403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.15.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.15 load[0] mem[57/71] mysql[1/8] httpd[23]
              total        used        free      shared  buff/cache   available
Mem:           2363        1345         270          23         746         831
Swap:          1999        1657         342
 02:15:01 up  6:12,  0 users,  load average: 0.76, 0.78, 0.78
## system overview
top - 02:15:01 up  6:12,  0 users,  load average: 0.76, 0.78, 0.78
Tasks: 210 total,   2 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.1 us, 25.8 sy,  0.0 ni, 16.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   289200 free,  1365984 used,   765116 buff/cache
KiB Swap:  2047996 total,   350472 free,  1697524 used.   863888 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 214980   3780 S  73.3  8.9   5:22.82 /usr/sbin+
 97572 nigeria   20   0  400652  15936  10216 S  13.3  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44428   3440   1516 S   0.0  0.1   0:31.35 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.59 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.10 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.29 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.02 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.41 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.97 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.40 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   6512   6268 S   0.0  0.3   0:12.91 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:02.05 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.10 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.49 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:03.02 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.30 queueproc+
   507 root      20   0   52852    204    116 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:11.55 /usr/bin/+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:19.09 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.63 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3816    880 S   0.0  0.2   0:00.86 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13728   2660 S   0.0  0.6   0:05.44 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.47 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.31 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.98 /usr/bin/+
   933 telegraf  20   0 5654048  34852   5992 S   0.0  1.4   0:12.47 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.50 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.92 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    332    240 S   0.0  0.0   0:00.66 php-fpm: +
   961 named     20   0  636988  32740   1936 S   0.0  1.4   0:12.85 /usr/sbin+
   964 root      20   0  281936   6256   5728 S   0.0  0.3   0:06.08 /usr/sbin+
   981 root      20   0  436392    372    284 S   0.0  0.0   0:00.77 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.64 php-fpm: +
   985 root      20   0  261288   6248   1648 S   0.0  0.3   0:03.63 cpsrvd (S+
   989 root      20   0  392856    260    176 S   0.0  0.0   0:00.63 php-fpm: +
   992 root      20   0 1901916 232684    764 S   0.0  9.6   0:32.37 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.15 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 S   0.0  0.2   0:18.51 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.45 dovecot/p+
  1076 dovenull  20   0   48460   2844   1652 S   0.0  0.1   0:00.37 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.27 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.35 dovecot/p+
  1080 dovenull  20   0   48000   2580   1540 S   0.0  0.1   0:00.27 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1560   1020 S   0.0  0.1   0:00.86 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.51 /usr/loca+
  1173 wp-tool+  20   0  387556   3524   1656 S   0.0  0.1   0:00.25 /usr/bin/+
  1174 wp-tool+  20   0  410616  18236   1680 S   0.0  0.8   0:18.52 /usr/bin/+
  1232 root      20   0  209372  10192   2400 S   0.0  0.4   0:02.96 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.43 dnsadmin +
  1237 root      20   0  183900   6108   2872 S   0.0  0.3   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.60 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.68 /usr/sbin+
  2063 root      20   0   12804    380    212 S   0.0  0.0   0:02.76 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.34 /usr/loca+
  2065 root      20   0   12832    392    216 S   0.0  0.0   0:02.59 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106640   2416 S   0.0  4.4   0:04.83 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.35 [kworker]
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74479 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182316   9140   1104 S   0.0  0.4   0:07.81 lfd - sle+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.05 /usr/bin/+
 82872 root      20   0 1277312  11804    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    684    460 S   0.0  0.0   0:00.00 /usr/sbin+
 88739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89846 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92415 nobody    20   0  277784  17868   3724 S   0.0  0.7   0:00.40 /usr/sbin+
 93620 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 93681 nobody    20   0  277784  17736   3720 S   0.0  0.7   0:00.21 /usr/sbin+
 94478 nobody    20   0  277788  17456   3620 S   0.0  0.7   0:00.27 /usr/sbin+
 94493 nobody    20   0  277784  17440   3564 S   0.0  0.7   0:00.38 /usr/sbin+
 94494 nobody    20   0  277924  17296   3396 S   0.0  0.7   0:00.32 /usr/sbin+
 94588 nobody    20   0  277576  17400   3568 S   0.0  0.7   0:00.26 /usr/sbin+
 94613 nobody    20   0  277784  17520   3612 S   0.0  0.7   0:00.24 /usr/sbin+
 94658 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95309 nobody    20   0  277784  17456   3604 S   0.0  0.7   0:00.28 /usr/sbin+
 95535 nobody    20   0  277784  17700   3604 S   0.0  0.7   0:00.20 /usr/sbin+
 95549 nobody    20   0  277940  17648   3580 S   0.0  0.7   0:00.23 /usr/sbin+
 95577 nobody    20   0  277784  17332   3372 S   0.0  0.7   0:00.20 /usr/sbin+
 95580 nobody    20   0  277784  17808   3744 S   0.0  0.7   0:00.15 /usr/sbin+
 95583 nobody    20   0  277920  17568   3660 S   0.0  0.7   0:00.19 /usr/sbin+
 95584 nobody    20   0  277784  17524   3592 S   0.0  0.7   0:00.21 /usr/sbin+
 95714 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95742 nobody    20   0  277784  17428   3488 S   0.0  0.7   0:00.20 /usr/sbin+
 96216 mailnull  20   0   89308   5740   2492 S   0.0  0.2   0:00.00 /usr/sbin+
 96528 nobody    20   0  277908  17216   3372 S   0.0  0.7   0:00.14 /usr/sbin+
 96536 nobody    20   0  277824  17432   3552 S   0.0  0.7   0:00.13 /usr/sbin+
 96537 nobody    20   0  277520  16912   3420 S   0.0  0.7   0:00.14 /usr/sbin+
 96561 nobody    20   0  277784  17144   3296 S   0.0  0.7   0:00.08 /usr/sbin+
 96700 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 96749 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 96797 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 97379 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 97432 nobody    20   0  277640  15524   2116 S   0.0  0.6   0:00.01 /usr/sbin+
 97455 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 97456 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 97467 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 97472 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97473 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97474 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97475 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97476 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97478 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97479 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97481 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97482 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97484 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97485 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97487 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97496 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 97497 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 97498 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 97514 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97516 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 97517 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97518 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97520 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 97522 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 97524 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97525 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 97526 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97528 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97529 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97533 root      20   0  188220  11104   5148 S   0.0  0.5   0:00.02 /usr/loca+
 97544 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 97547 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 97550 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 97553 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 97555 nobody    20   0  277224  15144   2168 S   0.0  0.6   0:00.00 /usr/sbin+
 97556 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 97557 nobody    20   0  277224  15144   2156 S   0.0  0.6   0:00.00 /usr/sbin+
 97558 pactpay   20   0  476724  17116  11412 S   0.0  0.7   0:00.01 /opt/cpan+
 97560 cloudsms  20   0  400652  15144   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 97565 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 97570 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 97592 root      20   0  160224   2348   1636 S   0.0  0.1   0:00.00 top -n 2 +
 97615 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      74479  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:4]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root      88739  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:3]
root      89846  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:1]
root      93620  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:2]
root      94658  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:1]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root      95714  0.0  0.0      0     0 ?        S    02:13   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  6512 ?        Ss   Nov12   0:12 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   204 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:19 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      97472  0.0  0.1 183080  2428 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97496  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      97497  0.0  0.0 108052   356 ?        S    02:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      97498  0.0  0.0 113288  1516 ?        S    02:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      97642  0.0  0.0 153840  2096 ?        R    02:15   0:00  |               \_ ps auxf
root      97473  0.0  0.1 183080  2428 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97524  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      97474  0.0  0.1 183080  2428 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97528  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      97475  0.0  0.1 183080  2428 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97517  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      97476  0.0  0.1 183080  2428 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97529  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      97478  0.0  0.1 183080  2428 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97522  0.0  0.0  20164   968 ?        Ss   02:15   0:00  |   \_ jailshell (cloudsms) [97544] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  97544  0.0  0.0  20164   264 ?        S    02:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  97550  0.0  0.0 113284  1212 ?        S    02:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  97560  0.0  0.6 400652 15144 ?        S    02:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      97479  0.0  0.1 183080  2424 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97514  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      97481  0.0  0.1 183080  2424 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97518  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      97482  0.0  0.0 183080  2420 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97526  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      97484  0.0  0.0 183080  2420 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97516  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      97533  0.0  0.4 188220 11104 ?        S    02:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      97592  0.0  0.0 160224  2348 ?        S    02:15   0:00  |           \_ top -n 2 -b -c
root      97485  0.0  0.1 183080  2424 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97525  0.0  0.0  20164   968 ?        Ss   02:15   0:00  |   \_ jailshell (pactpay) [97547] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97547  0.0  0.0  20164   264 ?        S    02:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97558  0.0  0.7 476724 17116 ?        S    02:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      97487  0.0  0.0 183080  2420 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      97520  0.0  0.0  20164   964 ?        Ss   02:15   0:00      \_ jailshell (nigeria) [97565] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97565  0.0  0.0  20164   256 ?        S    02:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97572  0.0  0.6 400652 15936 ?        S    02:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3816 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  96216  0.0  0.2  89308  5740 ?        S    02:13   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13728 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2844 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2580 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1560 ?        S    Nov12   0:00  \_ dovecot/auth
root      96700  0.0  0.1  41052  2728 ?        S    02:14   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34852 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      96749  0.0  0.1 111304  4264 ?        Ss   02:14   0:00  \_ sshd: [accepted]
root      96797  0.0  0.1 111304  4264 ?        Ss   02:14   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 32740 ?        Ssl  Nov12   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 281936  6256 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   372 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6248 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      97467  0.0  0.0      0     0 ?        Z    02:15   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   260 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 232684 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   97379  0.0  0.1 397064  4472 ?        S    02:14   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3696 ?        Rs   Nov12   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106640 ?       S    Nov12   0:04  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3524 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18236 ?        Ss   Nov12   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 10192 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6108 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 214980 ?      Sl   Nov12   5:22 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12804   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12832   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    92415  0.1  0.7 277784 17868 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    93681  0.0  0.7 277784 17736 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94478  0.1  0.7 277788 17456 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94493  0.2  0.7 277784 17440 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
cloudw    97570  0.0  0.6 352096 15232 ?        S    02:15   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    94494  0.1  0.7 277924 17296 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94588  0.1  0.7 277576 17400 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94613  0.1  0.7 277784 17520 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95309  0.1  0.7 277784 17456 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95535  0.1  0.7 277784 17700 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95549  0.1  0.7 277940 17648 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95577  0.1  0.7 277784 17332 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95580  0.1  0.7 277784 17808 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95583  0.1  0.7 277920 17568 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95584  0.1  0.7 277784 17524 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    95742  0.1  0.7 277784 17428 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    96528  0.2  0.7 277908 17216 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    96536  0.2  0.7 277824 17432 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    96537  0.2  0.6 277520 16912 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    96561  0.1  0.7 277784 17144 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    97432  0.5  0.6 277640 15524 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    97455  0.0  0.6 277640 15520 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    97456  0.0  0.6 277640 15520 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    97553  0.0  0.5 277092 13584 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    97555  0.0  0.6 277224 15144 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    97556  0.0  0.5 277092 13584 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    97557  0.0  0.6 277224 15144 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182316  9140 ?        Ss   00:00   0:07 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11804 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   684 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 22322  Threads: 3  Questions: 1958067  Slow queries: 0  Opens: 7180  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.719
*************************** 1. row ***************************
     Id: 27828
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 2. row ***************************
     Id: 27831
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `23` WHERE `phone`='2348030852137' LIMIT 1
*************************** 3. row ***************************
     Id: 27836
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.120 TIME_WAIT
      1 15.235.96.243 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 195.20.233.67 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.64.98 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 81.12.27.190 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:15:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 11 minutes 57 seconds
   Server load: 0.76 0.78 0.78
   Total accesses: 123452 - Total Traffic: 3.2 GB - Total Duration: 63245387
   CPU Usage: u3.25 s3.67 cu1582.79 cs1277.55 - 12.8% CPU load
   5.53 requests/sec - 152.2 kB/second - 27.5 kB/request - 512.307 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKKKKK_KKK__KWWK_.KK..K.K...K..KR.....K..K......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  97432 1/1/5577   K 0.01 1    418 2840694 33.4  0.03  141.41 66.249.64.130  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3050319799 HTTP/1.1
   1-0  95309 15/44/5664 K 1.21 0    356 2696466 454.4 1.28  141.29 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1146741053 HTTP/1.1
   2-0  96528 1/24/5541  K 0.58 0    417 2936432 31.1  0.63  159.81 66.249.70.166  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1010552637 HTTP/1.1
   3-0  96536 2/22/5576  K 0.59 4    270 2960603 60.5  0.65  160.34 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1334630630 HTTP/1.1
   4-0  97455 1/1/5339   K 0.00 0    411 2665709 31.7  0.03  138.96 66.249.70.137  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1500396339 HTTP/1.1
   5-0  92415 1/74/5479  K 1.73 1    390 2841649 30.0  1.86  168.77 66.249.64.73   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2323524
   6-0  96537 0/26/5311  _ 0.62 0    259 2680160 0.0   0.69  139.50 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=260996885 HTTP/1.1
   7-0  97456 1/1/6038   K 0.00 0    414 2924924 31.0  0.03  161.78 66.249.64.228  http/1.1 schoolplus.cloudware.ng:80 GET /?p=10122286 HTTP/1.1
   8-0  94478 4/49/4764  K 1.16 4    403 2449764 121.8 1.22  123.15 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=318114261 HTTP/1.1
   9-0  95535 2/34/4984  K 1.15 2    361 2571791 59.0  0.89  132.17 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3651990012 HTTP/1.1
   10-0 97553 0/0/5019   _ 0.00 0    0   2505491 0.0   0.00  137.72 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 97555 0/1/5260   _ 0.00 0    1   2716566 0.0   0.02  168.55 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   12-0 95549 1/37/4925  K 1.30 1    335 2437185 31.1  1.05  121.34 66.249.64.107  http/1.1 schoolplus.cloudware.ng:80 GET /?p=592282366 HTTP/1.1
   13-0 97556 0/0/4194   W 0.00 0    0   1977601 0.0   0.00  98.48  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-0 94493 0/123/4376 W 0.82 0    0   2329922 0.0   1.84  129.98 66.249.64.64   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2099617124 HTTP/1.1
   15-0 96561 1/13/3643  K 0.33 3    322 1881184 31.8  0.38  95.62  66.249.64.69   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4214603289 HTTP/1.1
   16-0 97557 0/1/5325   _ 0.00 0    0   2575233 0.0   0.02  137.72 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 -     0/0/5466   . 0.00 73   0   2842704 0.0   0.00  157.60 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 94494 1/55/2944  K 1.42 3    353 1629041 30.9  1.48  79.20  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=279542598 HTTP/1.1
   19-0 95577 1/32/3516  K 0.89 0    333 1909986 31.7  0.97  93.81  66.249.64.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3455570539 HTTP/1.1
   20-0 -     0/0/2331   . 0.00 104  0   1185467 0.0   0.00  56.89  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/2397   . 0.00 103  0   1282778 0.0   0.00  65.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 93681 1/38/2361  K 0.85 2    392 1285013 31.2  0.97  70.86  66.249.70.3    http/1.1 schoolplus.cloudware.ng:80 GET /?p=265810701 HTTP/1.1
   23-0 -     0/0/1822   . 0.00 42   0   976938  0.0   0.00  41.88  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 95580 1/29/2629  K 0.60 2    409 1163652 30.7  0.68  60.31  66.249.70.32   http/1.1 schoolplus.cloudware.ng:80 GET /?p=603970760 HTTP/1.1
   25-0 -     0/0/1716   . 0.00 100  0   923257  0.0   0.00  48.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/962    . 0.00 110  0   523241  0.0   0.00  24.95  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1048   . 0.00 109  0   578133  0.0   0.00  27.76  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 95583 1/37/2050  K 1.05 2    410 941976  31.4  0.90  50.27  66.249.64.13   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2115777181 HTTP/1.1
   29-0 -     0/0/694    . 0.00 102  0   386267  0.0   0.00  18.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1175   . 0.00 107  0   629240  0.0   0.00  28.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 95584 1/38/783   K 0.96 2    349 448004  31.7  1.05  20.87  66.249.70.4    http/1.1 schoolplus.cloudware.ng:80 GET /?p=281904959 HTTP/1.1
   32-0 94588 0/43/654   R 1.16 30   394 407688  0.0   1.23  16.18  105.113.112.15 http/1.1
   33-0 -     0/0/663    . 0.00 48   0   384950  0.0   0.00  16.75  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/494    . 0.00 113  0   294565  0.0   0.00  12.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/337    . 0.00 72   0   126763  0.0   0.00  6.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/131    . 0.00 41   0   69915   0.0   0.00  3.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/230    . 0.00 98   0   132831  0.0   0.00  5.73   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 95742 1/35/151   K 0.89 0    424 90098   29.6  0.95  3.60   66.249.70.109  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3906128686 HTTP/1.1
   39-0 -     0/0/76     . 0.00 106  0   35313   0.0   0.00  1.53   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1126   . 0.00 105  4   653619  0.0   0.00  32.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 94613 1/41/52    K 1.05 3    263 25085   30.4  1.12  1.18   66.249.64.108  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2202651623 HTTP/1.1
   42-0 -     0/0/16     . 0.00 99   0   6280    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 2913 0   30775   0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 2878 0   29051   0.0   0.00  1.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 2941 0   2240    0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 2957 0   2519    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 2150 0   144675  0.0   0.00  6.70   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 2970 0   3773    0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 2964 0   2208    0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 2807 0   30413   0.0   0.00  3.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 2965 0   3961    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 2960 0   2145    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 2875 0   17077   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 2794 0   24170   0.0   0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 2958 0   1791    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 2947 0   2519    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 2879 0   23864   0.0   0.00  0.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 369
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 24 seconds, (range: 0...79)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 32321
   total entries replaced since starting: 0
   total entries expired since starting: 31930
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 22 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit