403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.42.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.42 load[0] mem[61/71] mysql[2/8] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1388         108          31         866         781
Swap:          1999        1652         347
 02:42:01 up  6:39,  0 users,  load average: 0.39, 0.42, 0.50
## system overview
top - 02:42:01 up  6:39,  0 users,  load average: 0.39, 0.42, 0.50
Tasks: 206 total,   2 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.1 us, 22.6 sy,  0.0 ni, 19.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   107160 free,  1425740 used,   887400 buff/cache
KiB Swap:  2047996 total,   356104 free,  1691892 used.   795496 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 233080   3624 S  75.0  9.6   5:44.54 /usr/sbin+
 21177 nigeria   20   0  400652  15940  10220 S  18.8  0.7   0:00.06 /opt/cpan+
    13 root      rt   0       0      0      0 S   6.2  0.0   0:01.13 [migratio+
 21184 pactpay   20   0  476724  17112  11408 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44428   3464   1540 S   0.0  0.1   0:33.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.70 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.20 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:25.08 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.80 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.40 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.51 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.66 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.49 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.17 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   3352   3112 S   0.0  0.1   0:13.62 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    468    340 S   0.0  0.0   0:02.17 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.45 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.53 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:03.24 /usr/lib/+
   503 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3092    832 S   0.0  0.1   0:00.31 queueproc+
   507 root      20   0   52852    204    116 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:12.38 /usr/bin/+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:20.83 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.68 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3760    824 S   0.0  0.2   0:00.89 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13628   2520 S   0.0  0.6   0:05.81 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.49 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.33 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.11 /usr/bin/+
   933 telegraf  20   0 5654048  34068   5744 S   0.0  1.4   0:13.36 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.54 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:03.09 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    404    312 S   0.0  0.0   0:00.71 php-fpm: +
   961 named     20   0  636988  34020   1740 S   0.0  1.4   0:13.99 /usr/sbin+
   964 root      20   0  290128   3572   2992 S   0.0  0.1   0:06.43 /usr/sbin+
   981 root      20   0  436392    404    316 S   0.0  0.0   0:00.81 php-fpm: +
   984 root      20   0  385496    540    444 S   0.0  0.0   0:00.69 php-fpm: +
   985 root      20   0  261420   6480   1716 S   0.0  0.3   0:03.85 cpsrvd (S+
   989 root      20   0  392856    388    304 S   0.0  0.0   0:00.67 php-fpm: +
   992 root      20   0 1901916 234608    924 S   0.0  9.7   0:32.41 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.35 php-fpm: +
  1006 cpanelc+  20   0   10656   3692   2300 S   0.0  0.2   0:19.88 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.47 dovecot/p+
  1076 dovenull  20   0   48460   2764   1572 S   0.0  0.1   0:00.40 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.13 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.29 dovecot/l+
  1079 dovenull  20   0   47112   2256   1508 S   0.0  0.1   0:00.36 dovecot/p+
  1080 dovenull  20   0   48000   2748   1680 S   0.0  0.1   0:00.29 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.16 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1556   1016 S   0.0  0.1   0:00.91 dovecot/a+
  1172 root      20   0  248152   5896   1136 S   0.0  0.2   0:05.70 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.26 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:19.87 /usr/bin/+
  1232 root      20   0  209372   9708   1872 S   0.0  0.4   0:03.10 tailwatchd
  1234 root      20   0  167452   3416   2044 S   0.0  0.1   0:00.46 dnsadmin +
  1237 root      20   0  183900   5316   2080 S   0.0  0.2   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.64 php-fpm: +
  1702 root      38  18  130416   1356    684 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:03.11 /usr/sbin+
  2063 root      20   0   12844    380    212 S   0.0  0.0   0:03.01 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.55 /usr/loca+
  2065 root      20   0   12892    392    216 S   0.0  0.0   0:02.82 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  3671 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
  7883 root      20   0  294720 107652   2976 S   0.0  4.4   0:05.47 spamd chi+
  7886 root      20   0  261428  92700   1972 S   0.0  3.8   0:00.32 spamd chi+
  8440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9293 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  9347 nobody    20   0  277784  18652   4164 S   0.0  0.8   0:01.30 /usr/sbin+
 10311 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 14496 nobody    20   0  277924  18076   3740 S   0.0  0.7   0:00.67 /usr/sbin+
 14740 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15615 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15796 nobody    20   0  277788  18356   3804 S   0.0  0.8   0:00.67 /usr/sbin+
 16436 nobody    20   0  277720  18260   4064 S   0.0  0.8   0:00.55 /usr/sbin+
 17310 nobody    20   0  277568  17972   3796 S   0.0  0.7   0:00.48 /usr/sbin+
 17322 nobody    20   0  277568  18052   3916 S   0.0  0.7   0:00.41 /usr/sbin+
 17429 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18781 nobody    20   0  277568  18008   3708 S   0.0  0.7   0:00.30 /usr/sbin+
 19124 nobody    20   0  277960  17820   3696 S   0.0  0.7   0:00.22 /usr/sbin+
 19180 nobody    20   0  277916  17428   3660 S   0.0  0.7   0:00.17 /usr/sbin+
 19182 nobody    20   0  277568  18008   3800 S   0.0  0.7   0:00.20 /usr/sbin+
 19184 nobody    20   0  277568  17792   3680 S   0.0  0.7   0:00.14 /usr/sbin+
 19185 nobody    20   0  277568  17644   3720 S   0.0  0.7   0:00.20 /usr/sbin+
 20055 nobody    20   0  277572  17608   3588 S   0.0  0.7   0:00.07 /usr/sbin+
 20107 nobody    20   0  277568  16996   3336 S   0.0  0.7   0:00.14 /usr/sbin+
 20121 nobody    20   0  277568  15592   2144 S   0.0  0.6   0:00.10 /usr/sbin+
 20122 nobody    20   0  277568  17028   3356 S   0.0  0.7   0:00.11 /usr/sbin+
 20134 nobody    20   0  277568  17364   3572 S   0.0  0.7   0:00.06 /usr/sbin+
 20135 nobody    20   0  277960  17252   3368 S   0.0  0.7   0:00.09 /usr/sbin+
 20136 nobody    20   0  277912  17600   3676 S   0.0  0.7   0:00.11 /usr/sbin+
 20772 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 20935 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 21057 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 21064 mailnull  20   0   89300   5496   2268 S   0.0  0.2   0:00.00 /usr/sbin+
 21071 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 21072 nobody    20   0  277416  15388   2136 S   0.0  0.6   0:00.00 /usr/sbin+
 21085 nobody    20   0  277680  16724   3112 S   0.0  0.7   0:00.00 /usr/sbin+
 21086 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 21087 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 21088 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 21101 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 21106 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 21107 nobody    20   0  277228  14888   1856 S   0.0  0.6   0:00.00 /usr/sbin+
 21108 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 21109 nobody    20   0  277224  15144   2156 S   0.0  0.6   0:00.00 /usr/sbin+
 21110 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 21111 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 21112 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 21113 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 21117 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 21120 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21123 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21124 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21126 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21127 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21128 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21129 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21131 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 21134 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 21135 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 21136 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 21152 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 21153 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 21155 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 21158 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 21159 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 21161 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 21162 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 21164 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 21170 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 21174 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 21183 cloudw    20   0  352096  15232  10128 R   0.0  0.6   0:00.01 /opt/cpan+
 21197 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21202 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21209 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 21210 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.38 [kworker]
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 76167 root      20   0  182416   9500   1104 S   0.0  0.4   0:09.26 lfd - sle+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.08 /usr/bin/+
 82872 root      20   0 1277312  11676    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    648    424 S   0.0  0.0   0:00.00 /usr/sbin+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
100498 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root     100498  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/0:4]
root        658  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root       3671  0.0  0.0      0     0 ?        S    02:23   0:00  \_ [kworker/1:2]
root       8440  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:1]
root       9293  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:3]
root      10311  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:4]
root      14740  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/0:0]
root      15615  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/1:1]
root      17429  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/0:3]
root      21197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      21202  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44428  3464 ?        Ss   Nov12   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  3352 ?        Ss   Nov12   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   468 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    80 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3092 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   204 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:20 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      21117  0.0  0.1 183080  2428 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21134  0.0  0.0 113284  1208 ?        Ss   02:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      21135  0.0  0.0 108052   356 ?        S    02:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      21136  0.0  0.0 113288  1520 ?        S    02:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      21222  0.0  0.0 153840  2088 ?        R    02:42   0:00  |               \_ ps auxf
root      21120  0.0  0.1 183080  2432 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21152  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      21123  0.0  0.1 183080  2432 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21158  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      21124  0.0  0.1 183080  2428 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21159  0.0  0.0  20164   804 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      21126  0.0  0.1 183080  2424 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21162  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      21127  0.0  0.1 183080  2424 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21155  0.0  0.0  20164   804 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      21128  0.0  0.1 183080  2424 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21161  0.0  0.0  20164   804 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      21129  0.0  0.1 183080  2424 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21164  0.0  0.0  20164   964 ?        Ss   02:42   0:00  |   \_ jailshell (pactpay) [21174] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   21174  0.0  0.0  20164   260 ?        S    02:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   21184  0.0  0.7 476724 17112 ?        S    02:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      21131  0.0  0.1 183080  2424 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      21153  0.0  0.0  20164   964 ?        Ss   02:42   0:00      \_ jailshell (nigeria) [21170] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   21170  0.0  0.0  20164   260 ?        S    02:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   21177  0.0  0.6 400652 15940 ?        R    02:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3760 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  21064  0.0  0.2  89300  5496 ?        S    02:41   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13628 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2764 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2256 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2748 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1556 ?        S    Nov12   0:00  \_ dovecot/auth
root      20772  0.0  0.1  60820  4508 ?        S    02:41   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34068 ?       SLsl Nov12   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:03 /usr/sbin/sshd -D
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.4 636988 34020 ?        Ssl  Nov12   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 290128  3572 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   540 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261420  6480 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      21101  0.0  0.0      0     0 ?        Z    02:42   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   388 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 234608 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   20935  0.0  0.1 397064  4472 ?        S    02:41   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3692 ?        Rs   Nov12   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5896 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 107652 ?       S    Nov12   0:05  \_ spamd child
root       7886  0.0  3.8 261428 92700 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372  9708 ?        Ss   Nov12   0:03 tailwatchd
root       1234  0.0  0.1 167452  3416 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  5316 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1356 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  9.6 1457796 233080 ?      Sl   Nov12   5:44 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:03 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12844   380 ?        S    Nov12   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12892   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9347  0.1  0.7 277784 18652 ?        S    02:29   0:01  \_ /usr/sbin/httpd -k start
nobody    14496  0.1  0.7 277924 18076 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    15796  0.1  0.7 277788 18356 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    16436  0.1  0.7 277720 18260 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    17310  0.1  0.7 277568 17972 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    17322  0.1  0.7 277568 18052 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    18781  0.1  0.7 277568 18008 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    19124  0.1  0.7 277960 17820 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    19180  0.1  0.7 277916 17428 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    19182  0.1  0.7 277568 18008 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    19184  0.1  0.7 277568 17792 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    19185  0.1  0.7 277568 17644 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    20055  0.1  0.7 277572 17608 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    20107  0.2  0.7 277568 16996 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    20121  0.1  0.6 277568 15592 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    20122  0.1  0.7 277568 17028 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    20134  0.0  0.7 277568 17364 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    20135  0.1  0.7 277960 17252 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    20136  0.1  0.7 277912 17600 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    21057  0.0  0.6 277416 15264 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    21071  0.0  0.6 277416 15264 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    21072  0.0  0.6 277416 15388 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    21210  0.0  0.6 352096 15232 ?        S    02:42   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    21085  0.0  0.6 277680 16724 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    21086  0.0  0.6 277416 15264 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    21087  0.0  0.6 277640 15520 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    21088  0.0  0.6 277416 15264 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    21106  0.0  0.6 277416 15264 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    21107  0.0  0.6 277228 14888 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
cloudw    21183  0.0  0.6 352096 15232 ?        S    02:42   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    21108  0.0  0.5 277092 13584 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    21109  0.0  0.6 277224 15144 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    21110  0.0  0.5 277092 13584 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    21111  0.0  0.5 277092 13584 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    21112  0.0  0.5 277092 13584 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    21113  0.0  0.5 277092 13584 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182416  9500 ?        Ss   00:00   0:09 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11676 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   648 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 23942  Threads: 3  Questions: 2069251  Slow queries: 0  Opens: 7714  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.427
*************************** 1. row ***************************
     Id: 29728
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 29734
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 3. row ***************************
     Id: 29738
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.150.65 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.64.103 TIME_WAIT
      1 66.249.64.172 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 74.7.230.42 TIME_WAIT
      1 92.205.20.105 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 144.76.32.239 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:42:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 38 minutes 58 seconds
   Server load: 0.39 0.42 0.50
   Total accesses: 134901 - Total Traffic: 3.5 GB - Total Duration: 69504204
   CPU Usage: u4.37 s4.73 cu1729.79 cs1405.55 - 13.1% CPU load
   5.64 requests/sec - 154.3 kB/second - 27.4 kB/request - 515.224 ms/request
   25 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

KKKKKKKKWKKKKK_KK__KKKKWK____KWK__..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  18781 1/49/5981  K 1.34 3    290 3084619 28.5 1.40  152.22 66.249.64.230 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2258139
   1-0  20055 1/14/5959  K 0.30 3    362 2850297 30.2 0.32  149.73 66.249.64.131 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1863592
   2-0  21057 1/1/5927   K 0.00 3    341 3158478 29.5 0.03  169.79 66.249.70.102 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1709059
   3-0  20107 2/22/5971  K 0.59 1    269 3119852 61.6 0.64  169.33 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1731365
   4-0  15796 1/110/5786 K 3.03 1    283 2906925 30.9 3.04  152.19 66.249.70.39  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=829111
   5-0  19124 1/37/5807  K 1.01 2    278 3034403 31.1 1.14  177.67 66.249.70.130 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1171849
   6-0  20121 2/15/5737  K 0.42 0    365 2889913 61.6 0.44  150.52 66.249.70.65  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=276675
   7-0  21071 1/1/6504   K 0.00 2    317 3219409 29.8 0.03  174.16 66.249.64.233 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2258078
   8-0  21072 1/1/5089   W 0.00 0    0   2623761 29.9 0.03  131.15 66.249.64.229 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=944381
   9-0  20122 1/16/5327  K 0.42 0    326 2776286 29.9 0.45  141.60 66.249.64.129 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2250442
   10-0 20134 1/13/5368  K 0.26 4    306 2702200 30.9 0.29  146.71 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1197696061 HTTP/1.1
   11-0 14496 1/113/5606 K 2.99 3    291 2874603 29.7 3.07  176.28 66.249.64.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1153742962 HTTP/1.1
   12-0 17310 1/76/5409  K 2.07 4    268 2657921 30.5 2.21  132.20 66.249.64.11  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1709066
   13-0 21085 1/1/4464   K 0.00 1    273 2131951 35.1 0.03  105.55 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=1383235071 HTTP/1.1
   14-0 17322 0/65/4684  _ 1.77 0    398 2505723 0.0  1.81  137.94 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2236599
   15-0 20135 2/15/4025  K 0.40 3    291 2092671 60.1 0.41  106.03 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2268671
   16-0 20136 1/22/5784  K 0.48 0    373 2781897 29.4 0.53  147.45 66.249.64.36  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2332133
   17-0 9347  0/208/5784 _ 5.87 0    370 3037662 0.0  5.96  166.21 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /177331281?goodscode=0177099630 HTTP/1.1
   18-0 16436 0/93/3216  _ 2.46 0    313 1785830 0.0  2.74  86.22  66.249.70.8   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=828782
   19-0 21086 1/1/3827   K 0.00 1    300 2088439 30.4 0.03  101.88 192.178.4.105 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2361747
   20-0 21087 1/1/2564   K 0.00 1    317 1315666 30.8 0.03  63.32  192.178.4.105 http/1.1 schoolplus.cloudware.ng:80 GET /?p=917171523 HTTP/1.1
   21-0 21088 1/1/2649   K 0.00 1    290 1419488 29.7 0.03  71.63  66.249.70.34  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=38431 H
   22-0 21106 1/1/2730   K 0.00 0    311 1501252 30.3 0.03  82.49  66.249.64.225 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1228342
   23-0 21107 0/0/2066   W 0.00 0    0   1130095 0.0  0.00  48.35  66.249.64.69  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2581134
   24-0 19180 1/31/2869  K 0.69 1    296 1294444 31.1 0.75  66.32  66.249.64.6   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1377382
   25-0 21108 0/0/2087   _ 0.00 0    0   1019183 0.0  0.00  54.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 19182 0/32/1268  _ 0.84 0    312 708166  0.0  0.88  33.22  66.249.70.32  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1172591
   27-0 21109 0/1/1221   _ 0.00 0    1   684588  0.0  0.02  32.07  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   28-0 21110 0/0/2287   _ 0.00 0    0   1066634 0.0  0.00  56.33  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 19184 1/25/870   K 0.64 2    272 485065  29.4 0.70  22.65  66.249.64.233 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2364600
   30-0 21111 0/0/1499   W 0.00 0    0   765066  0.0  0.00  34.49  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   31-0 19185 1/35/960   K 0.84 4    362 546854  32.5 0.89  25.59  66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=839437
   32-0 21112 0/0/777    _ 0.00 0    0   476078  0.0  0.00  19.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 21113 0/0/785    _ 0.00 0    0   453415  0.0  0.00  19.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/695    . 0.00 108  0   408369  0.0  0.00  17.66  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/401    . 0.00 469  0   163892  0.0  0.00  8.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/270    . 0.00 656  0   148664  0.0  0.00  6.79   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/315    . 0.00 891  0   299040  0.0  0.00  8.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/237    . 0.00 829  0   142498  0.0  0.00  5.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/106    . 0.00 1029 0   54836   0.0  0.00  2.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1131   . 0.00 1006 0   659515  0.0  0.00  32.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/89     . 0.00 926  0   44408   0.0  0.00  2.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00 1027 0   6280    0.0  0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/62     . 0.00 993  0   32429   0.0  0.00  1.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/83     . 0.00 947  0   37187   0.0  0.00  2.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 1033 0   2241    0.0  0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/7      . 0.00 1032 0   2520    0.0  0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/292    . 0.00 924  0   155098  0.0  0.00  7.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/36     . 0.00 895  0   23094   0.0  0.00  0.88   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/5      . 0.00 1028 0   2208    0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00 1002 0   32174   0.0  0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00 1023 0   3966    0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00 927  0   18976   0.0  0.00  0.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/35     . 0.00 1001 0   18367   0.0  0.00  0.71   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/58     . 0.00 1008 0   25317   0.0  0.00  1.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/21     . 0.00 949  0   7335    0.0  0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/11     . 0.00 1020 0   3060    0.0  0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 4499 0   23864   0.0  0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 401
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 15 seconds, (range: 0...78)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 34568
   total entries replaced since starting: 0
   total entries expired since starting: 34144
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 183 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit