403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.06.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.06 load[0] mem[60/69] mysql[1/8] httpd[27]
              total        used        free      shared  buff/cache   available
Mem:           2363        1395          76          15         892         790
Swap:          1999        1540         459
 01:06:02 up  5:03,  0 users,  load average: 0.33, 0.73, 0.68
## system overview
top - 01:06:02 up  5:03,  0 users,  load average: 0.33, 0.73, 0.68
Tasks: 211 total,   1 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 31.2 sy,  0.0 ni, 12.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   111484 free,  1418168 used,   890648 buff/cache
KiB Swap:  2047996 total,   469420 free,  1578576 used.   819920 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 199996   4472 S  62.5  8.3   4:10.28 /usr/sbin+
 29683 pactpay   20   0  476724  17108  11408 S  12.5  0.7   0:00.02 /opt/cpan+
 29689 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44428   3604   1692 S   6.2  0.1   0:26.01 /usr/lib/+
    36 root      20   0       0      0      0 S   6.2  0.0   0:23.20 [kswapd0]
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.20 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.85 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:18.44 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.80 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.38 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.40 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.22 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.10 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.85 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   2544   2308 S   0.0  0.1   0:10.59 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    152     44 S   0.0  0.0   0:01.66 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.15 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.40 /usr/sbin+
   501 polkitd   20   0  612240    840    560 S   0.0  0.0   0:02.46 /usr/lib/+
   503 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3116    900 S   0.0  0.1   0:00.26 queueproc+
   507 root      20   0   52852    336    248 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:09.37 /usr/bin/+
   519 nscd      20   0 1062080   1304    576 S   0.0  0.1   0:14.68 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    424    292 S   0.0  0.0   0:00.51 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3804    892 S   0.0  0.2   0:00.69 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.20 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  13284   2744 S   0.0  0.5   0:04.48 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.38 pure-ftpd+
   931 root      20   0   51508    460    300 S   0.0  0.0   0:00.26 /usr/sbin+
   932 root      20   0  572372    656    184 S   0.0  0.0   0:01.64 /usr/bin/+
   933 telegraf  20   0 5654048  35776   6092 S   0.0  1.5   0:10.21 /usr/loca+
   935 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.41 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.35 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112     96     12 S   0.0  0.0   0:00.56 php-fpm: +
   961 named     20   0  637992  22236   1588 S   0.0  0.9   0:10.13 /usr/sbin+
   964 root      20   0  273744   2608   2228 S   0.0  0.1   0:04.93 /usr/sbin+
   981 root      20   0  436392    400    312 S   0.0  0.0   0:00.66 php-fpm: +
   984 root      20   0  385496    200    112 S   0.0  0.0   0:00.53 php-fpm: +
   985 root      20   0  261288   2944    772 S   0.0  0.1   0:02.80 cpsrvd (S+
   989 root      20   0  392856    216    132 S   0.0  0.0   0:00.54 php-fpm: +
   992 root      20   0 1828184 433892     56 S   0.0 17.9   0:32.13 /usr/loca+
  1000 root      20   0  397344   1872    596 S   0.0  0.1   0:02.46 php-fpm: +
  1006 cpanelc+  20   0   10604   3552   2308 S   0.0  0.1   0:14.84 /usr/loca+
  1075 dovenull  20   0   46984    772    532 S   0.0  0.0   0:00.38 dovecot/p+
  1076 dovenull  20   0   48324   2572   1660 S   0.0  0.1   0:00.32 dovecot/i+
  1077 dovecot   20   0   10320    364    256 S   0.0  0.0   0:00.09 dovecot/a+
  1078 root      20   0   10452    448    284 S   0.0  0.0   0:00.23 dovecot/l+
  1079 dovenull  20   0   46984    636    368 S   0.0  0.0   0:00.29 dovecot/p+
  1080 dovenull  20   0   48000   2532   1640 S   0.0  0.1   0:00.24 dovecot/i+
  1084 root      20   0   24528   1864    496 S   0.0  0.1   0:00.13 dovecot/c+
  1088 dovecot   20   0   13568    628    452 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2888    960 S   0.0  0.1   0:00.09 SonarPush+
  1166 dovecot   20   0   41260   1536   1008 S   0.0  0.1   0:00.71 dovecot/a+
  1172 root      20   0  248152   3724    688 S   0.0  0.2   0:05.02 /usr/loca+
  1173 wp-tool+  20   0  387556   3528   1660 S   0.0  0.1   0:00.22 /usr/bin/+
  1174 wp-tool+  20   0  410616  18240   1684 S   0.0  0.8   0:15.13 /usr/bin/+
  1232 root      20   0  209372   8288   2008 S   0.0  0.3   0:02.34 tailwatchd
  1234 root      20   0  167452   1200    652 S   0.0  0.0   0:00.34 dnsadmin +
  1237 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.92 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.49 php-fpm: +
  1702 root      38  18  130416   1340    684 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:01.56 /usr/sbin+
  2063 root      20   0   12764    380    212 S   0.0  0.0   0:02.11 /usr/loca+
  2064 root      20   0   12732    260    180 S   0.0  0.0   0:01.79 /usr/loca+
  2065 root      20   0   12772    388    216 S   0.0  0.0   0:01.97 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7810 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  7883 root      20   0  306476  45628   1192 S   0.0  1.9   0:02.66 spamd chi+
  7886 root      20   0  248152   2552    400 S   0.0  0.1   0:00.00 spamd chi+
 10212 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12759 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 16898 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16928 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 17677 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 20440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21327 nobody    20   0  277720  10852   3820 S   0.0  0.4   0:00.85 /usr/sbin+
 21414 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23292 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23372 root      20   0  108056    356    284 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.05 /usr/bin/+
 23946 root      20   0 1277056  11760    596 S   0.0  0.5   0:00.05 /usr/bin/+
 24669 nobody    20   0  277720  17688   3724 S   0.0  0.7   0:00.50 /usr/sbin+
 24735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24771 nobody    20   0  277784  18216   3968 S   0.0  0.8   0:00.49 /usr/sbin+
 25500 worencom  20   0   38380   3668   2872 S   0.0  0.2   0:00.00 dovecot/i+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26685 nobody    20   0  277720  17808   3780 S   0.0  0.7   0:00.29 /usr/sbin+
 26698 nobody    20   0  277628  17532   3608 S   0.0  0.7   0:00.31 /usr/sbin+
 26913 nobody    20   0  277784  17176   3416 S   0.0  0.7   0:00.28 /usr/sbin+
 27556 nobody    20   0  277784  17420   3672 S   0.0  0.7   0:00.19 /usr/sbin+
 27696 nobody    20   0  277784  17552   3656 S   0.0  0.7   0:00.18 /usr/sbin+
 27734 nobody    20   0  277784  17640   3628 S   0.0  0.7   0:00.20 /usr/sbin+
 27767 nobody    20   0  277784  17480   3700 S   0.0  0.7   0:00.16 /usr/sbin+
 28199 nobody    20   0  277784  17328   3564 S   0.0  0.7   0:00.16 /usr/sbin+
 28495 nobody    20   0  277784  17332   3560 S   0.0  0.7   0:00.07 /usr/sbin+
 28505 nobody    20   0  277784  15756   2124 S   0.0  0.7   0:00.09 /usr/sbin+
 28517 nobody    20   0  277784  16892   3180 S   0.0  0.7   0:00.11 /usr/sbin+
 28555 nobody    20   0  277784  17176   3392 S   0.0  0.7   0:00.09 /usr/sbin+
 28844 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 28978 nobody    20   0  277784  16864   2984 S   0.0  0.7   0:00.09 /usr/sbin+
 28979 nobody    20   0  277784  16980   3272 S   0.0  0.7   0:00.07 /usr/sbin+
 28995 nobody    20   0  277784  17404   3560 S   0.0  0.7   0:00.07 /usr/sbin+
 29021 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 29028 nigeria   20   0  397064   4728   2480 S   0.0  0.2   0:00.03 php-fpm: +
 29316 mailnull  20   0   89504   5860   2588 S   0.0  0.2   0:00.00 /usr/sbin+
 29523 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 29560 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 29568 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29569 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29582 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29583 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29584 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29585 nobody    20   0  277772  15668   2156 S   0.0  0.6   0:00.00 /usr/sbin+
 29596 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 29599 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 29602 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29603 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29604 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 29605 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 29606 nobody    20   0  277364  14888   1832 S   0.0  0.6   0:00.00 /usr/sbin+
 29607 nobody    20   0  277224  15144   2156 S   0.0  0.6   0:00.00 /usr/sbin+
 29608 nobody    20   0  277092  14860   1888 S   0.0  0.6   0:00.00 /usr/sbin+
 29609 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 29616 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 29618 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29620 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29621 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29622 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29623 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29624 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29625 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29626 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29628 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 29630 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 29632 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 29633 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 29634 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 29647 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 29660 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 29664 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29665 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29667 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29669 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29670 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29671 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29673 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29674 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 29675 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29682 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 29686 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 29694 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.27 [kworker]
 76167 root      20   0  181568   6924   1104 S   0.0  0.3   0:03.88 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:18  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root       7810  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/1:1]
root      10212  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/0:2]
root      12759  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:3]
root      16898  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/0:1]
root      16928  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/1:2]
root      17677  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:4]
root      20440  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:1]
root      21414  0.0  0.0      0     0 ?        S    00:58   0:00  \_ [kworker/0:0]
root      24735  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/0:4]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44428  3604 ?        Ss   Nov12   0:26 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  2544 ?        Ss   Nov12   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   152 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    60 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3116 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   336 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1304 ?        Ssl  Nov12   0:14 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   424 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   356 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      29616  0.0  0.0 183048  2140 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29632  0.0  0.0 113284  1212 ?        Ss   01:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      29633  0.0  0.0 108052   356 ?        S    01:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      29634  0.0  0.0 113288  1516 ?        S    01:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      29707  0.0  0.0 153840  2092 ?        R    01:06   0:00  |               \_ ps auxf
root      29618  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29671  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      29620  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29670  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      29621  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29667  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      29622  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29675  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      29623  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29669  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      29624  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29665  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      29625  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29673  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      29626  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29664  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      29628  0.0  0.0 183048  2140 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29660  0.0  0.0  20164   960 ?        Ss   01:06   0:00  |   \_ jailshell (pactpay) [29682] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   29682  0.0  0.0  20164   256 ?        S    01:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   29683  0.0  0.7 476724 17108 ?        R    01:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      29630  0.0  0.0 183048  2136 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      29674  0.0  0.0  20164   960 ?        Ss   01:06   0:00      \_ jailshell (nigeria) [29686] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   29686  0.0  0.0  20164   256 ?        S    01:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   29689  0.0  0.6 400652 15940 ?        R    01:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3804 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  29316  0.0  0.2  89504  5860 ?        S    01:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13284 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984   772 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2572 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   364 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   448 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984   636 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2532 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  1864 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   628 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1536 ?        S    Nov12   0:00  \_ dovecot/auth
worencom  25500  0.0  0.1  38380  3668 ?        S    01:01   0:00  \_ dovecot/imap
root      28844  0.0  0.1  60820  4512 ?        S    01:05   0:00  \_ dovecot/lmtp
root      29021  0.0  0.1  41052  2728 ?        S    01:05   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372   656 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 35776 ?       SLsl Nov12   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400     0 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      29523  0.0  0.1 111304  4272 ?        Ss   01:05   0:00  \_ sshd: [accepted]
root      29599  0.0  0.1 111304  4268 ?        Ss   01:06   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268     4 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112    96 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  0.9 637992 22236 ?        Ssl  Nov12   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 273744  2608 ?        Ssl  Nov12   0:04 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   400 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   200 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 261288  2944 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      29596  0.0  0.0      0     0 ?        Z    01:06   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   216 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 17.9 1828184 433892 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1872 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   29028  0.0  0.1 397064  4728 ?        S    01:05   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10604  3552 ?        Ss   Nov12   0:14 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2888 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.1 248152  3724 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  1.8 306476 45628 ?        S    Nov12   0:02  \_ spamd child
root       7886  0.0  0.1 248152  2552 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3528 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18240 ?        Ss   Nov12   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8288 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.0 167452  1200 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6692 ?        Ss   Nov12   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1340 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3  8.2 1457796 199996 ?      Sl   Nov12   4:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12764   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   260 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12772   388 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    21327  0.1  0.4 277720 10852 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    24669  0.1  0.7 277720 17688 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    24771  0.1  0.7 277784 18216 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    26685  0.1  0.7 277720 17808 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    26698  0.1  0.7 277628 17532 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    26913  0.1  0.7 277784 17176 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    27556  0.1  0.7 277784 17420 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    27696  0.1  0.7 277784 17552 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    27734  0.1  0.7 277784 17640 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    27767  0.1  0.7 277784 17480 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28199  0.1  0.7 277784 17328 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28495  0.1  0.7 277784 17332 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28505  0.1  0.6 277784 15756 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28517  0.1  0.6 277784 16892 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28555  0.1  0.7 277784 17176 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28978  0.1  0.6 277784 16864 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28979  0.1  0.7 277784 16980 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28995  0.1  0.7 277784 17404 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29560  0.0  0.6 277640 15528 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29568  0.0  0.6 277640 15520 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29569  0.0  0.6 277640 15520 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29582  0.0  0.6 277640 15520 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29583  0.0  0.6 277640 15520 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29584  0.0  0.6 277640 15520 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29585  0.0  0.6 277772 15668 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    29602  0.0  0.6 277640 15520 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29603  0.0  0.6 277640 15520 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29604  0.0  0.5 277092 13584 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29605  0.0  0.6 277640 15520 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29606  0.0  0.6 277364 14888 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    29647  0.0  0.6 352096 15232 ?        S    01:06   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    29607  0.0  0.6 277224 15144 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29608  0.0  0.6 277092 14860 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    29609  0.0  0.5 277092 13584 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.2 181568  6924 ?        Ss   00:00   0:03 lfd - sleeping
root      23911  0.0  0.4 1276100 10744 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11760 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 18183  Threads: 3  Questions: 1513447  Slow queries: 0  Opens: 5947  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.234
*************************** 1. row ***************************
     Id: 21337
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 2. row ***************************
     Id: 21339
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `13` WHERE `phone`='2348179092255' LIMIT 1
*************************** 3. row ***************************
     Id: 21345
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 142.147.167.106 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.203.100 TIME_WAIT
      1 54.39.203.140 TIME_WAIT
      1 66.249.64.128 TIME_WAIT
      1 66.249.70.100 TIME_WAIT
      1 66.249.70.167 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:06:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 2 minutes 58 seconds
   Server load: 0.33 0.73 0.68
   Total accesses: 93374 - Total Traffic: 2.5 GB - Total Duration: 46620854
   CPU Usage: u3.13 s2.63 cu1202.84 cs958.19 - 11.9% CPU load
   5.14 requests/sec - 144.6 kB/second - 28.1 kB/request - 499.292 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

_KK_KKKK__KKKKKK_K_KKKKWKKK___KW.K..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  28495 0/15/4656 _ 0.31 0     274 2300772 0.0  0.38  118.34 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3889357465 HTTP/1.1
   1-0  26685 1/48/4649 K 1.29 2     265 2136370 29.9 1.54  113.35 66.249.70.7   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1975792519 HTTP/1.1
   2-0  29560 1/1/4477  K 0.00 3     295 2327499 29.7 0.03  132.80 66.249.64.42  http/1.1 schoolplus.cloudware.ng:80 GET /?p=281629473 HTTP/1.1
   3-0  27556 0/33/4603 _ 0.82 1     280 2424260 0.0  0.91  136.04 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2885912001 HTTP/1.1
   4-0  29568 1/1/4396  K 0.00 2     271 2139738 30.0 0.03  114.16 66.249.64.44  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2981978928 HTTP/1.1
   5-0  27696 1/31/4596 K 0.82 0     358 2353857 30.1 0.89  147.16 66.249.70.133 http/1.1 schoolplus.cloudware.ng:80 GET /?p=222631882 HTTP/1.1
   6-0  27734 1/37/4314 K 0.85 3     280 2176221 30.8 0.91  116.35 66.249.70.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3326277960 HTTP/1.1
   7-0  29569 1/1/5031  K 0.00 2     308 2342554 31.3 0.03  134.25 66.249.64.105 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1075453623 HTTP/1.1
   8-0  28199 0/28/3823 _ 0.69 0     266 1936272 0.0  0.75  99.36  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2446852730 HTTP/1.1
   9-0  28505 0/14/4030 _ 0.38 0     277 2035651 0.0  0.42  108.56 66.249.70.172 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1211477528 HTTP/1.1
   10-0 29582 1/1/4181  K 0.00 1     300 2021213 31.4 0.03  117.18 66.249.70.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=401200358 HTTP/1.1
   11-0 26698 1/51/4450 K 1.39 4     268 2256385 30.7 2.03  146.24 66.249.70.8   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2207316394 HTTP/1.1
   12-0 24669 1/82/3986 K 2.25 2     287 1915807 31.7 2.52  100.17 192.178.4.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3306242420 HTTP/1.1
   13-0 29583 1/1/3242  K 0.00 1     277 1487045 30.7 0.03  76.39  66.249.70.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2903649027 HTTP/1.1
   14-0 29584 1/1/3405  K 0.00 1     281 1742942 30.2 0.03  105.78 66.249.64.108 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3513285545 HTTP/1.1
   15-0 29585 1/2/2792  K 0.00 1     281 1388092 30.3 0.03  71.87  66.249.70.108 http/1.1 schoolplus.cloudware.ng:80 GET /?p=621930604 HTTP/1.1
   16-0 27767 0/27/4094 _ 0.66 0     305 2013510 0.0  0.70  110.21 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3214441182 HTTP/1.1
   17-0 28517 1/18/4672 K 0.49 3     295 2396041 30.5 0.52  137.89 66.249.70.6   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2638989639 HTTP/1.1
   18-0 28555 0/17/2023 _ 0.40 0     407 1103397 0.0  0.46  55.66  66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=879974216 HTTP/1.1
   19-0 29602 1/1/2674  K 0.00 0     336 1407494 30.0 0.03  74.25  66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1576701757 HTTP/1.1
   20-0 29603 1/1/1412  K 0.00 0     367 739389  30.9 0.03  36.45  66.249.64.7   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2333236823 HTTP/1.1
   21-0 28978 1/15/1501 K 0.40 2     349 798551  29.7 0.43  43.48  66.249.64.173 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1941745085 HTTP/1.1
   22-0 28979 1/14/1615 K 0.33 1     298 866024  30.4 0.39  52.87  66.249.64.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1958092139 HTTP/1.1
   23-0 29604 0/0/1050  W 0.00 0     0   528635  0.0  0.00  24.67  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 29605 1/1/1986  K 0.00 0     359 789146  29.2 0.03  43.31  66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1366639844 HTTP/1.1
   25-0 29606 1/1/941   K 0.00 0     382 489781  30.3 0.03  26.12  66.249.64.168 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1598618264 HTTP/1.1
   26-0 28995 1/12/404  K 0.30 3     270 219909  30.3 0.35  10.86  66.249.70.5   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3696201379 HTTP/1.1
   27-0 29607 0/1/428   _ 0.00 0     1   237329  0.0  0.02  12.60  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   28-0 24771 0/85/1342 _ 2.41 0     293 581586  0.0  2.24  30.68  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1103851604 HTTP/1.1
   29-0 29608 0/1/300   _ 0.00 0     10  177134  0.0  0.01  8.06   3.221.156.96  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/blog/blog/blo
   30-0 21327 3/147/574 K 4.05 2     261 286244  92.6 4.14  13.07  66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2985519124 HTTP/1.1
   31-0 29609 0/0/199   W 0.00 0     0   110180  0.0  0.00  5.47   66.249.70.35  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2512248662 HTTP/1.1
   32-0 -     0/0/83    . 0.00 173   0   47812   0.0  0.00  2.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 26913 1/46/106  K 1.21 1     322 61757   30.5 1.27  2.75   66.249.64.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2541683852 HTTP/1.1
   34-0 -     0/0/71    . 0.00 17352 0   43033   0.0  0.00  1.97   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/2     . 0.00 17633 305 1157    0.0  0.00  0.06   66.249.70.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3584359384 HTTP/1.1
   36-0 -     0/0/19    . 0.00 17563 0   12232   0.0  0.00  0.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/69    . 0.00 17354 0   41923   0.0  0.00  1.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/2     . 0.00 17636 0   993     0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3     . 0.00 17628 0   910     0.0  0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1107  . 0.00 13661 0   644340  0.0  0.00  31.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3     . 0.00 17635 0   924     0.0  0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4     . 0.00 17621 0   1967    0.0  0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41    . 0.00 17505 0   25843   0.0  0.00  1.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18    . 0.00 17562 0   8912    0.0  0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 333
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 22 seconds, (range: 1...183)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 26297
   total entries replaced since starting: 0
   total entries expired since starting: 25955
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 147 miss
   total removes since starting: 9 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit