   264 ?        S    01:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  98394  0.0  0.0 113284  1212 ?        S    01:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  98395  0.0  0.4 399788 11228 ?        R    01:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root      98319  0.0  0.0 183048  2152 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98339  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      98320  0.0  0.0 183048  2152 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98333  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      98321  0.0  0.0 183048  2152 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98341  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      98322  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98336  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      98324  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98335  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      98325  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98332  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      98326  0.0  0.0 183048  2152 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98343  0.0  0.0  20164   968 ?        Ss   01:33   0:00  |   \_ jailshell (pactpay) [98357] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   98357  0.0  0.0  20164   264 ?        S    01:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   98358  0.0  0.7 480124 17684 ?        S    01:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      98328  0.0  0.0 183048  2148 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      98331  0.0  0.0  20164   964 ?        Ss   01:33   0:00      \_ jailshell (nigeria) [98360] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   98360  0.0  0.0  20164   256 ?        S    01:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   98365  0.0  0.6 404052 16136 ?        S    01:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    92 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4016 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root      98146  0.0  0.1 111304  4272 ?        Ss   01:32   0:00  \_ sshd: [accepted]
sshd      98153  0.0  0.1 115644  2632 ?        S    01:32   0:00  |   \_ sshd: [net]
root      98307  0.0  0.2 157100  5076 ?        Ss   01:32   0:00  \_ sshd: unknown [priv]
sshd      98308  0.0  0.1 115644  2628 ?        S    01:32   0:00      \_ sshd: unknown [net]
root        919  0.0  0.3 1350088 7416 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.3 5654304 32876 ?       SLsl Nov15   0:21 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1076 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15676 ?        Ssl  Nov15   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   656 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  2672 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3300 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   548 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  2804 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47884  3452 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2600 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   548 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1540 ?        S    Nov15   0:00  \_ dovecot/auth
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 6460 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   712 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.7 1054792 42740 ?       Ssl  Nov15   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.1 331088  4308 ?        Ssl  Nov15   0:10 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  2996 ?        Rs   Nov15   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   98267  0.0  0.2 400460  5304 ?        S    01:32   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1724 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3696 ?        Ss   Nov15   0:31 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   824 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   644 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 73328 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  6800 ?        Ss   Nov15   0:08 cpsrvd (SSL) - waiting for connections                   
root      98304  0.0  0.0      0     0 ?        Z    01:32   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.9 248140 23500 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  3.9 268280 96288 ?        S    Nov15   0:04  \_ spamd child
root       8199  0.0  1.8 249268 44376 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3060 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5088 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 30692 ?        Ss   Nov15   0:33 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  5248 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.4 209920 11788 ?        Ss   Nov15   0:05 tailwatchd
root       1232  0.0  0.1 167452  3388 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   808 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1512 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 10.9 1458332 266124 ?      Sl   Nov15   9:31 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8636 ?        Ss   Nov15   0:03 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12768   508 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   464 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12780   516 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76487  0.1  0.8 277752 21412 ?        S    00:53   0:02  \_ /usr/sbin/httpd -k start
nobody    96984  0.0  0.8 277872 19684 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    97867  0.0  0.7 277408 18948 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97869  0.0  0.7 277724 18872 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97870  0.0  0.7 277468 18832 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97881  0.0  0.7 277856 19012 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97887  0.0  0.7 277444 19056 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    98397  0.0  0.7 277444 18332 ?        R    01:33   0:00  |   \_ /usr/sbin/httpd -k start
nobody    97896  0.0  0.0      0     0 ?        Z    01:32   0:00  \_ [httpd] <defunct>
nobody    97897  0.0  0.7 277592 18820 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97900  0.0  0.7 277312 18528 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97901  0.0  0.7 277312 18596 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97904  0.1  0.7 277408 18752 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97918  0.0  0.7 277464 18888 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97922  0.0  0.7 277172 18104 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97928  0.0  0.7 277312 18216 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97930  0.0  0.7 277312 18624 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97933  0.0  0.7 277312 18608 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97934  0.0  0.7 277444 18820 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97935  0.0  0.7 277448 18700 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97937  0.0  0.7 277312 18412 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97940  0.0  0.7 277400 18932 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97942  0.0  0.7 277376 18724 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97944  0.0  0.7 277312 18820 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    97948  0.3  0.7 277400 18892 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   492 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181664 29168 ?        Ss   00:00   0:06 lfd - sleeping
## mysql stats
Uptime: 40116  Threads: 3  Questions: 3644236  Slow queries: 0  Opens: 11550  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.842
*************************** 1. row ***************************
     Id: 51293
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 51295
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 51302
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 114.119.153.50 TIME_WAIT
      1 128.90.59.235 TIME_WAIT
      1 15.235.96.234 TIME_WAIT
      1 167.160.61.233 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.110.213.58 TIME_WAIT
      1 ::1 TIME_WAIT
      1 203.55.81.1 TIME_WAIT
      1 45.41.167.134 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 88.216.35.203 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 216.73.216.40 TIME_WAIT
      3 159.65.150.212 TIME_WAIT
     12 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 01:33:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 8 minutes 32 seconds
   Server load: 1.19 0.80 0.60
   Total accesses: 211331 - Total Traffic: 4.4 GB - Total Duration: 110006352
   CPU Usage: u2.02 s4.86 cu2546.3 cs2175.11 - 11.8% CPU load
   5.27 requests/sec - 115.1 kB/second - 21.8 kB/request - 520.541 ms/request
   5 requests currently being processed, 0 workers gracefully restarting, 18 idle workers

......._.___._....W....._..__._...K........K..._....._.C..___.W.
._._._..._......................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn Child  Slot      Client      Protocol           VHost                                        Request
   0-0  -     0/0/10531  . 0.00  29    0   5234741 0.0  0.00  214.44 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  -     0/0/10656  . 0.00  39    0   5497734 0.0  0.00  219.02 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  -     0/0/10220  . 0.00  12    0   5205580 0.0  0.00  214.78 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  -     0/0/10531  . 0.00  27    0   5073902 0.0  0.00  210.84 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  -     0/0/11383  . 0.00  8     0   5674820 0.0  0.00  220.30 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  -     0/0/9908   . 0.00  40    0   5149788 0.0  0.00  207.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  -     0/0/10534  . 0.00  1     0   5207277 0.0  0.00  216.62 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  97867 0/9/9491   _ 0.11  7     22  4779337 0.0  0.08  196.97 66.249.70.8     http/1.1 test.cloudware.ng:443      GET /1597638477?goodscode=1595545350 HTTP/1.1
   8-0  -     0/0/9434   . 0.00  24    0   4816073 0.0  0.00  198.52 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  97869 0/5/9088   _ 0.01  0     401 4568503 0.0  0.12  214.47 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1675135920 HTTP/1.1
   10-0 97870 0/4/9481   _ 0.01  11    4   4625235 0.0  0.07  207.10 114.119.137.160 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Delta&lga=Ughelli%20north&
   11-0 97881 0/6/8651   _ 0.03  4     193 4582806 0.0  0.08  196.32 216.73.216.40   http/1.1 nigeriadecide.org:80       GET /blog/wp-json/wp/v2/posts/418 HTTP/1.1
   12-0 -     0/0/8406   . 0.00  16    0   4746906 0.0  0.00  181.30 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 76487 0/807/8806 _ 15.01 2     3   4593325 0.0  5.72  189.21 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   14-0 -     0/0/7857   . 0.00  23    0   3951675 0.0  0.00  168.57 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/7807   . 0.00  41    0   4200442 0.0  0.00  169.39 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/7004   . 0.00  42    0   3665253 0.0  0.00  155.10 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/6607   . 0.00  43    0   3250856 0.0  0.00  136.55 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 97887 12/17/5987 W 0.25  0     0   3318875 14.9 0.12  141.81 66.249.70.8     http/1.1 test.cloudware.ng:443      GET /218552454?goodscode=0218266778 HTTP/1.1
   19-0 -     0/0/6736   . 0.00  4     0   3297110 0.0  0.00  134.36 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/4056   . 0.00  44    0   2299515 0.0  0.00  93.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/4148   . 0.00  31    0   2282169 0.0  0.00  93.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/3866   . 0.00  33    0   2279840 0.0  0.00  96.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/4115   . 0.00  0     0   2296490 0.0  0.00  96.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 97897 0/4/2489   _ 0.03  3     157 1545418 0.0  0.07  60.40  85.208.96.200   http/1.1 support.cloudware.ng:443   GET /?c=833603065 HTTP/1.1
   25-0 -     0/0/1238   . 0.00  34    0   679033  0.0  0.00  28.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1024   . 0.00  36    0   593055  0.0  0.00  24.41  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 97900 0/5/659    _ 0.01  2     3   386565  0.0  0.21  14.53  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   28-0 97901 0/4/515    _ 0.01  0     1   305502  0.0  0.29  12.04  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   29-0 -     0/0/475    . 0.00  45    0   279213  0.0  0.00  10.55  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 96984 0/26/1132  _ 0.27  12    7   669355  0.0  0.32  26.95  15.235.96.234   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Enugu&lga=Igbo%20eze%20nor
   31-0 -     0/0/484    . 0.00  2     0   218468  0.0  0.00  7.89   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/351    . 0.00  20    0   164286  0.0  0.00  4.81   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/152    . 0.00  15    4   99046   0.0  0.00  2.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 97904 21/23/611  K 0.44  2     22  381940  22.4 0.06  11.23  66.249.70.7     http/1.1 test.cloudware.ng:443      GET /1574897718?goodscode=1572834394 HTTP/1.1
   35-0 -     0/0/232    . 0.00  30    0   152281  0.0  0.00  2.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/118    . 0.00  19    0   142793  0.0  0.00  2.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/66     . 0.00  37    0   23020   0.0  0.00  0.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/75     . 0.00  7     0   40026   0.0  0.00  0.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/544    . 0.00  35    0   274779  0.0  0.00  10.37  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/131    . 0.00  3     0   128423  0.0  0.00  2.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/178    . 0.00  48    0   83086   0.0  0.00  2.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/126    . 0.00  18    0   89738   0.0  0.00  3.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 97918 1/4/110    K 0.02  4     422 66408   22.2 0.36  2.81   206.195.138.156 http/1.1 health.oyostate.gov.ng:443 GET /portfolio/oyo-govt-distributes-over-5m-mosquito-nets/healt
   44-0 -     0/0/56     . 0.00  9     0   10245   0.0  0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/351    . 0.00  21    0   197205  0.0  0.00  8.48   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/25     . 0.00  10    0   33111   0.0  0.00  0.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 97922 0/2/23     _ 0.00  11    1   5061    0.0  0.00  0.24   10.30.9.138     http/1.1 theforge.com.ng:80         GET / HTTP/1.1
   48-0 -     0/0/197    . 0.00  6     0   42273   0.0  0.00  1.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/53     . 0.00  5     0   56964   0.0  0.00  2.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/445    . 0.00  49    0   253170  0.0  0.00  9.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/37     . 0.00  47    0   12718   0.0  0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/28     . 0.00  46    0   8950    0.0  0.00  0.37   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 97928 0/3/121    _ 0.01  11    1   80545   0.0  0.03  2.05   10.30.9.122     http/1.1 theforge.com.ng:80         GET / HTTP/1.1
   54-0 -     0/0/269    . 0.00  13    0   152809  0.0  0.00  5.91   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 97930 1/4/414    C 0.01  0     0   319955  0.2  0.05  13.74  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/77     . 0.00  17    0   50734   0.0  0.00  0.82   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/28     . 0.00  50    0   8190    0.0  0.00  0.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 97933 0/3/203    _ 0.00  9     3   177576  0.0  0.04  4.57   173.199.190.175 http/1.1 nigeriadecide.org:80       POST /blog/wp-cron.php?doing_wp_cron=1763253172.843724012374877
   59-0 97934 0/3/19     _ 0.02  10    7   36282   0.0  0.04  0.20   184.72.95.195   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/assets/js/assets/css/pollin
   60-0 97935 0/3/158    _ 0.02  3     26  111019  0.0  0.04  3.17   66.249.70.8     http/1.1 test.cloudware.ng:443      GET /1586885910?goodscode=1584806874 HTTP/1.1
   61-0 -     0/0/179    . 0.00  28    0   57365   0.0  0.00  1.50   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 97937 0/3/119    W 0.00  0     0   85721   0.0  0.11  2.93   ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   63-0 -     0/0/20     . 0.00  14    0   28546   0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/229    . 0.00  11    0   58858   0.0  0.00  1.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 97940 0/7/72     _ 0.08  2     22  27928   0.0  0.05  0.39   66.249.70.8     http/1.1 test.cloudware.ng:443      GET /43364362?goodscode=0043308290 HTTP/1.1
   66-0 -     0/0/50     . 0.00  26    0   36001   0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 97942 0/4/14     _ 0.01  4     202 23348   0.0  0.05  0.07   216.73.216.40   http/1.1 nigeriadecide.org:80       GET /blog/new-dates-for-phase-2-of-pvc-distribution-cvr-inecnig
   68-0 -     0/0/19     . 0.00  25    0   40094   0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 97944 0/3/107    _ 0.01  6     11  57734   0.0  0.07  1.89   52.3.155.146    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/images/b
   70-0 -     0/0/61     . 0.00  38    0   64700   0.0  0.00  1.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/925    . 0.00  22    0   494682  0.0  0.00  20.80  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/134    . 0.00  51    0   54729   0.0  0.00  1.76   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 97948 0/64/204   _ 1.46  2     8   99444   0.0  0.07  3.26   54.197.102.71   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/images/blog/blog/ima
   74-0 -     0/0/56     . 0.00  32    0   42102   0.0  0.00  1.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/13     . 0.00  10582 0   12308   0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/149    . 0.00  10583 0   87089   0.0  0.00  3.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/13     . 0.00  10603 0   1935    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/16     . 0.00  10580 0   16052   0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/41     . 0.00  10467 0   30094   0.0  0.00  0.73   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/19     . 0.00  15207 0   6786    0.0  0.00  0.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/359    . 0.00  13932 0   198767  0.0  0.00  8.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/3      . 0.00  29125 0   23      0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/3      . 0.00  29099 0   644     0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/2      . 0.00  29117 0   3       0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7      . 0.00  29084 0   3861    0.0  0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 788
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...61)
   index usage: 13%, cache usage: 19%
   total entries stored since starting: 112871
   total entries replaced since starting: 0
   total entries expired since starting: 112037
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 552 miss
   total removes since starting: 47 hit, 56 miss
Youez - 2016 - github.com/yon3zu
LinuXploit