403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.09.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.09 load[0] mem[59/71] mysql[1/8] httpd[30]
              total        used        free      shared  buff/cache   available
Mem:           2363        1352         170          23         840         824
Swap:          1999        1658         341
 02:09:01 up  6:06,  0 users,  load average: 0.46, 0.51, 0.74
## system overview
top - 02:09:01 up  6:06,  0 users,  load average: 0.46, 0.51, 0.74
Tasks: 214 total,   5 running, 208 sleeping,   0 stopped,   1 zombie
%Cpu(s): 64.1 us, 28.2 sy,  0.0 ni,  0.0 id,  5.1 wa,  0.0 hi,  2.6 si,  0.0 st
KiB Mem :  2420300 total,   138264 free,  1417372 used,   864664 buff/cache
KiB Swap:  2047996 total,   349960 free,  1698036 used.   811908 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 214688   3872 S  52.6  8.9   5:16.09 /usr/sbin+
 91595 root      20   0  169868  16848   2876 S  36.8  0.7   0:00.08 /usr/loca+
 91612 nigeria   20   0  400652  15936  10220 R  15.8  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44428   3616   1692 S   5.3  0.1   0:30.91 /usr/lib/+
   497 root      20   0   24896   1432    800 S   5.3  0.1   0:05.01 /usr/lib/+
 89801 nobody    20   0  277784  17664   3668 S   5.3  0.7   0:00.20 /usr/sbin+
 91608 pactpay   20   0  476724  16588  10920 S   5.3  0.7   0:00.01 /opt/cpan+
 91622 cloudw    20   0  351952  15232  10128 R   5.3  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.56 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.07 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:22.87 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.00 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.33 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.79 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.38 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.08 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   5732   5488 S   0.0  0.2   0:12.72 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:02.02 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.48 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.97 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.29 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:11.36 /usr/bin/+
   519 nscd      20   0 1062080   1352    612 S   0.0  0.1   0:18.70 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.62 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3840    904 S   0.0  0.2   0:00.85 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13636   2600 S   0.0  0.6   0:05.36 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.46 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.31 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.94 /usr/bin/+
   933 telegraf  20   0 5654048  34768   6020 S   0.0  1.4   0:12.28 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.49 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.87 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    380    288 S   0.0  0.0   0:00.66 php-fpm: +
   961 named     20   0  636988  32416   1940 S   0.0  1.3   0:12.61 /usr/sbin+
   964 root      20   0  281936   5524   5004 S   0.0  0.2   0:05.98 /usr/sbin+
   981 root      20   0  436392    372    284 S   0.0  0.0   0:00.76 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.63 php-fpm: +
   985 root      20   0  261288   6248   1660 S   0.0  0.3   0:03.60 cpsrvd (S+
   989 root      20   0  392856    312    228 S   0.0  0.0   0:00.62 php-fpm: +
   992 root      20   0 1901916 232896    976 S   0.0  9.6   0:32.37 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.11 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 S   0.0  0.2   0:18.20 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.44 dovecot/p+
  1076 dovenull  20   0   48460   2852   1660 S   0.0  0.1   0:00.36 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.26 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.34 dovecot/p+
  1080 dovenull  20   0   48000   2588   1548 S   0.0  0.1   0:00.27 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1560   1020 S   0.0  0.1   0:00.85 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.47 /usr/loca+
  1173 wp-tool+  20   0  387556   3528   1660 S   0.0  0.1   0:00.24 /usr/bin/+
  1174 wp-tool+  20   0  410616  18240   1684 S   0.0  0.8   0:18.23 /usr/bin/+
  1232 root      20   0  209372  10236   2444 S   0.0  0.4   0:02.92 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.43 dnsadmin +
  1237 root      20   0  183900   6452   3216 S   0.0  0.3   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.59 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.57 /usr/sbin+
  2063 root      20   0   12820    380    212 S   0.0  0.0   0:02.71 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.30 /usr/loca+
  2065 root      20   0   12868    392    216 S   0.0  0.0   0:02.53 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106800   2576 S   0.0  4.4   0:04.81 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.35 [kworker]
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74479 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182216   8992   1104 S   0.0  0.4   0:07.47 lfd - sle+
 82510 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.05 /usr/bin/+
 82872 root      20   0 1277312  11900    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    756    532 S   0.0  0.0   0:00.00 /usr/sbin+
 86679 nobody    20   0  277784  18080   3704 S   0.0  0.7   0:00.45 /usr/sbin+
 86680 nobody    20   0  277784  18220   4036 S   0.0  0.8   0:00.45 /usr/sbin+
 87882 nobody    20   0  277784  17804   3740 S   0.0  0.7   0:00.40 /usr/sbin+
 87912 nobody    20   0  277784  17492   3572 S   0.0  0.7   0:00.48 /usr/sbin+
 88620 nobody    20   0  277784  17444   3608 S   0.0  0.7   0:00.25 /usr/sbin+
 88630 nobody    20   0  277784  17604   3656 S   0.0  0.7   0:00.28 /usr/sbin+
 88739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89640 nobody    20   0  277792  17092   3228 S   0.0  0.7   0:00.25 /usr/sbin+
 89655 nobody    20   0  277784  17816   3704 S   0.0  0.7   0:00.23 /usr/sbin+
 89773 nobody    20   0  277916  17508   3640 S   0.0  0.7   0:00.19 /usr/sbin+
 89799 nobody    20   0  277784  16996   3208 S   0.0  0.7   0:00.02 /usr/sbin+
 89800 nobody    20   0  277924  17448   3556 S   0.0  0.7   0:00.25 /usr/sbin+
 89846 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90523 nobody    20   0  277536  17192   3352 S   0.0  0.7   0:00.14 /usr/sbin+
 90542 nobody    20   0  277932  17116   3308 S   0.0  0.7   0:00.11 /usr/sbin+
 90558 nobody    20   0  277924  17156   3408 S   0.0  0.7   0:00.08 /usr/sbin+
 90560 nobody    20   0  277784  17436   3396 S   0.0  0.7   0:00.14 /usr/sbin+
 90594 nobody    20   0  277784  17024   3188 S   0.0  0.7   0:00.10 /usr/sbin+
 90607 nobody    20   0  277784  17356   3388 S   0.0  0.7   0:00.09 /usr/sbin+
 90608 nobody    20   0  277784  17252   3536 S   0.0  0.7   0:00.05 /usr/sbin+
 91280 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.01 php-fpm: +
 91379 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 91399 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 91405 nobody    20   0  277788  15872   2168 S   0.0  0.7   0:00.01 /usr/sbin+
 91412 nobody    20   0  277784  15752   2120 S   0.0  0.7   0:00.01 /usr/sbin+
 91413 nobody    20   0  277784  15756   2120 S   0.0  0.7   0:00.01 /usr/sbin+
 91422 nobody    20   0  277784  15684   2120 S   0.0  0.6   0:00.02 /usr/sbin+
 91423 nobody    20   0  277784  17028   3368 S   0.0  0.7   0:00.02 /usr/sbin+
 91424 nobody    20   0  277784  15700   2136 S   0.0  0.6   0:00.02 /usr/sbin+
 91425 nobody    20   0  277784  15688   2120 S   0.0  0.6   0:00.01 /usr/sbin+
 91455 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 91483 nobody    20   0  277640  15516   2112 S   0.0  0.6   0:00.00 /usr/sbin+
 91488 nobody    20   0  277640  15516   2112 S   0.0  0.6   0:00.00 /usr/sbin+
 91489 nobody    20   0  277784  15684   2116 S   0.0  0.6   0:00.01 /usr/sbin+
 91526 nobody    20   0  277764  15712   2152 S   0.0  0.6   0:00.00 /usr/sbin+
 91529 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 91536 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 91537 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 91538 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91539 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91540 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91541 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91542 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91544 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91545 root      20   0  183080   2416   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91546 root      20   0  183080   2416   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91547 root      20   0  183080   2416   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91548 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91549 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91551 root      20   0  183080   2416   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 91553 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 91554 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 91555 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 91579 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 /usr/loca+
 91580 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91582 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91583 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 91585 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91586 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91588 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91589 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 91590 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91592 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 91593 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91596 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 91601 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 91603 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 91604 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 91620 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
 91621 root      20   0  123452   4408   1900 R   0.0  0.2   0:00.00 /usr/bin/+
 91623 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      51088  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      74479  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:4]
root      82510  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/0:2]
root      82518  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:2]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root      88739  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:3]
root      89846  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44428  3616 ?        Ss   Nov12   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  5732 ?        Ss   Nov12   0:12 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1352 ?        Ssl  Nov12   0:18 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      91538  0.0  0.1 183080  2428 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91553  0.0  0.0 113284  1212 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      91554  0.0  0.0 108052   356 ?        S    02:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      91555  0.0  0.0 113288  1520 ?        S    02:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      91625  0.0  0.0 153840  2088 ?        R    02:09   0:00  |               \_ ps auxf
root      91539  0.0  0.1 183080  2424 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91586  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      91540  0.0  0.1 183080  2424 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91582  0.0  0.0  20164   808 ?        Rs   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      91541  0.0  0.1 183080  2424 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91585  0.0  0.0  20164   808 ?        Rs   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      91542  0.0  0.1 183080  2424 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91580  0.0  0.0  20164   808 ?        Rs   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      91544  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91593  0.0  0.0  20164   808 ?        Rs   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      91545  0.0  0.0 183080  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91579  0.0  0.0  20164   980 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      91623  0.0  0.2  38516  5820 ?        R    02:09   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      91546  0.0  0.0 183080  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91590  0.0  0.0  20164   804 ?        Rs   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      91547  0.0  0.0 183080  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91588  0.0  0.0  20164   804 ?        Rs   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      91548  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91589  0.0  0.0 113284  1208 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      91595  0.0  0.6 169868 16848 ?        S    02:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      91620  0.0  0.0 113496  1420 ?        S    02:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      91621  0.0  0.1 123456  4408 ?        R    02:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      91549  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91592  0.0  0.0  20164   964 ?        Ss   02:09   0:00  |   \_ jailshell (pactpay) [91604] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   91604  0.0  0.0  20164   260 ?        S    02:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   91608  0.0  0.6 476724 16588 ?        S    02:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      91551  0.0  0.0 183080  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      91583  0.0  0.0  20164   964 ?        Ss   02:09   0:00      \_ jailshell (nigeria) [91603] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   91603  0.0  0.0  20164   260 ?        S    02:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   91612  0.0  0.6 400652 15936 ?        S    02:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3840 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13636 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2852 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2588 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1560 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34768 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      91379  0.0  0.1 111304  4260 ?        Ss   02:08   0:00  \_ sshd: [accepted]
sshd      91399  0.0  0.1 115644  2628 ?        S    02:08   0:00  |   \_ sshd: [net]
root      91455  0.0  0.1 111304  4264 ?        Ss   02:08   0:00  \_ sshd: [accepted]
root      91536  0.0  0.1 111304  4444 ?        Ss   02:09   0:00  \_ sshd: [accepted]
sshd      91537  0.0  0.1 115644  2632 ?        S    02:09   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   380 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 32416 ?        Ssl  Nov12   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 281936  5524 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   372 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6248 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      91529  0.0  0.0      0     0 ?        Z    02:09   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   312 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 232896 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   91280  0.0  0.1 397064  4472 ?        S    02:08   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3696 ?        Rs   Nov12   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106800 ?       S    Nov12   0:04  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3528 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18240 ?        Ss   Nov12   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 10236 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6452 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 214688 ?      Sl   Nov12   5:16 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12820   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12868   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    86679  0.1  0.7 277784 18080 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    86680  0.1  0.7 277784 18220 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    87882  0.1  0.7 277784 17804 ?        S    02:05   0:00  \_ /usr/sbin/httpd -k start
nobody    87912  0.2  0.7 277784 17492 ?        S    02:05   0:00  \_ /usr/sbin/httpd -k start
nobody    88620  0.1  0.7 277784 17444 ?        S    02:05   0:00  \_ /usr/sbin/httpd -k start
nobody    88630  0.1  0.7 277784 17604 ?        S    02:05   0:00  \_ /usr/sbin/httpd -k start
nobody    89640  0.1  0.7 277792 17092 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    89655  0.1  0.7 277784 17816 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    89773  0.1  0.7 277916 17508 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    89799  0.0  0.7 277784 16996 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    89800  0.2  0.7 277924 17448 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    89801  0.1  0.7 277784 17664 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    91622  0.0  0.6 351952 15232 ?        S    02:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    90523  0.2  0.7 277536 17192 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90542  0.1  0.7 277932 17116 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90558  0.1  0.7 277924 17156 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90560  0.2  0.7 277784 17436 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90594  0.1  0.7 277784 17024 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90607  0.1  0.7 277784 17356 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90608  0.0  0.7 277784 17252 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    91596  0.0  0.6 352096 15232 ?        S    02:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    91405  0.1  0.6 277788 15872 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91412  0.1  0.6 277784 15752 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91413  0.1  0.6 277784 15756 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91422  0.2  0.6 277784 15684 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91423  0.2  0.7 277784 17028 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91424  0.2  0.6 277784 15700 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91425  0.1  0.6 277784 15688 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91483  0.0  0.6 277640 15516 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91488  0.0  0.6 277640 15516 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91489  0.3  0.6 277784 15684 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91526  0.0  0.6 277764 15712 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182216  8992 ?        Ss   00:00   0:07 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11900 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   756 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 21962  Threads: 3  Questions: 1924111  Slow queries: 0  Opens: 7103  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.610
*************************** 1. row ***************************
     Id: 27388
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 27392
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 27394
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.216 TIME_WAIT
      1 114.119.150.155 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 119.249.100.181 TIME_WAIT
      1 15.235.27.43 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.6.6 TIME_WAIT
      1 66.249.64.224 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:09:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 5 minutes 58 seconds
   Server load: 0.46 0.51 0.74
   Total accesses: 120990 - Total Traffic: 3.2 GB - Total Duration: 61823640
   CPU Usage: u3.14 s3.69 cu1548.64 cs1248.48 - 12.8% CPU load
   5.51 requests/sec - 151.8 kB/second - 27.6 kB/request - 510.981 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KK_K_KKKKKKKKK_KKKKWKKKW.K.KRKW.K...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  91405 1/3/5500  K 0.02 4    273 2798353 31.1 0.06  139.48 66.249.70.34  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4056728747 HTTP/1.1
   1-0  90523 1/22/5573 K 0.58 0    386 2643378 28.9 0.63  138.80 66.249.64.160 http/1.1 schoolplus.cloudware.ng:80 GET /?p=636471264 HTTP/1.1
   2-0  91412 0/2/5446  _ 0.03 0    367 2883506 0.0  0.06  157.30 66.249.64.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1788843848 HTTP/1.1
   3-0  91413 1/2/5498  K 0.02 3    403 2918530 31.8 0.06  158.31 66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=252104182 HTTP/1.1
   4-0  88620 0/44/5260 _ 1.11 0    282 2623671 0.0  1.16  137.05 66.249.70.109 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3203785816 HTTP/1.1
   5-0  89640 1/40/5400 K 1.14 1    360 2800694 29.3 1.16  166.84 66.249.70.3   http/1.1 schoolplus.cloudware.ng:80 GET /?p=736238344 HTTP/1.1
   6-0  90542 3/19/5218 K 0.46 0    360 2629481 93.8 0.63  137.09 66.249.64.129 http/1.1 schoolplus.cloudware.ng:80 GET /?p=520587475 HTTP/1.1
   7-0  91422 1/2/5963  K 0.03 2    421 2882052 29.0 0.06  159.83 66.249.64.14  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1325933166 HTTP/1.1
   8-0  88630 1/47/4689 K 1.27 1    349 2410164 30.3 1.22  121.32 66.249.64.39  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2772332626 HTTP/1.1
   9-0  89655 1/39/4909 K 1.01 2    423 2529146 31.7 1.18  130.32 66.249.64.67  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4022570703 HTTP/1.1
   10-0 90558 1/15/4961 K 0.31 0    377 2472312 29.4 0.35  136.18 66.249.64.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2046132986 HTTP/1.1
   11-0 91423 1/3/5214  K 0.03 2    386 2694694 31.2 0.07  167.51 66.249.70.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=713286403 HTTP/1.1
   12-0 91424 1/2/4865  K 0.03 1    277 2400476 29.6 0.06  119.78 66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1801981
   13-0 91425 1/2/4131  K 0.03 2    352 1940197 30.5 0.06  96.80  66.249.64.8   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3835619471 HTTP/1.1
   14-0 90560 0/24/4228 _ 0.61 0    389 2212580 0.0  0.65  127.51 66.249.70.110 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2542337322 HTTP/1.1
   15-0 91483 1/1/3575  K 0.00 3    292 1840238 30.5 0.03  93.76  66.249.64.99  http/1.1 schoolplus.cloudware.ng:80 GET /?p=454008451 HTTP/1.1
   16-0 91488 1/1/5243  K 0.00 2    380 2528087 30.5 0.03  135.54 66.249.70.162 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3564388986 HTTP/1.1
   17-0 90594 1/16/5404 K 0.42 1    272 2807099 30.4 0.46  155.94 66.249.70.170 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3855073475 HTTP/1.1
   18-0 90607 1/15/2867 K 0.39 4    265 1584160 30.4 0.43  77.15  66.249.70.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2456389664 HTTP/1.1
   19-0 90608 0/11/3467 W 0.19 0    0   1880474 0.0  0.23  92.51  66.249.64.103 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2494210943 HTTP/1.1
   20-0 91489 2/2/2279  K 0.02 2    368 1159966 59.5 0.06  55.74  66.249.70.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3708893478 HTTP/1.1
   21-0 87882 1/67/2358 K 1.76 0    409 1260431 30.3 1.85  64.54  66.249.64.46  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1851581123 HTTP/1.1
   22-0 91526 1/3/2305  K 0.00 0    347 1250834 29.8 0.03  69.42  66.249.70.35  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4118238045 HTTP/1.1
   23-0 86679 0/80/1769 W 3.01 0    0   947253  0.0  2.03  40.74  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 -     0/0/2535  . 0.00 102  0   1108611 0.0  0.00  57.89  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 86680 1/77/1696 K 2.30 2    349 914453  28.9 2.17  48.17  66.249.64.65  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3024341810 HTTP/1.1
   26-0 -     0/0/872   . 0.00 112  0   469955  0.0  0.00  22.44  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 89773 1/34/1018 K 0.85 0    359 560479  30.5 0.92  26.97  66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1097615886 HTTP/1.1
   28-0 89799 0/3/1969  R 0.06 100  303 895403  0.0  0.09  48.21  102.89.85.158 http/1.1
   29-0 89800 1/41/655  K 1.13 1    409 364071  31.3 1.15  17.02  66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3535161421 HTTP/1.1
   30-0 89801 0/35/1123 W 0.83 0    0   599129  0.0  0.85  26.74  66.249.64.231 http/1.1 schoolplus.cloudware.ng:80 GET /?p=717617229 HTTP/1.1
   31-0 -     0/0/725   . 0.00 100  0   414799  0.0  0.00  19.32  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 87912 1/78/588  K 2.21 0    440 368728  32.1 2.24  14.42  66.249.64.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=947993059 HTTP/1.1
   33-0 -     0/0/622   . 0.00 350  0   363283  0.0  0.00  15.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/488   . 0.00 352  0   292498  0.0  0.00  12.43  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/316   . 0.00 436  0   115360  0.0  0.00  6.25   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/104   . 0.00 468  0   54049   0.0  0.00  2.60   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/223   . 0.00 1182 0   130665  0.0  0.00  5.61   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/106   . 0.00 1552 0   62326   0.0  0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/71    . 0.00 1720 0   33332   0.0  0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1120  . 0.00 2580 0   651566  0.0  0.00  32.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/11    . 0.00 2593 0   1258    0.0  0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/13    . 0.00 2586 0   4689    0.0  0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56    . 0.00 2554 0   30775   0.0  0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65    . 0.00 2518 0   29051   0.0  0.00  1.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4     . 0.00 2582 0   2240    0.0  0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6     . 0.00 2598 0   2519    0.0  0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272   . 0.00 1790 0   144675  0.0  0.00  6.70   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 2611 0   3773    0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4     . 0.00 2605 0   2208    0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55    . 0.00 2447 0   30413   0.0  0.00  3.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4     . 0.00 2606 0   3961    0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7     . 0.00 2601 0   2145    0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31    . 0.00 2515 0   17077   0.0  0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54    . 0.00 2434 0   24170   0.0  0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7     . 0.00 2599 0   1791    0.0  0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9     . 0.00 2588 0   2519    0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37    . 0.00 2519 0   23864   0.0  0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 327
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 25 seconds, (range: 0...124)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 31892
   total entries replaced since starting: 0
   total entries expired since starting: 31548
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 22 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit