403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.21.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.21 load[0] mem[63/68] mysql[1/8] httpd[27]
              total        used        free      shared  buff/cache   available
Mem:           2363        1417         135          16         811         763
Swap:          1999        1546         453
 01:21:02 up  5:18,  0 users,  load average: 0.60, 0.70, 0.65
## system overview
top - 01:21:02 up  5:18,  0 users,  load average: 0.60, 0.70, 0.65
Tasks: 211 total,   7 running, 202 sleeping,   0 stopped,   2 zombie
%Cpu(s): 51.5 us, 42.4 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   126696 free,  1462652 used,   830952 buff/cache
KiB Swap:  2047996 total,   464244 free,  1583752 used.   769920 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 207912   4556 S  31.2  8.6   4:21.54 /usr/sbin+
   497 root      20   0   24896   1432    800 S   6.2  0.1   0:04.34 /usr/lib/+
 43859 nigeria   20   0  400652  15936  10220 S   6.2  0.7   0:00.01 /opt/cpan+
 43864 pactpay   20   0  476460  15972  10408 R   6.2  0.7   0:00.01 /opt/cpan+
 43868 robocal+  20   0  397604  12740   8564 R   6.2  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44428   3440   1528 S   0.0  0.1   0:27.10 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.27 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.91 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:19.42 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.85 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:03.61 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.48 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.28 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.15 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.90 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   4664   4428 S   0.0  0.2   0:11.06 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    152     44 S   0.0  0.0   0:01.74 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.42 /usr/sbin+
   501 polkitd   20   0  612240    840    560 S   0.0  0.0   0:02.58 /usr/lib/+
   503 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3116    900 S   0.0  0.1   0:00.27 queueproc+
   507 root      20   0   52852    296    208 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:09.81 /usr/bin/+
   519 nscd      20   0 1062080   1320    592 S   0.0  0.1   0:15.64 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    428    296 S   0.0  0.0   0:00.53 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3744    832 S   0.0  0.2   0:00.72 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13460   2756 S   0.0  0.6   0:04.70 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.39 pure-ftpd+
   931 root      20   0   51508    460    300 S   0.0  0.0   0:00.28 /usr/sbin+
   932 root      20   0  572372    656    184 S   0.0  0.0   0:01.71 /usr/bin/+
   933 telegraf  20   0 5654048  33916   6120 S   0.0  1.4   0:10.68 /usr/loca+
   935 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.43 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.45 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    336    252 S   0.0  0.0   0:00.58 php-fpm: +
   961 named     20   0  637992  25792   1912 S   0.0  1.1   0:10.65 /usr/sbin+
   964 root      20   0  273744   4488   4088 S   0.0  0.2   0:05.15 /usr/sbin+
   981 root      20   0  436392    400    312 S   0.0  0.0   0:00.68 php-fpm: +
   984 root      20   0  385496    368    280 S   0.0  0.0   0:00.56 php-fpm: +
   985 root      20   0  261288   3828    868 S   0.0  0.2   0:02.89 cpsrvd (S+
   989 root      20   0  392856    216    132 S   0.0  0.0   0:00.56 php-fpm: +
   992 root      20   0 1828184 407216      0 S   0.0 16.8   0:32.13 /usr/loca+
  1000 root      20   0  397344   1872    596 S   0.0  0.1   0:02.56 php-fpm: +
  1006 cpanelc+  20   0   10604   3548   2304 S   0.0  0.1   0:15.62 /usr/loca+
  1075 dovenull  20   0   46984    772    532 S   0.0  0.0   0:00.40 dovecot/p+
  1076 dovenull  20   0   48324   2572   1660 S   0.0  0.1   0:00.33 dovecot/i+
  1077 dovecot   20   0   10320    364    256 S   0.0  0.0   0:00.11 dovecot/a+
  1078 root      20   0   10452    448    284 S   0.0  0.0   0:00.24 dovecot/l+
  1079 dovenull  20   0   46984   2064   1528 S   0.0  0.1   0:00.30 dovecot/p+
  1080 dovenull  20   0   48000   2532   1640 S   0.0  0.1   0:00.25 dovecot/i+
  1084 root      20   0   24528   1864    496 S   0.0  0.1   0:00.14 dovecot/c+
  1088 dovecot   20   0   13568    628    452 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2888    960 S   0.0  0.1   0:00.10 SonarPush+
  1166 dovecot   20   0   41260   1544   1012 S   0.0  0.1   0:00.76 dovecot/a+
  1172 root      20   0  248152   3724    688 S   0.0  0.2   0:05.13 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.23 /usr/bin/+
  1174 wp-tool+  20   0  410616  17976   1420 S   0.0  0.7   0:15.86 /usr/bin/+
  1232 root      20   0  209372   8508   2016 S   0.0  0.4   0:02.44 tailwatchd
  1234 root      20   0  228228  18888   5984 S   0.0  0.8   0:00.37 dnsadmin +
  1237 root      20   0  262224  24372   6448 S   0.0  1.0   0:01.02 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.51 php-fpm: +
  1702 root      38  18  130416   1356    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:01.77 /usr/sbin+
  2063 root      20   0   12760    380    212 S   0.0  0.0   0:02.24 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:01.90 /usr/loca+
  2065 root      20   0   12764    388    216 S   0.0  0.0   0:02.10 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  45628   1192 S   0.0  1.9   0:02.75 spamd chi+
  7886 root      20   0  248152   2552    400 S   0.0  0.1   0:00.00 spamd chi+
 16898 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 17677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 20440 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 23292 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23372 root      20   0  108056    340    268 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.06 /usr/bin/+
 23946 root      20   0 1277056  11568    596 S   0.0  0.5   0:00.06 /usr/bin/+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 31529 root      20   0       0      0      0 R   0.0  0.0   0:00.03 [kworker/+
 34499 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36299 nobody    20   0  277784  18224   4064 S   0.0  0.8   0:00.90 /usr/sbin+
 37938 nobody    20   0  277916  18468   4136 S   0.0  0.8   0:00.76 /usr/sbin+
 38503 worencom  20   0   38484   3988   3048 S   0.0  0.2   0:00.00 dovecot/i+
 39115 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 39871 nobody    20   0  277612  17892   3916 S   0.0  0.7   0:00.34 /usr/sbin+
 40102 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40178 nobody    20   0  277828  18124   3908 S   0.0  0.7   0:00.39 /usr/sbin+
 41009 nobody    20   0  277556  18720   4088 S   0.0  0.8   0:00.28 /usr/sbin+
 41056 nobody    20   0  277816  18436   3920 S   0.0  0.8   0:00.36 /usr/sbin+
 41057 nobody    20   0  277752  18176   3840 S   0.0  0.8   0:00.15 /usr/sbin+
 41059 nobody    20   0  277948  18064   3912 S   0.0  0.7   0:00.33 /usr/sbin+
 41664 nobody    20   0  277824  18188   3752 S   0.0  0.8   0:00.27 /usr/sbin+
 41927 nobody    20   0  277816  17732   3692 S   0.0  0.7   0:00.26 /usr/sbin+
 41970 nobody    20   0  277816  18280   3752 S   0.0  0.8   0:00.23 /usr/sbin+
 41971 nobody    20   0  277816  17944   3840 S   0.0  0.7   0:00.20 /usr/sbin+
 42552 nobody    20   0  277784  17212   3256 S   0.0  0.7   0:00.11 /usr/sbin+
 42553 nobody    20   0  277824  18080   3972 S   0.0  0.7   0:00.13 /usr/sbin+
 42699 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42741 root      20   0  394580  53572  11824 S   0.0  2.2   0:00.72 /usr/loca+
 42852 root      20   0  228720  15592   2128 S   0.0  0.6   0:00.00 dnsadmin +
 42937 nobody    20   0  277924  17320   3540 S   0.0  0.7   0:00.10 /usr/sbin+
 43034 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 43121 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 43395 nigeria   20   0  397064   4728   2480 S   0.0  0.2   0:00.03 php-fpm: +
 43439 nobody    20   0  277532  16780   3032 S   0.0  0.7   0:00.07 /usr/sbin+
 43440 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 43442 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 43456 nobody    20   0  277812  17288   3280 S   0.0  0.7   0:00.03 /usr/sbin+
 43457 nobody    20   0  277820  17360   3300 S   0.0  0.7   0:00.03 /usr/sbin+
 43468 nobody    20   0  277548  17320   3576 S   0.0  0.7   0:00.04 /usr/sbin+
 43470 nobody    20   0  277816  17456   3572 S   0.0  0.7   0:00.04 /usr/sbin+
 43471 nobody    20   0  277784  17004   3296 S   0.0  0.7   0:00.03 /usr/sbin+
 43670 nobody    20   0  277932  17072   3388 S   0.0  0.7   0:00.03 /usr/sbin+
 43762 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 43769 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 43770 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 43775 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 43784 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 43785 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 43786 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 43787 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 43796 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 43797 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43798 root      20   0  183048   2144   1588 R   0.0  0.1   0:00.00 /usr/sbin+
 43799 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43800 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43802 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43803 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43804 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43805 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43806 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43807 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43808 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 43810 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 43811 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 43812 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 43834 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 43835 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43836 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43837 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 43839 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43840 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43842 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43843 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43844 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 43845 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [jailshel+
 43846 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43847 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 43855 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 43856 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 43862 robocal+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 43867 robocal+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.29 [kworker]
 76167 root      20   0  181668   7412   1104 S   0.0  0.3   0:04.71 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:19  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root      16898  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/0:1]
root      17677  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:4]
root      20440  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:1]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      31529  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:1]
root      34499  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:0]
root      39115  0.0  0.0      0     0 ?        S    01:16   0:00  \_ [kworker/1:2]
root      40102  0.0  0.0      0     0 ?        S    01:17   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:27 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  4664 ?        Ss   Nov12   0:11 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   152 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    60 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3116 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   296 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Rs   Nov12   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1320 ?        Ssl  Nov12   0:15 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   428 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   340 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      42699  0.0  0.0 183048  2140 ?        S    01:20   0:00  \_ /usr/sbin/CROND -n
root      42741  1.1  2.2 394580 53572 ?        Ssl  01:20   0:00  |   \_ /usr/local/cpanel/bin/autossl_check --all
root      43796  0.0  0.0 183048  2140 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43810  0.0  0.0 113284  1212 ?        Ss   01:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      43811  0.0  0.0 108052   356 ?        S    01:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      43812  0.0  0.0 113288  1520 ?        S    01:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      43872  0.0  0.0 153840  2092 ?        R    01:21   0:00  |               \_ ps auxf
root      43797  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43839  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      43799  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43840  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      43800  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43835  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      43802  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43843  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      43803  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43836  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      43804  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43842  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      43805  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43846  0.0  0.0  20164   808 ?        Ss   01:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      43806  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43837  0.0  0.0  20164   964 ?        Ss   01:21   0:00  |   \_ jailshell (pactpay) [43855] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   43855  0.0  0.0  20164   260 ?        S    01:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   43864  0.0  0.6 476460 16060 ?        R    01:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      43807  0.0  0.0 183048  2144 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43847  0.0  0.0  20164   968 ?        Ss   01:21   0:00  |   \_ jailshell (robocallscloudsm) [43862]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  43862  0.0  0.0      0     0 ?        R    01:21   0:00  |       \_ [jailshell]
root      43808  0.0  0.0 183048  2136 ?        S    01:21   0:00  \_ /usr/sbin/CROND -n
root      43844  0.0  0.0  20164   964 ?        Ss   01:21   0:00      \_ jailshell (nigeria) [43856] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   43856  0.0  0.0  20164   260 ?        S    01:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   43859  0.0  0.6 400652 15936 ?        S    01:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3744 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13460 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984   772 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2572 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   364 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   448 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984  2064 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2532 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  1864 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   628 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1544 ?        S    Nov12   0:00  \_ dovecot/auth
worencom  38503  0.0  0.1  38484  3988 ?        S    01:15   0:00  \_ dovecot/imap
root      43034  0.0  0.1  41052  2724 ?        S    01:20   0:00  \_ dovecot/auth -w
root      43121  0.0  0.1  60820  4512 ?        S    01:20   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   656 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 33916 ?       SLsl Nov12   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400     0 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      43440  0.0  0.1 111304  4444 ?        Ss   01:20   0:00  \_ sshd: [accepted]
sshd      43442  0.0  0.1 115644  2628 ?        S    01:20   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268     4 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   336 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.0 637992 25792 ?        Ssl  Nov12   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 273744  4488 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   400 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   368 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 261288  3828 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      43775  0.0  0.0      0     0 ?        Z    01:21   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   216 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 16.8 1828184 407216 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1872 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   43395  0.0  0.1 397064  4728 ?        S    01:20   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10604  3548 ?        Ss   Nov12   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2888 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.1 248152  3724 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  1.8 306476 45628 ?        S    Nov12   0:02  \_ spamd child
root       7886  0.0  0.1 248152  2552 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17976 ?        Ss   Nov12   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8508 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.7 228228 18888 ?        Ss   Nov12   0:00 dnsadmin - server mode
root      42852  0.0  0.6 228720 15592 ?        S    01:20   0:00  \_ dnsadmin - waiting for request 12 on connected socket
root       1237  0.0  1.0 262224 24372 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1356 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3  8.5 1457796 207912 ?      Sl   Nov12   4:21 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12760   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12764   388 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    36299  0.1  0.7 277784 18224 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    37938  0.2  0.7 277916 18468 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    39871  0.1  0.7 277612 17892 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    40178  0.1  0.7 277828 18124 ?        S    01:17   0:00  \_ /usr/sbin/httpd -k start
nobody    41009  0.1  0.7 277556 18720 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    41056  0.2  0.7 277816 18436 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    41057  0.0  0.7 277752 18176 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    41059  0.1  0.7 277948 18064 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    41664  0.2  0.7 277824 18188 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    41927  0.2  0.7 277816 17732 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    41970  0.2  0.7 277816 18280 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    41971  0.1  0.7 277816 17944 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    42552  0.1  0.7 277784 17212 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    42553  0.1  0.7 277824 18080 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    42937  0.1  0.7 277924 17320 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43439  0.2  0.6 277532 16780 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43456  0.1  0.7 277812 17288 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43457  0.1  0.7 277820 17360 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43468  0.1  0.7 277548 17320 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43470  0.1  0.7 277816 17456 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43471  0.1  0.7 277784 17004 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43670  0.2  0.7 277932 17072 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43762  0.0  0.6 277640 15524 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43769  0.0  0.6 277640 15524 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43770  0.0  0.6 277640 15524 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43784  0.0  0.6 277640 15524 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    43785  0.0  0.6 277640 15524 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    43786  0.0  0.6 277640 15524 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    43787  0.0  0.6 277640 15524 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 181668  7412 ?        Ss   00:00   0:04 lfd - sleeping
root      23911  0.0  0.4 1276100 10744 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11568 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 19083  Threads: 3  Questions: 1571779  Slow queries: 0  Opens: 6134  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.365
*************************** 1. row ***************************
     Id: 22295
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `14` WHERE `phone`='2348103275312' LIMIT 1
*************************** 2. row ***************************
     Id: 22296
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 22299
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 101.35.214.126 TIME_WAIT
      1 104.23.211.187 TIME_WAIT
      1 104.23.213.178 TIME_WAIT
      1 104.23.213.72 TIME_WAIT
      1 108.165.151.57 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 124.221.39.44 TIME_WAIT
      1 124.222.41.69 TIME_WAIT
      1 129.28.125.113 TIME_WAIT
      1 132.232.75.125 TIME_WAIT
      1 136.0.172.166 TIME_WAIT
      1 142.147.189.170 TIME_WAIT
      1 148.113.130.148 TIME_WAIT
      1 172.68.245.114 TIME_WAIT
      1 172.70.174.181 TIME_WAIT
      1 172.71.223.44 TIME_WAIT
      1 175.178.24.173 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 42.193.52.98 TIME_WAIT
      1 43.136.56.92 TIME_WAIT
      1 43.139.231.102 TIME_WAIT
      1 45.227.253.15 TIME_WAIT
      1 45.41.180.236 TIME_WAIT
      1 51.222.168.84 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 81.70.17.2 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 111.231.20.36 TIME_WAIT
      2 118.24.189.192 TIME_WAIT
      2 119.45.125.80 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 132.232.234.193 TIME_WAIT
      2 139.155.246.152 TIME_WAIT
      2 140.143.164.230 TIME_WAIT
      2 74.7.230.2 TIME_WAIT
      3 119.45.126.45 TIME_WAIT
      3 122.51.167.217 TIME_WAIT
      3 139.155.41.104 TIME_WAIT
      3 42.192.64.110 TIME_WAIT
      4 124.221.238.49 TIME_WAIT
      4 139.155.250.217 TIME_WAIT
      6 115.159.100.54 TIME_WAIT
      6 43.139.98.240 TIME_WAIT
      7 114.117.246.167 TIME_WAIT
      8 173.199.190.172 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:21:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 17 minutes 58 seconds
   Server load: 0.60 0.70 0.65
   Total accesses: 99382 - Total Traffic: 2.7 GB - Total Duration: 49814592
   CPU Usage: u3.81 s3.03 cu1284.89 cs1027.92 - 12.2% CPU load
   5.21 requests/sec - 146.3 kB/second - 28.1 kB/request - 501.244 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KKKKRRKKKRKKWKWK_KKKKKKKKKKRK...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                        Request
   0-0  43670 1/5/4820   K 0.09 1     398 2383764 31.5 0.13  122.27 66.249.70.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=448484274 HTTP/1.1
   1-0  43439 1/14/4850  K 0.29 0     308 2232372 31.4 0.30  118.14 66.249.70.174 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2177511399 HTTP/1.1
   2-0  40178 1/64/4683  K 2.00 4     305 2437381 30.9 1.76  138.60 66.249.70.1   http/1.1 schoolplus.cloudware.ng:80 GET /?p=189744925 HTTP/1.1
   3-0  43762 1/1/4802   K 0.00 2     349 2532726 30.4 0.03  141.44 66.249.64.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1502792812 HTTP/1.1
   4-0  42552 0/19/4586  R 0.48 2     392 2247677 0.0  0.60  119.72 43.153.12.58  http/1.1 cloudware.ng:443
   5-0  39871 0/62/4748  R 1.33 18    292 2428181 0.0  1.67  150.98 27.44.126.84  http/1.1
   6-0  41664 1/45/4501  K 1.16 3     398 2278311 31.2 1.42  121.59 66.249.70.4   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3151367776 HTTP/1.1
   7-0  43769 1/1/5255   K 0.00 1     365 2469391 30.2 0.03  140.50 66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4013703631 HTTP/1.1
   8-0  43770 1/1/3989   K 0.00 1     358 2026412 31.6 0.03  104.35 192.178.4.99  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2559686350 HTTP/1.1
   9-0  41009 0/62/4201  R 1.21 18    5   2113307 0.0  1.21  112.35 27.44.126.64  http/1.1
   10-0 42553 1/30/4338  K 0.50 1     401 2104781 32.3 0.64  121.63 66.249.64.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=748659545 HTTP/1.1
   11-0 43784 1/1/4654   K 0.00 0     303 2365589 31.9 0.03  151.49 66.249.70.138 http/1.1 schoolplus.cloudware.ng:80 GET /?p=400839036 HTTP/1.1
   12-0 41056 0/72/4232  W 1.56 0     0   2039094 0.0  1.69  106.35 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 43456 1/6/3425   K 0.07 0     276 1587143 30.7 0.12  81.44  66.249.70.163 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1911020081 HTTP/1.1
   14-0 41927 0/44/3631  W 1.14 0     0   1862063 0.0  1.21  111.49 66.249.64.101 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3029317127 HTTP/1.1
   15-0 41057 1/26/2981  K 0.63 0     309 1496039 30.8 1.07  77.25  66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=176956683 HTTP/1.1
   16-0 42937 0/22/4247  _ 0.44 0     0   2086248 0.0  0.55  114.08 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 43457 1/8/4840   K 0.12 0     28  2482555 5.9  0.14  142.17 66.249.70.35  http/1.1 wptraining.cloudware.ng:80 GET /?q=1547520139 HTTP/1.1
   18-0 41059 1/57/2199  K 1.40 2     406 1206719 30.5 1.88  60.65  66.249.70.169 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1712161771 HTTP/1.1
   19-0 41970 1/41/2884  K 0.90 3     396 1530335 29.7 1.05  79.88  66.249.70.161 http/1.1 schoolplus.cloudware.ng:80 GET /?p=791999355 HTTP/1.1
   20-0 43785 1/1/1644   K 0.00 0     279 868508  30.6 0.03  43.01  66.249.64.11  http/1.1 schoolplus.cloudware.ng:80 GET /?p=422450574 HTTP/1.1
   21-0 36299 1/153/1778 K 4.08 3     347 933287  29.2 4.27  50.26  66.249.64.76  http/1.1 schoolplus.cloudware.ng:80 GET /?p=70703076 HTTP/1.1
   22-0 41971 1/35/1764  K 0.86 3     398 951038  32.7 0.92  56.86  66.249.64.106 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4142442484 HTTP/1.1
   23-0 43468 1/7/1174   K 0.15 4     409 594384  35.9 0.13  27.80  192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=2647551700 HTTP/1.1
   24-0 43786 1/1/2063   K 0.00 0     308 828216  31.8 0.03  45.20  66.249.70.142 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1870839076 HTTP/1.1
   25-0 43470 1/7/1067   K 0.14 3     359 557777  31.2 0.19  29.33  66.249.64.66  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3059486430 HTTP/1.1
   26-0 43471 1/6/577    K 0.12 4     343 312748  30.2 0.16  15.33  66.249.64.169 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2780050280 HTTP/1.1
   27-0 37938 0/128/624  R 3.42 19    410 323170  0.0  3.75  17.08  27.44.126.64  http/1.1
   28-0 43787 1/1/1518   K 0.00 0     287 685813  29.2 0.03  35.68  66.249.64.99  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1026431007 HTTP/1.1
   29-0 -     0/0/377    . 0.00 246   0   218218  0.0  0.00  10.32  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/703    . 0.00 215   0   359942  0.0  0.00  16.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/280    . 0.00 264   0   158455  0.0  0.00  7.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/111    . 0.00 349   0   59522   0.0  0.00  3.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/248    . 0.00 73    0   138706  0.0  0.00  6.63   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/134    . 0.00 332   0   78573   0.0  0.00  4.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/57     . 0.00 293   0   27022   0.0  0.00  1.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/21     . 0.00 765   0   12813   0.0  0.00  0.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/169    . 0.00 376   0   98497   0.0  0.00  4.66   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/3      . 0.00 777   0   994     0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00 712   0   14173   0.0  0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1109   . 0.00 766   0   644863  0.0  0.00  31.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/7      . 0.00 763   0   1042    0.0  0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 18521 0   1967    0.0  0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41     . 0.00 18405 0   25843   0.0  0.00  1.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18     . 0.00 18462 0   8912    0.0  0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 925
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 21 seconds, (range: 1...69)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 27979
   total entries replaced since starting: 0
   total entries expired since starting: 27045
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 153 miss
   total removes since starting: 9 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit