403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.48 load[0] mem[58/71] mysql[1/8] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1349          94          30         919         819
Swap:          1999        1651         348
 02:48:01 up  6:45,  0 users,  load average: 0.46, 0.50, 0.50
## system overview
top - 02:48:02 up  6:45,  0 users,  load average: 0.46, 0.50, 0.50
Tasks: 212 total,   6 running, 205 sleeping,   0 stopped,   1 zombie
%Cpu(s): 64.7 us, 35.3 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    75364 free,  1399992 used,   944944 buff/cache
KiB Swap:  2047996 total,   356828 free,  1691168 used.   818384 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 233668   3336 S 106.2  9.7   5:49.72 /usr/sbin+
 28692 root      20   0  132864  13908    996 R  37.5  0.6   0:00.10 find /tmp+
   665 root       0 -20       0      0      0 S  12.5  0.0   0:02.29 [loop0]
 28673 nigeria   20   0  400652  15936  10220 R  12.5  0.7   0:00.07 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:26.66 [kswapd0]
     1 root      20   0   44428   3440   1516 S   0.0  0.1   0:33.99 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.73 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:25.51 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.15 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.71 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.53 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.23 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   4708   4460 S   0.0  0.2   0:13.91 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    456    328 S   0.0  0.0   0:02.22 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.61 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.54 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:03.34 /usr/lib/+
   503 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3092    832 S   0.0  0.1   0:00.32 queueproc+
   507 root      20   0   52852    164     76 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:12.75 /usr/bin/+
   519 nscd      20   0 1062080   1344    604 S   0.0  0.1   0:21.27 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.69 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3760    824 S   0.0  0.2   0:00.90 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13916   2696 S   0.0  0.6   0:05.90 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.50 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.34 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.13 /usr/bin/+
   933 telegraf  20   0 5654048  32876   4528 S   0.0  1.4   0:13.55 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.54 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:03.14 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    356    264 S   0.0  0.0   0:00.72 php-fpm: +
   961 named     20   0  636988  34196   1580 S   0.0  1.4   0:14.24 /usr/sbin+
   964 root      20   0  290128   4740   4136 S   0.0  0.2   0:06.56 /usr/sbin+
   981 root      20   0  436392    404    316 S   0.0  0.0   0:00.82 php-fpm: +
   984 root      20   0  385496    540    444 S   0.0  0.0   0:00.69 php-fpm: +
   985 root      20   0  261420   6504   1716 S   0.0  0.3   0:03.89 cpsrvd (S+
   989 root      20   0  392856    376    292 S   0.0  0.0   0:00.68 php-fpm: +
   992 root      20   0 1901916 234176    492 S   0.0  9.7   0:32.41 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.39 php-fpm: +
  1006 cpanelc+  20   0   10656   3680   2288 R   0.0  0.2   0:20.20 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.47 dovecot/p+
  1076 dovenull  20   0   48460   2988   1716 S   0.0  0.1   0:00.42 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.13 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.29 dovecot/l+
  1079 dovenull  20   0   47112   2256   1508 S   0.0  0.1   0:00.36 dovecot/p+
  1080 dovenull  20   0   48000   2716   1648 S   0.0  0.1   0:00.29 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.16 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1556   1016 S   0.0  0.1   0:00.92 dovecot/a+
  1172 root      20   0  248152   5896   1136 S   0.0  0.2   0:05.74 /usr/loca+
  1173 wp-tool+  20   0  387556   3528   1660 S   0.0  0.1   0:00.27 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:20.19 /usr/bin/+
  1232 root      20   0  209372   9672   1836 S   0.0  0.4   0:03.13 tailwatchd
  1234 root      20   0  167452   3416   2044 S   0.0  0.1   0:00.46 dnsadmin +
  1237 root      20   0  183900   5316   2080 S   0.0  0.2   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.66 php-fpm: +
  1702 root      38  18  130416   1356    684 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:03.20 /usr/sbin+
  2063 root      20   0   12800    380    212 S   0.0  0.0   0:03.06 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.59 /usr/loca+
  2065 root      20   0   12832    392    216 S   0.0  0.0   0:02.87 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 107516   2840 S   0.0  4.4   0:05.50 spamd chi+
  7886 root      20   0  261428  92700   1972 S   0.0  3.8   0:00.32 spamd chi+
  8440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9293 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 10311 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 14740 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20134 nobody    20   0  277568  18012   3968 S   0.0  0.7   0:00.60 /usr/sbin+
 20135 nobody    20   0  277960  18480   3960 S   0.0  0.8   0:00.74 /usr/sbin+
 21197 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21202 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22009 nobody    20   0  277568  17880   3780 S   0.0  0.7   0:00.49 /usr/sbin+
 22078 nobody    20   0  277892  17852   3796 S   0.0  0.7   0:00.53 /usr/sbin+
 22728 nobody    20   0  277788  17624   3644 S   0.0  0.7   0:00.59 /usr/sbin+
 22848 nobody    20   0  277848  18076   3804 S   0.0  0.7   0:00.38 /usr/sbin+
 22937 nobody    20   0  277780  17588   3664 S   0.0  0.7   0:00.53 /usr/sbin+
 22993 nobody    20   0  277568  17764   3748 S   0.0  0.7   0:00.43 /usr/sbin+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 23706 nobody    20   0  277568  18268   4140 S   0.0  0.8   0:00.29 /usr/sbin+
 23709 nobody    20   0  277568  17672   3704 S   0.0  0.7   0:00.32 /usr/sbin+
 26449 nobody    20   0  277568  17608   3768 S   0.0  0.7   0:00.14 /usr/sbin+
 26450 nobody    20   0  277920  17544   3524 S   0.0  0.7   0:00.26 /usr/sbin+
 26683 nobody    20   0  277780  17320   3584 S   0.0  0.7   0:00.25 /usr/sbin+
 27409 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 27533 nobody    20   0  277784  17084   3380 S   0.0  0.7   0:00.12 /usr/sbin+
 27571 nobody    20   0  277960  17088   3308 S   0.0  0.7   0:00.14 /usr/sbin+
 27572 nobody    20   0  277568  16620   3108 S   0.0  0.7   0:00.07 /usr/sbin+
 27592 nobody    20   0  277568  17252   3228 S   0.0  0.7   0:00.12 /usr/sbin+
 27593 nobody    20   0  277568  15596   2148 S   0.0  0.6   0:00.16 /usr/sbin+
 27594 nobody    20   0  277568  17208   3588 S   0.0  0.7   0:00.09 /usr/sbin+
 27596 nobody    20   0  277892  17204   3412 S   0.0  0.7   0:00.07 /usr/sbin+
 27690 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 28434 mailnull  20   0   89348   5640   2408 S   0.0  0.2   0:00.00 /usr/sbin+
 28537 nobody    20   0  277568  15588   2140 S   0.0  0.6   0:00.01 /usr/sbin+
 28579 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 28586 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 28591 root      20   0  157100   4992   3696 S   0.0  0.2   0:00.00 sshd: unk+
 28592 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 28595 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 28596 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 28601 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 28611 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28612 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28614 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28615 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28616 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28618 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28620 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28621 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28622 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28623 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28624 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28626 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28629 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 28630 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 28631 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 28645 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28646 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28647 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28648 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 28650 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 28651 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28652 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 28654 root      20   0  113284   1200   1020 S   0.0  0.0   0:00.00 /bin/sh /+
 28655 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28658 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28660 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28669 root      20   0  129960   2316   1824 S   0.0  0.1   0:00.00 /usr/bin/+
 28672 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 28675 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 28683 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 28691 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 sh -c fin+
 28693 root      20   0  112812   1008    860 S   0.0  0.0   0:00.00 grep -Ef +
 28710 nobody    20   0  277228  14888   1856 S   0.0  0.6   0:00.00 /usr/sbin+
 28711 nobody    20   0  277092  14600   1640 S   0.0  0.6   0:00.00 /usr/sbin+
 28712 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 28713 nobody    20   0  277224  15404   2360 S   0.0  0.6   0:00.00 /usr/sbin+
 28715 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 28718 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 28719 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 28723 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 28724 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 28725 cloudsms  20   0  160260   3904   2800 R   0.0  0.2   0:00.00 /opt/cpan+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.39 [kworker]
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 76167 root      20   0  182416   9612   1104 S   0.0  0.4   0:09.59 lfd - sle+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.08 /usr/bin/+
 82872 root      20   0 1277312  11676    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    648    424 S   0.0  0.0   0:00.00 /usr/sbin+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root        658  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root       8440  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:1]
root       9293  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:3]
root      10311  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:4]
root      14740  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/0:0]
root      21197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      21202  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  4708 ?        Ss   Nov12   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   456 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    80 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3092 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   164 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1344 ?        Ssl  Nov12   0:21 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      28611  0.0  0.1 183080  2432 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28629  0.0  0.0 113284  1212 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      28630  0.0  0.0 108052   356 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      28631  0.0  0.0 113288  1520 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      28726  0.0  0.0 153840  2088 ?        R    02:48   0:00  |               \_ ps auxf
root      28612  0.0  0.1 183080  2428 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28658  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      28614  0.0  0.1 183080  2428 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28647  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      28615  0.0  0.1 183080  2428 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28660  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      28616  0.0  0.1 183080  2428 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28646  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      28618  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28651  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      28620  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28650  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [28723] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  28723  0.0  0.0  20164   264 ?        S    02:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  28724  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  28725  0.0  0.6 400652 15672 ?        S    02:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      28621  0.0  0.0 183080  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28655  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      28622  0.0  0.0 183080  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28645  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      28623  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28654  0.0  0.0 113284  1200 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      28669  0.0  0.0 129960  2316 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      28691  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      28692 11.0  0.5 132864 13908 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      28693  0.0  0.0 112812  1008 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      28624  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28652  0.0  0.0  20164   968 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [28675] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28675  0.0  0.0  20164   264 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28683  2.0  0.7 476724 17484 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      28626  0.0  0.0 183080  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      28648  0.0  0.0  20164   968 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [28672] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28672  0.0  0.0  20164   264 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28673  8.0  0.6 400652 15936 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3760 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  28434  0.0  0.2  89348  5640 ?        S    02:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13916 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2988 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2256 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2716 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1556 ?        S    Nov12   0:00  \_ dovecot/auth
root      27409  0.0  0.1  60820  4512 ?        S    02:46   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 32876 ?       SLsl Nov12   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:03 /usr/sbin/sshd -D
root      27690  0.0  0.1 111304  4264 ?        Ss   02:47   0:00  \_ sshd: [accepted]
root      28591  0.0  0.2 157100  4992 ?        Ss   02:47   0:00  \_ sshd: unknown [priv]
sshd      28592  0.0  0.1 115644  2632 ?        S    02:47   0:00      \_ sshd: unknown [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   356 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.4 636988 34196 ?        Ssl  Nov12   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 290128  4740 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   540 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261420  6504 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      28601  0.0  0.0      0     0 ?        Z    02:48   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   376 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 234176 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   28579  0.0  0.1 397064  4472 ?        S    02:47   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3680 ?        Ss   Nov12   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5896 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 107516 ?       S    Nov12   0:05  \_ spamd child
root       7886  0.0  3.8 261428 92700 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3528 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  9672 ?        Ss   Nov12   0:03 tailwatchd
root       1234  0.0  0.1 167452  3416 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  5316 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1356 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  9.6 1457796 233668 ?      Sl   Nov12   5:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:03 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12800   380 ?        S    Nov12   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12832   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    20134  0.1  0.7 277568 18012 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    20135  0.1  0.7 277960 18480 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    22009  0.1  0.7 277568 17880 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    22078  0.1  0.7 277892 17852 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    22728  0.2  0.7 277788 17624 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    22848  0.1  0.7 277848 18076 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    22937  0.2  0.7 277780 17588 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    22993  0.1  0.7 277568 17764 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    23706  0.1  0.7 277568 18268 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    23709  0.1  0.7 277568 17672 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    26449  0.1  0.7 277568 17608 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    26450  0.2  0.7 277920 17544 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    26683  0.2  0.7 277780 17320 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    27533  0.1  0.7 277784 17084 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    27571  0.2  0.7 277960 17088 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    27572  0.1  0.6 277568 16620 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    27592  0.1  0.7 277568 17252 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    27593  0.2  0.6 277568 15596 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    27594  0.1  0.7 277568 17208 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    27596  0.1  0.7 277892 17204 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    28537  0.1  0.6 277568 15588 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    28586  0.0  0.6 277416 15264 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    28595  0.0  0.6 277416 15264 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    28596  0.0  0.6 277416 15264 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    28710  0.0  0.6 277228 14888 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
cloudw    28718  0.0  0.6 352096 15232 ?        S    02:48   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    28711  0.0  0.6 277092 14600 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    28712  0.0  0.5 277092 13584 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    28713  0.0  0.6 277224 15404 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
cloudw    28715  1.0  0.6 352096 15236 ?        R    02:48   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182416  9612 ?        Ss   00:00   0:09 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11676 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   648 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 24303  Threads: 3  Questions: 2095744  Slow queries: 0  Opens: 7889  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.233
*************************** 1. row ***************************
     Id: 30194
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30198
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 30205
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 157.173.108.195 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 209.145.58.218 TIME_WAIT
      1 66.249.64.36 TIME_WAIT
      1 66.249.64.43 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.248.90.230 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 92.205.20.105 TIME_WAIT
      6 110.77.167.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:48:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 44 minutes 58 seconds
   Server load: 0.46 0.50 0.50
   Total accesses: 137147 - Total Traffic: 3.6 GB - Total Duration: 70857570
   CPU Usage: u4.66 s4.87 cu1762.11 cs1433.17 - 13.2% CPU load
   5.64 requests/sec - 154.5 kB/second - 27.4 kB/request - 516.654 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KKKKKKKKKKKK_KKKWKK.KK.KKK...KKK.K..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot      Client     Protocol           VHost                                        Request
   0-0  28537 1/2/6060   K 0.03 0    329 3130379 29.2 0.06  154.30 66.249.70.165  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=116406
   1-0  22009 1/84/6045  K 2.21 3    368 2899989 30.6 2.16  151.92 66.249.64.224  http/1.1 schoolplus.cloudware.ng:80 GET /?p=990431738 HTTP/1.1
   2-0  28586 1/1/6001   K 0.00 2    304 3206588 30.0 0.03  171.57 66.249.70.109  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=177606
   3-0  22728 1/98/6079  K 2.95 3    356 3185923 29.6 2.67  172.22 66.249.70.32   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=110783
   4-0  28595 1/1/5865   K 0.00 1    269 2950992 29.3 0.03  154.24 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2235859
   5-0  28596 1/1/5870   K 0.00 1    269 3071057 29.3 0.03  179.21 66.249.70.130  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=196309
   6-0  28710 1/1/5819   K 0.00 0    359 2940570 29.5 0.03  152.76 66.249.70.2    http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1551720
   7-0  27533 1/20/6560  K 0.53 3    320 3251576 30.7 0.58  175.61 66.249.64.224  http/1.1 schoolplus.cloudware.ng:80 GET /?p=327504160 HTTP/1.1
   8-0  22848 1/65/5159  K 1.70 4    334 2666987 29.8 1.77  132.99 66.249.64.168  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3926757475 HTTP/1.1
   9-0  26449 1/28/5412  K 0.59 3    355 2823565 30.8 0.59  143.73 66.249.70.142  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2665111301 HTTP/1.1
   10-0 20134 1/104/5459 K 2.61 4    397 2767640 31.6 2.76  149.19 66.249.64.130  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2485972
   11-0 26450 1/43/5725  K 1.17 1    307 2948137 29.6 1.23  179.57 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2169709
   12-0 28711 0/1/5466   _ 0.00 0    27  2687622 0.0  0.01  133.49 217.113.194.19 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Nasarawa&lga=Lafia&ward=Sh
   13-0 22078 1/88/4564  K 2.38 0    284 2192142 29.8 2.39  108.28 66.249.64.229  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=7205 HT
   14-0 22937 1/88/4799  K 2.40 2    278 2574696 29.3 2.44  141.12 66.249.70.36   http/1.1 schoolplus.cloudware.ng:80 GET /?p=83326907 HTTP/1.1
   15-0 20135 1/122/4132 K 3.28 2    352 2158447 35.1 3.30  108.92 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3247487864 HTTP/1.1
   16-0 28712 0/0/5855   W 0.00 0    0   2821623 0.0  0.00  149.31 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 26683 1/40/5864  K 1.10 3    356 3086445 31.1 1.12  168.41 66.249.70.65   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1356662
   18-0 28713 1/2/3270   K 0.00 0    362 1817160 31.4 0.05  87.65  66.249.64.73   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2470672
   19-0 -     0/0/3895   . 0.00 29   0   2133249 0.0  0.00  103.52 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 23706 2/53/2642  K 1.19 3    312 1368622 63.5 1.30  65.28  66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1539097
   21-0 22993 1/71/2722  K 1.91 4    381 1474088 30.2 1.90  73.54  66.249.70.64   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=684374
   22-0 -     0/0/2768   . 0.00 54   0   1522291 0.0  0.00  83.42  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 27571 1/25/2103  K 0.63 0    255 1148277 29.1 0.66  49.17  66.249.64.99   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=747374
   24-0 23709 1/54/2946  K 1.40 2    266 1339886 30.5 1.44  68.34  66.249.70.107  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=284699
   25-0 27572 1/12/2135  K 0.29 3    407 1046570 29.8 0.33  55.93  66.249.70.104  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1356683
   26-0 -     0/0/1272   . 0.00 46   0   709531  0.0  0.00  33.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1282   . 0.00 42   0   720118  0.0  0.00  33.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/2297   . 0.00 27   0   1071608 0.0  0.00  56.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 27592 1/21/909   K 0.54 2    272 508347  28.9 0.58  23.71  192.178.4.102  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=345984
   30-0 27593 1/27/1532  K 0.75 3    396 786909  30.5 0.80  35.40  66.249.64.72   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=153341
   31-0 27594 1/16/984   K 0.36 2    268 557667  30.3 0.43  26.16  66.249.64.101  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=288766
   32-0 -     0/0/782    . 0.00 56   0   477598  0.0  0.00  19.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 27596 1/15/856   K 0.29 2    276 494791  29.4 0.32  21.75  66.249.64.165  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=203310
   34-0 -     0/0/699    . 0.00 44   0   409480  0.0  0.00  17.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/401    . 0.00 829  0   163892  0.0  0.00  8.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/270    . 0.00 1016 0   148664  0.0  0.00  6.79   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/315    . 0.00 1252 0   299040  0.0  0.00  8.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/237    . 0.00 1189 0   142498  0.0  0.00  5.82   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/106    . 0.00 1390 0   54836   0.0  0.00  2.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1131   . 0.00 1367 0   659515  0.0  0.00  32.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/89     . 0.00 1287 0   44408   0.0  0.00  2.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00 1388 0   6280    0.0  0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/62     . 0.00 1354 0   32429   0.0  0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/83     . 0.00 1308 0   37187   0.0  0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 1394 0   2241    0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/7      . 0.00 1393 0   2520    0.0  0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/292    . 0.00 1285 0   155098  0.0  0.00  7.19   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/36     . 0.00 1256 0   23094   0.0  0.00  0.88   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/5      . 0.00 1389 0   2208    0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00 1363 0   32174   0.0  0.00  3.76   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00 1384 0   3966    0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00 1288 0   18976   0.0  0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/35     . 0.00 1362 0   18367   0.0  0.00  0.71   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/58     . 0.00 1369 0   25317   0.0  0.00  1.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/21     . 0.00 1310 0   7335    0.0  0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/11     . 0.00 1381 0   3060    0.0  0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 4860 0   23864   0.0  0.00  0.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 377
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 0...128)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 35008
   total entries replaced since starting: 0
   total entries expired since starting: 34608
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 183 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit