403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.48.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.48 load[0] mem[64/71] mysql[3/8] httpd[33]
              total        used        free      shared  buff/cache   available
Mem:           2363        1498         127          24         737         678
Swap:          1999        1696         303
 01:48:01 up  5:45,  0 users,  load average: 0.90, 1.52, 1.44
## system overview
top - 01:48:01 up  5:45,  0 users,  load average: 0.90, 1.52, 1.44
Tasks: 215 total,   4 running, 210 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   100252 free,  1564496 used,   755552 buff/cache
KiB Swap:  2047996 total,   310452 free,  1737544 used.   664400 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 213132   3572 S  81.2  8.8   4:58.78 /usr/sbin+
 70425 cloudsms  20   0  344904  66448  10988 S  25.0  2.7   0:00.24 /opt/cpan+
 70495 cloudw    20   0  415176  23928   3568 R  25.0  1.0   0:00.07 php-fpm: +
 70477 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.07 /opt/cpan+
 70422 cloudw    20   0  231684  30556   8408 R   6.2  1.3   0:00.07 /usr/loca+
 70503 cloudw    20   0  350316  16616  10324 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44428   3408   1496 S   0.0  0.1   0:29.12 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.47 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.99 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:21.48 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.92 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.02 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.50 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.52 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.33 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.02 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   2248   2008 S   0.0  0.1   0:11.99 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:01.90 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.70 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.46 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.79 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.28 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:10.64 /usr/bin/+
   519 nscd      20   0 1062080   1316    588 S   0.0  0.1   0:17.29 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.58 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3716    784 S   0.0  0.2   0:00.80 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13620   2604 S   0.0  0.6   0:05.07 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.44 pure-ftpd+
   931 root      20   0   51508    440    276 S   0.0  0.0   0:00.30 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.84 /usr/bin/+
   933 telegraf  20   0 5654048  32696   4680 S   0.0  1.4   0:11.59 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.47 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.69 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    200    116 S   0.0  0.0   0:00.62 php-fpm: +
   961 named     20   0  636988  31020   1756 S   0.0  1.3   0:11.81 /usr/sbin+
   964 root      20   0  281936   2384   1924 S   0.0  0.1   0:05.60 /usr/sbin+
   981 root      20   0  436392    284    196 S   0.0  0.0   0:00.73 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.61 php-fpm: +
   985 root      20   0  261288   6156   1628 S   0.0  0.3   0:03.37 cpsrvd (S+
   989 root      20   0  392856    312    228 S   0.0  0.0   0:00.60 php-fpm: +
   992 root      20   0 1901916 214896    456 S   0.0  8.9   0:32.27 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:02.94 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 S   0.0  0.2   0:17.08 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.42 dovecot/p+
  1076 dovenull  20   0   48324   2336   1156 S   0.0  0.1   0:00.36 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.11 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.26 dovecot/l+
  1079 dovenull  20   0   47112   2040   1292 S   0.0  0.1   0:00.32 dovecot/p+
  1080 dovenull  20   0   48000   2332   1292 S   0.0  0.1   0:00.26 dovecot/i+
  1084 root      20   0   24528   2028    352 S   0.0  0.1   0:00.14 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1400    868 S   0.0  0.1   0:00.80 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.32 /usr/loca+
  1173 wp-tool+  20   0  387556   3216   1348 S   0.0  0.1   0:00.24 /usr/bin/+
  1174 wp-tool+  20   0  410616  17824   1268 S   0.0  0.7   0:17.19 /usr/bin/+
  1232 root      20   0  209372   9956   2172 S   0.0  0.4   0:02.78 tailwatchd
  1234 root      20   0  167452   4164   2792 S   0.0  0.2   0:00.41 dnsadmin +
  1237 root      20   0  262224  21024   3096 S   0.0  0.9   0:01.13 cpdavd - +
  1642 root      20   0  299272    392    228 S   0.0  0.0   0:00.56 php-fpm: +
  1702 root      38  18  130416   1360    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.25 /usr/sbin+
  2063 root      20   0   12804    380    212 S   0.0  0.0   0:02.52 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.13 /usr/loca+
  2065 root      20   0   12820    392    216 S   0.0  0.0   0:02.35 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  93564   1932 S   0.0  3.9   0:03.28 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1416    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10708    560 S   0.0  0.4   0:00.08 /usr/bin/+
 23946 root      20   0 1277056  11532    560 S   0.0  0.5   0:00.06 /usr/bin/+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39115 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.33 [kworker]
 48337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 56661 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 63373 nobody    20   0  277924  18328   3724 S   0.0  0.8   0:00.76 /usr/sbin+
 65158 nobody    20   0  277804  18404   3880 S   0.0  0.8   0:00.49 /usr/sbin+
 65618 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65950 nobody    20   0  277920  18672   3964 S   0.0  0.8   0:00.56 /usr/sbin+
 66331 nobody    20   0  277720  18408   3812 S   0.0  0.8   0:00.39 /usr/sbin+
 66369 nobody    20   0  277804  17724   3712 S   0.0  0.7   0:00.29 /usr/sbin+
 66370 nobody    20   0  277656  17848   3744 S   0.0  0.7   0:00.38 /usr/sbin+
 66394 nobody    20   0  277784  17424   3620 S   0.0  0.7   0:00.37 /usr/sbin+
 66396 nobody    20   0  277784  18208   3796 S   0.0  0.8   0:00.19 /usr/sbin+
 66399 nobody    20   0  277696  18372   3872 S   0.0  0.8   0:00.42 /usr/sbin+
 66401 nobody    20   0  277740  17844   3660 S   0.0  0.7   0:00.21 /usr/sbin+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67352 nobody    20   0  277784  17792   3684 S   0.0  0.7   0:00.22 /usr/sbin+
 67446 nobody    20   0  277784  18116   3888 S   0.0  0.7   0:00.27 /usr/sbin+
 67447 nobody    20   0  277784  18004   3628 S   0.0  0.7   0:00.33 /usr/sbin+
 67559 nobody    20   0  277720  18052   3820 S   0.0  0.7   0:00.23 /usr/sbin+
 67630 nobody    20   0  277784  17644   3364 S   0.0  0.7   0:00.47 /usr/sbin+
 68575 nobody    20   0  277544  17584   3612 S   0.0  0.7   0:00.24 /usr/sbin+
 69421 nobody    20   0  277924  18100   3656 S   0.0  0.7   0:00.07 /usr/sbin+
 69434 nobody    20   0  277720  17192   3328 S   0.0  0.7   0:00.09 /usr/sbin+
 69435 nobody    20   0  277784  17392   3492 S   0.0  0.7   0:00.09 /usr/sbin+
 69452 nobody    20   0  277804  17124   3248 S   0.0  0.7   0:00.17 /usr/sbin+
 69453 nobody    20   0  277932  17036   3312 S   0.0  0.7   0:00.11 /usr/sbin+
 69454 nobody    20   0  277740  17124   3232 S   0.0  0.7   0:00.14 /usr/sbin+
 69487 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 70298 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 70316 nobody    20   0  277784  15696   2124 S   0.0  0.6   0:00.01 /usr/sbin+
 70330 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70331 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70340 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 70341 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 70352 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70353 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70354 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70355 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70379 nobody    20   0  277520  16636   3144 S   0.0  0.7   0:00.00 /usr/sbin+
 70380 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70381 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70382 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 70383 nobody    20   0  277404  15348   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 70384 nobody    20   0  277404  15348   2140 S   0.0  0.6   0:00.00 /usr/sbin+
 70385 nobody    20   0  277360  16664   3168 D   0.0  0.7   0:00.00 /usr/sbin+
 70386 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 70404 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 70405 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70406 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70407 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70408 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70412 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70414 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70415 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70416 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70417 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70418 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70420 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70423 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 70424 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 70426 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 70431 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70433 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 70434 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70436 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 70439 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 70441 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70442 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70443 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 70444 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70460 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 70463 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 70469 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 70489 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 70499 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 70506 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 70508 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 70509 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 76167 root      20   0  182112   8384   1104 S   0.0  0.3   0:06.17 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:21  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      39115  0.0  0.0      0     0 ?        S    01:16   0:00  \_ [kworker/1:2]
root      48337  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:2]
root      51088  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      56661  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/0:2]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root      65618  0.0  0.0      0     0 ?        S    01:43   0:00  \_ [kworker/1:1]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1  44428  3408 ?        Ss   Nov12   0:29 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  39500  2248 ?        Ss   Nov12   0:11 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1316 ?        Rsl  Nov12   0:17 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1416 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      70405  0.0  0.1 183080  2432 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70422  0.0  1.3 232468 31556 ?        Rs   01:48   0:00  |   \_ /usr/local/cpanel/bin/autossl_check_cpstore_queue
root      70406  0.0  0.1 183080  2432 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70423  0.0  0.0 113284  1212 ?        Ss   01:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      70424  0.0  0.0 108052   360 ?        S    01:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      70426  0.0  0.0 113288  1516 ?        S    01:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      70510  0.0  0.0 153840  2096 ?        R    01:48   0:00  |               \_ ps auxf
root      70407  0.0  0.1 183080  2432 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70439  0.0  0.0  20164   812 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      70408  0.0  0.1 183080  2432 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70442  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      70412  0.0  0.1 183080  2432 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70441  0.0  0.0  20164   804 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      70414  0.0  0.1 183080  2428 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70434  0.0  0.0  20164   808 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      70415  0.0  0.1 183080  2428 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70433  0.0  0.0  20164   984 ?        Ss   01:48   0:00  |   \_ jailshell (cloudsms) [70506] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  70506  0.0  0.0  20164   260 ?        S    01:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  70508  0.0  0.0 113284  1212 ?        S    01:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  70509  0.0  0.4 396400 11044 ?        R    01:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      70416  0.0  0.1 183080  2424 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70444  0.0  0.0  20164   804 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      70417  0.0  0.1 183080  2424 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70431  0.0  0.0  20164   804 ?        Ss   01:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      70418  0.0  0.1 183080  2424 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70436  0.0  0.0  20164   972 ?        Ss   01:48   0:00  |   \_ jailshell (pactpay) [70460] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70460  0.0  0.0  20164   264 ?        S    01:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   70463  0.0  0.7 476724 17484 ?        S    01:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      70420  0.0  0.1 183080  2424 ?        S    01:48   0:00  \_ /usr/sbin/CROND -n
root      70443  0.0  0.0  20164   972 ?        Ss   01:48   0:00      \_ jailshell (nigeria) [70469] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70469  0.0  0.0  20164   264 ?        S    01:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70477  0.0  0.6 400652 15936 ?        S    01:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3716 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13620 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   440 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.0  48324  2336 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2040 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  48000  2332 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  2028 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1400 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 32696 ?       SLsl Nov12   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      69487  0.0  0.1 111304  4272 ?        Ss   01:47   0:00  \_ sshd: [accepted]
root      70340  0.0  0.1 111304  4272 ?        Ss   01:47   0:00  \_ sshd: [accepted]
sshd      70341  0.0  0.1 115644  2628 ?        S    01:47   0:00  |   \_ sshd: [net]
root      70512  0.0  0.1 110880  3712 ?        Ss   01:48   0:00  \_ /usr/sbin/sshd -D -R
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   200 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.2 636988 31020 ?        Ssl  Nov12   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.0 281936  2384 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   284 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6156 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      70404  0.0  0.0      0     0 ?        Z    01:48   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   312 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  8.8 1901916 214896 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   70298  0.0  0.1 397064  4472 ?        S    01:47   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    70495  0.0  1.1 419272 27624 ?        R    01:48   0:00  \_ php-fpm: pool cloudware_ng
cpanelc+   1006  0.0  0.1  10656  3696 ?        Rs   Nov12   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  3.8 306476 93564 ?        S    Nov12   0:03  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3216 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17824 ?        Ss   Nov12   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372  9956 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4164 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.8 262224 21024 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   392 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1360 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 213356 ?      Sl   Nov12   4:58 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12804   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12820   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    63373  0.1  0.7 277924 18328 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    65158  0.1  0.7 277804 18404 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody    65950  0.2  0.7 277920 18672 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66331  0.1  0.7 277720 18408 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66369  0.1  0.7 277804 17724 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66370  0.1  0.7 277656 17848 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66394  0.1  0.7 277784 17424 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66396  0.0  0.7 277784 18208 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66399  0.1  0.7 277696 18372 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66401  0.0  0.7 277740 17844 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    67352  0.1  0.7 277784 17792 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    67446  0.1  0.7 277784 18116 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    67447  0.1  0.7 277784 18004 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    67559  0.1  0.7 277720 18052 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    67630  0.2  0.7 277784 17644 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
cloudw    70503  0.0  0.6 350316 16616 ?        S    01:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    68575  0.2  0.7 277544 17584 ?        S    01:46   0:00  \_ /usr/sbin/httpd -k start
nobody    69421  0.1  0.7 277924 18100 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    69434  0.1  0.7 277720 17192 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    69435  0.1  0.7 277784 17392 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    69452  0.3  0.7 277804 17124 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    69453  0.1  0.7 277932 17036 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    69454  0.2  0.7 277740 17124 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70316  0.2  0.6 277784 15696 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70330  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70331  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70352  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70353  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70354  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70355  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70379  0.0  0.6 277660 16644 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
cloudsms  70425  0.0  2.8 347016 68472 ?        R    01:48   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    70380  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70381  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70382  0.0  0.6 277640 15524 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70383  0.0  0.6 277404 15348 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
cloudw    70489  0.0  0.6 352096 15232 ?        S    01:48   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    70384  0.0  0.6 277404 15348 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    70385  1.0  0.6 277360 16852 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
root      70511  0.0  0.0   6516   416 ?        S    01:48   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php74
nobody    70386  0.0  0.6 277640 15520 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182112  8384 ?        Ss   00:00   0:06 lfd - sleeping
root      23911  0.0  0.4 1276100 10708 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 20702  Threads: 4  Questions: 1837626  Slow queries: 0  Opens: 6691  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.765
*************************** 1. row ***************************
     Id: 25860
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 25868
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 25871
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 25874
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 114.119.154.89 TIME_WAIT
      1 127.0.0.1 TIME_WAIT
      1 15.235.27.160 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.145 TIME_WAIT
      1 20.90.7.158 TIME_WAIT
      1 43.166.237.57 TIME_WAIT
      1 66.249.64.8 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.69 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 185.180.141.24 TIME_WAIT
      2 185.180.141.25 TIME_WAIT
      2 47.128.40.6 TIME_WAIT
      3 146.70.166.215 TIME_WAIT
      3 20.222.232.51 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:48:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 44 minutes 58 seconds
   Server load: 1.39 1.61 1.47
   Total accesses: 112518 - Total Traffic: 3.0 GB - Total Duration: 57184790
   CPU Usage: u4.78 s3.97 cu1430.41 cs1149.27 - 12.5% CPU load
   5.44 requests/sec - 150.4 kB/second - 27.7 kB/request - 508.228 ms/request
   32 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKKKWRKKKK_KKKKKKK___KKKKKKWKKK_KWKWK...........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  70316 2/2/5199   K 0.03 0    323 2607691 60.7  0.06  131.39 192.178.4.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2383917935 HTTP/1.1
   1-0  67352 1/37/5290  K 1.01 1    417 2487390 247.4 1.25  131.36 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /vendor/symfony/dependency-injection/Tests/Compiler/ HTTP/1
   2-0  65158 8/102/5108 K 1.96 4    263 2668134 242.8 2.77  148.27 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1866765400 HTTP/1.1
   3-0  67446 1/49/5232  K 1.15 2    302 2767636 32.2  1.20  151.28 66.249.64.171  http/1.1 schoolplus.cloudware.ng:80 GET /?p=365515073 HTTP/1.1
   4-0  68575 0/42/5011  W 1.06 0    0   2482281 0.0   1.12  130.34 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4015113045 HTTP/1.1
   5-0  67447 0/56/5178  R 1.54 0    343 2678309 0.0   1.55  160.82 45.187.226.221 http/1.1 nigeriadecide.org:443
   6-0  65950 1/173/4942 K 2.62 2    337 2463855 30.6  2.29  129.98 66.249.64.100  http/1.1 schoolplus.cloudware.ng:80 GET /?p=848579571 HTTP/1.1
   7-0  70330 1/1/5670   K 0.00 3    350 2718363 29.2  0.03  152.23 66.249.70.162  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3809844562 HTTP/1.1
   8-0  66331 2/69/4361  K 1.62 2    290 2223581 61.0  2.07  112.48 192.178.4.97   http/1.1 schoolplus.cloudware.ng:80 GET /?p=793889287 HTTP/1.1
   9-0  70331 1/1/4593   K 0.00 3    363 2336191 30.2  0.03  121.71 66.249.70.162  http/1.1 schoolplus.cloudware.ng:80 GET /?p=288660313 HTTP/1.1
   10-0 69421 0/12/4697  _ 0.26 0    355 2324900 0.0   0.26  129.78 66.249.70.128  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1721640402 HTTP/1.1
   11-0 67559 1/47/4983  K 0.96 4    351 2556847 30.1  1.44  161.67 192.178.4.97   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2204661553 HTTP/1.1
   12-0 69434 1/16/4677  K 0.40 3    400 2304703 31.5  0.83  115.35 66.249.70.103  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1237660985 HTTP/1.1
   13-0 70352 1/1/3772   K 0.00 2    277 1784189 31.0  0.03  89.05  66.249.70.108  http/1.1 schoolplus.cloudware.ng:80 GET /?p=768096057 HTTP/1.1
   14-0 69435 1/18/3970  K 0.38 0    384 2069656 219.4 0.61  120.90 192.178.4.100  http/1.1 team.cloudware.ng:80       GET /vendor/symfony/doctrine-bridge/Tests/DependencyInjection/C
   15-0 63373 1/131/3372 K 3.34 3    345 1726838 33.7  4.88  88.58  66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3438293090 HTTP/1.1
   16-0 67630 1/164/4785 K 2.35 0    341 2319307 34.6  1.99  125.66 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=299466
   17-0 70353 1/1/5172   K 0.00 2    263 2673217 30.8  0.03  149.72 66.249.70.65   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1030505105 HTTP/1.1
   18-0 69452 0/28/2631  _ 0.78 0    4   1454463 0.0   0.78  71.11  66.249.70.37   http/1.1 wmoulms.cloudware.ng:443   GET /?801124492?item=0798381206 HTTP/1.1
   19-0 66369 0/96/3257  _ 0.69 0    345 1764008 0.0   1.26  87.05  66.249.70.105  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2287043091 HTTP/1.1
   20-0 69453 0/19/1991  _ 0.49 0    341 1051535 0.0   0.51  50.44  66.249.70.141  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2616440119 HTTP/1.1
   21-0 66370 1/70/2151  K 1.60 3    299 1145178 31.9  1.91  59.13  66.249.70.133  http/1.1 schoolplus.cloudware.ng:80 GET /?p=340672746 HTTP/1.1
   22-0 66394 1/66/2081  K 1.63 2    296 1129412 29.5  1.76  63.64  66.249.64.234  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4015499184 HTTP/1.1
   23-0 70354 1/1/1610   K 0.00 2    280 854225  30.3  0.03  36.83  66.249.70.96   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1573933351 HTTP/1.1
   24-0 70355 1/1/2304   K 0.00 2    284 966267  31.1  0.03  51.16  66.249.64.74   http/1.1 schoolplus.cloudware.ng:80 GET /?p=459895974 HTTP/1.1
   25-0 69454 1/23/1439  K 0.63 3    374 774931  30.6  0.84  38.66  192.178.4.98   http/1.1 schoolplus.cloudware.ng:80 GET /?p=384237190 HTTP/1.1
   26-0 70379 2/2/742    K 0.29 0    775 398820  5.5   0.01  18.92  216.73.216.158 http/1.1 blog.cloudsms.com.ng:443   GET /autonotify HTTP/1.1
   27-0 66396 1/37/888   W 0.85 0    0   478281  21.0  0.90  23.30  66.249.64.224  http/1.1 cloudware.ng:443           GET /2019/07/16/content-management-systems-content-deployment-m
   28-0 70380 1/1/1780   K 0.00 1    356 822269  31.9  0.03  44.82  66.249.64.132  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2839964924 HTTP/1.1
   29-0 70381 1/1/496    K 0.00 1    300 274401  30.8  0.03  12.84  66.249.64.129  http/1.1 schoolplus.cloudware.ng:80 GET /?p=926314867 HTTP/1.1
   30-0 70382 1/1/943    K 0.00 1    429 501452  31.2  0.03  21.95  66.249.64.132  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1246473615 HTTP/1.1
   31-0 66399 0/88/530   _ 1.74 0    286 299612  0.0   2.61  13.65  66.249.70.69   http/1.1 schoolplus.cloudware.ng:80 GET /?p=717557412 HTTP/1.1
   32-0 70383 1/2/375    K 0.00 0    514 213280  31.3  0.03  9.76   66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=524969981 HTTP/1.1
   33-0 70384 0/2/484    W 0.00 0    0   283623  0.0   0.02  12.22  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   34-0 66401 1/40/433   K 0.88 1    259 261226  29.8  1.19  11.00  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2394616786 HTTP/1.1
   35-0 70385 0/1/154    W 0.00 0    0   83324   0.0   0.00  3.77   192.178.4.99   http/1.1 team.cloudware.ng:443      GET /vendor/symfony/security-core/Tests/Authentication/Remember
   36-0 70386 1/1/63     K 0.00 1    307 31695   29.3  0.03  1.42   66.249.64.39   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2319050242 HTTP/1.1
   37-0 -     0/0/220    . 0.00 463  0   129325  0.0   0.00  5.55   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/106    . 0.00 292  0   62326   0.0   0.00  2.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/71     . 0.00 460  0   33332   0.0   0.00  1.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1120   . 0.00 1320 0   651566  0.0   0.00  32.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/11     . 0.00 1333 0   1258    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/13     . 0.00 1326 0   4689    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 1294 0   30775   0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 1259 0   29051   0.0   0.00  1.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 1322 0   2240    0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 1338 0   2519    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 530  0   144675  0.0   0.00  6.70   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 1351 0   3773    0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 1345 0   2208    0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 1187 0   30413   0.0   0.00  3.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 1346 0   3961    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 1341 0   2145    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 1256 0   17077   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 1174 0   24170   0.0   0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 1339 0   1791    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 1328 0   2519    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 1260 0   23864   0.0   0.00  0.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 399
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 1...57)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 30485
   total entries replaced since starting: 0
   total entries expired since starting: 30070
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 168 miss
   total removes since starting: 16 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit