403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.33.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.33 load[0] mem[59/71] mysql[1/8] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1366         113          31         883         802
Swap:          1999        1653         346
 02:33:01 up  6:30,  0 users,  load average: 0.31, 0.45, 0.60
## system overview
top - 02:33:01 up  6:30,  0 users,  load average: 0.31, 0.45, 0.60
Tasks: 210 total,   3 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 60.6 us, 30.3 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   109996 free,  1406204 used,   904100 buff/cache
KiB Swap:  2047996 total,   354312 free,  1693684 used.   814896 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 233384   3928 S  81.2  9.6   5:37.75 /usr/sbin+
 12947 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44428   3440   1516 S   6.2  0.1   0:32.69 /usr/lib/+
   514 dbus      20   0   58596   1308    612 S   6.2  0.1   0:12.10 /usr/bin/+
 12967 cloudw    20   0  352096  15232  10128 S   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.66 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.17 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:24.50 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.09 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.68 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.18 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.51 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.46 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.15 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   2172   1932 S   0.0  0.1   0:13.38 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    468    340 S   0.0  0.0   0:02.14 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.33 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.52 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:03.16 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3092    832 S   0.0  0.1   0:00.31 queueproc+
   507 root      20   0   52852    204    116 S   0.0  0.0   0:00.01 /usr/sbin+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:20.28 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.66 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3760    824 S   0.0  0.2   0:00.88 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13872   2764 S   0.0  0.6   0:05.69 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.49 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.33 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.06 /usr/bin/+
   933 telegraf  20   0 5654048  33988   5780 S   0.0  1.4   0:13.06 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.53 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:03.03 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    284    192 S   0.0  0.0   0:00.69 php-fpm: +
   961 named     20   0  636988  33436   1616 S   0.0  1.4   0:13.60 /usr/sbin+
   964 root      20   0  290128   2496   1924 S   0.0  0.1   0:06.32 /usr/sbin+
   981 root      20   0  436392    404    316 S   0.0  0.0   0:00.80 php-fpm: +
   984 root      20   0  385496    540    444 S   0.0  0.0   0:00.67 php-fpm: +
   985 root      20   0  261288   6428   1736 S   0.0  0.3   0:03.79 cpsrvd (S+
   989 root      20   0  392856    260    176 S   0.0  0.0   0:00.65 php-fpm: +
   992 root      20   0 1901916 233384    912 S   0.0  9.6   0:32.38 /usr/loca+
  1000 root      20   0  397344   1884    608 S   0.0  0.1   0:03.29 php-fpm: +
  1006 cpanelc+  20   0   10656   3692   2300 R   0.0  0.2   0:19.43 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.47 dovecot/p+
  1076 dovenull  20   0   48460   2764   1572 S   0.0  0.1   0:00.37 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.13 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.28 dovecot/l+
  1079 dovenull  20   0   47112   2256   1508 S   0.0  0.1   0:00.36 dovecot/p+
  1080 dovenull  20   0   48000   2748   1680 S   0.0  0.1   0:00.28 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.16 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1556   1016 S   0.0  0.1   0:00.88 dovecot/a+
  1172 root      20   0  248152   5896   1136 S   0.0  0.2   0:05.63 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.26 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:19.42 /usr/bin/+
  1232 root      20   0  209372   9956   2124 S   0.0  0.4   0:03.04 tailwatchd
  1234 root      20   0  167452   3420   2048 S   0.0  0.1   0:00.45 dnsadmin +
  1237 root      20   0  183900   5316   2080 S   0.0  0.2   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.63 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.99 /usr/sbin+
  2063 root      20   0   12804    380    212 S   0.0  0.0   0:02.93 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.49 /usr/loca+
  2065 root      20   0   12824    392    216 S   0.0  0.0   0:02.75 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  3535 nobody    20   0  277784  18676   4020 S   0.0  0.8   0:00.91 /usr/sbin+
  3671 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  4801 nobody    20   0  277916  18300   4048 S   0.0  0.8   0:00.84 /usr/sbin+
  6616 nobody    20   0  277804  18416   4124 S   0.0  0.8   0:00.55 /usr/sbin+
  7433 nobody    20   0  277784  18208   4052 S   0.0  0.8   0:00.63 /usr/sbin+
  7532 nobody    20   0  277916  17916   3844 S   0.0  0.7   0:00.64 /usr/sbin+
  7883 root      20   0  294720 107388   2964 S   0.0  4.4   0:05.08 spamd chi+
  7886 root      20   0  261428  92700   1972 S   0.0  3.8   0:00.32 spamd chi+
  8371 nobody    20   0  277824  17996   3720 S   0.0  0.7   0:00.57 /usr/sbin+
  8372 nobody    20   0  277784  17556   3676 S   0.0  0.7   0:00.52 /usr/sbin+
  8440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8785 nobody    20   0  277784  17768   3712 S   0.0  0.7   0:00.49 /usr/sbin+
  9293 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  9346 nobody    20   0  277784  17716   3696 S   0.0  0.7   0:00.40 /usr/sbin+
  9347 nobody    20   0  277784  18000   3904 S   0.0  0.7   0:00.34 /usr/sbin+
 10040 nobody    20   0  277900  17548   3620 S   0.0  0.7   0:00.43 /usr/sbin+
 10311 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11424 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 11514 nobody    20   0  277932  17452   3656 S   0.0  0.7   0:00.18 /usr/sbin+
 11532 nobody    20   0  277784  17064   3208 S   0.0  0.7   0:00.20 /usr/sbin+
 11916 nobody    20   0  277784  17264   3344 S   0.0  0.7   0:00.14 /usr/sbin+
 11943 nobody    20   0  277784  17212   3352 S   0.0  0.7   0:00.13 /usr/sbin+
 11944 nobody    20   0  277784  15768   2128 S   0.0  0.7   0:00.17 /usr/sbin+
 12018 nobody    20   0  277784  17396   3556 S   0.0  0.7   0:00.09 /usr/sbin+
 12019 nobody    20   0  277784  17124   3292 S   0.0  0.7   0:00.07 /usr/sbin+
 12020 nobody    20   0  277792  17272   3352 S   0.0  0.7   0:00.07 /usr/sbin+
 12067 nobody    20   0  277784  17476   3652 S   0.0  0.7   0:00.07 /usr/sbin+
 12092 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12233 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12333 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 12527 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12528 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 12713 nigeria   20   0  397064   4472   2352 S   0.0  0.2   0:00.00 php-fpm: +
 12750 nobody    20   0  277784  17044   3384 S   0.0  0.7   0:00.02 /usr/sbin+
 12760 nobody    20   0  277784  15760   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 12761 nobody    20   0  277784  15692   2128 S   0.0  0.6   0:00.01 /usr/sbin+
 12774 nobody    20   0  277784  15696   2128 S   0.0  0.6   0:00.01 /usr/sbin+
 12775 nobody    20   0  277560  15584   2144 S   0.0  0.6   0:00.02 /usr/sbin+
 12776 nobody    20   0  277784  15700   2132 S   0.0  0.6   0:00.01 /usr/sbin+
 12777 nobody    20   0  277784  15696   2128 S   0.0  0.6   0:00.01 /usr/sbin+
 12846 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 12879 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 12884 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 12886 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12888 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12889 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12890 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12891 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12892 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12893 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12894 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12896 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12898 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 12899 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 12900 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 12919 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12920 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12921 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 12923 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12924 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 12925 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 12926 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12927 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12928 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12937 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 12939 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 12942 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 12953 cloudw    20   0  350316  16624  10324 S   0.0  0.7   0:00.01 /opt/cpan+
 12957 nobody    20   0  277364  14888   1832 S   0.0  0.6   0:00.00 /usr/sbin+
 12959 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 12961 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 12971 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12973 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 12974 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 12975 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.37 [kworker]
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182316   9376   1104 S   0.0  0.4   0:08.77 lfd - sle+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.07 /usr/bin/+
 82872 root      20   0 1277312  11676    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    648    424 S   0.0  0.0   0:00.00 /usr/sbin+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100498 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100499 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root     100498  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/0:4]
root     100499  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:1]
root        658  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root       3671  0.0  0.0      0     0 ?        S    02:23   0:00  \_ [kworker/1:2]
root       8440  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:1]
root       9293  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:3]
root      10311  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  39500  2172 ?        Ss   Nov12   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   468 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3092 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   204 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:20 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      12884  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12898  0.0  0.0 113284  1212 ?        Ss   02:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      12899  0.0  0.0 108052   360 ?        S    02:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      12900  0.0  0.0 113288  1520 ?        S    02:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      12977  0.0  0.0 153840  2092 ?        R    02:33   0:00  |               \_ ps auxf
root      12886  0.0  0.1 183080  2428 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12928  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      12888  0.0  0.1 183080  2428 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12925  0.0  0.0  20164   984 ?        Ss   02:33   0:00  |   \_ jailshell (cloudsms) [12974] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12974  0.0  0.0  20164   256 ?        S    02:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12976  0.0  0.0 113284  1212 ?        S    02:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  12978  0.0  0.5 397312 12204 ?        R    02:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      12889  0.0  0.1 183080  2428 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12926  0.0  0.0  20164   804 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      12890  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12919  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      12891  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12920  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      12892  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12923  0.0  0.0  20164   804 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      12893  0.0  0.0 183080  2420 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12924  0.0  0.0  20164   984 ?        Ss   02:33   0:00  |   \_ jailshell (cloudsms) [12971] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  12971  0.0  0.0  20164   260 ?        S    02:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  12973  0.0  0.0 113284  1212 ?        S    02:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  12975  0.0  0.2 310140  6740 ?        R    02:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      12894  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12921  0.0  0.0  20164   968 ?        Ss   02:33   0:00  |   \_ jailshell (pactpay) [12937] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12937  0.0  0.0  20164   264 ?        S    02:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12942  0.0  0.7 476724 17480 ?        S    02:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      12896  0.0  0.0 183080  2420 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      12927  0.0  0.0  20164   964 ?        Ss   02:33   0:00      \_ jailshell (nigeria) [12939] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12939  0.0  0.0  20164   256 ?        S    02:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12947  0.0  0.6 400652 15936 ?        S    02:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3760 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13872 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2764 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2256 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2748 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1556 ?        S    Nov12   0:00  \_ dovecot/auth
root      11424  0.0  0.1  60820  4508 ?        S    02:31   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 33988 ?       SLsl Nov12   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:03 /usr/sbin/sshd -D
root      12092  0.0  0.1 111304  4264 ?        Ss   02:32   0:00  \_ sshd: [accepted]
root      12233  0.0  0.1 111304  4264 ?        Ss   02:32   0:00  \_ sshd: [accepted]
root      12333  0.0  0.1 111304  4268 ?        Ss   02:32   0:00  \_ sshd: [accepted]
root      12527  0.0  0.1 111304  4272 ?        Ss   02:32   0:00  \_ sshd: [accepted]
sshd      12528  0.0  0.1 115644  2632 ?        S    02:32   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   284 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 33436 ?        Ssl  Nov12   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 290128  2496 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   540 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6428 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      12879  0.0  0.0      0     0 ?        Z    02:33   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   260 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 233384 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1884 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   12713  0.0  0.1 397064  4472 ?        S    02:32   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3692 ?        Rs   Nov12   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5896 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 107388 ?       S    Nov12   0:05  \_ spamd child
root       7886  0.0  3.8 261428 92700 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372  9956 ?        Ss   Nov12   0:03 tailwatchd
root       1234  0.0  0.1 167452  3420 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  5316 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  9.6 1457796 233384 ?      Sl   Nov12   5:37 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12804   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12824   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3535  0.1  0.7 277784 18676 ?        S    02:22   0:00  \_ /usr/sbin/httpd -k start
nobody     4801  0.1  0.7 277916 18300 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody     6616  0.1  0.7 277804 18416 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7433  0.1  0.7 277784 18208 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody     7532  0.1  0.7 277916 17916 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody     8371  0.1  0.7 277824 17996 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody     8372  0.1  0.7 277784 17556 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody     8785  0.1  0.7 277784 17768 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody     9346  0.1  0.7 277784 17716 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
cloudw    12953  0.0  0.6 350316 16624 ?        S    02:33   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     9347  0.1  0.7 277784 18000 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
cloudw    12959  0.0  0.6 352096 15236 ?        S    02:33   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    10040  0.2  0.7 277900 17548 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    11514  0.1  0.7 277932 17452 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    11532  0.2  0.7 277784 17064 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    11916  0.2  0.7 277784 17264 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    11943  0.2  0.7 277784 17212 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    11944  0.2  0.6 277784 15768 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12018  0.1  0.7 277784 17396 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12019  0.1  0.7 277784 17124 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12020  0.1  0.7 277792 17272 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12067  0.1  0.7 277784 17476 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12750  0.2  0.7 277784 17044 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12760  0.1  0.6 277784 15760 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12761  0.1  0.6 277784 15692 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12774  0.1  0.6 277784 15696 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12775  0.2  0.6 277560 15584 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12776  0.1  0.6 277784 15700 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12777  0.1  0.6 277784 15696 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12846  0.0  0.6 277640 15524 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    12957  0.0  0.6 277364 14888 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
cloudw    12967  0.0  0.6 352096 15232 ?        S    02:33   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182316  9376 ?        Ss   00:00   0:08 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11676 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   648 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 23402  Threads: 5  Questions: 2035032  Slow queries: 0  Opens: 7576  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.959
*************************** 1. row ***************************
     Id: 29211
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 29212
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 29218
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 29219
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 29220
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 102.134.52.49 TIME_WAIT
      1 125.23.86.26 TIME_WAIT
      1 15.235.27.91 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.136.115 TIME_WAIT
      1 66.249.64.11 TIME_WAIT
      1 66.249.64.227 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 66.249.70.5 TIME_WAIT
      1 66.249.70.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 92.249.178.186 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:33:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 29 minutes 58 seconds
   Server load: 0.31 0.45 0.60
   Total accesses: 131393 - Total Traffic: 3.4 GB - Total Duration: 67551681
   CPU Usage: u5.5 s5.04 cu1682.11 cs1364.09 - 13.1% CPU load
   5.62 requests/sec - 153.8 kB/second - 27.4 kB/request - 514.119 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KKKKK_KKKKKKKKKKKKKWKRKKKKKKW...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                        Request
   0-0  11916 1/27/5849  K 0.62 1    305 3004038 31.5  0.65  148.52 66.249.64.38  http/1.1 schoolplus.cloudware.ng:80 GET /?p=751812866 HTTP/1.1
   1-0  11514 1/35/5874  K 0.75 4    309 2808729 29.6  0.80  146.37 66.249.70.164 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3890413696 HTTP/1.1
   2-0  10040 4/70/5817  K 1.96 2    297 3094065 121.7 2.00  166.95 66.249.70.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1938520962 HTTP/1.1
   3-0  11532 1/32/5889  K 0.91 0    273 3074937 29.8  0.94  165.93 66.249.64.76  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3598387319 HTTP/1.1
   4-0  8785  1/83/5634  K 2.16 0    287 2810803 30.2  2.20  148.02 66.249.64.14  http/1.1 schoolplus.cloudware.ng:80 GET /?p=853281122 HTTP/1.1
   5-0  8371  0/107/5713 _ 2.55 0    397 2974488 0.0   2.85  174.99 66.249.64.2   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1277678626 HTTP/1.1
   6-0  12750 1/3/5580   K 0.04 3    279 2831898 32.2  0.07  147.88 192.178.4.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2757613029 HTTP/1.1
   7-0  8372  1/89/6369  K 2.34 3    308 3132896 30.7  2.37  170.31 66.249.70.172 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2960470937 HTTP/1.1
   8-0  12760 1/2/4962   K 0.03 2    255 2553810 30.5  0.06  127.98 66.249.64.164 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2419845423 HTTP/1.1
   9-0  3535  2/154/5228 K 4.07 2    263 2718907 60.5  4.14  138.87 66.249.70.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=745445611 HTTP/1.1
   10-0 12761 1/2/5253   K 0.03 3    326 2640279 29.5  0.06  143.78 66.249.64.43  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1502861140 HTTP/1.1
   11-0 12774 1/2/5489   K 0.03 2    299 2807811 30.2  0.06  173.17 66.249.64.44  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2262003260 HTTP/1.1
   12-0 4801  1/147/5176 K 3.72 0    267 2579382 34.8  3.82  128.50 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=2499129853 HTTP/1.1
   13-0 12775 1/2/4378   K 0.03 1    258 2080369 29.7  0.06  103.14 192.178.4.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3269244645 HTTP/1.1
   14-0 11943 1/22/4571  K 0.53 2    332 2435945 32.9  0.58  134.91 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2772462021 HTTP/1.1
   15-0 9346  1/70/3907  K 1.81 0    334 2030148 34.1  1.84  102.99 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=2752082539 HTTP/1.1
   16-0 7433  2/107/5652 K 2.91 3    263 2709335 62.5  2.97  144.11 66.249.70.8   http/1.1 schoolplus.cloudware.ng:80 GET /list/112345852111 HTTP/1.1
   17-0 9347  1/57/5633  K 1.54 0    313 2940926 30.2  1.66  161.91 66.249.70.170 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3356516962 HTTP/1.1
   18-0 12776 1/2/3107   K 0.03 1    268 1719599 28.7  0.06  83.15  66.249.64.6   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3419035772 HTTP/1.1
   19-0 11944 0/29/3735  W 0.80 0    0   2035777 0.0   0.87  99.50  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-0 12018 1/16/2479  K 0.38 4    406 1267474 32.6  0.43  61.12  66.249.70.137 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2910593263 HTTP/1.1
   21-0 12019 0/12/2579  R 0.30 0    338 1380201 0.0   0.33  69.84  54.225.81.20  http/1.1
   22-0 7532  1/110/2615 K 2.90 1    276 1433182 29.3  2.95  77.86  66.249.64.34  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1871559642 HTTP/1.1
   23-0 12020 1/12/1961  K 0.23 3    362 1061127 29.9  0.26  45.51  192.178.4.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=611353889 HTTP/1.1
   24-0 12777 1/2/2772   K 0.03 1    410 1240356 31.1  0.06  63.83  66.249.70.69  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3750808096 HTTP/1.1
   25-0 12067 1/14/2031  K 0.29 4    271 988563  30.3  0.34  51.88  66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3419318957 HTTP/1.1
   26-0 6616  1/97/1164  K 2.43 2    260 646908  30.6  2.55  30.44  192.178.4.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=506710914 HTTP/1.1
   27-0 12846 1/1/1136   K 0.00 3    272 630139  29.2  0.03  29.82  66.249.64.72  http/1.1 schoolplus.cloudware.ng:80 GET /?p=619732308 HTTP/1.1
   28-0 12957 0/0/2224   W 0.00 0    0   1035888 0.0   0.00  54.67  66.249.70.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2311079046 HTTP/1.1
   29-0 -     0/0/831    . 0.00 221  0   461825  0.0   0.00  21.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1440   . 0.00 49   0   730856  0.0   0.00  32.89  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/912    . 0.00 344  0   522570  0.0   0.00  24.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/766    . 0.00 349  0   469914  0.0   0.00  19.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/748    . 0.00 286  0   436614  0.0   0.00  19.05  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/602    . 0.00 342  0   355783  0.0   0.00  15.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/399    . 0.00 339  0   163032  0.0   0.00  8.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/270    . 0.00 116  0   148664  0.0   0.00  6.79   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/315    . 0.00 351  0   299040  0.0   0.00  8.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/237    . 0.00 289  0   142498  0.0   0.00  5.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/106    . 0.00 489  0   54836   0.0   0.00  2.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1131   . 0.00 466  0   659515  0.0   0.00  32.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/89     . 0.00 386  0   44408   0.0   0.00  2.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00 487  0   6280    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/62     . 0.00 453  0   32429   0.0   0.00  1.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/83     . 0.00 407  0   37187   0.0   0.00  2.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 493  0   2241    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/7      . 0.00 492  0   2520    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/292    . 0.00 384  0   155098  0.0   0.00  7.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/36     . 0.00 355  0   23094   0.0   0.00  0.88   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/5      . 0.00 488  0   2208    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00 462  0   32174   0.0   0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00 483  0   3966    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00 387  0   18976   0.0   0.00  0.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/35     . 0.00 461  0   18367   0.0   0.00  0.71   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/58     . 0.00 468  0   25317   0.0   0.00  1.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/21     . 0.00 409  0   7335    0.0   0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/11     . 0.00 480  0   3060    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 3960 0   23864   0.0   0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 356
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 0...183)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 33882
   total entries replaced since starting: 0
   total entries expired since starting: 33503
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit