403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.24.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.24 load[0] mem[61/71] mysql[3/8] httpd[31]
              total        used        free      shared  buff/cache   available
Mem:           2363        1383         159          23         821         794
Swap:          1999        1656         343
 02:24:01 up  6:21,  0 users,  load average: 0.74, 0.71, 0.71
## system overview
top - 02:24:01 up  6:21,  0 users,  load average: 0.74, 0.71, 0.71
Tasks: 214 total,   4 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 71.9 us, 21.9 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   166936 free,  1412460 used,   840904 buff/cache
KiB Swap:  2047996 total,   352264 free,  1695732 used.   817440 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 216436   4028 S 133.3  8.9   5:30.56 /usr/sbin+
  4561 nigeria   20   0  400652  15932  10220 S  20.0  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44428   3440   1516 S   0.0  0.1   0:32.02 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.62 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.13 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:23.91 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.06 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.56 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.06 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.61 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.42 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.12 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   350 nobody    20   0  277792  17736   3776 S   0.0  0.7   0:00.44 /usr/sbin+
   357 root      20   0   40240   7696   7452 S   0.0  0.3   0:13.16 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   409 nobody    20   0  277720  18564   4072 S   0.0  0.8   0:00.37 /usr/sbin+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:02.10 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.21 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.51 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:03.09 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.31 queueproc+
   507 root      20   0   52852    204    116 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:11.82 /usr/bin/+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:19.71 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.64 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3812    876 S   0.0  0.2   0:00.87 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13860   2768 S   0.0  0.6   0:05.56 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.48 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.31 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.02 /usr/bin/+
   933 telegraf  20   0 5654048  33832   5992 S   0.0  1.4   0:12.76 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.52 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.98 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    332    240 S   0.0  0.0   0:00.68 php-fpm: +
   961 named     20   0  636988  33416   1928 S   0.0  1.4   0:13.23 /usr/sbin+
   964 root      20   0  281936   7276   6736 S   0.0  0.3   0:06.20 /usr/sbin+
   981 root      20   0  436392    404    316 S   0.0  0.0   0:00.78 php-fpm: +
   984 root      20   0  385496    540    444 S   0.0  0.0   0:00.66 php-fpm: +
   985 root      20   0  261288   6420   1740 S   0.0  0.3   0:03.72 cpsrvd (S+
   989 root      20   0  392856    260    176 S   0.0  0.0   0:00.65 php-fpm: +
   992 root      20   0 1901916 232508    588 S   0.0  9.6   0:32.37 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.22 php-fpm: +
  1006 cpanelc+  20   0   10656   3692   2300 R   0.0  0.2   0:18.97 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.45 dovecot/p+
  1076 dovenull  20   0   48460   2840   1648 S   0.0  0.1   0:00.37 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.27 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.35 dovecot/p+
  1080 dovenull  20   0   48000   2568   1528 S   0.0  0.1   0:00.27 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.16 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1556   1016 S   0.0  0.1   0:00.87 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.58 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.25 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:18.97 /usr/bin/+
  1232 root      20   0  209372  10188   2396 S   0.0  0.4   0:02.99 tailwatchd
  1234 root      20   0  167452   4164   2792 S   0.0  0.2   0:00.44 dnsadmin +
  1237 root      20   0  183900   6096   2860 S   0.0  0.3   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.62 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.84 /usr/sbin+
  2063 root      20   0   12852    380    212 S   0.0  0.0   0:02.85 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.42 /usr/loca+
  2065 root      20   0   12904    392    216 S   0.0  0.0   0:02.67 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2638 nobody    20   0  277784  17336   3504 S   0.0  0.7   0:00.15 /usr/sbin+
  2639 nobody    20   0  277784  17952   3932 S   0.0  0.7   0:00.18 /usr/sbin+
  2719 nobody    20   0  277784  17236   3324 S   0.0  0.7   0:00.15 /usr/sbin+
  2760 nobody    20   0  277784  17612   3604 S   0.0  0.7   0:00.17 /usr/sbin+
  2762 nobody    20   0  277784  17452   3428 S   0.0  0.7   0:00.14 /usr/sbin+
  2764 nobody    20   0  277784  17436   3560 S   0.0  0.7   0:00.09 /usr/sbin+
  2821 nobody    20   0  277796  17644   3592 S   0.0  0.7   0:00.23 /usr/sbin+
  3341 nobody    20   0  277932  17404   3576 S   0.0  0.7   0:00.12 /usr/sbin+
  3517 nobody    20   0  277784  15848   2164 S   0.0  0.7   0:00.10 /usr/sbin+
  3527 nobody    20   0  277784  17372   3600 S   0.0  0.7   0:00.09 /usr/sbin+
  3528 nobody    20   0  277784  17220   3384 S   0.0  0.7   0:00.10 /usr/sbin+
  3535 nobody    20   0  277784  15896   2188 S   0.0  0.7   0:00.10 /usr/sbin+
  3536 nobody    20   0  277528  17336   3704 S   0.0  0.7   0:00.07 /usr/sbin+
  3537 nobody    20   0  277784  15772   2132 S   0.0  0.7   0:00.11 /usr/sbin+
  3564 nobody    20   0  277932  17280   3588 S   0.0  0.7   0:00.09 /usr/sbin+
  3566 nobody    20   0  277092  14600   1636 S   0.0  0.6   0:00.00 /usr/sbin+
  3567 nobody    20   0  277784  17264   3428 S   0.0  0.7   0:00.18 /usr/sbin+
  3570 nobody    20   0  277784  17104   3392 S   0.0  0.7   0:00.07 /usr/sbin+
  3671 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3709 nobody    20   0  277784  17288   3572 S   0.0  0.7   0:00.06 /usr/sbin+
  3867 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  3906 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
  3908 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  4103 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
  4133 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
  4272 nigeria   20   0  397064   4472   2352 S   0.0  0.2   0:00.00 php-fpm: +
  4277 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  4418 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
  4429 nobody    20   0  277640  15536   2132 S   0.0  0.6   0:00.00 /usr/sbin+
  4432 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
  4433 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
  4448 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
  4449 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
  4450 nobody    20   0  277640  15532   2128 S   0.0  0.6   0:00.00 /usr/sbin+
  4451 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
  4462 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  4463 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  4482 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
  4498 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  4500 nobody    20   0  277364  14888   1836 S   0.0  0.6   0:00.00 /usr/sbin+
  4501 nobody    20   0  277364  14888   1836 S   0.0  0.6   0:00.00 /usr/sbin+
  4503 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  4504 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4505 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4507 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4509 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4511 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4512 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4513 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4515 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4517 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  4521 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  4522 oysipao+  20   0  436392   2692   1820 S   0.0  0.1   0:00.00 php-fpm: +
  4523 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  4524 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
  4535 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4536 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4538 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4540 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4541 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  4542 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4543 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4545 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4547 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  4554 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  4555 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.00 /opt/cpan+
  4558 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  4568 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
  4588 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
  4597 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  4603 cloudw    20   0  254384   9288   6504 R   0.0  0.4   0:00.00 /opt/cpan+
  7883 root      20   0  294720 106624   2400 S   0.0  4.4   0:04.89 spamd chi+
  7886 root      20   0  261428  93268   2540 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.36 [kworker]
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182316   9280   1104 S   0.0  0.4   0:08.30 lfd - sle+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.06 /usr/bin/+
 82872 root      20   0 1277312  11676    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    680    456 S   0.0  0.0   0:00.00 /usr/sbin+
 88739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93620 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96561 nobody    20   0  277720  18468   4044 S   0.0  0.8   0:00.95 /usr/sbin+
100498 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100499 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root      88739  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:3]
root      93620  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:2]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root     100498  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/0:4]
root     100499  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:1]
root        658  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root       3671  0.0  0.0      0     0 ?        S    02:23   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  40240  7696 ?        Ss   Nov12   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   204 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:19 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root       4503  0.0  0.1 183080  2424 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4521  0.0  0.0 113284  1212 ?        Ss   02:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       4523  0.0  0.0 108052   360 ?        S    02:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       4524  0.0  0.0 113288  1512 ?        S    02:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       4604  0.0  0.0 153840  2096 ?        R    02:24   0:00  |               \_ ps auxf
root       4504  0.0  0.1 183080  2428 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4543  0.0  0.0  20164   804 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       4505  0.0  0.1 183080  2428 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4542  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       4507  0.0  0.1 183080  2428 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4545  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       4509  0.0  0.1 183080  2428 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4540  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       4511  0.0  0.1 183080  2424 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4536  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       4512  0.0  0.1 183080  2424 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4535  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       4513  0.0  0.0 183080  2420 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4538  0.0  0.0  20164   808 ?        Ss   02:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       4515  0.0  0.0 183080  2420 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4547  0.0  0.0  20164   968 ?        Ss   02:24   0:00  |   \_ jailshell (pactpay) [4554] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4554  0.0  0.0  20164   260 ?        S    02:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4568  0.0  0.7 476724 17484 ?        S    02:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       4517  0.0  0.0 183080  2420 ?        S    02:24   0:00  \_ /usr/sbin/CROND -n
root       4541  0.0  0.0  20164   968 ?        Ss   02:24   0:00      \_ jailshell (nigeria) [4558] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4558  0.0  0.0  20164   260 ?        S    02:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4561  0.0  0.6 400652 15932 ?        S    02:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3812 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13860 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2840 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2568 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1556 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33832 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root       3867  0.0  0.1 111304  4264 ?        Ss   02:23   0:00  \_ sshd: [accepted]
root       3906  0.0  0.1 111304  4448 ?        Ss   02:23   0:00  \_ sshd: [accepted]
sshd       3908  0.0  0.1 115644  2632 ?        S    02:23   0:00  |   \_ sshd: [net]
root       4103  0.0  0.2 157100  5072 ?        Ss   02:23   0:00  \_ sshd: unknown [priv]
sshd       4133  0.0  0.1 115644  2632 ?        S    02:23   0:00  |   \_ sshd: unknown [net]
root       4277  0.0  0.1 111304  4260 ?        Ss   02:23   0:00  \_ sshd: [accepted]
root       4418  0.0  0.1 111304  4264 ?        Ss   02:23   0:00  \_ sshd: [accepted]
root       4462  0.0  0.1 111304  4260 ?        Ss   02:23   0:00  \_ sshd: [accepted]
sshd       4463  0.0  0.1 115644  2624 ?        S    02:23   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 33416 ?        Ssl  Nov12   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.3 281936  7276 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
oysipao+   4522  0.0  0.1 436392  2692 ?        S    02:24   0:00  \_ php-fpm: pool oysipa_oyostate_gov_ng
root        984  0.0  0.0 385496   540 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6420 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root       4498  0.0  0.0      0     0 ?        Z    02:24   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   260 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 232508 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    4272  0.0  0.1 397064  4472 ?        S    02:23   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3692 ?        Ss   Nov12   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106624 ?       S    Nov12   0:04  \_ spamd child
root       7886  0.0  3.8 261428 93268 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 10188 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4164 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6096 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.9 1457796 216436 ?      Sl   Nov12   5:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12852   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12904   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    96561  0.1  0.7 277720 18468 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody      350  0.1  0.7 277792 17736 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody      409  0.1  0.7 277720 18564 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody     2638  0.1  0.7 277784 17336 ?        S    02:21   0:00  \_ /usr/sbin/httpd -k start
nobody     2639  0.1  0.7 277784 17952 ?        S    02:21   0:00  \_ /usr/sbin/httpd -k start
nobody     2719  0.1  0.7 277784 17236 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     2760  0.1  0.7 277784 17612 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     2762  0.1  0.7 277784 17452 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     2764  0.0  0.7 277784 17436 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     2821  0.1  0.7 277796 17644 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3341  0.1  0.7 277932 17404 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3517  0.1  0.6 277784 15848 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3527  0.1  0.7 277784 17372 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3528  0.1  0.7 277784 17220 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3535  0.1  0.6 277784 15896 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3536  0.1  0.7 277528 17336 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3537  0.1  0.6 277784 15772 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3564  0.1  0.7 277932 17280 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3566  0.0  0.6 277092 14600 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3567  0.2  0.7 277784 17264 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3570  0.1  0.7 277784 17104 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3709  0.1  0.7 277784 17288 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4429  0.0  0.6 277640 15536 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4432  0.0  0.6 277640 15528 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4433  0.0  0.6 277640 15528 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4448  0.0  0.6 277640 15528 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4449  0.0  0.6 277640 15528 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4450  0.0  0.6 277640 15532 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4451  0.0  0.6 277640 15528 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4482  0.0  0.6 277640 15528 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
cloudw     4603  0.0  0.6 351952 15232 ?        S    02:24   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     4500  0.0  0.6 277636 15328 ?        R    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody     4501  0.0  0.6 277364 14888 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
cloudw     4588  0.0  0.6 352096 15232 ?        S    02:24   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182316  9280 ?        Ss   00:00   0:08 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11676 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   680 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 22862  Threads: 3  Questions: 1998877  Slow queries: 0  Opens: 7451  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.432
*************************** 1. row ***************************
     Id: 28634
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 28636
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 28642
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 114.119.149.43 TIME_WAIT
      1 167.114.139.215 TIME_WAIT
      1 ::1 TIME_WAIT
      1 205.169.39.3 TIME_WAIT
      1 207.46.13.107 TIME_WAIT
      1 40.77.167.25 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 74.7.227.76 TIME_WAIT
      1 74.7.228.47 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.193 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:24:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 20 minutes 57 seconds
   Server load: 0.74 0.71 0.71
   Total accesses: 127775 - Total Traffic: 3.3 GB - Total Duration: 65478860
   CPU Usage: u2.92 s3.88 cu1636.25 cs1323.16 - 13% CPU load
   5.59 requests/sec - 153.3 kB/second - 27.4 kB/request - 512.454 ms/request
   31 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KKKWKK_KKKKWKKKKKKKKRKWKW.K..KK.R.K.KK..........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot      Client      Protocol           VHost                        Request
   0-0  350   1/73/5715  K 1.95 0    348 2919791 30.5 2.04  145.05 66.249.64.171   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1995262129 HTTP/1.1
   1-0  3341  1/20/5763  K 0.50 3    294 2746282 32.5 0.55  143.54 66.249.64.32    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3337837381 HTTP/1.1
   2-0  2638  1/26/5682  K 0.67 0    407 3016620 33.1 0.67  163.53 66.249.70.131   http/1.1 schoolplus.cloudware.ng:80 GET /?p=910536555 HTTP/1.1
   3-0  4429  0/1/5775   W 0.00 0    0   3013896 0.0  0.03  163.00 66.249.64.45    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3374234386 HTTP/1.1
   4-0  3517  1/18/5501  K 0.46 1    345 2735419 29.9 0.50  144.67 66.249.64.2     http/1.1 schoolplus.cloudware.ng:80 GET /?p=778912152 HTTP/1.1
   5-0  4432  1/1/5574   K 0.00 4    397 2894870 30.6 0.03  171.28 66.249.70.160   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1104015187 HTTP/1.1
   6-0  4433  0/1/5449   _ 0.00 0    259 2762864 0.0  0.03  144.60 66.249.64.97    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3506615123 HTTP/1.1
   7-0  3527  1/17/6224  K 0.33 2    342 3044269 29.4 0.39  166.43 66.249.70.39    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3016381718 HTTP/1.1
   8-0  3528  1/18/4873  K 0.46 3    295 2512306 31.6 0.52  125.93 66.249.64.231   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1652819055 HTTP/1.1
   9-0  3535  1/19/5093  K 0.46 0    403 2635787 31.3 0.51  135.24 66.249.70.100   http/1.1 schoolplus.cloudware.ng:80 GET /?p=162009991 HTTP/1.1
   10-0 3536  1/14/5143  K 0.24 1    391 2576991 32.7 0.28  140.91 66.249.70.172   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2848807619 HTTP/1.1
   11-0 2639  0/31/5421  W 0.81 0    0   2773559 0.0  0.84  171.53 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 3537  1/17/5028  K 0.47 0    419 2492805 30.1 0.51  124.68 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3000082225 HTTP/1.1
   13-0 4448  1/1/4287   K 0.00 3    310 2029148 31.0 0.03  100.86 66.249.64.74    http/1.1 schoolplus.cloudware.ng:80 GET /?p=490198122 HTTP/1.1
   14-0 2719  1/25/4476  K 0.68 2    349 2389249 28.9 0.69  132.63 192.178.4.101   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3999163859 HTTP/1.1
   15-0 96561 1/161/3791 K 4.22 1    261 1970882 30.4 4.89  100.13 66.249.70.34    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1799669170 HTTP/1.1
   16-0 4449  1/1/5520   K 0.00 3    263 2634005 30.5 0.03  140.78 66.249.70.105   http/1.1 schoolplus.cloudware.ng:80 GET /?p=779564752 HTTP/1.1
   17-0 3564  1/16/5550  K 0.35 2    342 2885870 30.8 0.42  159.70 66.249.64.71    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1245221275 HTTP/1.1
   18-0 4450  1/1/3019   K 0.00 3    265 1665087 29.3 0.03  80.91  66.249.64.7     http/1.1 schoolplus.cloudware.ng:80 GET /?p=2541512554 HTTP/1.1
   19-0 4451  1/1/3636   K 0.00 3    274 1977447 29.5 0.03  96.92  66.249.64.109   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4031369214 HTTP/1.1
   20-0 3566  0/0/2415   R 0.00 63   0   1233182 0.0  0.00  59.64  47.128.41.181   http/1.1
   21-0 3567  1/30/2529  K 0.81 1    412 1351182 32.2 0.84  68.61  66.249.64.8     http/1.1 schoolplus.cloudware.ng:80 GET /?p=4066358778 HTTP/1.1
   22-0 4482  1/1/2478   W 0.00 0    0   1351786 30.8 0.03  74.11  66.249.64.130   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4029711177 HTTP/1.1
   23-0 4500  1/1/1914   K 0.00 0    385 1029191 29.5 0.03  44.51  66.249.64.234   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2130403211 HTTP/1.1
   24-0 4501  0/0/2730   W 0.00 0    0   1222923 0.0  0.00  62.96  66.249.64.42    http/1.1 schoolplus.cloudware.ng:80 GET /?p=139589360 HTTP/1.1
   25-0 -     0/0/1981   . 0.00 49   0   957054  0.0  0.00  50.77  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 2760  1/29/1049  K 0.73 1    399 574716  30.0 0.80  27.21  66.249.70.8     http/1.1 schoolplus.cloudware.ng:80 GET /?p=2914982608 HTTP/1.1
   27-0 -     0/0/1107   . 0.00 41   0   608532  0.0  0.00  29.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/2166   . 0.00 53   0   1009063 0.0  0.00  53.37  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 2762  1/25/745   K 0.63 0    353 410432  29.3 0.66  19.25  66.249.64.69    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2741274036 HTTP/1.1
   30-0 3570  2/12/1312  K 0.30 0    404 649145  58.7 0.31  29.32  192.178.4.105   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1277962217 HTTP/1.1
   31-0 -     0/0/896    . 0.00 43   0   515919  0.0  0.00  24.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 2764  0/15/728   R 0.36 50   378 449103  0.0  0.38  18.10  188.253.220.246 http/1.1 nigeriadecide.org:443
   33-0 -     0/0/706    . 0.00 51   0   411116  0.0  0.00  18.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 409   1/65/569   K 1.64 1    395 337446  31.5 1.69  14.41  66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2106525136 HTTP/1.1
   35-0 -     0/0/376    . 0.00 44   0   145864  0.0  0.00  7.61   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 2821  1/40/173   K 1.05 0    392 93390   31.2 1.09  4.46   66.249.70.3     http/1.1 schoolplus.cloudware.ng:80 GET /?p=1634502167 HTTP/1.1
   37-0 3709  1/12/258   K 0.24 2    352 268394  29.6 0.30  6.45   66.249.64.173   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3585535623 HTTP/1.1
   38-0 -     0/0/195    . 0.00 315  0   116045  0.0  0.00  4.76   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/104    . 0.00 236  0   51460   0.0  0.00  2.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1126   . 0.00 645  4   653619  0.0  0.00  32.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/69     . 0.00 472  0   34662   0.0  0.00  1.59   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/16     . 0.00 639  0   6280    0.0  0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 3453 0   30775   0.0  0.00  1.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 3418 0   29051   0.0  0.00  1.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 3481 0   2240    0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 3497 0   2519    0.0  0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 2690 0   144675  0.0  0.00  6.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 3510 0   3773    0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 3504 0   2208    0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 3347 0   30413   0.0  0.00  3.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 3505 0   3961    0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 3500 0   2145    0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 3415 0   17077   0.0  0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 3334 0   24170   0.0  0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 3498 0   1791    0.0  0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 3487 0   2519    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 3419 0   23864   0.0  0.00  0.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 375
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 1...96)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 33062
   total entries replaced since starting: 0
   total entries expired since starting: 32664
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit