403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.15.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.15 load[0] mem[62/68] mysql[3/8] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1379          96          15         886         802
Swap:          1999        1542         457
 01:15:01 up  5:12,  0 users,  load average: 0.32, 0.44, 0.56
## system overview
top - 01:15:01 up  5:12,  0 users,  load average: 0.32, 0.44, 0.56
Tasks: 208 total,   4 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.8 us, 21.2 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   105256 free,  1406684 used,   908360 buff/cache
KiB Swap:  2047996 total,   468084 free,  1579912 used.   827872 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 205696   4536 S 125.0  8.5   4:17.20 /usr/sbin+
 38011 nigeria   20   0  400652  15936  10216 S  18.8  0.7   0:00.05 /opt/cpan+
 38085 root      20   0  160224   2340   1636 S   6.2  0.1   0:00.01 top -n 2 +
 38100 cloudsms  20   0  400784  15560  10020 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3604   1692 S   0.0  0.1   0:26.63 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.24 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.89 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:19.03 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.83 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.51 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.40 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.14 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.88 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   3920   3684 S   0.0  0.2   0:10.88 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    152     44 S   0.0  0.0   0:01.72 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.27 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.41 /usr/sbin+
   501 polkitd   20   0  612240    840    560 S   0.0  0.0   0:02.52 /usr/lib/+
   503 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3116    900 S   0.0  0.1   0:00.26 queueproc+
   507 root      20   0   52852    336    248 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:09.64 /usr/bin/+
   519 nscd      20   0 1062080   1320    592 S   0.0  0.1   0:15.26 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    428    296 S   0.0  0.0   0:00.52 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3744    832 S   0.0  0.2   0:00.69 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  13312   2688 S   0.0  0.6   0:04.61 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.39 pure-ftpd+
   931 root      20   0   51508    460    300 S   0.0  0.0   0:00.27 /usr/sbin+
   932 root      20   0  572372    656    184 S   0.0  0.0   0:01.68 /usr/bin/+
   933 telegraf  20   0 5654048  33800   5912 S   0.0  1.4   0:10.50 /usr/loca+
   935 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.42 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.42 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    336    252 S   0.0  0.0   0:00.58 php-fpm: +
   961 named     20   0  637992  24588   1600 S   0.0  1.0   0:10.42 /usr/sbin+
   964 root      20   0  273744   3812   3420 S   0.0  0.2   0:05.06 /usr/sbin+
   981 root      20   0  436392    400    312 S   0.0  0.0   0:00.67 php-fpm: +
   984 root      20   0  385496    368    280 S   0.0  0.0   0:00.56 php-fpm: +
   985 root      20   0  261288   3772    868 S   0.0  0.2   0:02.85 cpsrvd (S+
   989 root      20   0  392856    216    132 S   0.0  0.0   0:00.54 php-fpm: +
   992 root      20   0 1828184 415792      0 S   0.0 17.2   0:32.13 /usr/loca+
  1000 root      20   0  397344   1872    596 S   0.0  0.1   0:02.52 php-fpm: +
  1006 cpanelc+  20   0   10604   3548   2304 R   0.0  0.1   0:15.30 /usr/loca+
  1075 dovenull  20   0   46984    772    532 S   0.0  0.0   0:00.40 dovecot/p+
  1076 dovenull  20   0   48324   2572   1660 S   0.0  0.1   0:00.33 dovecot/i+
  1077 dovecot   20   0   10320    364    256 S   0.0  0.0   0:00.10 dovecot/a+
  1078 root      20   0   10452    448    284 S   0.0  0.0   0:00.23 dovecot/l+
  1079 dovenull  20   0   46984   2064   1528 S   0.0  0.1   0:00.30 dovecot/p+
  1080 dovenull  20   0   48000   2532   1640 S   0.0  0.1   0:00.25 dovecot/i+
  1084 root      20   0   24396   1864    496 S   0.0  0.1   0:00.13 dovecot/c+
  1088 dovecot   20   0   13568    628    452 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2888    960 S   0.0  0.1   0:00.10 SonarPush+
  1166 dovecot   20   0   41260   1544   1012 S   0.0  0.1   0:00.73 dovecot/a+
  1172 root      20   0  248152   3724    688 S   0.0  0.2   0:05.08 /usr/loca+
  1173 wp-tool+  20   0  387556   3512   1644 S   0.0  0.1   0:00.22 /usr/bin/+
  1174 wp-tool+  20   0  410616  18204   1648 S   0.0  0.8   0:15.57 /usr/bin/+
  1232 root      20   0  209372   8304   2000 S   0.0  0.3   0:02.38 tailwatchd
  1234 root      20   0  167452   1200    652 S   0.0  0.0   0:00.34 dnsadmin +
  1237 root      20   0  262224  24240   6376 S   0.0  1.0   0:01.00 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.51 php-fpm: +
  1702 root      38  18  130416   1352    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:01.69 /usr/sbin+
  2063 root      20   0   12844    380    212 S   0.0  0.0   0:02.19 /usr/loca+
  2064 root      20   0   12732    260    180 S   0.0  0.0   0:01.86 /usr/loca+
  2065 root      20   0   12876    388    216 S   0.0  0.0   0:02.05 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  45628   1192 S   0.0  1.9   0:02.69 spamd chi+
  7886 root      20   0  248152   2552    400 S   0.0  0.1   0:00.00 spamd chi+
 16898 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 17677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 20440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23292 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23372 root      20   0  108056    340    268 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.06 /usr/bin/+
 23946 root      20   0 1277056  11568    596 S   0.0  0.5   0:00.06 /usr/bin/+
 24735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 31529 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 32418 nobody    20   0  277720  18312   4008 S   0.0  0.8   0:00.55 /usr/sbin+
 32419 nobody    20   0  277784  18332   4136 S   0.0  0.8   0:00.69 /usr/sbin+
 33401 nobody    20   0  277784  17988   3884 S   0.0  0.7   0:00.48 /usr/sbin+
 34455 nobody    20   0  277720  18108   3920 S   0.0  0.7   0:00.30 /usr/sbin+
 34499 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34520 nobody    20   0  277724  17832   3684 S   0.0  0.7   0:00.47 /usr/sbin+
 35278 nobody    20   0  277784  17532   3428 S   0.0  0.7   0:00.30 /usr/sbin+
 35280 nobody    20   0  277720  18068   3820 S   0.0  0.7   0:00.28 /usr/sbin+
 35395 nobody    20   0  277720  17732   3652 S   0.0  0.7   0:00.32 /usr/sbin+
 36296 nobody    20   0  277784  17568   3764 S   0.0  0.7   0:00.16 /usr/sbin+
 36299 nobody    20   0  277784  17096   3392 S   0.0  0.7   0:00.26 /usr/sbin+
 36695 nobody    20   0  277520  17312   3624 S   0.0  0.7   0:00.12 /usr/sbin+
 37024 nobody    20   0  277784  15836   2180 S   0.0  0.7   0:00.09 /usr/sbin+
 37033 nobody    20   0  277784  17100   3232 S   0.0  0.7   0:00.11 /usr/sbin+
 37034 nobody    20   0  277784  15836   2180 S   0.0  0.7   0:00.10 /usr/sbin+
 37047 nobody    20   0  277784  15780   2144 S   0.0  0.7   0:00.14 /usr/sbin+
 37048 nobody    20   0  277784  17088   3380 S   0.0  0.7   0:00.17 /usr/sbin+
 37049 nobody    20   0  277784  17376   3584 S   0.0  0.7   0:00.08 /usr/sbin+
 37050 nobody    20   0  277916  15904   2204 S   0.0  0.7   0:00.16 /usr/sbin+
 37758 nobody    20   0  277516  17124   3576 S   0.0  0.7   0:00.01 /usr/sbin+
 37778 nobody    20   0  277512  16916   3300 S   0.0  0.7   0:00.01 /usr/sbin+
 37779 nobody    20   0  277516  16784   3192 S   0.0  0.7   0:00.02 /usr/sbin+
 37860 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 37871 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 37872 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 37905 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 37914 nobody    20   0  277788  16960   3376 S   0.0  0.7   0:00.00 /usr/sbin+
 37915 nobody    20   0  277392  15456   2180 S   0.0  0.6   0:00.00 /usr/sbin+
 37934 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 37935 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 37936 nobody    20   0  277772  15672   2160 S   0.0  0.6   0:00.00 /usr/sbin+
 37937 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 37938 nobody    20   0  277404  15836   2524 S   0.0  0.7   0:00.00 /usr/sbin+
 37945 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37946 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37947 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37949 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37950 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37951 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37952 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37953 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37954 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37955 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37956 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37957 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 37959 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 37966 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 37967 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 37969 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 37970 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 37971 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37972 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37973 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37974 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 37975 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37977 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37979 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 37982 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37983 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 37987 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 37991 root      20   0  188208  11096   5148 S   0.0  0.5   0:00.01 /usr/loca+
 37996 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 38007 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 38009 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38014 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 38091 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 38098 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38099 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 38101 nobody    20   0       4      4      0 R   0.0  0.0   0:00.00 [httpd]
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.29 [kworker]
 76167 root      20   0  181568   7164   1104 S   0.0  0.3   0:04.37 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:19  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root      16898  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/0:1]
root      17677  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:4]
root      20440  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:1]
root      24735  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/0:4]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      31529  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:1]
root      34499  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44428  3604 ?        Ss   Nov12   0:26 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  3920 ?        Ss   Nov12   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   152 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    60 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3116 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   336 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1320 ?        Ssl  Nov12   0:15 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   428 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   340 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      37945  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37966  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      37987  0.0  0.0 108052   360 ?        S    01:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      37996  0.0  0.0 113288  1516 ?        S    01:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      38102  0.0  0.0 153840  2096 ?        R    01:15   0:00  |               \_ ps auxf
root      37946  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37979  0.0  0.0  20164   988 ?        Ss   01:15   0:00  |   \_ jailshell (cloudsms) [38098] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  38098  0.0  0.0  20164   260 ?        S    01:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  38099  0.0  0.0 113284  1212 ?        S    01:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  38100  0.0  0.6 400784 15560 ?        S    01:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      37947  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37971  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      37949  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37977  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      37950  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37972  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      37951  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37982  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      37952  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37974  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      37953  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37973  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      37954  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37983  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      37955  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37975  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      37956  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37967  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      37991  0.0  0.4 188208 11096 ?        S    01:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      38085  0.0  0.0 160224  2340 ?        S    01:15   0:00  |           \_ top -n 2 -b -c
root      37957  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37969  0.0  0.0  20164   968 ?        Ss   01:15   0:00  |   \_ jailshell (pactpay) [38009] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38009  0.0  0.0  20164   260 ?        S    01:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38014  0.0  0.7 476724 17484 ?        S    01:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      37959  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      37970  0.0  0.0  20164   968 ?        Ss   01:15   0:00      \_ jailshell (nigeria) [38007] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38007  0.0  0.0  20164   256 ?        S    01:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38011  0.0  0.6 400652 15936 ?        R    01:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3744 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13312 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984   772 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2572 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   364 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   448 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984  2064 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2532 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24396  1864 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   628 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1544 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   656 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33800 ?       SLsl Nov12   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400     0 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      37871  0.0  0.1 111304  4448 ?        Ss   01:14   0:00  \_ sshd: [accepted]
sshd      37872  0.0  0.1 115644  2632 ?        S    01:14   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268     4 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   336 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.0 637992 24588 ?        Ssl  Nov12   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 273744  3812 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   400 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   368 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 261288  3772 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      37934  0.0  0.0      0     0 ?        Z    01:15   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   216 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 17.1 1828184 415792 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1872 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   37860  0.0  0.1 397064  4472 ?        S    01:14   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10604  3548 ?        Rs   Nov12   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2888 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.1 248152  3724 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  1.8 306476 45628 ?        S    Nov12   0:02  \_ spamd child
root       7886  0.0  0.1 248152  2552 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3512 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18204 ?        Ss   Nov12   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8304 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.0 167452  1200 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  1.0 262224 24240 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1352 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3  8.4 1457796 205696 ?      Sl   Nov12   4:17 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12844   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   260 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12876   388 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32418  0.1  0.7 277720 18312 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32419  0.1  0.7 277784 18332 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    33401  0.1  0.7 277784 17988 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    34455  0.1  0.7 277720 18108 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    34520  0.1  0.7 277724 17832 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35278  0.1  0.7 277784 17532 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35280  0.1  0.7 277720 18068 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    35395  0.1  0.7 277720 17732 ?        S    01:12   0:00  \_ /usr/sbin/httpd -k start
nobody    36296  0.1  0.7 277784 17568 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    36299  0.2  0.7 277784 17096 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    36695  0.1  0.7 277520 17312 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37024  0.1  0.6 277784 15836 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37033  0.1  0.7 277784 17100 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37034  0.1  0.6 277784 15836 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37047  0.2  0.6 277784 15780 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37048  0.2  0.7 277784 17088 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37049  0.1  0.7 277784 17376 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37050  0.2  0.6 277916 15904 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37758  0.0  0.7 277516 17124 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    37778  0.1  0.6 277512 16916 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    37779  0.2  0.6 277516 16784 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    37905  0.0  0.6 277640 15528 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    37914  0.0  0.7 277788 16960 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    37915  0.0  0.6 277392 15456 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody    37935  0.0  0.6 277640 15524 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    37936  0.0  0.6 277772 15672 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    37937  0.0  0.6 277640 15524 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    37938  0.0  0.6 277404 15836 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
cloudw    38101  0.0  0.6 286416 15204 ?        Rl   01:15   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.2 181568  7164 ?        Ss   00:00   0:04 lfd - sleeping
root      23911  0.0  0.4 1276100 10744 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11568 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 18722  Threads: 4  Questions: 1548874  Slow queries: 0  Opens: 6066  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.730
*************************** 1. row ***************************
     Id: 21945
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `04` WHERE `phone`='2348167205939' LIMIT 1
*************************** 2. row ***************************
     Id: 21946
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 21950
   User: cloudsms_robocal
   Host: localhost
     db: cloudsms_robocall
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM voice_queue where server = '1' LIMIT 500
*************************** 4. row ***************************
     Id: 21952
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.233.63 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.201.171.135 TIME_WAIT
      1 43.157.170.126 TIME_WAIT
      1 51.161.37.75 TIME_WAIT
      1 84.37.247.212 TIME_WAIT
      1 92.71.66.90 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     33 20.222.232.51 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:15:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 11 minutes 58 seconds
   Server load: 0.53 0.48 0.58
   Total accesses: 96906 - Total Traffic: 2.6 GB - Total Duration: 48492185
   CPU Usage: u3.64 s2.87 cu1250.8 cs999.61 - 12.1% CPU load
   5.18 requests/sec - 145.5 kB/second - 28.1 kB/request - 500.404 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

KKKKWKKKKKKKKKKKKKKKKKKKKKKW....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  36695 1/24/4752  K 0.49 3     267 2350628 28.5  0.58  120.69 66.249.70.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1920469037 HTTP/1.1
   1-0  37758 1/6/4750   K 0.01 4     262 2182465 29.0  0.05  115.56 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=818937315 HTTP/1.1
   2-0  37024 2/17/4601  K 0.37 3     264 2390365 64.3  0.43  136.20 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=470501596 HTTP/1.1
   3-0  34455 1/57/4719  K 1.26 0     386 2484703 30.1  1.48  139.23 66.249.64.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=971547246 HTTP/1.1
   4-0  34520 0/77/4517  W 2.14 0     0   2210260 0.0   2.54  117.78 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  37778 1/3/4677   K 0.03 2     300 2392969 30.1  0.05  149.17 66.249.64.105 http/1.1 schoolplus.cloudware.ng:80 GET /?p=5446802 HTTP/1.1
   6-0  37033 1/20/4402  K 1.30 3     299 2223110 29.8  0.61  118.64 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1819197692 HTTP/1.1
   7-0  37034 1/17/5145  K 0.44 2     291 2405412 31.6  0.48  137.48 66.249.64.7   http/1.1 schoolplus.cloudware.ng:80 GET /?p=644778981 HTTP/1.1
   8-0  37047 2/23/3901  K 0.64 4     299 1980756 63.2  0.68  101.55 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2005360058 HTTP/1.1
   9-0  37779 1/3/4095   K 0.04 2     273 2065589 29.2  0.06  110.02 66.249.64.165 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3848878346 HTTP/1.1
   10-0 37048 25/28/4273 K 0.77 4     315 2071990 764.1 0.81  120.01 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=470467830 HTTP/1.1
   11-0 32418 1/100/4578 K 2.40 3     316 2324399 33.1  2.45  149.34 66.249.64.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4193218600 HTTP/1.1
   12-0 37049 1/17/4135  K 0.30 3     262 1995291 29.2  0.33  104.17 66.249.64.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=454429108 HTTP/1.1
   13-0 35278 1/53/3356  K 1.32 2     346 1552969 30.8  1.42  79.76  66.249.70.165 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1373918083 HTTP/1.1
   14-0 37050 2/28/3524  K 0.71 2     311 1805455 61.3  0.74  108.74 192.178.4.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1543763772 HTTP/1.1
   15-0 32419 4/122/2936 K 3.16 3     276 1470300 122.5 3.32  75.73  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1034810692 HTTP/1.1
   16-0 35280 1/49/4175  K 1.14 3     303 2053152 32.4  1.53  112.44 66.249.70.107 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1391824065 HTTP/1.1
   17-0 36296 1/32/4807  K 0.69 3     350 2468577 28.9  0.72  141.29 66.249.64.233 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3862985294 HTTP/1.1
   18-0 37905 1/1/2127   K 0.00 2     278 1156352 29.2  0.03  58.43  66.249.64.43  http/1.1 schoolplus.cloudware.ng:80 GET /?p=220880310 HTTP/1.1
   19-0 37914 1/2/2770   K 0.00 1     412 1465088 30.9  0.04  77.04  66.249.64.168 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1080145289 HTTP/1.1
   20-0 37915 1/2/1549   K 0.00 1     293 818500  31.1  0.03  40.38  66.249.70.162 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=286391
   21-0 36299 8/42/1667  K 1.16 1     292 869475  249.7 1.22  47.21  66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=628609569 HTTP/1.1
   22-0 35395 1/57/1715  K 1.75 1     266 927072  28.9  1.69  55.73  66.249.64.173 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3989395874 HTTP/1.1
   23-0 37935 1/1/1149   K 0.00 0     452 581410  31.4  0.03  27.21  66.249.64.172 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1033081387 HTTP/1.1
   24-0 37936 1/2/2025   K 0.00 0     420 808406  28.8  0.03  44.24  66.249.70.3   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3582140218 HTTP/1.1
   25-0 37937 1/1/1016   K 0.00 0     332 532508  32.0  0.03  28.10  192.178.4.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3836521896 HTTP/1.1
   26-0 33401 6/91/517   K 2.07 4     297 278422  185.9 2.20  13.64  66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3115409041 HTTP/1.1
   27-0 37938 0/3/499    W 0.00 0     0   248947  0.0   0.03  13.36  66.249.70.141 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2049368957 HTTP/1.1
   28-0 -     0/0/1438   . 0.00 166   0   638565  0.0   0.00  33.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/339    . 0.00 38    0   197042  0.0   0.00  9.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/652    . 0.00 115   0   334019  0.0   0.00  15.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/268    . 0.00 114   0   152973  0.0   0.00  7.40   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/109    . 0.00 323   0   58722   0.0   0.00  3.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/158    . 0.00 349   0   88995   0.0   0.00  4.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/130    . 0.00 161   0   76931   0.0   0.00  3.75   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/38     . 0.00 294   0   21242   0.0   0.00  1.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/21     . 0.00 405   0   12813   0.0   0.00  0.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/169    . 0.00 15    0   98497   0.0   0.00  4.66   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/3      . 0.00 417   0   994     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00 352   0   14173   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1109   . 0.00 406   0   644863  0.0   0.00  31.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/7      . 0.00 403   0   1042    0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 18160 0   1967    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41     . 0.00 18044 0   25843   0.0   0.00  1.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18     . 0.00 18101 0   8912    0.0   0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 379
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 16 seconds, (range: 0...125)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 26994
   total entries replaced since starting: 0
   total entries expired since starting: 26606
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 147 miss
   total removes since starting: 9 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit