403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.27.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.27 load[0] mem[60/71] mysql[1/8] httpd[33]
              total        used        free      shared  buff/cache   available
Mem:           2363        1426         183          23         754         751
Swap:          1999        1654         345
 02:27:01 up  6:24,  0 users,  load average: 0.47, 0.67, 0.70
## system overview
top - 02:27:01 up  6:24,  0 users,  load average: 0.47, 0.67, 0.70
Tasks: 221 total,   2 running, 218 sleeping,   0 stopped,   1 zombie
%Cpu(s): 79.4 us, 20.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   150988 free,  1496716 used,   772596 buff/cache
KiB Swap:  2047996 total,   353800 free,  1694196 used.   733564 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 233120   3928 S 135.3  9.6   5:33.40 /usr/sbin+
  7519 nigeria   20   0  400652  15940  10220 S  11.8  0.7   0:00.05 /opt/cpan+
  7540 cloudw    20   0  352096  15232  10128 S   5.9  0.6   0:00.01 /opt/cpan+
  7541 cloudw    20   0  352096  15232  10128 S   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3440   1516 S   0.0  0.1   0:32.27 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.64 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.14 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:24.11 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.07 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.61 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.18 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.13 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   8124   7884 S   0.0  0.3   0:13.24 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:02.11 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.25 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.51 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:03.12 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3092    832 S   0.0  0.1   0:00.31 queueproc+
   507 root      20   0   52852    204    116 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:11.91 /usr/bin/+
   519 nscd      20   0 1062080   1344    604 S   0.0  0.1   0:19.90 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.64 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3760    824 S   0.0  0.2   0:00.87 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13700   2608 S   0.0  0.6   0:05.60 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.48 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.33 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.04 /usr/bin/+
   933 telegraf  20   0 5654048  33680   5380 S   0.0  1.4   0:12.87 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.52 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:03.00 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    284    192 S   0.0  0.0   0:00.69 php-fpm: +
   961 named     20   0  636988  33216   1616 S   0.0  1.4   0:13.35 /usr/sbin+
   964 root      20   0  281936   7676   7132 S   0.0  0.3   0:06.25 /usr/sbin+
   981 root      20   0  436392    404    316 S   0.0  0.0   0:00.79 php-fpm: +
   984 root      20   0  385496    540    444 S   0.0  0.0   0:00.66 php-fpm: +
   985 root      20   0  261288   6404   1724 S   0.0  0.3   0:03.73 cpsrvd (S+
   989 root      20   0  392856    260    176 S   0.0  0.0   0:00.65 php-fpm: +
   992 root      20   0 1901916 233384    912 S   0.0  9.6   0:32.38 /usr/loca+
  1000 root      20   0  397344   1884    608 S   0.0  0.1   0:03.25 php-fpm: +
  1006 cpanelc+  20   0   10656   3692   2300 R   0.0  0.2   0:19.12 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.45 dovecot/p+
  1076 dovenull  20   0   48460   2764   1572 S   0.0  0.1   0:00.37 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.13 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.28 dovecot/l+
  1079 dovenull  20   0   47112   2256   1508 S   0.0  0.1   0:00.36 dovecot/p+
  1080 dovenull  20   0   48000   2508   1468 S   0.0  0.1   0:00.27 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.16 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1556   1016 S   0.0  0.1   0:00.88 dovecot/a+
  1172 root      20   0  248152   5896   1136 S   0.0  0.2   0:05.60 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.25 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:19.12 /usr/bin/+
  1232 root      20   0  209372   9916   2120 S   0.0  0.4   0:03.01 tailwatchd
  1234 root      20   0  167452   3416   2044 S   0.0  0.1   0:00.44 dnsadmin +
  1237 root      20   0  183900   5316   2080 S   0.0  0.2   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.62 php-fpm: +
  1702 root      38  18  130416   1360    688 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.93 /usr/sbin+
  2063 root      20   0   12872    380    212 S   0.0  0.0   0:02.88 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.44 /usr/loca+
  2065 root      20   0   12928    392    216 S   0.0  0.0   0:02.70 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2764 nobody    20   0  277784  17760   3720 S   0.0  0.7   0:00.30 /usr/sbin+
  3527 nobody    20   0  277784  18008   4076 S   0.0  0.7   0:00.42 /usr/sbin+
  3535 nobody    20   0  277784  18012   3804 S   0.0  0.7   0:00.38 /usr/sbin+
  3570 nobody    20   0  277784  17412   3656 S   0.0  0.7   0:00.16 /usr/sbin+
  3671 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  3709 nobody    20   0  277784  17700   3752 S   0.0  0.7   0:00.39 /usr/sbin+
  4433 nobody    20   0  277784  17800   3732 S   0.0  0.7   0:00.33 /usr/sbin+
  4641 nobody    20   0  277932  17780   3732 S   0.0  0.7   0:00.18 /usr/sbin+
  4801 nobody    20   0  277916  17704   3764 S   0.0  0.7   0:00.32 /usr/sbin+
  5109 nobody    20   0  277512  17012   3424 S   0.0  0.7   0:00.01 /usr/sbin+
  5329 nobody    20   0  277784  17288   3272 S   0.0  0.7   0:00.18 /usr/sbin+
  6194 cloudsms  20   0   61472   5948   4428 S   0.0  0.2   0:00.01 dovecot/l+
  6225 nobody    20   0  277940  17236   3372 S   0.0  0.7   0:00.08 /usr/sbin+
  6436 nobody    20   0  277784  17588   3724 S   0.0  0.7   0:00.06 /usr/sbin+
  6450 nobody    20   0  277916  17408   3556 S   0.0  0.7   0:00.08 /usr/sbin+
  6452 nobody    20   0  277784  17740   3712 S   0.0  0.7   0:00.05 /usr/sbin+
  6527 nobody    20   0  277528  17320   3652 S   0.0  0.7   0:00.09 /usr/sbin+
  6529 nobody    20   0  277784  17184   3224 S   0.0  0.7   0:00.11 /usr/sbin+
  6531 nobody    20   0  277784  17000   3188 S   0.0  0.7   0:00.07 /usr/sbin+
  6533 nobody    20   0  277784  17300   3328 S   0.0  0.7   0:00.08 /usr/sbin+
  6607 nobody    20   0  277792  17240   3344 S   0.0  0.7   0:00.07 /usr/sbin+
  6616 nobody    20   0  277804  17124   3272 S   0.0  0.7   0:00.03 /usr/sbin+
  6617 nobody    20   0  277796  16928   3208 S   0.0  0.7   0:00.10 /usr/sbin+
  6638 nobody    20   0  277924  17312   3404 S   0.0  0.7   0:00.13 /usr/sbin+
  6640 nobody    20   0  277784  17636   3680 S   0.0  0.7   0:00.08 /usr/sbin+
  6641 nobody    20   0  277784  15764   2128 S   0.0  0.7   0:00.12 /usr/sbin+
  6702 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  7111 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  7328 mailnull  20   0   89292   4244   1132 S   0.0  0.2   0:00.00 /usr/sbin+
  7354 mailnull  20   0   89292   4244   1132 S   0.0  0.2   0:00.00 /usr/sbin+
  7355 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  7356 nigeria   20   0  397064   4472   2352 S   0.0  0.2   0:00.00 php-fpm: +
  7407 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  7411 nobody    20   0  277500  16712   3244 S   0.0  0.7   0:00.01 /usr/sbin+
  7418 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
  7419 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
  7420 nobody    20   0  277224  16148   2900 S   0.0  0.7   0:00.00 /usr/sbin+
  7421 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  7430 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  7431 nobody    20   0  277640  15528   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  7432 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  7433 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
  7435 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  7439 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
  7450 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  7452 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  7453 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7454 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7456 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7457 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7458 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7460 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7462 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7464 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7466 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  7468 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  7469 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
  7491 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7492 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  7493 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7494 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  7495 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7497 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7499 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7501 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7514 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  7517 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
  7518 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  7526 cloudw    20   0  350316  16888  10452 S   0.0  0.7   0:00.01 /opt/cpan+
  7531 nobody    20   0  277408  15844   2532 S   0.0  0.7   0:00.00 /usr/sbin+
  7532 nobody    20   0  277404  15100   1908 S   0.0  0.6   0:00.00 /usr/sbin+
  7533 nobody    20   0  277364  14888   1832 S   0.0  0.6   0:00.00 /usr/sbin+
  7534 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  7535 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  7536 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  7537 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  7538 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
  7543 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  7551 mailnull  20   0   89128   3996    932 S   0.0  0.2   0:00.00 /usr/sbin+
  7883 root      20   0  294720 107388   2964 S   0.0  4.4   0:05.06 spamd chi+
  7886 root      20   0  261428  92700   1972 S   0.0  3.8   0:00.32 spamd chi+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.36 [kworker]
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182316   9304   1104 S   0.0  0.4   0:08.46 lfd - sle+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.06 /usr/bin/+
 82872 root      20   0 1277312  11676    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    648    424 S   0.0  0.0   0:00.00 /usr/sbin+
 88739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96561 nobody    20   0  277720  18728   4160 S   0.0  0.8   0:01.12 /usr/sbin+
100498 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100499 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root      88739  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:3]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root     100498  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/0:4]
root     100499  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:1]
root        658  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root       3671  0.0  0.0      0     0 ?        S    02:23   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39500  8124 ?        Ss   Nov12   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3092 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   204 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1344 ?        Ssl  Nov12   0:19 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root       7452  0.0  0.1 183080  2424 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7466  0.0  0.0 113284  1212 ?        Ss   02:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       7468  0.0  0.0 108052   356 ?        S    02:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       7469  0.0  0.0 113288  1512 ?        S    02:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       7552  0.0  0.0 153840  2092 ?        R    02:27   0:00  |               \_ ps auxf
root       7453  0.0  0.1 183080  2428 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7499  0.0  0.0  20164   808 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       7454  0.0  0.1 183080  2428 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7497  0.0  0.0  20164   808 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       7456  0.0  0.1 183080  2424 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7493  0.0  0.0  20164   804 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       7457  0.0  0.1 183080  2424 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7495  0.0  0.0  20164   804 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       7458  0.0  0.1 183080  2424 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7501  0.0  0.0  20164   808 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       7460  0.0  0.0 183080  2420 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7491  0.0  0.0  20164   804 ?        Ss   02:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       7462  0.0  0.1 183080  2424 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7492  0.0  0.0  20164   968 ?        Ss   02:27   0:00  |   \_ jailshell (pactpay) [7514] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    7514  0.0  0.0  20164   264 ?        S    02:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    7517  0.0  0.7 476724 17484 ?        S    02:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       7464  0.0  0.0 183080  2420 ?        S    02:27   0:00  \_ /usr/sbin/CROND -n
root       7494  0.0  0.0  20164   964 ?        Ss   02:27   0:00      \_ jailshell (nigeria) [7518] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    7518  0.0  0.0  20164   260 ?        S    02:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    7519  0.0  0.6 400652 15940 ?        S    02:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3760 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   7328  0.0  0.1  89292  4244 ?        S    02:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   7354  0.0  0.1  89292  4244 ?        S    02:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   7551  0.0  0.1  89128  3996 ?        S    02:27   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13700 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2764 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2256 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2508 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1556 ?        S    Nov12   0:00  \_ dovecot/auth
cloudsms   6194  0.0  0.2  61472  5948 ?        S    02:25   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33680 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:03 /usr/sbin/sshd -D
root       6702  0.0  0.1 111304  4268 ?        Ss   02:26   0:00  \_ sshd: [accepted]
root       7111  0.0  0.1 111304  4260 ?        Ss   02:26   0:00  \_ sshd: [accepted]
root       7355  0.0  0.1 111304  4268 ?        Ss   02:26   0:00  \_ sshd: [accepted]
root       7407  0.0  0.1 111304  4264 ?        Ss   02:26   0:00  \_ sshd: [accepted]
root       7418  0.0  0.2 157100  5076 ?        Ss   02:26   0:00  \_ sshd: unknown [priv]
sshd       7419  0.0  0.1 115644  2628 ?        S    02:26   0:00  |   \_ sshd: unknown [net]
root       7435  0.0  0.1 111304  4268 ?        Ss   02:26   0:00  \_ sshd: [accepted]
sshd       7439  0.0  0.1 115644  2624 ?        S    02:26   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   284 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 33216 ?        Ssl  Nov12   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.3 281936  7676 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   540 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6404 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root       7450  0.0  0.0      0     0 ?        Z    02:27   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   260 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 233384 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1884 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    7356  0.0  0.1 397064  4472 ?        S    02:26   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3692 ?        Rs   Nov12   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5896 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 107388 ?       S    Nov12   0:05  \_ spamd child
root       7886  0.0  3.8 261428 92700 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372  9916 ?        Ss   Nov12   0:03 tailwatchd
root       1234  0.0  0.1 167452  3416 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  5316 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1360 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  9.6 1457796 233120 ?      Sl   Nov12   5:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12872   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12928   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    96561  0.1  0.7 277720 18728 ?        S    02:13   0:01  \_ /usr/sbin/httpd -k start
nobody     2764  0.1  0.7 277784 17760 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3527  0.1  0.7 277784 18008 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3535  0.1  0.7 277784 18012 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3570  0.0  0.7 277784 17412 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     3709  0.1  0.7 277784 17700 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4433  0.1  0.7 277784 17800 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4641  0.1  0.7 277932 17780 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody     4801  0.1  0.7 277916 17704 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody     5109  0.0  0.7 277512 17012 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody     5329  0.1  0.7 277784 17288 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody     6225  0.1  0.7 277940 17236 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody     6436  0.0  0.7 277784 17588 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody     6450  0.1  0.7 277916 17408 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6452  0.0  0.7 277784 17740 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6527  0.1  0.7 277528 17320 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6529  0.1  0.7 277784 17184 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6531  0.1  0.7 277784 17000 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6533  0.1  0.7 277784 17300 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6607  0.1  0.7 277792 17240 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6616  0.0  0.7 277804 17124 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6617  0.1  0.6 277796 16928 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6638  0.2  0.7 277924 17368 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6640  0.1  0.7 277784 17636 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     6641  0.2  0.6 277784 15764 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7411  0.3  0.6 277500 16712 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7420  0.0  0.6 277224 16148 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7421  0.0  0.6 277640 15524 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7430  0.0  0.6 277640 15524 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7431  0.0  0.6 277640 15528 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7432  0.0  0.6 277640 15524 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7433  0.0  0.6 277640 15524 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7531  0.0  0.6 277408 15844 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
cloudw     7541  0.0  0.6 352096 15232 ?        S    02:27   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     7532  0.0  0.6 277404 15100 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody     7533  0.0  0.6 277364 14888 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
cloudw     7540  0.0  0.6 352096 15232 ?        R    02:27   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     7534  0.0  0.5 277092 13584 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody     7535  0.0  0.5 277092 13584 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody     7536  0.0  0.5 277092 13584 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody     7537  0.0  0.5 277092 13584 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody     7538  0.0  0.5 277092 13584 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182316  9304 ?        Ss   00:00   0:08 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11676 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   648 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 23042  Threads: 3  Questions: 2013556  Slow queries: 0  Opens: 7507  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.386
*************************** 1. row ***************************
     Id: 28851
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 28853
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 28857
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 17.246.15.107 TIME_WAIT
      1 17.246.15.141 TIME_WAIT
      1 17.246.15.146 TIME_WAIT
      1 17.246.15.185 TIME_WAIT
      1 17.246.15.187 TIME_WAIT
      1 17.246.15.74 TIME_WAIT
      1 17.246.15.80 TIME_WAIT
      1 17.246.15.87 TIME_WAIT
      1 17.246.15.95 TIME_WAIT
      1 17.246.19.10 TIME_WAIT
      1 17.246.19.122 TIME_WAIT
      1 17.246.19.95 TIME_WAIT
      1 17.246.23.105 TIME_WAIT
      1 17.246.23.107 TIME_WAIT
      1 17.246.23.165 TIME_WAIT
      1 17.246.23.176 TIME_WAIT
      1 17.246.23.179 TIME_WAIT
      1 17.246.23.186 TIME_WAIT
      1 17.246.23.187 TIME_WAIT
      1 17.246.23.208 TIME_WAIT
      1 17.246.23.211 TIME_WAIT
      1 17.246.23.217 TIME_WAIT
      1 17.246.23.229 TIME_WAIT
      1 17.246.23.6 TIME_WAIT
      1 17.246.23.84 TIME_WAIT
      1 17.246.23.95 TIME_WAIT
      1 194.187.179.49 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.95.163 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 66.249.70.66 TIME_WAIT
      1 66.249.70.69 TIME_WAIT
      1 92.205.20.105 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 17.246.23.193 TIME_WAIT
      2 47.128.110.78 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:27:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 23 minutes 57 seconds
   Server load: 0.47 0.67 0.70
   Total accesses: 129143 - Total Traffic: 3.4 GB - Total Duration: 66242545
   CPU Usage: u3.64 s4.23 cu1652.41 cs1337.72 - 13% CPU load
   5.61 requests/sec - 153.6 kB/second - 27.4 kB/request - 512.94 ms/request
   34 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KKKKKKKKKKKRKKKKK_KKKKWK_KRKRKKWKK____K.........K...............
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot      Client     Protocol            VHost                             Request
   0-0  6225  1/19/5746  K 0.22 3    404 2935659 29.9 0.50  145.77 66.249.70.66   http/1.1 schoolplus.cloudware.ng:80  GET /?p=2017114077 HTTP/1.1
   1-0  5109  1/3/5769   K 0.01 4    347 2749328 30.0 0.07  143.67 66.249.70.174  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1050143869 HTTP/1.1
   2-0  7411  2/2/5731   K 0.03 2    23  3042081 7.2  0.01  164.68 60.249.8.223   http/1.1 schoolplus.cloudware.ng:443 GET /favicon.ico HTTP/1.1
   3-0  7420  1/1/5797   K 0.00 2    3   3022634 7.9  0.01  163.53 52.167.144.172 http/1.1 team.cloudware.ng:443       GET /translations/actions.nl.xlf HTTP/1.1
   4-0  6436  1/13/5533  K 0.19 4    345 2750277 31.8 0.27  145.42 192.178.4.100  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3333093629 HTTP/1.1
   5-0  7421  1/1/5599   K 0.00 2    312 2911189 31.3 0.03  171.97 192.178.4.102  http/1.1 schoolplus.cloudware.ng:80  GET /?p=970335569 HTTP/1.1
   6-0  4433  1/60/5508  K 1.39 3    347 2793793 28.7 1.52  146.09 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2362369663 HTTP/1.1
   7-0  3527  1/72/6279  K 1.80 1    296 3080862 31.8 1.90  167.94 66.249.70.162  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3048808653 HTTP/1.1
   8-0  7430  1/1/4902   K 0.00 1    268 2526349 28.5 0.03  126.63 66.249.64.105  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3296472485 HTTP/1.1
   9-0  3535  1/64/5138  K 1.65 2    298 2661917 29.7 1.70  136.43 192.178.4.102  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2847114522 HTTP/1.1
   10-0 7431  1/1/5184   K 0.00 0    399 2601487 32.7 0.03  142.04 66.249.70.102  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2045412496 HTTP/1.1
   11-0 6450  0/15/5449  R 0.30 18   405 2787868 0.0  0.39  172.25 124.248.183.5  http/1.1
   12-0 4801  1/54/5083  K 1.41 4    359 2525039 29.8 1.45  126.13 66.249.70.97   http/1.1 schoolplus.cloudware.ng:80  GET /?p=2085754753 HTTP/1.1
   13-0 7432  1/1/4314   K 0.00 1    286 2041994 30.0 0.03  101.47 66.249.70.96   http/1.1 schoolplus.cloudware.ng:80  GET /?p=1182313185 HTTP/1.1
   14-0 6452  1/13/4502  K 0.11 3    357 2397826 29.3 0.22  133.16 66.249.64.3    http/1.1 schoolplus.cloudware.ng:80  GET /?p=345466944 HTTP/1.1
   15-0 96561 1/200/3830 K 4.88 1    256 1984946 29.0 5.73  100.97 66.249.64.105  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2165764412 HTTP/1.1
   16-0 7433  1/1/5546   K 0.00 1    276 2641826 30.2 0.03  141.18 66.249.64.234  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3553693804 HTTP/1.1
   17-0 6527  0/16/5573  _ 0.36 0    415 2903148 0.0  0.41  160.19 66.249.70.71   http/1.1 schoolplus.cloudware.ng:80  GET /?p=1214717529 HTTP/1.1
   18-0 6529  1/19/3048  K 0.50 0    374 1687398 28.7 0.51  81.58  66.249.70.103  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2396756591 HTTP/1.1
   19-0 6531  1/11/3671  K 0.29 3    416 1999135 29.6 0.31  97.90  66.249.70.33   http/1.1 schoolplus.cloudware.ng:80  GET /?p=3002350961 HTTP/1.1
   20-0 7531  1/3/2421   K 0.00 0    301 1234307 29.3 0.05  59.72  192.178.4.105  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1948037795 HTTP/1.1
   21-0 6533  1/13/2560  K 0.30 3    267 1367887 29.1 0.34  69.38  66.249.64.6    http/1.1 schoolplus.cloudware.ng:80  GET /?p=3821135816 HTTP/1.1
   22-0 7532  0/1/2506   W 0.00 0    0   1370009 0.0  0.00  74.90  66.249.64.4    http/1.1 schoolplus.cloudware.ng:80  GET /?p=4139064545 HTTP/1.1
   23-0 7533  1/1/1925   K 0.00 0    315 1040102 29.6 0.03  44.65  66.249.70.107  http/1.1 schoolplus.cloudware.ng:80  GET /?p=4051453129 HTTP/1.1
   24-0 7534  0/0/2764   _ 0.00 0    0   1236685 0.0  0.00  63.66  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 6607  1/15/2014  K 0.31 3    273 981662  30.0 0.37  51.51  66.249.64.132  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2093264497 HTTP/1.1
   26-0 6616  0/6/1073   R 0.08 37   8   588896  0.0  0.15  28.03  124.248.183.5  http/1.1
   27-0 6617  1/17/1133  K 0.46 1    264 628909  29.5 0.48  29.76  66.249.70.69   http/1.1 schoolplus.cloudware.ng:80  GET /?p=816668959 HTTP/1.1
   28-0 4641  0/36/2202  R 0.75 36   402 1025910 0.0  0.80  54.17  124.248.183.5  http/1.1
   29-0 6638  1/22/790   K 0.56 0    315 438237  35.5 0.61  20.52  66.249.70.38   http/1.1 support.cloudware.ng:443    GET /?c=2754730467 HTTP/1.1
   30-0 3570  1/25/1325  K 0.69 3    401 657647  31.7 0.70  29.71  66.249.64.170  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3621649398 HTTP/1.1
   31-0 7535  0/0/908    W 0.00 0    0   521839  0.0  0.00  24.41  ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   32-0 2764  1/51/764   K 1.28 4    399 469207  32.3 1.37  19.09  66.249.70.135  http/1.1 schoolplus.cloudware.ng:80  GET /?p=749715776 HTTP/1.1
   33-0 6640  2/15/724   K 0.33 3    349 425799  61.8 0.35  18.45  66.249.64.131  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2150537842 HTTP/1.1
   34-0 7536  0/0/599    _ 0.00 0    0   354612  0.0  0.00  15.16  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 7537  0/0/396    _ 0.00 0    0   161751  0.0  0.00  8.08   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 7538  0/0/208    _ 0.00 0    0   109655  0.0  0.00  5.19   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 3709  0/67/313   _ 1.61 0    304 298327  0.0  1.83  7.98   66.249.64.106  http/1.1 schoolplus.cloudware.ng:80  GET /?p=65974036 HTTP/1.1
   38-0 6641  1/19/221   K 0.52 4    405 133445  32.0 0.56  5.42   66.249.70.172  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1850317360 HTTP/1.1
   39-0 -     0/0/106    . 0.00 129  0   54836   0.0  0.00  2.33   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/1131   . 0.00 106  0   659515  0.0  0.00  32.48  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/89     . 0.00 26   0   44408   0.0  0.00  2.09   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00 127  0   6280    0.0  0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/62     . 0.00 93   0   32429   0.0  0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/83     . 0.00 47   0   37187   0.0  0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 133  0   2241    0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/7      . 0.00 132  0   2520    0.0  0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/292    . 0.00 24   0   155098  0.0  0.00  7.19   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 5329  1/33/35    K 0.86 3    276 23093   30.5 0.88  0.88   66.249.70.196  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3506883332 HTTP/1.1
   49-0 -     0/0/5      . 0.00 128  0   2208    0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00 102  0   32174   0.0  0.00  3.76   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00 123  0   3966    0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00 27   0   18976   0.0  0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/35     . 0.00 101  0   18367   0.0  0.00  0.71   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/58     . 0.00 108  0   25317   0.0  0.00  1.07   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/21     . 0.00 49   0   7335    0.0  0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/11     . 0.00 120  0   3060    0.0  0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 3599 0   23864   0.0  0.00  0.92   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 515
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 1...87)
   index usage: 9%, cache usage: 12%
   total entries stored since starting: 33434
   total entries replaced since starting: 0
   total entries expired since starting: 32896
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit