403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.03.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.03 load[0] mem[61/70] mysql[2/8] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1408         135          15         819         778
Swap:          1999        1577         422
 01:03:01 up  5:00,  0 users,  load average: 1.41, 1.13, 0.77
## system overview
top - 01:03:02 up  5:00,  0 users,  load average: 1.41, 1.13, 0.77
Tasks: 214 total,   1 running, 212 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 18.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   133812 free,  1447316 used,   839172 buff/cache
KiB Swap:  2047996 total,   433012 free,  1614984 used.   791928 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 196952   4460 S 129.4  8.1   4:08.23 /usr/sbin+
 26771 nigeria   20   0  400652  15932  10220 S  11.8  0.7   0:00.05 /opt/cpan+
 21327 nobody    20   0  277784  10268   3660 S   5.9  0.4   0:00.49 /usr/sbin+
 26804 cloudsms  20   0  400652  15412  10004 S   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3604   1692 S   0.0  0.1   0:25.76 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.19 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.84 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:18.25 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.79 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.34 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.16 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.09 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.85 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   2016   1780 S   0.0  0.1   0:10.50 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    152     44 S   0.0  0.0   0:01.65 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.11 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.40 /usr/sbin+
   501 polkitd   20   0  612240    840    560 S   0.0  0.0   0:02.43 /usr/lib/+
   503 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3116    900 S   0.0  0.1   0:00.26 queueproc+
   507 root      20   0   52852    336    248 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:09.28 /usr/bin/+
   519 nscd      20   0 1062080   1300    572 S   0.0  0.1   0:14.49 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    424    292 S   0.0  0.0   0:00.50 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3780    892 S   0.0  0.2   0:00.69 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.20 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  13284   2744 S   0.0  0.5   0:04.43 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.38 pure-ftpd+
   931 root      20   0   51508    460    300 S   0.0  0.0   0:00.26 /usr/sbin+
   932 root      20   0  572372    656    184 S   0.0  0.0   0:01.62 /usr/bin/+
   933 telegraf  20   0 5654048  35628   6076 S   0.0  1.5   0:10.11 /usr/loca+
   935 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.40 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.31 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112     96     12 S   0.0  0.0   0:00.56 php-fpm: +
   961 named     20   0  637992  21544   1508 S   0.0  0.9   0:10.03 /usr/sbin+
   964 root      20   0  273744   2128   1756 S   0.0  0.1   0:04.88 /usr/sbin+
   981 root      20   0  436392    192    112 S   0.0  0.0   0:00.66 php-fpm: +
   984 root      20   0  385496    200    112 S   0.0  0.0   0:00.53 php-fpm: +
   985 root      20   0  261288   2700    740 S   0.0  0.1   0:02.78 cpsrvd (S+
   989 root      20   0  392856    216    132 S   0.0  0.0   0:00.53 php-fpm: +
   992 root      20   0 1828184 439796     56 S   0.0 18.2   0:32.13 /usr/loca+
  1000 root      20   0  397344   1872    596 S   0.0  0.1   0:02.44 php-fpm: +
  1006 cpanelc+  20   0   10604   3552   2308 S   0.0  0.1   0:14.69 /usr/loca+
  1075 dovenull  20   0   46984    772    532 S   0.0  0.0   0:00.38 dovecot/p+
  1076 dovenull  20   0   48324   2432   1640 S   0.0  0.1   0:00.31 dovecot/i+
  1077 dovecot   20   0   10320    364    256 S   0.0  0.0   0:00.09 dovecot/a+
  1078 root      20   0   10452    448    284 S   0.0  0.0   0:00.22 dovecot/l+
  1079 dovenull  20   0   46984    636    368 S   0.0  0.0   0:00.28 dovecot/p+
  1080 dovenull  20   0   48000   2532   1640 S   0.0  0.1   0:00.24 dovecot/i+
  1084 root      20   0   24396   1864    496 S   0.0  0.1   0:00.13 dovecot/c+
  1088 dovecot   20   0   13568    628    452 S   0.0  0.0   0:00.04 dovecot/s+
  1121 systuser  20   0  157704   2888    960 S   0.0  0.1   0:00.09 SonarPush+
  1166 dovecot   20   0   41260   1536   1008 S   0.0  0.1   0:00.70 dovecot/a+
  1172 root      20   0  248152   3724    688 S   0.0  0.2   0:05.00 /usr/loca+
  1173 wp-tool+  20   0  387556   3444   1632 S   0.0  0.1   0:00.22 /usr/bin/+
  1174 wp-tool+  20   0  410616  18240   1684 S   0.0  0.8   0:14.99 /usr/bin/+
  1232 root      20   0  209372   7568   1856 S   0.0  0.3   0:02.33 tailwatchd
  1234 root      20   0  167452   1200    652 S   0.0  0.0   0:00.32 dnsadmin +
  1237 root      20   0  262224    628    196 S   0.0  0.0   0:00.91 cpdavd - +
  1642 root      20   0  299272    352    204 S   0.0  0.0   0:00.49 php-fpm: +
  1702 root      38  18  130416     92      0 S   0.0  0.0   0:00.04 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:01.51 /usr/sbin+
  2063 root      20   0   12852    312    156 S   0.0  0.0   0:02.08 /usr/loca+
  2064 root      20   0   12732    144     68 S   0.0  0.0   0:01.77 /usr/loca+
  2065 root      20   0   12892    332    156 S   0.0  0.0   0:01.95 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7810 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  7883 root      20   0  306476  45460   1188 S   0.0  1.9   0:02.63 spamd chi+
  7886 root      20   0  248152   2552    400 S   0.0  0.1   0:00.00 spamd chi+
 10212 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12759 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 14349 nobody    20   0  277760   9584   3424 S   0.0  0.4   0:01.31 /usr/sbin+
 16898 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16928 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 17677 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 20313 nobody    20   0  277784  10608   3612 S   0.0  0.4   0:00.48 /usr/sbin+
 20440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21326 nobody    20   0  277784   9292   3572 S   0.0  0.4   0:00.44 /usr/sbin+
 21414 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22449 nobody    20   0  277720  18188   4048 S   0.0  0.8   0:00.33 /usr/sbin+
 22577 nobody    20   0  277784  17160   3328 S   0.0  0.7   0:00.45 /usr/sbin+
 23021 nobody    20   0  277784  17352   3436 S   0.0  0.7   0:00.35 /usr/sbin+
 23292 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23372 root      20   0  108056    356    284 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.04 /usr/bin/+
 23946 root      20   0 1277056  15008    596 S   0.0  0.6   0:00.05 /usr/bin/+
 24654 nobody    20   0  277720  17624   3664 S   0.0  0.7   0:00.21 /usr/sbin+
 24669 nobody    20   0  277784  17084   3380 S   0.0  0.7   0:00.17 /usr/sbin+
 24672 nobody    20   0  277916  17496   3572 S   0.0  0.7   0:00.23 /usr/sbin+
 24735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24766 nobody    20   0  277784  15776   2140 S   0.0  0.7   0:00.21 /usr/sbin+
 24771 nobody    20   0  277784  17552   3624 S   0.0  0.7   0:00.21 /usr/sbin+
 25330 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 25500 worencom  20   0   38380   3676   2880 S   0.0  0.2   0:00.00 dovecot/i+
 25581 nobody    20   0  277784  17704   3704 S   0.0  0.7   0:00.08 /usr/sbin+
 25594 nobody    20   0  277784  17068   3332 S   0.0  0.7   0:00.08 /usr/sbin+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25746 nobody    20   0  277784  15760   2124 S   0.0  0.7   0:00.16 /usr/sbin+
 25798 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 25799 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 25861 nobody    20   0  277784  17216   3508 S   0.0  0.7   0:00.06 /usr/sbin+
 25879 nobody    20   0  277784  16988   3280 S   0.0  0.7   0:00.07 /usr/sbin+
 25881 nobody    20   0  277588  17344   3588 S   0.0  0.7   0:00.10 /usr/sbin+
 26161 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 26162 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 26178 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 26289 nigeria   20   0  480224  20268   6196 S   0.0  0.8   0:00.21 php-fpm: +
 26521 root      20   0  111304   4452   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 26522 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 26594 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 26598 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 26674 nobody    20   0  277652  16812   3296 S   0.0  0.7   0:00.00 /usr/sbin+
 26676 nigeria   20   0  416216  25980   3888 S   0.0  1.1   0:00.19 php-fpm: +
 26685 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 26686 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 26695 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 26696 nobody    20   0  277392  16228   3008 S   0.0  0.7   0:00.01 /usr/sbin+
 26697 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 26698 nobody    20   0  277408  16200   2856 S   0.0  0.7   0:00.00 /usr/sbin+
 26699 nobody    20   0  277364  15736   2456 S   0.0  0.7   0:00.00 /usr/sbin+
 26703 healtho+  20   0  439788  50340   4104 S   0.0  2.1   0:00.42 php-fpm: +
 26706 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 26707 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 26708 mailnull  20   0   89504   4240   1132 S   0.0  0.2   0:00.00 /usr/sbin+
 26709 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26710 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26712 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26713 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26714 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26716 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26718 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26719 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26721 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 26723 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 26724 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 26726 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 26740 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 26741 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26743 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26745 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 26746 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 26747 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26749 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26750 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26755 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 26760 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26763 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 26767 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 26769 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 26791 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 26796 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 26802 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26803 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.27 [kworker]
 76167 root      20   0  181464   6728   1092 S   0.0  0.3   0:03.72 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:18  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root       7810  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/1:1]
root      10212  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/0:2]
root      12759  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:3]
root      16898  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/0:1]
root      16928  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/1:2]
root      17677  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:4]
root      20440  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:1]
root      21414  0.0  0.0      0     0 ?        S    00:58   0:00  \_ [kworker/0:0]
root      24735  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/0:4]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44428  3604 ?        Ss   Nov12   0:25 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  40240  2016 ?        Ss   Nov12   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   152 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    60 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3116 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   336 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1300 ?        Ssl  Nov12   0:14 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   424 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   356 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      26709  0.0  0.0 183048  2140 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26723  0.0  0.0 113284  1208 ?        Ss   01:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      26724  0.0  0.0 108052   356 ?        S    01:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      26726  0.0  0.0 113288  1516 ?        S    01:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      26806  0.0  0.0 153840  2092 ?        R    01:03   0:00  |               \_ ps auxf
root      26710  0.0  0.0 183048  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26743  0.0  0.0  20164   988 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      26712  0.0  0.0 183048  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26741  0.0  0.0  20164   808 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      26713  0.0  0.0 183048  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26740  0.0  0.0  20164   984 ?        Ss   01:03   0:00  |   \_ jailshell (cloudsms) [26802] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  26802  0.0  0.0  20164   260 ?        S    01:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  26803  0.0  0.0 113284  1212 ?        S    01:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  26804  1.0  0.6 400652 15412 ?        S    01:03   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      26714  0.0  0.0 183048  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26747  0.0  0.0  20164   808 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      26716  0.0  0.0 183048  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26750  0.0  0.0  20164   804 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      26718  0.0  0.0 183048  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26749  0.0  0.0  20164   804 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      26719  0.0  0.0 183048  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26745  0.0  0.0  20164   964 ?        Ss   01:03   0:00  |   \_ jailshell (pactpay) [26755] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26755  0.0  0.0  20164   256 ?        S    01:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26767  2.0  0.7 476724 17480 ?        S    01:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      26721  0.0  0.0 183048  2136 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      26746  0.0  0.0  20164   964 ?        Ss   01:03   0:00      \_ jailshell (nigeria) [26760] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26760  0.0  0.0  20164   260 ?        S    01:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26771  5.0  0.6 400652 15932 ?        S    01:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3780 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  26708  0.0  0.1  89504  4240 ?        S    01:03   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13284 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984   772 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2432 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   364 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   448 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984   636 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2532 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24396  1864 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   628 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1536 ?        S    Nov12   0:00  \_ dovecot/auth
root      25330  0.0  0.1  41052  2728 ?        S    01:01   0:00  \_ dovecot/auth -w
worencom  25500  0.0  0.1  38380  3676 ?        S    01:01   0:00  \_ dovecot/imap
root        932  0.0  0.0 572372   656 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 35628 ?       SLsl Nov12   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400     0 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      25798  0.0  0.2 162436  5836 ?        Ss   01:02   0:00  \_ sshd: root [priv]
sshd      25799  0.0  0.1 115644  2628 ?        S    01:02   0:00  |   \_ sshd: root [net]
root      26161  0.0  0.1 111304  4268 ?        Ss   01:02   0:00  \_ sshd: [accepted]
root      26162  0.0  0.1 111304  4272 ?        Ss   01:02   0:00  \_ sshd: [accepted]
root      26178  0.0  0.1 111304  4272 ?        Ss   01:02   0:00  \_ sshd: [accepted]
root      26521  0.0  0.1 111304  4452 ?        Ss   01:02   0:00  \_ sshd: [accepted]
sshd      26522  0.0  0.1 115644  2632 ?        S    01:02   0:00  |   \_ sshd: [net]
root      26594  0.0  0.2 157100  5076 ?        Ss   01:02   0:00  \_ sshd: unknown [priv]
sshd      26598  0.0  0.1 115644  2624 ?        S    01:02   0:00  |   \_ sshd: unknown [net]
root      26706  0.0  0.1 111304  4448 ?        Ss   01:03   0:00  \_ sshd: [accepted]
sshd      26707  0.0  0.1 115644  2632 ?        S    01:03   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268     4 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112    96 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  0.8 637992 21544 ?        Ssl  Nov12   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.0 273744  2128 ?        Ssl  Nov12   0:04 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   192 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   200 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 261288  2700 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      26695  0.0  0.0      0     0 ?        Z    01:03   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   216 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 18.1 1828184 439796 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1872 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   26289  1.3  0.8 480224 20268 ?        S    01:02   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   26676  6.3  1.0 416216 25980 ?        S    01:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  26703 42.0  2.0 439788 50340 ?        S    01:03   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cpanelc+   1006  0.0  0.1  10604  3552 ?        Rs   Nov12   0:14 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2888 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.1 248152  3724 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  1.8 306476 45460 ?        S    Nov12   0:02  \_ spamd child
root       7886  0.0  0.1 248152  2552 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3444 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18240 ?        Ss   Nov12   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  7568 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.0 167452  1200 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.0 262224   628 ?        Ss   Nov12   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   352 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416    92 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3  8.1 1457796 197012 ?      Sl   Nov12   4:08 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12852   312 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   144 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12892   332 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    14349  0.1  0.3 277760  9584 ?        S    00:49   0:01  \_ /usr/sbin/httpd -k start
nobody    20313  0.1  0.4 277784 10608 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    21326  0.1  0.3 277784  9292 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    21327  0.1  0.4 277784 10268 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    22449  0.1  0.7 277720 18188 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody    22577  0.2  0.7 277784 17160 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody    23021  0.1  0.7 277784 17352 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody    24654  0.1  0.7 277720 17624 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody    24669  0.1  0.7 277784 17084 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    24672  0.1  0.7 277916 17496 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    26763  1.0  0.6 352096 15236 ?        S    01:03   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    24766  0.1  0.6 277784 15776 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    24771  0.1  0.7 277784 17552 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    25581  0.1  0.7 277784 17704 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    25594  0.1  0.7 277784 17068 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25746  0.2  0.6 277784 15760 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25861  0.1  0.7 277784 17216 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25879  0.1  0.7 277784 16988 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25881  0.2  0.7 277588 17344 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
cloudw    26769  0.0  0.6 352096 15236 ?        S    01:03   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    26674  0.0  0.6 277652 16812 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    26685  0.0  0.6 277640 15520 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    26686  0.0  0.6 277640 15520 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    26696  1.0  0.6 277392 16228 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    26697  0.0  0.6 277640 15528 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    26698  0.0  0.6 277408 16200 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    26699  0.0  0.6 277364 15736 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
cloudw    26791  1.0  0.6 352096 15232 ?        S    01:03   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.2 181464  6732 ?        Ss   00:00   0:03 lfd - sleeping
root      26807  0.0  0.2 181464  5636 ?        R    01:03   0:00  \_ lfd - scanning log files
root      26808  0.0  0.2 181464  5636 ?        R    01:03   0:00  \_ lfd - scanning log files
root      26809  0.0  0.5 181464 13932 ?        R    01:03   0:00  \_ lfd - (child) closing
root      23911  0.0  0.4 1276100 10744 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.6 1277056 15008 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 18003  Threads: 4  Questions: 1501065  Slow queries: 0  Opens: 5922  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.378
*************************** 1. row ***************************
     Id: 21167
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 21168
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 21177
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 148.113.130.116 TIME_WAIT
      1 17.246.23.119 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 31.56.130.239 TIME_WAIT
      1 45.138.249.127 TIME_WAIT
      1 66.249.70.161 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 84.37.181.36 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 74.82.47.3 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:03:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 59 minutes 58 seconds
   Server load: 1.41 1.13 0.77
   Total accesses: 92268 - Total Traffic: 2.5 GB - Total Duration: 45998151
   CPU Usage: u4 s2.96 cu1186.68 cs944.06 - 11.9% CPU load
   5.13 requests/sec - 144.3 kB/second - 28.1 kB/request - 498.528 ms/request
   29 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

WKKKKKKKKKKKKKWKKCWKKKK_K__WKKK_K...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  26674 1/2/4623   W 0.00 0     0   2285942 30.4  0.04  117.57 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /q=75/101105/20230912_174750.jpg HTTP/1.1
   1-0  26685 1/1/4602   K 0.00 1     450 2107149 30.7  0.03  111.84 66.249.70.142   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3942339330 HTTP/1.1
   2-0  22449 1/56/4458  K 1.48 3     679 2319192 13.0  1.92  132.43 104.243.208.223 http/1.1 nigeriadecide.org:443      GET /blog/dont-stop-our-rallies-apc-tells-inec/ HTTP/1.1
   3-0  26686 1/1/4568   K 0.00 1     318 2404913 28.8  0.03  135.10 66.249.70.7     http/1.1 schoolplus.cloudware.ng:80 GET /?p=2248787084 HTTP/1.1
   4-0  26696 1/1/4365   K 0.01 1     34  2125644 12.7  0.01  113.46 207.46.13.155   http/1.1 cloudsms.com.ng:443        GET /sendtoall.php/recharge/SendToAll/blog.php HTTP/1.1
   5-0  22577 5/72/4560  K 2.05 4     256 2335020 154.0 2.10  146.24 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1376336183 HTTP/1.1
   6-0  26697 1/1/4275   K 0.00 0     362 2154946 28.7  0.03  115.42 66.249.64.6     http/1.1 schoolplus.cloudware.ng:80 GET /?p=2102373729 HTTP/1.1
   7-0  14349 9/227/4993 K 6.10 3     328 2321774 276.2 5.88  133.27 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=10104340 HTTP/1.1
   8-0  25581 3/13/3775  K 0.32 2     429 1910635 90.9  0.36  98.12  66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3718450700 HTTP/1.1
   9-0  24654 1/37/3997  K 0.92 2     9   2015628 9.9   1.15  107.66 95.108.213.99   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Kano&lga=Kibiya HTTP/1.1
   10-0 25594 1/13/4169  K 0.32 3     278 2016364 30.3  0.34  116.91 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2537395757 HTTP/1.1
   11-0 26698 1/1/4400   K 0.00 0     612 2224166 23.3  0.02  144.24 45.41.165.68    http/1.1 health.oyostate.gov.ng:443 GET /portfolio/oyo-govt-distributes-over-5m-mosquito-nets/ HTTP
   12-0 24669 1/28/3932  K 0.76 4     301 1882998 31.0  0.81  98.46  66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2974838263 HTTP/1.1
   13-0 26699 1/3/3210   K 0.02 0     407 1468942 30.9  0.05  75.52  66.249.64.230   http/1.1 schoolplus.cloudware.ng:80 GET /?p=495860285 HTTP/1.1
   14-0 26812 0/0/3376   W 0.00 0     0   1726095 0.0   0.00  105.03 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 25861 1/11/2781  K 0.24 1     456 1385450 30.9  0.29  71.73  66.249.70.139   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1207914032 HTTP/1.1
   16-0 24672 1/39/4065  K 1.03 0     500 1997891 29.1  1.27  109.47 66.249.64.2     http/1.1 schoolplus.cloudware.ng:80 GET /?p=3549251995 HTTP/1.1
   17-0 26813 1/1/4652   C 0.00 0     29  2384526 9.3   0.01  137.34 44.205.192.249  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/assets/css/blog/blog
   18-0 26814 0/0/2002   W 0.00 0     0   1092169 0.0   0.00  55.16  66.249.70.169   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2417732571 HTTP/1.1
   19-0 20313 9/82/2629  K 2.19 4     281 1378202 273.5 2.12  72.76  66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1955960091 HTTP/1.1
   20-0 25746 7/26/1407  K 0.74 3     292 737431  214.2 0.78  36.36  66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3848156590 HTTP/1.1
   21-0 24766 1/34/1484  K 0.96 4     303 787594  31.9  1.02  43.02  66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=979485082 HTTP/1.1
   22-0 25879 2/12/1569  K 0.29 3     313 838209  62.7  0.34  51.43  66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3248583794 HTTP/1.1
   23-0 26815 0/0/1015   _ 0.00 0     0   509351  0.0   0.00  23.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 25881 1/19/1949  K 0.41 0     492 767192  30.5  0.65  42.33  66.249.70.33    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2273965104 HTTP/1.1
   25-0 26816 0/0/917    _ 0.00 0     0   476606  0.0   0.00  25.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 26817 0/0/389    _ 0.00 0     0   211250  0.0   0.00  10.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 26818 0/0/397    W 0.00 0     0   220001  0.0   0.00  11.79  66.249.70.67    http/1.1 schoolplus.cloudware.ng:80 GET /?p=874172967 HTTP/1.1
   28-0 24771 2/36/1293  K 0.92 1     412 554783  65.1  0.96  29.40  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3157602331 HTTP/1.1
   29-0 21326 5/71/253   K 2.31 4     274 149231  153.8 2.05  6.81   66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=492542115 HTTP/1.1
   30-0 21327 1/84/511   K 2.27 0     410 248640  30.0  2.20  11.13  66.249.70.8     http/1.1 schoolplus.cloudware.ng:80 GET /?p=2707652033 HTTP/1.1
   31-0 26819 0/0/172    _ 0.00 0     0   95914   0.0   0.00  4.79   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 23021 1/58/81    K 1.63 2     263 47764   30.9  1.69  2.21   66.249.64.131   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4127592242 HTTP/1.1
   33-0 -     0/0/60     . 0.00 26    0   34286   0.0   0.00  1.48   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/71     . 0.00 17172 0   43033   0.0   0.00  1.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/2      . 0.00 17453 305 1157    0.0   0.00  0.06   66.249.70.100   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3584359384 HTTP/1.1
   36-0 -     0/0/19     . 0.00 17383 0   12232   0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/69     . 0.00 17174 0   41923   0.0   0.00  1.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/2      . 0.00 17456 0   993     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 17448 0   910     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1107   . 0.00 13481 0   644340  0.0   0.00  31.91  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00 17455 0   924     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 17441 0   1967    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41     . 0.00 17325 0   25843   0.0   0.00  1.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18     . 0.00 17382 0   8912    0.0   0.00  0.42   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 317
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 34 seconds, (range: 3...202)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 26101
   total entries replaced since starting: 0
   total entries expired since starting: 25775
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 147 miss
   total removes since starting: 9 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit